last executing test programs: 18m51.138992808s ago: executing program 32 (id=21): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) 16m26.728036664s ago: executing program 33 (id=424): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000100)=@tipc=@name, 0x80, 0x0, 0x0, &(0x7f00000005c0)}, 0x6}], 0x1, 0x2001, 0x0) 14m4.541571059s ago: executing program 34 (id=1140): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1d9, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/182, 0xb6) 11m18.040760795s ago: executing program 35 (id=2373): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='silent\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 8m59.0429376s ago: executing program 36 (id=3629): getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x101000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x11, 0x470c, &(0x7f00000047c0)="$eJzs222IHGcBB/BnNqe5pMn1XtImafqySQQPLceln6r1QzyrNpo2L9pWU+Xcu1wvp3u3592eFgxSgyAKghIEFV+oCqVfakEM9EstYsEXpFUoFUXrF5FCFfxg0AZ6sjuzuZ3Zvc7kNmmx/f2g3Ztn5nnm2fvfPLPPPJtSon5qbrk8t1yuLJRr0/cv31L+TK26Mj8TSq+S1/r8FHMlcpL9a+fIe973oXtuCeH3x77ygdXV1dXQMBi6OtD28/l/nZ5uf20pZeo02u3eWuwPK4+89NM3vdIReU6EEHZ09KthUwjhIz8LYXMIYSgpG05et4QQtoUQohDCo7/+5w/7e+lCm7P3vvDcsTOH952ZePyxZy7MHl33wCiEb1d33zw7/+L+Tbc9/7bLdHoAAHhF7z9+5O6j4wfCk1EYONfX+Xl9Z/La+nx851s+cdfDfWv7Vylm06sYKgAAAGSszf8Ho5e7rNe1VtYG42W08MQDJ+5+Klrbb2L7/+3QXUduf+/4gWT9N+rYf2tS9I93b2quoWbXfbPrv0OZ+t3Xf9fO8/CXn/35wpu7du0XRfrf6l/rvIMhKo2ltkulsbEQjk3E27uiraVqbbn+9vtrKwsni5zh9S2df3b1fm1Bv2j+w5nqeev/uz/22Z9s6evlHYyE7F9tY7vc+adMF+n81x/Lf/SFqFD+I5l6efnf8fT287/c3Ms7yJ6RS5HOP74Q97UfUI4HgEb+X+/Lz39Hpv28/L87ce7RExv4/k9jnBmMGn3tT40ALyfl63yFiYx0/nEQqaEz+UWud/3/N5P/NZn28/K/s/b33/61+/2/oO7j/+hEL22+caTzj4Mop45Yu/6HSvnX/7WZ9vPy/82pPz378Z7u1Z35N/o/6v5fSDr/5EacHjybv8mi4//OTPt5+e8aue+huQ30+4Nbkn4ORGGk7Vun5xq3sIG19ermlKaxe3EDJ3kDSOcf/9ZSl85A/NK8/gfzx/9dmfbz8n9oz1ffdbqn7/92H//Hjf+FpPPf0iy7lPxfyuS/O9N+Xv7fP/23P993mcf/xvZB+ReSzn9rx/615z+lQvO/6zL1857/7Bt+6pG/9DD/b/Wvdd7W85/Wc4jRKH7+Q3fp/K9a97ii9/89mXp51/83/v380/t7Gf+jfk8AepDOf1tc2GUCWDT/6zPt5+X/uXu++NE/bmD+1/zE19/Kv23+vzkuP2r8LySd//a4MPWPoR5s/r95/486c/9PJv8bMu3n5X/h0Fjfly7z/b/R/9Euj7LplM5/YN3jGvn/rsD9/8ZMvbz8P7/3xy/e3NPn/xDGzfU3LJ3/1ese17z++/PzvylTLy//b33tV0882EP/39pDXbL5x/f61OWUfDYvOv8vZ9rPy/8Ho+fP7r8C879b3f8LSecfr5pfSv7Z+f/eTPt5+X/nyPeW+q7A85875A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAhw8nrYIhKY6ntUmlsLISRZHtX2BpNVU5OTlVr059aDmFHUl4Ow9FstTZVqU7OLdROzkxWqtXadAjXJPt3hP5ouVqrT85XFq+92NaW6NRMZak+NVOphxB2JuXXh+2ttqbm6vOVxeaxrTpXRZVPr9TqlbGV5ZmlsPti+bZW+exSbWXxuottXV2qLS2eqixMnpxbeuf4+Ph42HOxz0PRzAP1mYV63Nt4b6NOq+5g1PZmmrtvaDvfJ2srSwuVarP8xrY61dp0pdpW56a289WXVhamK/WZyWpttnW+clvdtvfW3L032TcahlLvr1U362Dyevuh4x8+fvhAx/5ylM57YWV+Znx7978JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF6/nrztHd8MIfTFW6UQwsHWD1HyX8rZe1947tiZw/vOTDz+2DMXZo92OwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHnfl6yCOI4AM+uvVkkpXQR8hgYIqI3CQv6RSSVr5Edu3QO6pSQQVFgGNGxIAiCukUFQYcIKv+CqIPHTtWlDh0MIqhY3U15V1AUGnv3eWCZXXad/cKC7+58hgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg/Ti3c7Ytay/v3jy3tXeH0Jqf2xhCGEzm97/uawkdIYTv3ybOhCXaQkdD/+9Gp4bLd03+7h0YfnRjMFl9/cXfFvdtD0nat+h4V5KmfX2r779Z3e19Pt6bhJDGLoQoZoaenq2FEFpiF0IUvz9PX8r+v2+IXQhRdH+615Y9/1rsQohi254vXbX8HY/quVC/2Lv4t3+5V/A1vKKzDr0/dfVD6qFW3uv8+z/JN9+D1TB58ujHl7GLIJrJqbFjsWsAAAD+rfPL5P9h6/z+gytJ6Ggv5/4/GvL/zob+l87/F9zfcXNoYk0hxPbS2GR23L9/LX02v9M91+68rRnvqSr5f7XJ/6tN/l9t8v+m9WLLCi6S/1eb/J/MG/l/JT25tXf2VewiiEb+DwAA1XP4xMhYvX8g+/jf9Ku1nNd35W09z9Mf3h7vebxo3Eh++H87cnzk4KH+gfy5lwcEF9Z/SOfO/sznezS2hdGGeRfLrf/Q+Wxm+npr+Yr6CudvFPUV97X+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8IfduadhEIzCMPrdVkRttCqasPCT4AMNjAhACjMa0MGEARgIAQUM5Jzl3uRZXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pn+VV4X318aI73WiDSVXXbtn+Np9jP37bC8zx43bgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAjR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//z/QzMs=") 8m35.048683076s ago: executing program 37 (id=3792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x8926, 0x0) 8m32.031467378s ago: executing program 38 (id=3814): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xc) 8m22.453509616s ago: executing program 39 (id=3871): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x527}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xc}}]}}]}, 0x3c}}, 0x0) 7m55.568059262s ago: executing program 40 (id=4032): listen(0xffffffffffffffff, 0x5) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) setrlimit(0x7, &(0x7f0000000000)={0x8, 0x64d4}) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f98, &(0x7f000000efc0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x82000, 0x0, 0x0, 0x0, &(0x7f0000000080)) 7m29.385936721s ago: executing program 41 (id=4189): unshare(0x40400) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000002c0)={{0x1, @local, 0x0, 0x2, 'none\x00', 0x28, 0x2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e24, 0x2, 0x2, 0x6a, 0x800}}, 0x44) 7m28.869184451s ago: executing program 42 (id=4193): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 6m50.506248716s ago: executing program 43 (id=4374): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 6m10.838847204s ago: executing program 44 (id=4533): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x23) 4m58.96774132s ago: executing program 1 (id=4837): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000009500deffffff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0x1000, 0x0, 0x20002fa}) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001f9e42c1040200065bf1c0102030109021b0001040000000904c2020120c35d000905820240000006019d8e0adda56a91dadb713760a5189927de58328904736758"], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) shmdt(0x0) time(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m54.429823303s ago: executing program 1 (id=4845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 4m53.214028108s ago: executing program 1 (id=4849): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execve(0x0, 0x0, 0x0) 4m48.887946273s ago: executing program 1 (id=4862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 4m46.626206373s ago: executing program 1 (id=4869): socket(0x2, 0x80805, 0x0) fanotify_init(0x0, 0x0) epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 4m45.238253115s ago: executing program 1 (id=4871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000240)=""/163, 0xa3}) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m29.66656516s ago: executing program 45 (id=4871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000240)=""/163, 0xa3}) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m13.946248889s ago: executing program 7 (id=4926): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x1dd, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 4m10.822009946s ago: executing program 7 (id=4936): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003704000000020000000000000000", @ANYRES32=r2, @ANYBLOB="83040500000000002800128008000100736974001c00028006000f000200000006001000b190000008000300ac14", @ANYRES8=r1, @ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x4880) 4m4.599024983s ago: executing program 7 (id=4960): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x7, 0xa, 0x3, "3205c5460400000000000000022c1e1ed1bf40070700000265e5c9b19424f214", 0x4c314356}) 4m3.186111112s ago: executing program 7 (id=4966): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_procfs$userns(0x0, &(0x7f0000000580)) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 3m54.891113639s ago: executing program 7 (id=4974): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 3m53.790600121s ago: executing program 7 (id=4978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000487617d300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) accept4$rose(r6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r5, 0x8b32, &(0x7f0000000040)) 3m50.251647984s ago: executing program 9 (id=4982): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x6}, 0xe) r1 = syz_io_uring_setup(0x7b, 0x0, &(0x7f00000005c0), 0x0) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001cd000/0x4000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m41.575489631s ago: executing program 9 (id=4986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x32, &(0x7f00000002c0)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x19) 3m40.915363054s ago: executing program 9 (id=4988): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_setup(0xed0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0008850000008507612cefb2273c692f695a0c49f55dc3474b369973ffbf8eb686990fc3ea2a305a379fc87f4b44455065ef162845a76b4db3491ba0c27ea2da771e09db84cbc911f6f564e68c6dc7397b8cd7b07b8a15a5b10c1667e14eeb4eb88b252afd1a642d600aa82ac0b7c79d600921cba387e5a30ec226bec6bd85f857b5325f77b500be65222fa8f7c01e28412425026841712c2d8d4912ec675646765b1763de1095ce58dc2e44534b6a91680af1ec90de93c138751ee5536f1824fd70c54cfa1694eae3d43276287c008ba8fac468afb5939f34b7b29ff5ae73e783"], &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000240)={0x40, 0x0, 0x22, "350fc02c7280536ba4b3f90ce7829f566a4542324da1bbe0227f7fe8859ca790bb4c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m37.932650815s ago: executing program 46 (id=4978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000487617d300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) accept4$rose(r6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r5, 0x8b32, &(0x7f0000000040)) 3m37.10452813s ago: executing program 9 (id=4991): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) fallocate(r0, 0x6c, 0x5, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x34, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x10000004) 3m36.476098419s ago: executing program 9 (id=4993): ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x40) 3m36.218944757s ago: executing program 9 (id=4994): syz_open_dev$vim2m(&(0x7f0000000100), 0x4000052, 0x2) socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) mmap(&(0x7f0000991000/0x4000)=nil, 0x4000, 0x4, 0x80010, r0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x79c4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, 0x0, 0x1) 3m20.833608547s ago: executing program 47 (id=4994): syz_open_dev$vim2m(&(0x7f0000000100), 0x4000052, 0x2) socket$inet6(0xa, 0x80002, 0x0) r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) mmap(&(0x7f0000991000/0x4000)=nil, 0x4000, 0x4, 0x80010, r0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x79c4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, 0x0, 0x1) 1m57.466871333s ago: executing program 5 (id=5015): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) 1m56.81145431s ago: executing program 5 (id=5253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1, r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysfs$2(0x2, 0x7f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x77632d15402b7bcf) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000010) 1m54.43107651s ago: executing program 5 (id=5260): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1m53.784165428s ago: executing program 5 (id=5267): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 1m51.048730684s ago: executing program 5 (id=5273): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) 1m50.700627687s ago: executing program 5 (id=5274): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x4) socket(0xa, 0x5, 0x0) writev(r4, 0x0, 0x0) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 1m34.691657754s ago: executing program 48 (id=5274): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x4) socket(0xa, 0x5, 0x0) writev(r4, 0x0, 0x0) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 58.450451803s ago: executing program 4 (id=5364): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 55.980675585s ago: executing program 4 (id=5368): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd700000030000"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c084}, 0x0) 55.873287789s ago: executing program 4 (id=5369): r0 = syz_open_dev$video4linux(&(0x7f0000000780), 0x5, 0x0) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x0, {0x0, 0x2, 0x4, 0xc09}}) 54.670110641s ago: executing program 4 (id=5373): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) 52.297282363s ago: executing program 4 (id=5376): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) fsync(r2) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) 51.544878816s ago: executing program 4 (id=5379): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 36.602895709s ago: executing program 49 (id=5379): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 29.01789216s ago: executing program 0 (id=5448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28.074048432s ago: executing program 0 (id=5451): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20060100000036e1c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000007c0)={&(0x7f00000019c0)=[{0x3, 0x1001, 0x73, &(0x7f0000000800)="fb4ff93d4ab1189e4393aeb2fb10255cf963bc70defc1423f73a53e71f2c4ee80baf8494426fb6413026b54eeee86f5c7f916793045aeaf4f1c46de34d1ae3417346b5f857a39160f4e40fb90197067f98910fb9b20d66993c38793062318522e94f8e1610551042e48eb27d95907cd876c107"}, {0xff, 0x8010, 0x0, &(0x7f0000000900)}, {0x3, 0x201, 0x43, &(0x7f0000001900)="009087b22622c68f8223716b7568cbfa1df76e12d178f7b6025ce98a0c57142a1e44c563db46ee134356da867b3e59ff06e24db744b0fd22089a01967e997551207d4a"}, {0xa, 0x8200, 0x18, &(0x7f0000001980)="1dffd3acdbb5335d68060a9fdf78554515aa61719bf0e089"}], 0x4}) 24.428018102s ago: executing program 0 (id=5464): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='auxv\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/24, 0x18}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 23.988071424s ago: executing program 0 (id=5468): pipe2$9p(&(0x7f0000000000), 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 19.197520622s ago: executing program 6 (id=5478): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 18.266360711s ago: executing program 6 (id=5481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x3, 0xff) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 15.590241026s ago: executing program 0 (id=5485): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000001380)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) getdents(r5, 0x0, 0x0) 13.956505991s ago: executing program 6 (id=5489): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 13.720283564s ago: executing program 8 (id=5490): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20060100000036e1c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000007c0)={&(0x7f00000019c0)=[{0x3, 0x1001, 0x73, &(0x7f0000000800)="fb4ff93d4ab1189e4393aeb2fb10255cf963bc70defc1423f73a53e71f2c4ee80baf8494426fb6413026b54eeee86f5c7f916793045aeaf4f1c46de34d1ae3417346b5f857a39160f4e40fb90197067f98910fb9b20d66993c38793062318522e94f8e1610551042e48eb27d95907cd876c107"}, {0xff, 0x8010, 0x0, &(0x7f0000000900)}, {0x3, 0x201, 0x43, &(0x7f0000001900)="009087b22622c68f8223716b7568cbfa1df76e12d178f7b6025ce98a0c57142a1e44c563db46ee134356da867b3e59ff06e24db744b0fd22089a01967e997551207d4a"}, {0xa, 0x8200, 0x18, &(0x7f0000001980)="1dffd3acdbb5335d68060a9fdf78554515aa61719bf0e089"}], 0x4}) 13.607825729s ago: executing program 6 (id=5491): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='auxv\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/24, 0x18}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 12.551514939s ago: executing program 6 (id=5493): socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000bc0)={0xbf, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5, 0x2}, 0x20) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) creat(&(0x7f0000000040)='./file0/file0\x00', 0xecf86c37d530490c) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 11.998733907s ago: executing program 8 (id=5494): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0xb, 0x0, 0x0, 0xfffffffffffffffe) 9.892206427s ago: executing program 6 (id=5496): pipe2$9p(&(0x7f0000000000), 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 9.49061921s ago: executing program 0 (id=5498): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002b021c9e01b0a4be9700000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) 9.31164198s ago: executing program 2 (id=5499): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000009500deffffff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 7.483120064s ago: executing program 2 (id=5500): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x34, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x10000004) 6.278801353s ago: executing program 8 (id=5501): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) setrlimit(0xe, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) 4.283854963s ago: executing program 3 (id=5503): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.436641679s ago: executing program 3 (id=5504): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='auxv\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/24, 0x18}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 3.434614883s ago: executing program 3 (id=5505): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20060100000036e1c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000007c0)={&(0x7f00000019c0)=[{0x3, 0x1001, 0x73, &(0x7f0000000800)="fb4ff93d4ab1189e4393aeb2fb10255cf963bc70defc1423f73a53e71f2c4ee80baf8494426fb6413026b54eeee86f5c7f916793045aeaf4f1c46de34d1ae3417346b5f857a39160f4e40fb90197067f98910fb9b20d66993c38793062318522e94f8e1610551042e48eb27d95907cd876c107"}, {0xff, 0x8010, 0x0, &(0x7f0000000900)}, {0x3, 0x201, 0x43, &(0x7f0000001900)="009087b22622c68f8223716b7568cbfa1df76e12d178f7b6025ce98a0c57142a1e44c563db46ee134356da867b3e59ff06e24db744b0fd22089a01967e997551207d4a"}, {0xa, 0x8200, 0x18, &(0x7f0000001980)="1dffd3acdbb5335d68060a9fdf78554515aa61719bf0e089"}], 0x4}) 3.282332449s ago: executing program 3 (id=5506): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000340)=0x8006) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x40049, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 3.206339033s ago: executing program 8 (id=5507): socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000bc0)={0xbf, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5, 0x2}, 0x20) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) creat(&(0x7f0000000040)='./file0/file0\x00', 0xecf86c37d530490c) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 3.059739165s ago: executing program 3 (id=5508): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 2.753491278s ago: executing program 3 (id=5509): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000001380)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) getdents(r5, 0x0, 0x0) 2.655886457s ago: executing program 2 (id=5510): pipe2$9p(&(0x7f0000000240), 0x0) timerfd_create(0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xb1, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x404) setresuid(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000380)={0xf0f003, 0x4}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000804) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2.080992511s ago: executing program 8 (id=5511): r0 = syz_io_uring_setup(0x7c80, &(0x7f0000000200)={0x0, 0xd54c, 0x2, 0x3, 0x3b1}, &(0x7f00000000c0), &(0x7f0000000140)) r1 = syz_io_uring_setup(0xdaf, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x2, 0x3b3, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000040000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b000000007d4a451e1fdbe8d304550c872c81910e739c780c8086d4151c1bc90e5d07720f005ca39af6d873b915d086b4d471b807f56e56caf03ae43c51cf0473a6ef149b9af0b7efc3285bc5bf24d5e0c9b42965939d8ab1b57dad5cbdf4a190e95f1005f428048ef7b4e5bef521"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/252, 0xfc, 0xf, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb08004500003800000000000190780a010101ac1414bb030390781200183f250000b2cb9860fe000068002d000100007f000001ac14140e000163"], 0x0) 2.053668243s ago: executing program 2 (id=5512): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340), &(0x7f0000000000)) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000014c0)={0x0, &(0x7f00000007c0)={0x18, 0x0, 0x9, {0x6}}, 0x0, &(0x7f0000000940)={0x18, 0xfffffffffffffff5, 0x7fffffff, {0xe}}, 0x0, &(0x7f0000000a40)={0x28, 0xffffffffffffffda, 0x8, {{0x58f, 0x7bf}}}, 0x0, 0x0, &(0x7f0000000b40)={0x16, 0xfffffffffffffff5, 0xab00000000000000, {'\'\xc4,]#\x00'}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000c80)={0x78, 0x0, 0x9, {0x5, 0xfffffffd, 0x0, {0x5, 0x0, 0x1, 0x6f51, 0x8001, 0x8, 0x7, 0x2, 0xbb69, 0x4000, 0x206, 0xee01, 0x0, 0x80000001, 0x7}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={0x20, 0xfffffffffffffffe, 0xa0, {0x7fffffff, 0x4, 0x9, 0x4}}, 0x0}) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xade3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 242.415184ms ago: executing program 2 (id=5513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x400c084) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 88.4231ms ago: executing program 8 (id=5514): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 0s ago: executing program 2 (id=5515): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): cuous mode [ 905.118749][ T5913] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 905.128424][T18964] em28xx 8-1:0.0: chip ID is em2765 [ 905.144738][T22083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.173560][ T6884] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 905.181275][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.203954][ T5913] usb 5-1: Product: syz [ 905.205568][T22083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.208289][ T5913] usb 5-1: Manufacturer: syz [ 905.300951][ T5913] usb 5-1: SerialNumber: syz [ 905.320785][ T6450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.364343][ T6884] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 905.373612][ T6450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.409438][ T6884] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 905.428329][ T6450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.451834][ T6884] usb 9-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 905.496629][ T6450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.536497][ T6884] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 905.572364][ T6884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.687389][ T6884] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 905.737780][T22361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.751595][T18964] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 905.764473][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 905.786187][T22361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.842737][T18964] em28xx 8-1:0.0: board has no eeprom [ 905.854744][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 905.898033][ T6884] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 905.915428][T19728] udevd[19728]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.088419][ T24] usb 9-1: USB disconnect, device number 7 [ 906.097998][T18964] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 906.127881][T18964] em28xx 8-1:0.0: dvb set to bulk mode. [ 906.153106][ T6884] em28xx 8-1:0.0: Binding DVB extension [ 906.190357][T18964] usb 8-1: USB disconnect, device number 2 [ 906.214205][T18964] em28xx 8-1:0.0: Disconnecting em28xx [ 906.445019][ T6884] em28xx 8-1:0.0: Registering input extension [ 906.474852][T18964] em28xx 8-1:0.0: Closing input extension [ 906.495775][ T6450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.548369][ T6450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.595484][T18964] em28xx 8-1:0.0: Freeing device [ 906.778297][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.073344][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.086650][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.102512][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.964819][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 907.997099][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4693'. [ 908.031616][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 908.096306][ T5913] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 908.192827][ T5913] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 908.296348][ T5913] usb 5-1: USB disconnect, device number 7 [ 908.504606][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4695'. [ 908.601777][T22432] binder: 22430:22432 ioctl 4018620d 0 returned -22 [ 908.668970][T22429] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4695'. [ 908.763393][T22411] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 908.953992][T22411] usb 10-1: Using ep0 maxpacket: 16 [ 908.963193][T22411] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 909.010364][T22411] usb 10-1: config 0 has no interface number 0 [ 909.052593][T22411] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 909.087702][T22411] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.366902][T22411] usb 10-1: Product: syz [ 909.371210][T22411] usb 10-1: Manufacturer: syz [ 909.375985][T22411] usb 10-1: SerialNumber: syz [ 909.385993][T22411] usb 10-1: config 0 descriptor?? [ 909.423092][T22411] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 910.799910][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4707'. [ 911.014770][ T5844] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 911.213435][ T5844] usb 8-1: Using ep0 maxpacket: 32 [ 911.235156][ T5844] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 911.275689][ T5844] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.306608][T22411] gspca_spca1528: reg_w err -71 [ 911.346441][T22411] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 911.386092][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4711'. [ 911.408742][ T5844] usb 8-1: config 0 has no interface number 0 [ 911.450629][T22479] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4711'. [ 911.453292][T22411] usb 10-1: USB disconnect, device number 7 [ 911.466055][ T5844] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.670905][T22482] syzkaller0: entered promiscuous mode [ 911.676427][T22482] syzkaller0: entered allmulticast mode [ 911.686334][T22482] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4710'. [ 911.968604][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 911.982718][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 912.131555][T22484] befs: (nullb0): invalid magic header [ 912.141939][ T5844] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 912.180311][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.216952][ T5844] usb 8-1: Product: syz [ 912.239538][ T5844] usb 8-1: Manufacturer: syz [ 912.256188][ T5844] usb 8-1: SerialNumber: syz [ 912.279621][ T5844] usb 8-1: config 0 descriptor?? [ 912.329612][ T5844] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 912.361237][T22487] binder: 22485:22487 ioctl 4018620d 0 returned -22 [ 912.363178][ T5844] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 912.565398][ T5844] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 914.349707][ T5844] radio-raremono 8-1:0.35: raremono_cmd_main failed (-71) [ 914.516617][ T5844] radio-raremono 8-1:0.35: V4L2 device registered as radio48 [ 914.635975][ T5844] usb 8-1: USB disconnect, device number 3 [ 914.707566][ T5844] radio-raremono 8-1:0.35: Thanko's Raremono disconnected [ 914.798589][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4723'. [ 915.744539][T22528] befs: (nullb0): invalid magic header [ 916.455580][T22537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 916.527773][T22538] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4728'. [ 916.579306][T22341] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 916.762407][T22542] netlink: 79 bytes leftover after parsing attributes in process `syz.1.4732'. [ 917.242354][T22341] usb 10-1: config index 0 descriptor too short (expected 530, got 18) [ 917.270896][T22341] usb 10-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 917.329087][T22341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.458637][T22341] usb 10-1: config 0 descriptor?? [ 917.563138][T22549] binder: 22547:22549 ioctl 4018620d 0 returned -22 [ 917.704722][T22341] snd-usb-hiface 10-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 917.878373][T22341] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 917.910468][T22391] usb 10-1: USB disconnect, device number 8 [ 918.069245][T22341] usb 5-1: Using ep0 maxpacket: 8 [ 918.281029][T22341] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 918.311461][T22341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 918.879277][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 918.964690][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 919.128243][T22341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 919.148114][T22341] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.184544][T22341] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 919.195933][T22341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.440906][T22341] usb 5-1: usb_control_msg returned -32 [ 919.446536][T22341] usbtmc 5-1:16.0: can't read capabilities [ 919.547334][T22341] usb 5-1: USB disconnect, device number 8 [ 919.720280][T22578] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4743'. [ 920.007180][T22586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4746'. [ 921.092612][T22586] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4746'. [ 923.850223][T22614] binder: BINDER_SET_CONTEXT_MGR already set [ 923.956018][T22614] binder: 22609:22614 ioctl 4018620d 2000000002c0 returned -16 [ 924.556221][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4759'. [ 925.096442][T22656] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 925.103594][T22656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 925.113089][T22656] vhci_hcd vhci_hcd.0: Device attached [ 925.725441][T22659] vhci_hcd: connection closed [ 925.760429][ T6134] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 925.796168][T22341] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 926.435035][T22668] netlink: 79 bytes leftover after parsing attributes in process `syz.4.4762'. [ 926.507567][ T3728] vhci_hcd vhci_hcd.2: stop threads [ 926.910636][ T3728] vhci_hcd vhci_hcd.2: release socket [ 927.441329][ T3728] vhci_hcd vhci_hcd.2: disconnect device [ 928.083357][ T6134] usb 9-1: Using ep0 maxpacket: 8 [ 929.102565][T22667] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 929.122950][ T6134] usb 9-1: device descriptor read/all, error -71 [ 930.702822][T22692] binder: BINDER_SET_CONTEXT_MGR already set [ 931.243242][T22692] binder: 22690:22692 ioctl 4018620d 2000000002c0 returned -16 [ 931.920331][T22341] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 935.384050][T22737] netlink: 79 bytes leftover after parsing attributes in process `syz.2.4783'. [ 939.028006][T22761] binder: BINDER_SET_CONTEXT_MGR already set [ 939.034057][T22761] binder: 22759:22761 ioctl 4018620d 2000000002c0 returned -16 [ 941.443404][T15025] Bluetooth: hci4: unexpected event for opcode 0x200a [ 942.780943][T22795] befs: (nullb0): invalid magic header [ 942.957896][T22801] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4799'. [ 942.970007][T22800] 9p: Bad value for 'rfdno' [ 942.974614][T22801] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4799'. [ 944.504813][T22822] binder: 22821:22822 ioctl c0306201 0 returned -14 [ 945.273994][ T6134] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 945.470894][T22847] befs: (nullb0): invalid magic header [ 945.476865][ T6134] usb 9-1: Using ep0 maxpacket: 8 [ 945.526949][T22848] 9p: Bad value for 'rfdno' [ 945.689558][ T6134] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 945.724192][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4816'. [ 945.745156][ T6134] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 945.780446][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4816'. [ 945.808553][ T6134] usb 9-1: Product: syz [ 945.824654][ T6134] usb 9-1: Manufacturer: syz [ 945.855466][ T6134] usb 9-1: SerialNumber: syz [ 945.901505][ T6134] usb 9-1: config 0 descriptor?? [ 945.957247][ T6134] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 947.184475][ T6134] gspca_zc3xx: reg_w_i err -110 [ 947.224905][ T6134] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 948.855626][ T6134] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 949.036774][ T6134] usb 8-1: Using ep0 maxpacket: 32 [ 949.043739][T22888] binder: 22887:22888 ioctl c0306201 0 returned -14 [ 949.066473][ T6134] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 949.095700][T22888] binder: BINDER_SET_CONTEXT_MGR already set [ 949.105473][ T6134] usb 8-1: config 0 has no interface number 0 [ 949.130403][T22888] binder: 22887:22888 ioctl 4018620d 2000000002c0 returned -16 [ 949.140535][ T10] usb 9-1: USB disconnect, device number 10 [ 949.150070][ T6134] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 949.208291][ T6134] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.262944][ T6134] usb 8-1: Product: syz [ 949.275421][ T6134] usb 8-1: Manufacturer: syz [ 949.299994][ T6134] usb 8-1: SerialNumber: syz [ 949.335982][ T6134] usb 8-1: config 0 descriptor?? [ 949.381655][ T6134] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 949.599450][ T6134] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 949.664470][ T6134] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 949.794009][T22896] 9p: Bad value for 'rfdno' [ 949.980455][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 949.988236][ T6134] usb 8-1: USB disconnect, device number 4 [ 950.037519][ T6134] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 950.106529][ T6134] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 950.171019][ T6134] quatech2 8-1:0.51: device disconnected [ 951.640573][T22924] dlm: no local IP address has been set [ 951.646511][T22924] dlm: cannot start dlm midcomms -107 [ 952.475591][ T6884] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 952.685077][ T6884] usb 2-1: Using ep0 maxpacket: 16 [ 952.730634][ T6884] usb 2-1: config 4 has an invalid interface number: 194 but max is 0 [ 952.955553][ T6884] usb 2-1: config 4 has no interface number 0 [ 952.963364][ T6884] usb 2-1: config 4 interface 194 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 952.999807][ T6884] usb 2-1: config 4 interface 194 has no altsetting 0 [ 953.010005][ T6884] usb 2-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.bf [ 953.714234][ T6884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.722290][ T6884] usb 2-1: Product: syz [ 953.732736][ T6884] usb 2-1: Manufacturer: syz [ 953.737564][ T6884] usb 2-1: SerialNumber: syz [ 953.762175][T22924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 953.772236][ T6884] em28xx 2-1:4.194: New device syz syz @ 480 Mbps (2040:6500, interface 194, class 194) [ 953.825727][ T6884] em28xx 2-1:4.194: Video interface 194 found: bulk [ 954.994294][T22944] binder: 22943:22944 ioctl c0306201 0 returned -14 [ 955.312605][ T6884] em28xx 2-1:4.194: unknown em28xx chip ID (0) [ 956.162865][ T6884] em28xx 2-1:4.194: reading from i2c device at 0xa0 failed (error=-5) [ 956.171057][ T6884] em28xx 2-1:4.194: board has no eeprom [ 956.314600][ T6884] em28xx 2-1:4.194: Identified as Hauppauge WinTV HVR 900 (card=10) [ 956.322662][ T6884] em28xx 2-1:4.194: analog set to bulk mode. [ 956.400350][ T10] em28xx 2-1:4.194: Registering V4L2 extension [ 956.680812][ T6884] usb 2-1: USB disconnect, device number 3 [ 956.716097][T22965] binder: BINDER_SET_CONTEXT_MGR already set [ 956.722108][T22965] binder: 22962:22965 ioctl 4018620d 2000000002c0 returned -16 [ 956.741506][ T6884] em28xx 2-1:4.194: Disconnecting em28xx [ 956.942981][ T6134] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 957.133369][ T6134] usb 10-1: Using ep0 maxpacket: 8 [ 957.170236][ T6134] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 957.231769][ T6134] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 957.295685][ T6134] usb 10-1: Product: syz [ 957.331644][ T6134] usb 10-1: Manufacturer: syz [ 957.369741][ T6134] usb 10-1: SerialNumber: syz [ 957.430252][ T6134] usb 10-1: config 0 descriptor?? [ 957.485615][ T6134] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 957.865629][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 958.423695][ T6134] gspca_zc3xx: reg_w_i err -110 [ 958.524758][ T6134] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 959.125066][ T10] em28xx 2-1:4.194: Config register raw data: 0xffffffed [ 959.181794][ T10] em28xx 2-1:4.194: AC97 chip type couldn't be determined [ 959.245920][ T10] em28xx 2-1:4.194: No AC97 audio processor [ 959.300447][ T10] em28xx 2-1:4.194: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 959.366324][ T10] em28xx 2-1:4.194: Binding DVB extension [ 959.445569][ T10] em28xx 2-1:4.194: no endpoint for DVB mode and transfer type 0 [ 959.469892][ T10] em28xx 2-1:4.194: failed to pre-allocate USB transfer buffers for DVB. [ 959.524783][ T10] em28xx 2-1:4.194: Registering input extension [ 959.563360][ T6884] em28xx 2-1:4.194: Closing input extension [ 959.639067][ T6884] em28xx 2-1:4.194: Freeing device [ 961.124085][T23013] befs: (nullb0): invalid magic header [ 961.274353][ T6134] usb 10-1: USB disconnect, device number 9 [ 966.994951][T23087] befs: (nullb0): invalid magic header [ 970.574876][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 970.581306][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 980.193233][T23110] Set syz1 is full, maxelem 65536 reached [ 983.033971][ T5959] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 983.205119][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 983.232752][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.301043][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 983.331111][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 983.341788][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 983.358314][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 983.367862][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 983.375521][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 983.457461][ T5959] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 983.542393][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.652019][ T5959] usb 3-1: config 0 descriptor?? [ 983.810250][ T5959] usb 3-1: can't set config #0, error -71 [ 983.921434][ T5959] usb 3-1: USB disconnect, device number 3 [ 984.758735][T23182] hpfs: hpfs_map_sector(): read error [ 985.339026][ T5838] Bluetooth: hci7: command tx timeout [ 987.320499][ T5838] Bluetooth: hci7: command tx timeout [ 989.311532][ T5838] Bluetooth: hci7: command tx timeout [ 990.914937][T23221] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4906'. [ 991.284005][ T5838] Bluetooth: hci7: command tx timeout [ 991.441387][ T3522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.577621][T23158] chnl_net:caif_netlink_parms(): no params data found [ 991.654689][T22742] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 991.816645][T22742] usb 3-1: Using ep0 maxpacket: 32 [ 991.873967][T22742] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 991.912164][T22742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.963000][T22742] usb 3-1: config 0 descriptor?? [ 992.106495][ T3522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.228627][T23247] befs: (nullb0): invalid magic header [ 992.246341][T22742] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 992.336400][T22742] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 992.440262][T22742] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 992.528017][ T3522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.560059][T22742] usb 3-1: media controller created [ 992.808941][T22742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.925621][T22742] az6027: usb out operation failed. (-71) [ 992.964529][T22742] az6027: usb out operation failed. (-71) [ 992.980702][T22742] stb0899_attach: Driver disabled by Kconfig [ 992.980747][ T3522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.986689][T22742] az6027: no front-end attached [ 992.986689][T22742] [ 993.010009][T22742] az6027: usb out operation failed. (-71) [ 993.039323][T22742] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 993.376272][T22742] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 993.396113][T22742] dvb-usb: schedule remote query interval to 400 msecs. [ 993.403700][T22742] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 993.415504][T22742] usb 3-1: USB disconnect, device number 4 [ 996.434789][T23281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4924'. [ 996.578831][T22742] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 996.866244][ T5838] Bluetooth: hci6: command 0x041b tx timeout [ 998.005900][T23158] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.044847][T23158] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.062266][T23158] bridge_slave_0: entered allmulticast mode [ 998.118329][T23158] bridge_slave_0: entered promiscuous mode [ 998.216637][T23158] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.251714][T23158] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.263669][T23158] bridge_slave_1: entered allmulticast mode [ 998.321851][T23158] bridge_slave_1: entered promiscuous mode [ 998.513314][T23319] befs: (nullb0): invalid magic header [ 999.195656][T23158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.198549][ T5959] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 999.248280][T23158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.297888][ T3522] bridge_slave_1: left allmulticast mode [ 999.313495][ T3522] bridge_slave_1: left promiscuous mode [ 999.332586][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.360569][ T3522] bridge_slave_0: left allmulticast mode [ 999.366247][ T3522] bridge_slave_0: left promiscuous mode [ 999.374517][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.439015][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 999.469259][ T5959] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 999.514764][ T5959] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 999.549204][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.587556][ T5959] usb 3-1: Product: syz [ 999.602230][ T5959] usb 3-1: Manufacturer: syz [ 999.613672][ T5959] usb 3-1: SerialNumber: syz [ 999.632746][ T5959] usb 3-1: config 0 descriptor?? [ 999.643317][T23342] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4938'. [ 999.692420][T23320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 999.746862][ T5959] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 999.842487][T23347] dlm: no local IP address has been set [ 999.852443][T23347] dlm: cannot start dlm midcomms -107 [ 1000.112843][ T5913] usb 3-1: USB disconnect, device number 5 [ 1000.112916][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1001.535287][T23373] befs: (nullb0): invalid magic header [ 1003.113155][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.196940][T23383] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4951'. [ 1003.276552][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.304336][ T3522] bond0 (unregistering): Released all slaves [ 1003.374752][T23390] dlm: no local IP address has been set [ 1003.391905][T23390] dlm: cannot start dlm midcomms -107 [ 1005.709437][T23158] team0: Port device team_slave_0 added [ 1005.718744][T23158] team0: Port device team_slave_1 added [ 1007.475957][T19756] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1008.840997][T23430] befs: (nullb0): invalid magic header [ 1010.801501][T19756] usb 5-1: Using ep0 maxpacket: 32 [ 1013.144052][T19756] usb 5-1: device descriptor read/all, error -71 [ 1014.577023][T23158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.613994][T23158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.936656][T23158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.976113][T23158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.063788][T23158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.168591][T23158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.325780][ T3522] hsr_slave_0: left promiscuous mode [ 1016.374013][ T3522] hsr_slave_1: left promiscuous mode [ 1016.407882][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.393056][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.491207][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.540009][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.997520][T23488] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4978'. [ 1019.034225][ T3522] veth1_macvtap: left promiscuous mode [ 1019.039776][ T3522] veth0_macvtap: left promiscuous mode [ 1019.061227][ T3522] veth1_vlan: left promiscuous mode [ 1019.066568][ T3522] veth0_vlan: left promiscuous mode [ 1019.088061][T21999] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1019.602796][T21999] usb 9-1: Using ep0 maxpacket: 32 [ 1019.694908][T21999] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1019.717914][T21999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.750180][T21999] usb 9-1: config 0 descriptor?? [ 1020.065851][T21999] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1020.158601][T21999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1020.363330][T15025] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1020.374412][T15025] CPU: 1 UID: 0 PID: 15025 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.374466][T15025] Tainted: [L]=SOFTLOCKUP [ 1020.374479][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1020.374504][T15025] Workqueue: hci4 hci_rx_work [ 1020.374552][T15025] Call Trace: [ 1020.374563][T15025] [ 1020.374576][T15025] dump_stack_lvl+0x16c/0x1f0 [ 1020.374635][T15025] sysfs_warn_dup+0x7f/0xa0 [ 1020.374671][T15025] sysfs_create_dir_ns+0x24b/0x2b0 [ 1020.374708][T15025] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1020.374742][T15025] ? find_held_lock+0x2b/0x80 [ 1020.374808][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.374853][T15025] ? do_raw_spin_unlock+0x172/0x230 [ 1020.374909][T15025] kobject_add_internal+0x2c4/0x9d0 [ 1020.374955][T15025] kobject_add+0x16e/0x240 [ 1020.374990][T15025] ? __pfx_kobject_add+0x10/0x10 [ 1020.375029][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.375075][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.375118][T15025] ? kobject_put+0xaf/0x6f0 [ 1020.375176][T15025] ? _raw_spin_unlock+0x28/0x50 [ 1020.375230][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.375284][T15025] device_add+0x288/0x1980 [ 1020.375335][T15025] ? __pfx_dev_set_name+0x10/0x10 [ 1020.375397][T15025] ? __pfx_device_add+0x10/0x10 [ 1020.375447][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.375492][T15025] ? mgmt_send_event_skb+0x2fb/0x460 [ 1020.375556][T15025] hci_conn_add_sysfs+0x1a8/0x260 [ 1020.375615][T15025] le_conn_complete_evt+0x11ed/0x1fa0 [ 1020.375677][T15025] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1020.375732][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.375785][T15025] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1020.375847][T15025] hci_le_meta_evt+0x357/0x610 [ 1020.375900][T15025] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1020.375958][T15025] hci_event_packet+0x685/0x1210 [ 1020.376009][T15025] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1020.376065][T15025] ? __pfx_hci_event_packet+0x10/0x10 [ 1020.376116][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.376164][T15025] ? kcov_remote_start+0x399/0x680 [ 1020.376205][T15025] ? lockdep_hardirqs_on+0x7c/0x110 [ 1020.376262][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.376317][T15025] hci_rx_work+0x2c9/0x1020 [ 1020.376369][T15025] ? __entry_text_end+0x1020b5/0x1020b9 [ 1020.376422][T15025] process_one_work+0x9ba/0x1b20 [ 1020.376490][T15025] ? __pfx_process_one_work+0x10/0x10 [ 1020.376541][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.376596][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.376641][T15025] ? assign_work+0x1a0/0x250 [ 1020.376691][T15025] worker_thread+0x6c8/0xf10 [ 1020.376763][T15025] ? __pfx_worker_thread+0x10/0x10 [ 1020.376811][T15025] kthread+0x3c5/0x780 [ 1020.376857][T15025] ? __pfx_kthread+0x10/0x10 [ 1020.376904][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.376948][T15025] ? rcu_is_watching+0x12/0xc0 [ 1020.376984][T15025] ? __pfx_kthread+0x10/0x10 [ 1020.377031][T15025] ret_from_fork+0x983/0xb10 [ 1020.377074][T15025] ? __pfx_ret_from_fork+0x10/0x10 [ 1020.377115][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.377160][T15025] ? rcu_is_watching+0x12/0xc0 [ 1020.377193][T15025] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1020.377237][T15025] ? __switch_to+0x7af/0x10d0 [ 1020.377287][T15025] ? __pfx_kthread+0x10/0x10 [ 1020.377334][T15025] ret_from_fork_asm+0x1a/0x30 [ 1020.377419][T15025] [ 1020.377452][T15025] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1020.737081][T15025] Bluetooth: hci4: failed to register connection device [ 1020.744695][T21999] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1020.772168][T21999] usb 9-1: media controller created [ 1020.790429][T21999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1020.823985][T21999] az6027: usb out operation failed. (-71) [ 1020.830437][T21999] az6027: usb out operation failed. (-71) [ 1020.836398][T21999] stb0899_attach: Driver disabled by Kconfig [ 1020.842437][T21999] az6027: no front-end attached [ 1020.842437][T21999] [ 1020.852944][T21999] az6027: usb out operation failed. (-71) [ 1020.858663][T21999] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1020.879661][T21999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input24 [ 1021.271063][T21999] dvb-usb: schedule remote query interval to 400 msecs. [ 1021.298323][T21999] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1021.916134][T21999] usb 9-1: USB disconnect, device number 11 [ 1026.654904][T21999] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1028.060024][T23512] xt_hashlimit: max too large, truncated to 1048576 [ 1029.018959][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1029.032192][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.769745][ T5959] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1031.695249][T23490] Set syz1 is full, maxelem 65536 reached [ 1032.143980][T23533] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1032.150628][T23533] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1032.158383][T23533] vhci_hcd vhci_hcd.0: Device attached [ 1032.316960][T23534] vhci_hcd: connection closed [ 1032.328872][ T6094] vhci_hcd vhci_hcd.2: stop threads [ 1032.476079][ T6094] vhci_hcd vhci_hcd.2: release socket [ 1032.492201][ T10] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 1032.598807][ T6094] vhci_hcd vhci_hcd.2: disconnect device [ 1032.915428][ T5959] usb 10-1: device descriptor read/all, error -71 [ 1033.047027][T23540] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 1033.640897][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1033.652952][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1033.661946][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1033.670685][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1033.679461][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1034.328026][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 1034.608418][T23567] befs: (nullb0): invalid magic header [ 1034.851831][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 1035.638483][ T5838] Bluetooth: hci3: command tx timeout [ 1035.754754][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1035.765001][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.765055][ T5838] Tainted: [L]=SOFTLOCKUP [ 1035.765068][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1035.765092][ T5838] Workqueue: hci0 hci_rx_work [ 1035.765147][ T5838] Call Trace: [ 1035.765158][ T5838] [ 1035.765171][ T5838] dump_stack_lvl+0x16c/0x1f0 [ 1035.765230][ T5838] sysfs_warn_dup+0x7f/0xa0 [ 1035.765267][ T5838] sysfs_create_dir_ns+0x24b/0x2b0 [ 1035.765303][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1035.765337][ T5838] ? find_held_lock+0x2b/0x80 [ 1035.765402][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.765446][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 1035.765503][ T5838] kobject_add_internal+0x2c4/0x9d0 [ 1035.765548][ T5838] kobject_add+0x16e/0x240 [ 1035.765583][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 1035.765621][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.765667][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.765711][ T5838] ? kobject_put+0xaf/0x6f0 [ 1035.765767][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 1035.765821][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.765874][ T5838] device_add+0x288/0x1980 [ 1035.765925][ T5838] ? __pfx_dev_set_name+0x10/0x10 [ 1035.765981][ T5838] ? __pfx_device_add+0x10/0x10 [ 1035.766031][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.766075][ T5838] ? mgmt_send_event_skb+0x2fb/0x460 [ 1035.766145][ T5838] hci_conn_add_sysfs+0x1a8/0x260 [ 1035.766204][ T5838] le_conn_complete_evt+0x11ed/0x1fa0 [ 1035.766266][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1035.766320][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.766372][ T5838] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1035.766433][ T5838] hci_le_meta_evt+0x357/0x610 [ 1035.766486][ T5838] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1035.766543][ T5838] hci_event_packet+0x685/0x1210 [ 1035.766594][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1035.766650][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 1035.766700][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.766748][ T5838] ? kcov_remote_start+0x399/0x680 [ 1035.766790][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 1035.766845][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.766901][ T5838] hci_rx_work+0x2c9/0x1020 [ 1035.766947][ T5838] ? __entry_text_end+0x1020b5/0x1020b9 [ 1035.767000][ T5838] process_one_work+0x9ba/0x1b20 [ 1035.767068][ T5838] ? __pfx_process_one_work+0x10/0x10 [ 1035.767138][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.767194][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.767238][ T5838] ? assign_work+0x1a0/0x250 [ 1035.767289][ T5838] worker_thread+0x6c8/0xf10 [ 1035.767347][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.767397][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.767440][ T5838] ? __kthread_parkme+0x19e/0x250 [ 1035.767474][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.767521][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 1035.767570][ T5838] kthread+0x3c5/0x780 [ 1035.767614][ T5838] ? __pfx_kthread+0x10/0x10 [ 1035.767663][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.767706][ T5838] ? rcu_is_watching+0x12/0xc0 [ 1035.767741][ T5838] ? __pfx_kthread+0x10/0x10 [ 1035.767787][ T5838] ret_from_fork+0x983/0xb10 [ 1035.767829][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 1035.767873][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1035.767917][ T5838] ? __switch_to+0x7af/0x10d0 [ 1035.767966][ T5838] ? __pfx_kthread+0x10/0x10 [ 1035.768012][ T5838] ret_from_fork_asm+0x1a/0x30 [ 1035.768093][ T5838] [ 1036.107668][ T5838] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1036.121825][ T5838] Bluetooth: hci0: failed to register connection device [ 1036.184699][T23158] hsr_slave_0: entered promiscuous mode [ 1036.194253][T23158] hsr_slave_1: entered promiscuous mode [ 1036.201841][T23488] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4978'. [ 1037.426809][T23596] dlm: no local IP address has been set [ 1037.433973][T23596] dlm: cannot start dlm midcomms -107 [ 1038.050291][T15025] Bluetooth: hci3: command tx timeout [ 1038.111120][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1039.978201][ T5838] Bluetooth: hci3: command tx timeout [ 1041.959582][ T5838] Bluetooth: hci3: command tx timeout [ 1044.577997][T15025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1044.588028][T15025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1044.624186][T15025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1044.651200][T15025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1044.659311][T15025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1045.130135][T23612] 8021q: VLANs not supported on gre0 [ 1047.349503][T15025] Bluetooth: hci2: command tx timeout [ 1048.251534][T23546] chnl_net:caif_netlink_parms(): no params data found [ 1048.648536][T23637] dlm: no local IP address has been set [ 1048.654159][T23637] dlm: cannot start dlm midcomms -107 [ 1049.297753][T15025] Bluetooth: hci2: command tx timeout [ 1050.526692][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1050.536622][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1050.544492][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1050.552466][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1050.560171][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1050.606457][ T1512] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.256877][ T5838] Bluetooth: hci2: command tx timeout [ 1052.204654][ T1512] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.525808][ T1512] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.551569][ T5838] Bluetooth: hci5: command tx timeout [ 1053.042639][ T1512] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.285294][ T5838] Bluetooth: hci2: command tx timeout [ 1054.537850][ T5838] Bluetooth: hci5: command tx timeout [ 1054.554861][T23546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.675615][T23546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.696512][T23546] bridge_slave_0: entered allmulticast mode [ 1054.703948][T23546] bridge_slave_0: entered promiscuous mode [ 1054.726620][T23546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.747501][T23546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.783492][T23546] bridge_slave_1: entered allmulticast mode [ 1054.812607][T23546] bridge_slave_1: entered promiscuous mode [ 1056.778309][ T5838] Bluetooth: hci5: command tx timeout [ 1057.306613][T23546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.386030][T23546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.420378][ T6884] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1057.591199][ T6884] usb 3-1: Using ep0 maxpacket: 32 [ 1057.617068][ T6884] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1057.631510][ T6884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.647397][ T6884] usb 3-1: config 0 descriptor?? [ 1057.829776][T23546] team0: Port device team_slave_0 added [ 1057.852113][ T6884] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1057.872239][ T6884] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1057.883872][ T6884] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1057.927161][T23546] team0: Port device team_slave_1 added [ 1058.141690][T23546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.158698][T23546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.219780][T23546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.356859][T23546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.372232][T23546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.429250][T23546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.601701][ T1512] bridge_slave_1: left allmulticast mode [ 1058.614798][ T1512] bridge_slave_1: left promiscuous mode [ 1058.625036][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.691079][ T1512] bridge_slave_0: left allmulticast mode [ 1058.723294][ T1512] bridge_slave_0: left promiscuous mode [ 1058.737566][ T5838] Bluetooth: hci5: command tx timeout [ 1058.783045][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.154462][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.240534][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.289867][ T1512] bond0 (unregistering): Released all slaves [ 1062.575592][T23610] chnl_net:caif_netlink_parms(): no params data found [ 1062.788970][T23546] hsr_slave_0: entered promiscuous mode [ 1062.821743][T23546] hsr_slave_1: entered promiscuous mode [ 1062.830499][T23546] debugfs: 'hsr0' already exists in 'hsr' [ 1062.836236][T23546] Cannot create hsr debugfs directory [ 1063.338841][T23648] chnl_net:caif_netlink_parms(): no params data found [ 1063.994096][ T1512] hsr_slave_0: left promiscuous mode [ 1064.049909][ T1512] hsr_slave_1: left promiscuous mode [ 1064.062216][ T1512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.087740][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.108689][ T1512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.118752][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.175044][ T1512] veth1_macvtap: left promiscuous mode [ 1064.180594][ T1512] veth0_macvtap: left promiscuous mode [ 1064.201907][ T1512] veth1_vlan: left promiscuous mode [ 1064.207259][ T1512] veth0_vlan: left promiscuous mode [ 1067.886538][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 1067.971749][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 1069.126319][T23880] kAFS: No cell specified [ 1071.206436][T23884] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1071.222369][ T5959] infiniband syz1: ib_query_port failed (-19) [ 1071.342957][T23610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.364879][T23610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.388953][T23610] bridge_slave_0: entered allmulticast mode [ 1071.397985][T23610] bridge_slave_0: entered promiscuous mode [ 1071.469760][T23610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.515658][T23610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.545861][T23610] bridge_slave_1: entered allmulticast mode [ 1071.580449][T23610] bridge_slave_1: entered promiscuous mode [ 1072.173780][T23953] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1072.180436][T23953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1072.188521][T23953] vhci_hcd vhci_hcd.0: Device attached [ 1072.503172][T23954] vhci_hcd: connection closed [ 1072.528954][ T6094] vhci_hcd vhci_hcd.8: stop threads [ 1072.558219][ T5913] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1072.729897][ T6094] vhci_hcd vhci_hcd.8: release socket [ 1072.798002][ T6094] vhci_hcd vhci_hcd.8: disconnect device [ 1073.231648][T23610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.257123][T23648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.291826][T23648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.308431][T23648] bridge_slave_0: entered allmulticast mode [ 1073.344480][T23648] bridge_slave_0: entered promiscuous mode [ 1073.378437][T23610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.507889][T23648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.518780][T23648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.536239][T23971] kAFS: No cell specified [ 1073.538110][T23648] bridge_slave_1: entered allmulticast mode [ 1073.553413][T23648] bridge_slave_1: entered promiscuous mode [ 1073.751568][T23610] team0: Port device team_slave_0 added [ 1073.833084][T23648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.885954][T23610] team0: Port device team_slave_1 added [ 1075.323741][T23648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.652326][T23610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.665147][T23610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.702231][T23610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.763972][ T1512] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.786044][T23648] team0: Port device team_slave_0 added [ 1075.793584][T23610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.802585][T23610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.834758][T23610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.850309][T23648] team0: Port device team_slave_1 added [ 1075.896767][ T1512] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.349012][T24016] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1076.355662][T24016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1076.363699][T24016] vhci_hcd vhci_hcd.0: Device attached [ 1076.559065][T23648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.650449][T23648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.699030][T22341] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1076.788977][T24017] vhci_hcd: connection closed [ 1076.807940][ T6070] vhci_hcd vhci_hcd.4: stop threads [ 1076.925149][ T6070] vhci_hcd vhci_hcd.4: release socket [ 1076.985015][T23648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.029674][ T6070] vhci_hcd vhci_hcd.4: disconnect device [ 1077.425369][ T1512] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.481170][T23648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.488125][T23648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.554624][T23648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.575462][ T5913] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1077.663383][ T1512] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.806543][T23546] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1077.859088][T23610] hsr_slave_0: entered promiscuous mode [ 1077.867647][T23610] hsr_slave_1: entered promiscuous mode [ 1077.875803][T23610] debugfs: 'hsr0' already exists in 'hsr' [ 1077.882342][T23610] Cannot create hsr debugfs directory [ 1077.888442][T23546] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1077.921762][T23648] hsr_slave_0: entered promiscuous mode [ 1077.930905][T23648] hsr_slave_1: entered promiscuous mode [ 1077.937132][T23648] debugfs: 'hsr0' already exists in 'hsr' [ 1077.946975][T23648] Cannot create hsr debugfs directory [ 1077.956766][T23546] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1078.042407][T23546] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1078.947226][T21999] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1079.110175][T21999] usb 5-1: Using ep0 maxpacket: 16 [ 1079.117779][T21999] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1079.127004][T21999] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.137576][T21999] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1079.154649][T21999] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1079.163951][T21999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.172183][T21999] usb 5-1: Product: syz [ 1079.177792][T21999] usb 5-1: Manufacturer: syz [ 1079.185744][T21999] usb 5-1: SerialNumber: syz [ 1079.588440][T21999] usb 5-1: 0:2 : does not exist [ 1080.230961][T21999] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 1080.309389][T21999] usb 5-1: USB disconnect, device number 11 [ 1080.355585][T24071] binder: BINDER_SET_CONTEXT_MGR already set [ 1080.384222][T24071] binder: 24069:24071 ioctl 4018620d 2000000002c0 returned -16 [ 1080.397758][T23868] udevd[23868]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.501721][ T1512] bridge_slave_1: left allmulticast mode [ 1080.510710][ T1512] bridge_slave_1: left promiscuous mode [ 1080.519331][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.542192][ T1512] bridge_slave_0: left allmulticast mode [ 1080.549419][ T1512] bridge_slave_0: left promiscuous mode [ 1080.559598][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.584043][ T1512] bridge_slave_1: left allmulticast mode [ 1080.608392][ T1512] bridge_slave_1: left promiscuous mode [ 1080.622366][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.649033][ T1512] bridge_slave_0: left allmulticast mode [ 1080.654873][ T1512] bridge_slave_0: left promiscuous mode [ 1080.661201][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.192711][T24095] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1081.199368][T24095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1081.249231][T24095] vhci_hcd vhci_hcd.0: Device attached [ 1081.585746][T21999] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 1081.652303][T22341] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1081.667623][T24096] vhci_hcd: connection reset by peer [ 1081.694013][ T6037] vhci_hcd vhci_hcd.8: stop threads [ 1081.729581][ T6037] vhci_hcd vhci_hcd.8: release socket [ 1081.781454][ T6037] vhci_hcd vhci_hcd.8: disconnect device [ 1082.561256][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.572298][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.582766][ T1512] bond0 (unregistering): Released all slaves [ 1082.715164][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.726636][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.737760][ T1512] bond0 (unregistering): Released all slaves [ 1084.873904][T24125] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.888416][T24125] binder: 24124:24125 ioctl 4018620d 2000000002c0 returned -16 [ 1084.909801][T23546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.916809][T24125] binder: 24124:24125 ioctl c0306201 0 returned -14 [ 1084.983019][ T1512] hsr_slave_0: left promiscuous mode [ 1085.013351][ T1512] hsr_slave_1: left promiscuous mode [ 1085.040595][ T1512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.058010][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.073123][ T1512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.108136][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.264989][ T1512] hsr_slave_0: left promiscuous mode [ 1085.355828][ T1512] hsr_slave_1: left promiscuous mode [ 1085.461478][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.595136][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.780849][ T1512] veth1_macvtap: left promiscuous mode [ 1085.786417][ T1512] veth0_macvtap: left promiscuous mode [ 1085.816479][ T1512] veth1_vlan: left promiscuous mode [ 1085.828671][ T1512] veth0_vlan: left promiscuous mode [ 1086.987826][T21999] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1087.291338][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 1087.329732][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 1087.536720][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1087.543439][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.599496][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1088.717001][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 1088.760433][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1088.780375][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 1088.789571][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.809543][ T10] usb 9-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1088.819633][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.840152][ T10] usb 9-1: config 0 descriptor?? [ 1088.972926][T24160] binder: 24159:24160 ioctl c0306201 0 returned -14 [ 1089.098461][T23546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.179750][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.186994][ T4498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.214295][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.221480][ T4498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.296812][ T10] macally 0003:060B:0001.0004: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.8-1/input0 [ 1089.526330][T22742] usb 9-1: USB disconnect, device number 12 [ 1090.018446][T23648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1090.107933][T23648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1090.248564][T23648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1090.461824][T23648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1090.799778][T15025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1090.823721][T15025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1090.834040][T15025] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1090.855226][T15025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1090.863070][T15025] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1090.995095][T23610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1091.053099][T23610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1091.321767][T23610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1091.418510][T23610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1092.864558][T15025] Bluetooth: hci4: command tx timeout [ 1093.188891][T23648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.358888][T23648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.389448][T24186] chnl_net:caif_netlink_parms(): no params data found [ 1093.471432][T23610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.575481][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.582655][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.784222][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.791420][ T6172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.166346][T23610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.260217][T24251] dlm: no local IP address has been set [ 1094.266058][T24251] dlm: cannot start dlm midcomms -107 [ 1095.556648][T15025] Bluetooth: hci4: command tx timeout [ 1095.596861][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.604027][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.718667][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.725856][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.080817][T24186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.159030][T24186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.244778][T24186] bridge_slave_0: entered allmulticast mode [ 1096.343160][T24186] bridge_slave_0: entered promiscuous mode [ 1096.703292][T24186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.710435][T24186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.760889][T24186] bridge_slave_1: entered allmulticast mode [ 1096.790871][T24186] bridge_slave_1: entered promiscuous mode [ 1096.901177][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1096.912731][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1096.927990][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1096.939268][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1096.952125][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1097.215691][T24186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.294931][T24186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.512572][ T5838] Bluetooth: hci4: command tx timeout [ 1097.609655][T24186] team0: Port device team_slave_0 added [ 1097.785106][T24186] team0: Port device team_slave_1 added [ 1098.037515][T24186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.073385][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.155790][T24186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.329906][T24186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.359962][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.417720][T24186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.960487][ T5838] Bluetooth: hci3: command tx timeout [ 1099.100667][T24186] hsr_slave_0: entered promiscuous mode [ 1099.133064][T24186] hsr_slave_1: entered promiscuous mode [ 1099.296544][T23648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.494094][ T5838] Bluetooth: hci4: command tx timeout [ 1100.942519][ T5838] Bluetooth: hci3: command tx timeout [ 1101.444792][T24271] chnl_net:caif_netlink_parms(): no params data found [ 1101.500881][T23648] veth0_vlan: entered promiscuous mode [ 1101.980634][T23648] veth1_vlan: entered promiscuous mode [ 1102.368148][T24348] dlm: no local IP address has been set [ 1102.374042][T24348] dlm: cannot start dlm midcomms -107 [ 1103.332940][ T5838] Bluetooth: hci3: command tx timeout [ 1105.438075][ T5838] Bluetooth: hci3: command tx timeout [ 1105.517814][T24271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.556544][T24362] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.566201][T24271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.612350][T24362] binder: 24361:24362 ioctl 4018620d 200000000040 returned -16 [ 1105.620341][T24271] bridge_slave_0: entered allmulticast mode [ 1105.667219][T24271] bridge_slave_0: entered promiscuous mode [ 1105.701508][T24271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.752702][T24271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.759933][T24271] bridge_slave_1: entered allmulticast mode [ 1105.823551][T24271] bridge_slave_1: entered promiscuous mode [ 1106.005081][ T1512] bridge_slave_1: left allmulticast mode [ 1106.013446][ T1512] bridge_slave_1: left promiscuous mode [ 1106.028957][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.049650][ T1512] bridge_slave_0: left allmulticast mode [ 1106.066966][ T1512] bridge_slave_0: left promiscuous mode [ 1106.072722][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.109328][ T1512] bridge_slave_1: left allmulticast mode [ 1106.124111][ T1512] bridge_slave_1: left promiscuous mode [ 1106.140134][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.167833][ T1512] bridge_slave_0: left allmulticast mode [ 1106.190630][ T1512] bridge_slave_0: left promiscuous mode [ 1106.206364][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.293711][T24375] 9pnet_fd: Insufficient options for proto=fd [ 1106.911200][T15025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1106.925024][T15025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1106.934662][T15025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1106.945021][T15025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1106.964248][T15025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1107.594505][T24394] kAFS: No cell specified [ 1107.678913][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.693330][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.708881][ T1512] bond0 (unregistering): Released all slaves [ 1108.022485][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.048066][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.061263][ T1512] bond0 (unregistering): Released all slaves [ 1108.394726][T24402] dlm: no local IP address has been set [ 1108.400625][T24402] dlm: cannot start dlm midcomms -107 [ 1108.487301][T24271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.535571][T24271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.597360][ T1512] hsr_slave_0: left promiscuous mode [ 1108.623603][ T1512] hsr_slave_1: left promiscuous mode [ 1108.641935][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.687460][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.727946][ T1512] hsr_slave_0: left promiscuous mode [ 1108.742522][ T1512] hsr_slave_1: left promiscuous mode [ 1108.754831][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.775071][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.943652][ T5838] Bluetooth: hci2: command tx timeout [ 1109.090138][T24407] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5168'. [ 1109.473631][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 1109.504822][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 1109.563894][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1109.715059][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1109.731649][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1109.764880][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1109.791364][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.799450][ T10] usb 9-1: Product: syz [ 1109.806847][ T10] usb 9-1: Manufacturer: syz [ 1109.820371][ T10] usb 9-1: SerialNumber: syz [ 1109.839470][ T10] usb 9-1: config 0 descriptor?? [ 1109.852179][ T10] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1109.861832][ T10] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1110.155966][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 1110.209766][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 1110.462870][ T10] em28xx 9-1:0.0: chip ID is em2765 [ 1110.692054][T24271] team0: Port device team_slave_0 added [ 1110.708439][T24271] team0: Port device team_slave_1 added [ 1110.850307][T24271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.857396][T24271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.891361][T24271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.070980][ T5838] Bluetooth: hci2: command tx timeout [ 1111.087906][T24271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.094853][T24271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.137652][T24271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.157524][T24186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1111.306318][ T10] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1111.320497][T24186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1111.325130][ T10] em28xx 9-1:0.0: board has no eeprom [ 1111.351366][T24426] kAFS: No cell specified [ 1111.580927][T24186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1111.653805][T24186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1111.694618][T24271] hsr_slave_0: entered promiscuous mode [ 1111.722650][T24271] hsr_slave_1: entered promiscuous mode [ 1111.730229][T24271] debugfs: 'hsr0' already exists in 'hsr' [ 1111.738054][T24271] Cannot create hsr debugfs directory [ 1112.527862][T24412] em28xx 9-1:0.0: reading from i2c device at 0x1a0 failed (error=-5) [ 1112.603598][ T10] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1112.706753][ T10] em28xx 9-1:0.0: dvb set to bulk mode. [ 1112.788267][T23432] em28xx 9-1:0.0: Binding DVB extension [ 1112.816118][ T10] usb 9-1: USB disconnect, device number 13 [ 1112.831643][ T10] em28xx 9-1:0.0: Disconnecting em28xx [ 1112.934856][T24386] chnl_net:caif_netlink_parms(): no params data found [ 1112.986813][T23432] em28xx 9-1:0.0: Registering input extension [ 1112.993125][ T5838] Bluetooth: hci2: command tx timeout [ 1113.011825][ T10] em28xx 9-1:0.0: Closing input extension [ 1113.051657][ T10] em28xx 9-1:0.0: Freeing device [ 1113.359675][T24459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1113.811476][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1113.954337][ T10] usb 5-1: device descriptor read/64, error -71 [ 1114.091322][T24386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.109255][T24386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.126819][T24386] bridge_slave_0: entered allmulticast mode [ 1114.186392][T24386] bridge_slave_0: entered promiscuous mode [ 1114.195367][T24386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.204319][T24386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.216145][T24386] bridge_slave_1: entered allmulticast mode [ 1114.224887][T24386] bridge_slave_1: entered promiscuous mode [ 1114.412025][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1114.902687][T24386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.920124][ T10] usb 5-1: device descriptor read/64, error -71 [ 1114.940135][T24386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.018095][ T5838] Bluetooth: hci2: command tx timeout [ 1115.095985][ T10] usb usb5-port1: attempt power cycle [ 1115.137812][T24386] team0: Port device team_slave_0 added [ 1115.196737][T24386] team0: Port device team_slave_1 added [ 1115.356425][T24386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.363407][T24386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.366879][T24486] afs: Unknown parameter 'dy' [ 1115.440241][T24386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.468709][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1115.509516][ T10] usb 5-1: device descriptor read/8, error -71 [ 1115.543162][T24386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.586175][T24386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.647495][T24386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.934263][T24386] hsr_slave_0: entered promiscuous mode [ 1115.948011][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1115.966269][T24386] hsr_slave_1: entered promiscuous mode [ 1115.972686][T24386] debugfs: 'hsr0' already exists in 'hsr' [ 1115.983556][ T10] usb 5-1: device descriptor read/8, error -71 [ 1115.992207][T24386] Cannot create hsr debugfs directory [ 1116.080561][T24502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1116.230634][T24271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1116.513467][T24504] netlink: 172 bytes leftover after parsing attributes in process `syz.8.5191'. [ 1116.536477][T24271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1116.595317][ T1512] bridge_slave_1: left allmulticast mode [ 1116.600984][ T1512] bridge_slave_1: left promiscuous mode [ 1116.630728][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.687419][ T1512] bridge_slave_0: left allmulticast mode [ 1116.694152][ T10] usb usb5-port1: unable to enumerate USB device [ 1116.748912][ T1512] bridge_slave_0: left promiscuous mode [ 1116.756756][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.904205][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5193'. [ 1117.069888][ T6884] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1117.085235][ T6884] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1117.106885][ T6884] usb 3-1: USB disconnect, device number 6 [ 1118.459459][T24531] afs: Unknown parameter 'dy' [ 1118.602167][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.718779][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.796838][ T1512] bond0 (unregistering): Released all slaves [ 1118.935335][T24271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1119.062513][T24186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.088647][T24271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1119.204316][ T1512] hsr_slave_0: left promiscuous mode [ 1119.222544][ T1512] hsr_slave_1: left promiscuous mode [ 1119.244204][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.256308][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.299953][ T1512] veth1_vlan: left promiscuous mode [ 1119.305293][ T1512] veth0_vlan: left promiscuous mode [ 1119.427373][T21999] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1119.577904][T21999] usb 5-1: device descriptor read/64, error -71 [ 1119.729333][T17181] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1119.812222][T21999] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1119.883836][T17181] usb 9-1: Using ep0 maxpacket: 16 [ 1119.894293][T17181] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.913476][T17181] usb 9-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1119.923219][T17181] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.947412][T17181] usb 9-1: config 0 descriptor?? [ 1119.954416][T21999] usb 5-1: device descriptor read/64, error -71 [ 1120.028590][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 1120.075036][T21999] usb usb5-port1: attempt power cycle [ 1120.095051][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 1120.388392][T17181] macally 0003:060B:0001.0005: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.8-1/input0 [ 1120.412290][T21999] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1120.451954][T21999] usb 5-1: device descriptor read/8, error -71 [ 1120.600320][T17181] usb 9-1: USB disconnect, device number 14 [ 1120.682332][T21999] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1120.716621][T21999] usb 5-1: device descriptor read/8, error -71 [ 1120.832806][T21999] usb usb5-port1: unable to enumerate USB device [ 1120.978068][T24186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.069672][ T2106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.076829][ T2106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.132669][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.139836][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.267570][T24564] afs: Unknown parameter 'dy' [ 1121.759493][T24271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.979588][T24271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.855304][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.862517][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.883695][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.890887][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.972552][T24386] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1123.826631][T24386] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1123.898886][T24386] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1123.956506][T24386] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1124.749926][T24627] 9p: Bad value for 'rfdno' [ 1124.784540][T24386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.864390][T24386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.931284][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.938487][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.007004][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.014189][ T6172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.193679][T24271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.226462][T24186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.338194][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1125.425852][T24271] veth0_vlan: entered promiscuous mode [ 1125.502266][ T5913] usb 3-1: device descriptor read/64, error -71 [ 1125.529740][T24271] veth1_vlan: entered promiscuous mode [ 1125.644629][T24271] veth0_macvtap: entered promiscuous mode [ 1125.692935][T24271] veth1_macvtap: entered promiscuous mode [ 1125.753247][T24271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.767719][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1125.810802][T24271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.909464][T22738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.938149][ T5913] usb 3-1: device descriptor read/64, error -71 [ 1125.944892][T22738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.980166][T22738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.016938][T22738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.056581][ T5913] usb usb3-port1: attempt power cycle [ 1126.472392][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1126.505054][T24386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.541498][ T5913] usb 3-1: device descriptor read/8, error -71 [ 1126.580203][ T2106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.618087][ T2106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.814436][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1126.902576][ T5913] usb 3-1: device descriptor read/8, error -71 [ 1127.005610][T22738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.042907][ T5913] usb usb3-port1: unable to enumerate USB device [ 1127.060950][T22738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.937066][T24386] veth0_vlan: entered promiscuous mode [ 1128.994495][T24186] veth0_vlan: entered promiscuous mode [ 1129.086643][T24186] veth1_vlan: entered promiscuous mode [ 1129.131253][T24386] veth1_vlan: entered promiscuous mode [ 1129.223628][ T5913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1129.307004][T24186] veth0_macvtap: entered promiscuous mode [ 1129.359468][T24386] veth0_macvtap: entered promiscuous mode [ 1129.395048][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 1129.396864][T24186] veth1_macvtap: entered promiscuous mode [ 1129.408846][ T5913] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1129.447209][ T5913] usb 1-1: config 0 has no interface number 0 [ 1129.472334][ T5913] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1129.500448][ T5913] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1129.554056][ T5913] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1129.584630][T24386] veth1_macvtap: entered promiscuous mode [ 1129.606791][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1129.666573][ T5913] usb 1-1: Product: syz [ 1129.690101][ T5913] usb 1-1: SerialNumber: syz [ 1129.744879][T24386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.755096][ T5913] usb 1-1: config 0 descriptor?? [ 1129.791861][ T5913] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1129.811806][T24186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.821784][ T5913] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input26 [ 1129.859549][T24186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.932872][T24386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.995794][ T1512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.024177][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1131.083223][ T6172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.094273][ T6172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.283977][ T6172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.293479][ T6172] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.321368][ T6172] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.407122][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1131.408312][ T9] usb 1-1: USB disconnect, device number 4 [ 1131.414107][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1131.441673][ T6172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.485524][ T6172] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.502522][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1131.730186][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1131.833699][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.863975][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.900202][ T5913] usb 3-1: device descriptor read/64, error -71 [ 1132.011913][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.048227][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.167674][ T5913] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1132.225354][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.258186][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.326939][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.338411][ T5913] usb 3-1: device descriptor read/64, error -71 [ 1132.354574][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.500813][ T5913] usb usb3-port1: attempt power cycle [ 1133.281460][ T5913] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1133.332024][ T5913] usb 3-1: device descriptor read/8, error -71 [ 1134.134853][ T5913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1135.024643][ T974] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1135.145958][ T5913] usb 3-1: device descriptor read/8, error -71 [ 1135.205606][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 1135.246618][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.274149][ T5913] usb usb3-port1: unable to enumerate USB device [ 1135.286817][ T974] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1135.358213][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.390222][ T974] usb 5-1: config 0 descriptor?? [ 1135.893950][ T974] macally 0003:060B:0001.0006: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 1136.095395][T23432] usb 5-1: USB disconnect, device number 20 [ 1137.668167][T24832] fido_id[24832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1138.100652][T21999] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1138.272643][ T5959] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1138.958606][T21999] usb 1-1: Using ep0 maxpacket: 16 [ 1138.997424][T21999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1139.047641][T21999] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1139.088531][T21999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.096671][ T5959] usb 3-1: device descriptor read/64, error -71 [ 1139.143969][T21999] usb 1-1: Product: syz [ 1139.148151][T21999] usb 1-1: Manufacturer: syz [ 1139.178703][T21999] usb 1-1: SerialNumber: syz [ 1139.463643][T21999] usb 1-1: config 0 descriptor?? [ 1139.476437][T21999] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1139.501944][T21999] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1140.267067][ T5959] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1140.416181][ T5959] usb 3-1: device descriptor read/64, error -71 [ 1140.565150][T21999] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1140.762111][T24880] dlm: no local IP address has been set [ 1140.767759][T24880] dlm: cannot start dlm midcomms -107 [ 1141.431360][ T5959] usb usb3-port1: attempt power cycle [ 1141.692958][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1142.290560][T21999] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1142.508157][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1142.590659][T21999] em28xx 1-1:0.0: board has no eeprom [ 1142.698215][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1142.710576][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.726686][ T9] usb 9-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1142.826953][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.846913][ T9] usb 9-1: config 0 descriptor?? [ 1143.033594][T21999] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1143.489748][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 1143.521472][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1143.536086][T21999] em28xx 1-1:0.0: dvb set to bulk mode. [ 1143.545587][ T9] usb 9-1: USB disconnect, device number 15 [ 1143.950068][T22596] em28xx 1-1:0.0: Binding DVB extension [ 1144.641212][T22596] em28xx 1-1:0.0: Registering input extension [ 1144.657520][T21999] usb 1-1: USB disconnect, device number 5 [ 1147.533885][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1147.540314][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.940608][T24894] Set syz1 is full, maxelem 65536 reached [ 1152.983116][T21999] em28xx 1-1:0.0: Disconnecting em28xx [ 1153.381392][T21999] em28xx 1-1:0.0: Closing input extension [ 1155.109356][T21999] em28xx 1-1:0.0: Freeing device [ 1155.415150][T24936] dlm: no local IP address has been set [ 1155.421075][T24936] dlm: cannot start dlm midcomms -107 [ 1156.790756][T21999] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1156.952999][T21999] usb 9-1: device descriptor read/64, error -71 [ 1156.988472][T22596] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1157.138453][T15025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1157.149198][T15025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1157.159555][T15025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1157.169751][T15025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1157.177469][T15025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1157.304957][T21999] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1157.314165][T22596] usb 7-1: Using ep0 maxpacket: 16 [ 1157.385501][T22596] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1157.433150][T22596] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1157.948261][T24965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1157.991339][T21999] usb 9-1: device descriptor read/64, error -71 [ 1158.000431][ T31] audit: type=1326 audit(1765871564.412:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1158.088107][T24967] netlink: 'syz.2.5299': attribute type 1 has an invalid length. [ 1158.319790][T24965] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd2": -EINTR [ 1158.624829][T22596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.800227][T21999] usb usb9-port1: attempt power cycle [ 1158.943089][ T31] audit: type=1326 audit(1765871564.412:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1158.973113][T22596] usb 7-1: Product: syz [ 1158.977373][T22596] usb 7-1: Manufacturer: syz [ 1159.027442][T24956] chnl_net:caif_netlink_parms(): no params data found [ 1159.060843][T22596] usb 7-1: SerialNumber: syz [ 1159.095963][ T31] audit: type=1326 audit(1765871564.423:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1159.161261][T22596] usb 7-1: config 0 descriptor?? [ 1159.171893][T15025] Bluetooth: hci5: command tx timeout [ 1159.180859][ T31] audit: type=1326 audit(1765871564.423:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1159.242893][T22596] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1159.303770][T22596] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1159.330198][ T31] audit: type=1326 audit(1765871564.423:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1159.352910][T21999] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1159.517749][T21999] usb 9-1: device descriptor read/8, error -71 [ 1159.547786][ T31] audit: type=1326 audit(1765871564.423:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1159.851397][T22596] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1159.966460][ T31] audit: type=1326 audit(1765871564.444:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1160.424858][ T31] audit: type=1326 audit(1765871564.444:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1161.153170][T15025] Bluetooth: hci5: command tx timeout [ 1161.522243][T22596] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1161.690460][ T31] audit: type=1326 audit(1765871564.444:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.2.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1bd518f749 code=0x7ffc0000 [ 1161.748031][T22596] em28xx 7-1:0.0: board has no eeprom [ 1163.134765][T15025] Bluetooth: hci5: command tx timeout [ 1163.442879][T22596] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1163.467973][T22596] em28xx 7-1:0.0: dvb set to bulk mode. [ 1163.473753][T19757] em28xx 7-1:0.0: Binding DVB extension [ 1163.490620][T22596] usb 7-1: USB disconnect, device number 3 [ 1163.594347][T22596] em28xx 7-1:0.0: Disconnecting em28xx [ 1164.897654][T24956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.945915][T19757] em28xx 7-1:0.0: Registering input extension [ 1164.952189][T24956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.992747][T24956] bridge_slave_0: entered allmulticast mode [ 1165.000755][T24956] bridge_slave_0: entered promiscuous mode [ 1165.007072][T22596] em28xx 7-1:0.0: Closing input extension [ 1165.106754][T15025] Bluetooth: hci5: command tx timeout [ 1165.441279][T25011] dlm: no local IP address has been set [ 1165.446865][T25011] dlm: cannot start dlm midcomms -107 [ 1166.480565][T24956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.579456][T24956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.584748][T22596] em28xx 7-1:0.0: Freeing device [ 1167.040157][T24956] bridge_slave_1: entered allmulticast mode [ 1167.097520][T24956] bridge_slave_1: entered promiscuous mode [ 1168.946340][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5314'. [ 1168.960711][T24956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.162839][T24956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.480646][T22341] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1170.717425][T22341] usb 3-1: Invalid ep0 maxpacket: 16 [ 1170.877935][ T6172] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.888797][T22341] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 1170.888967][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1171.050324][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1171.757763][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.773893][ T10] usb 9-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1171.775452][T24956] team0: Port device team_slave_0 added [ 1171.824848][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.863905][T24956] team0: Port device team_slave_1 added [ 1171.880919][ T10] usb 9-1: config 0 descriptor?? [ 1171.959287][ T6172] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.311656][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 1172.534548][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1172.691757][ T10] usb 9-1: USB disconnect, device number 20 [ 1172.719160][ T6172] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.832810][T24956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.839755][T24956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.966914][T24956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.004095][T24956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.041785][T24956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.155809][T24956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.213440][T25076] dlm: no local IP address has been set [ 1174.219025][T25076] dlm: cannot start dlm midcomms -107 [ 1175.720871][ T6172] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.739607][T24956] hsr_slave_0: entered promiscuous mode [ 1177.993130][T24956] hsr_slave_1: entered promiscuous mode [ 1178.001943][T24956] debugfs: 'hsr0' already exists in 'hsr' [ 1178.007940][T24956] Cannot create hsr debugfs directory [ 1179.748177][ T6884] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1179.881098][ T6172] bridge_slave_1: left allmulticast mode [ 1179.905711][ T6172] bridge_slave_1: left promiscuous mode [ 1179.938306][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.019981][ T6172] bridge_slave_0: left allmulticast mode [ 1180.048027][ T6172] bridge_slave_0: left promiscuous mode [ 1180.074725][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.120857][ T5959] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1180.528176][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 1180.551368][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1181.053444][ T5959] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1181.096962][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.163007][ T5959] usb 3-1: Product: syz [ 1181.176217][ T5959] usb 3-1: Manufacturer: syz [ 1181.193038][ T5959] usb 3-1: SerialNumber: syz [ 1181.223088][ T31] audit: type=1326 audit(1765871588.862:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1181.255309][ T5959] usb 3-1: config 0 descriptor?? [ 1181.311353][ T5959] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1181.357199][ T31] audit: type=1326 audit(1765871588.904:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1181.387142][ T5959] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1181.479022][ T31] audit: type=1326 audit(1765871588.904:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1181.623666][ T31] audit: type=1326 audit(1765871588.904:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1181.745683][ T31] audit: type=1326 audit(1765871588.904:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1181.770141][ T6884] usb 1-1: Using ep0 maxpacket: 16 [ 1181.787041][ T6884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.799206][ T6884] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1181.810455][ T6884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.823700][ T6884] usb 1-1: config 0 descriptor?? [ 1181.958488][ T5959] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1182.089345][ T31] audit: type=1326 audit(1765871588.915:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1182.094634][ T6884] usb 1-1: can't set config #0, error -71 [ 1182.175748][ T31] audit: type=1326 audit(1765871588.915:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1182.252106][ T6884] usb 1-1: USB disconnect, device number 6 [ 1182.262027][ T31] audit: type=1326 audit(1765871588.915:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1182.568314][ T31] audit: type=1326 audit(1765871588.915:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1182.593253][ T5959] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1182.601316][ T5959] em28xx 3-1:0.0: board has no eeprom [ 1182.648301][ T31] audit: type=1326 audit(1765871588.915:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.4.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318bb8f749 code=0x7ffc0000 [ 1183.391403][T25152] 9pnet_fd: Insufficient options for proto=fd [ 1183.471772][ T5959] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1183.530296][ T5959] em28xx 3-1:0.0: dvb set to bulk mode. [ 1183.540321][T21999] em28xx 3-1:0.0: Binding DVB extension [ 1183.573231][ T5959] usb 3-1: USB disconnect, device number 20 [ 1183.625665][ T5959] em28xx 3-1:0.0: Disconnecting em28xx [ 1185.743021][T21999] em28xx 3-1:0.0: Registering input extension [ 1185.759046][ T5959] em28xx 3-1:0.0: Closing input extension [ 1186.258190][ T5959] em28xx 3-1:0.0: Freeing device [ 1188.134127][T25182] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1188.825568][ T5959] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1188.844674][ T6172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.918844][ T6172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.017648][ T5959] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1189.035104][ T5959] usb 3-1: config 0 has no interface number 0 [ 1189.041255][ T5959] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.120767][ T5959] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.124441][ T6172] bond0 (unregistering): Released all slaves [ 1189.177904][ T5959] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1189.217655][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.275110][ T5959] usb 3-1: config 0 descriptor?? [ 1191.192476][ T5959] uclogic 0003:28BD:0905.0007: Interface probing failed: -22 [ 1191.204706][ T5959] uclogic 0003:28BD:0905.0007: interface is invalid, ignoring [ 1191.381475][ T5959] usb 3-1: USB disconnect, device number 21 [ 1191.448289][T25199] 9pnet_fd: Insufficient options for proto=fd [ 1191.863450][ T6884] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1192.031158][ T6884] usb 9-1: Using ep0 maxpacket: 16 [ 1192.060640][ T6884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1192.081622][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1192.136228][ T6884] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1192.788140][ T6884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.816360][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1192.827613][ T6172] hsr_slave_0: left promiscuous mode [ 1192.850209][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.864682][ T6884] usb 9-1: Product: syz [ 1192.868851][ T6884] usb 9-1: Manufacturer: syz [ 1192.893798][ T6172] hsr_slave_1: left promiscuous mode [ 1192.922626][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.930059][ T6884] usb 9-1: SerialNumber: syz [ 1192.935890][ T10] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1192.961313][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.970167][ T6884] usb 9-1: config 0 descriptor?? [ 1192.985327][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.034888][ T6884] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1193.055969][ T10] usb 7-1: config 0 descriptor?? [ 1193.072152][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.096248][ T6884] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1193.121608][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.232328][ T6172] veth1_macvtap: left promiscuous mode [ 1193.247622][ T6172] veth0_macvtap: left promiscuous mode [ 1193.268930][ T6172] veth1_vlan: left promiscuous mode [ 1193.287849][ T6172] veth0_vlan: left promiscuous mode [ 1193.459984][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1193.498631][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1193.580290][ T6884] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1193.622050][ T10] usb 7-1: USB disconnect, device number 4 [ 1194.297343][ T6884] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1194.314520][ T6884] em28xx 9-1:0.0: board has no eeprom [ 1194.407042][ T6884] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1194.451754][ T6884] em28xx 9-1:0.0: dvb set to bulk mode. [ 1194.472099][ T10] em28xx 9-1:0.0: Binding DVB extension [ 1194.499462][ T6884] usb 9-1: USB disconnect, device number 21 [ 1194.794714][ T6884] em28xx 9-1:0.0: Disconnecting em28xx [ 1195.228771][ T10] em28xx 9-1:0.0: Registering input extension [ 1195.276145][ T6884] em28xx 9-1:0.0: Closing input extension [ 1195.361573][ T6884] em28xx 9-1:0.0: Freeing device [ 1195.950369][ T6884] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1196.132493][ T6884] usb 3-1: Using ep0 maxpacket: 32 [ 1196.304794][ T6884] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 1196.365296][ T6884] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1196.416651][ T6884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.474956][ T6884] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1196.503115][ T6884] usb 3-1: config 1 has no interface number 1 [ 1196.523286][ T6884] usb 3-1: too many endpoints for config 1 interface 5 altsetting 249: 41, using maximum allowed: 30 [ 1196.565252][ T6884] usb 3-1: config 1 interface 5 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 1196.637880][ T6884] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1196.660870][ T6884] usb 3-1: config 1 interface 5 has no altsetting 0 [ 1196.687119][ T6884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1196.712420][ T6884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.726663][ T6884] usb 3-1: Product: syz [ 1196.730865][ T6884] usb 3-1: Manufacturer: syz [ 1196.735777][ T6884] usb 3-1: SerialNumber: syz [ 1196.928910][T25260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1198.691434][ T6172] team0 (unregistering): Port device team_slave_1 removed [ 1198.799697][ T6172] team0 (unregistering): Port device team_slave_0 removed [ 1200.231288][ T5969] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1200.334464][T25248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5372'. [ 1200.361033][T25248] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 1200.814682][ T6884] usb 3-1: 0:2 : does not exist [ 1200.819671][ T5969] usb 9-1: Using ep0 maxpacket: 16 [ 1200.828637][ T5969] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1200.878538][ T5969] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1200.916810][ T5969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.933083][ T6884] usb 3-1: USB disconnect, device number 22 [ 1200.949526][ T5969] usb 9-1: Product: syz [ 1200.960076][ T5969] usb 9-1: Manufacturer: syz [ 1200.983932][ T5969] usb 9-1: SerialNumber: syz [ 1201.011515][ T5969] usb 9-1: config 0 descriptor?? [ 1201.030901][ T5969] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1201.142434][ T5969] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1201.160148][T23868] udevd[23868]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1201.616327][ T5969] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1202.273182][ T5969] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1202.332928][ T5969] em28xx 9-1:0.0: board has no eeprom [ 1202.453290][ T5969] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1202.518582][ T5969] em28xx 9-1:0.0: dvb set to bulk mode. [ 1202.544550][T23432] em28xx 9-1:0.0: Binding DVB extension [ 1203.157642][T25311] dlm: no local IP address has been set [ 1203.163340][T25311] dlm: cannot start dlm midcomms -107 [ 1203.312872][ T5969] usb 9-1: USB disconnect, device number 22 [ 1203.320700][ T5969] em28xx 9-1:0.0: Disconnecting em28xx [ 1203.605476][T24956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1203.654402][T23432] em28xx 9-1:0.0: Registering input extension [ 1203.710366][ T5969] em28xx 9-1:0.0: Closing input extension [ 1203.746435][T24956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1203.766849][T25318] Attempt to restore checkpoint with obsolete wellknown handles [ 1203.790485][ T5969] em28xx 9-1:0.0: Freeing device [ 1203.823063][T24956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1203.879873][T24956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1204.269729][T24956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.334806][T24956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.371315][T24911] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1204.426356][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.433570][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.519489][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.526722][ T6172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.596853][T24911] usb 9-1: Using ep0 maxpacket: 32 [ 1204.609997][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1204.616306][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1204.643829][T24911] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.680510][T24911] usb 9-1: config 0 has no interfaces? [ 1205.370399][T24911] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1205.415006][T24911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.475744][T24911] usb 9-1: config 0 descriptor?? [ 1205.890349][T19757] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1206.015825][T25362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1206.022457][T25362] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1206.041088][T25362] vhci_hcd vhci_hcd.0: Device attached [ 1206.195947][T19757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1206.292954][T19757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1206.380882][T24911] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1206.393618][T19757] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1206.464545][T19757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.687266][T25363] vhci_hcd: connection reset by peer [ 1206.750843][ T6094] vhci_hcd vhci_hcd.0: stop threads [ 1206.830040][T19757] usb 7-1: config 0 descriptor?? [ 1206.856249][ T6094] vhci_hcd vhci_hcd.0: release socket [ 1207.013101][T25352] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1207.123972][ T6094] vhci_hcd vhci_hcd.0: disconnect device [ 1207.625218][ T5969] usb 9-1: USB disconnect, device number 23 [ 1207.809128][T19757] hid_mf 0003:0079:1846.0008: item fetching failed at offset 0/2 [ 1207.827078][T24956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.855566][T19757] hid_mf 0003:0079:1846.0008: HID parse failed. [ 1207.879113][T19757] hid_mf 0003:0079:1846.0008: probe with driver hid_mf failed with error -22 [ 1208.024782][T19757] usb 7-1: USB disconnect, device number 5 [ 1208.902334][T24956] veth0_vlan: entered promiscuous mode [ 1208.916431][T24956] veth1_vlan: entered promiscuous mode [ 1209.339841][T24956] veth0_macvtap: entered promiscuous mode [ 1209.381763][T23432] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1209.405486][T25391] dlm: no local IP address has been set [ 1209.411154][T25391] dlm: cannot start dlm midcomms -107 [ 1209.443350][T24956] veth1_macvtap: entered promiscuous mode [ 1209.851245][T23432] usb 1-1: Using ep0 maxpacket: 16 [ 1209.872144][T24956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.881724][T23432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1209.929238][T23432] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1209.955311][T23432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.968115][T24956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.990321][T23432] usb 1-1: Product: syz [ 1210.001138][T23432] usb 1-1: Manufacturer: syz [ 1210.006933][T23432] usb 1-1: SerialNumber: syz [ 1210.030268][T23432] usb 1-1: config 0 descriptor?? [ 1210.046240][ T6172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.073838][T23432] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1210.077636][ T6172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.107538][T23432] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1210.117702][ T6172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.134664][ T6172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.398001][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.421763][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.492180][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.513554][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.604458][T19757] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1210.643180][T23432] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1210.839790][T19757] usb 7-1: Using ep0 maxpacket: 32 [ 1210.973208][T19757] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.189897][T19757] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1211.297641][T24911] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1211.366112][T19757] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1211.559647][T19757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.600673][T25392] Bluetooth: hci4: command 0x0406 tx timeout [ 1211.722495][T19757] usb 7-1: config 0 descriptor?? [ 1211.894960][T23432] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1211.945343][T23432] em28xx 1-1:0.0: board has no eeprom [ 1212.103270][T23432] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1212.253750][T23432] em28xx 1-1:0.0: dvb set to bulk mode. [ 1212.480204][T25418] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1212.528666][ T5913] em28xx 1-1:0.0: Binding DVB extension [ 1212.568448][T23432] usb 1-1: USB disconnect, device number 7 [ 1212.609737][T23432] em28xx 1-1:0.0: Disconnecting em28xx [ 1213.619180][ T5913] em28xx 1-1:0.0: Registering input extension [ 1213.676092][T24911] usb 7-1: USB disconnect, device number 6 [ 1213.678005][T23432] em28xx 1-1:0.0: Closing input extension [ 1214.555740][T23432] em28xx 1-1:0.0: Freeing device [ 1214.665954][T25437] overlayfs: failed to resolve './file0': -2 [ 1214.674688][T25393] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1214.685083][T25393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1214.693078][T25393] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1214.701311][T25393] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1214.709157][T25393] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1214.916785][T25441] 9pnet_fd: Insufficient options for proto=fd [ 1216.455269][T25393] Bluetooth: hci3: command 0x0406 tx timeout [ 1216.709496][T15025] Bluetooth: hci2: command tx timeout [ 1216.823156][T25435] chnl_net:caif_netlink_parms(): no params data found [ 1217.021202][T23432] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1217.193609][T23432] usb 7-1: Using ep0 maxpacket: 16 [ 1217.207761][T23432] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1217.243882][T23432] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1217.288122][T23432] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.306489][T23432] usb 7-1: Product: syz [ 1217.311365][T23432] usb 7-1: Manufacturer: syz [ 1217.320522][T23432] usb 7-1: SerialNumber: syz [ 1217.337873][T23432] usb 7-1: config 0 descriptor?? [ 1217.391346][T23432] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1217.426976][T25435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.454295][T23432] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1217.463367][T25435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.505709][T25435] bridge_slave_0: entered allmulticast mode [ 1217.548938][T25435] bridge_slave_0: entered promiscuous mode [ 1217.579103][T25435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.616136][T25435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.649946][T25435] bridge_slave_1: entered allmulticast mode [ 1217.672151][T25435] bridge_slave_1: entered promiscuous mode [ 1217.775623][ T5969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1218.178732][T23432] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1218.202216][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 1218.213823][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.244738][T25435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.353725][T19757] kernel read not supported for file 456/task/457/auxv (pid: 19757 comm: kworker/1:2) [ 1218.510136][ T6094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.687964][ T5969] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.697129][ T5969] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1218.706299][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.717459][ T5969] usb 1-1: config 0 descriptor?? [ 1218.735882][T25393] Bluetooth: hci2: command tx timeout [ 1218.771113][T23432] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1218.836434][T23432] em28xx 7-1:0.0: board has no eeprom [ 1219.251630][T23432] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1219.373789][T23432] em28xx 7-1:0.0: dvb set to bulk mode. [ 1219.421526][ T5969] em28xx 7-1:0.0: Binding DVB extension [ 1219.430657][T23432] usb 7-1: USB disconnect, device number 7 [ 1219.481659][T23432] em28xx 7-1:0.0: Disconnecting em28xx [ 1219.564123][T25435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.846869][ T5969] em28xx 7-1:0.0: Registering input extension [ 1219.874517][T23432] em28xx 7-1:0.0: Closing input extension [ 1219.958726][T25435] team0: Port device team_slave_0 added [ 1220.275287][ T6094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.366468][T25435] team0: Port device team_slave_1 added [ 1220.707740][T15025] Bluetooth: hci2: command tx timeout [ 1220.908828][T23432] em28xx 7-1:0.0: Freeing device [ 1221.022031][T22341] usb 1-1: USB disconnect, device number 8 [ 1221.391187][ T6094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.636091][T25435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.693136][T25435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.804300][T25435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.974266][ T10] kernel read not supported for file 468/task/469/auxv (pid: 10 comm: kworker/0:1) [ 1222.013239][ T6094] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1222.061427][ T6094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.173004][T25435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.203250][T25435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.317629][T25435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.351535][T25521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1222.394711][ T5959] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1222.689179][T15025] Bluetooth: hci2: command tx timeout [ 1222.727004][T25435] hsr_slave_0: entered promiscuous mode [ 1222.752423][T25435] hsr_slave_1: entered promiscuous mode [ 1222.790742][T25435] debugfs: 'hsr0' already exists in 'hsr' [ 1222.828891][T25435] Cannot create hsr debugfs directory [ 1223.461292][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 1223.492324][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1223.517304][ T5959] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1223.536792][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.559061][ T5959] usb 1-1: Product: syz [ 1223.563268][ T5959] usb 1-1: Manufacturer: syz [ 1223.603510][ T5959] usb 1-1: SerialNumber: syz [ 1223.614517][ T5959] usb 1-1: config 0 descriptor?? [ 1223.636024][ T5959] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1223.691788][ T5959] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1224.121387][ T6094] bridge_slave_1: left allmulticast mode [ 1224.148696][ T6094] bridge_slave_1: left promiscuous mode [ 1224.154516][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.218373][ T6094] bridge_slave_0: left allmulticast mode [ 1224.254389][ T6094] bridge_slave_0: left promiscuous mode [ 1224.280007][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.303568][ T5959] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1224.403786][T22341] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1224.574823][T22341] usb 4-1: Using ep0 maxpacket: 32 [ 1224.598363][T22341] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.638679][T22341] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1224.658343][T22341] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1224.688107][T22341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.723080][ T5959] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1224.749122][T22341] usb 4-1: config 0 descriptor?? [ 1224.864238][ T5959] em28xx 1-1:0.0: board has no eeprom [ 1224.947512][ T5959] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1224.955513][ T5959] em28xx 1-1:0.0: dvb set to bulk mode. [ 1224.983504][T21999] em28xx 1-1:0.0: Binding DVB extension [ 1225.183813][ T5959] usb 1-1: USB disconnect, device number 9 [ 1225.333299][ T5959] em28xx 1-1:0.0: Disconnecting em28xx [ 1225.653252][T21999] em28xx 1-1:0.0: Registering input extension [ 1225.669559][ T5959] em28xx 1-1:0.0: Closing input extension [ 1225.870035][T21999] kernel read not supported for file 141/task/142/auxv (pid: 21999 comm: kworker/1:5) [ 1227.138263][ T10] usb 4-1: USB disconnect, device number 2 [ 1227.230413][ T5959] em28xx 1-1:0.0: Freeing device [ 1227.254671][T23868] udevd[23868]: setting mode of /dev/bus/usb/001/009 to 020664 failed: No such file or directory [ 1227.282183][T23868] udevd[23868]: setting owner of /dev/bus/usb/001/009 to uid=0, gid=0 failed: No such file or directory [ 1227.609815][T25618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1230.493494][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.782220][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.836389][ T6094] bond0 (unregistering): Released all slaves [ 1231.631693][T18964] kernel read not supported for file 864/task/865/auxv (pid: 18964 comm: kworker/0:2) [ 1235.072400][T25671] dlm: no local IP address has been set [ 1235.078005][T25671] dlm: cannot start dlm midcomms -107 [ 1236.570787][T19757] kernel read not supported for file 136/task/137/auxv (pid: 19757 comm: kworker/1:2) [ 1240.227898][T25435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.911786][T25713] dlm: no local IP address has been set [ 1241.917396][T25713] dlm: cannot start dlm midcomms -107 [ 1243.618999][ T6094] hsr_slave_0: left promiscuous mode [ 1243.626662][ T6094] hsr_slave_1: left promiscuous mode [ 1243.644051][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.669052][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.687615][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.701962][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.758084][ T6094] veth1_macvtap: left promiscuous mode [ 1243.782548][ T6094] veth0_macvtap: left promiscuous mode [ 1243.793935][ T6094] veth1_vlan: left promiscuous mode [ 1243.805823][ T6094] veth0_vlan: left promiscuous mode [ 1245.950708][T25691] kernel read not supported for file 52/task/53/auxv (pid: 25691 comm: kworker/0:11) [ 1249.977511][T25753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1250.098182][T25741] Oops: general protection fault, probably for non-canonical address 0xdffffc9110a1fb76: 0000 [#1] SMP KASAN NOPTI [ 1250.110307][T25741] KASAN: probably user-memory-access in range [0x00000488850fdbb0-0x00000488850fdbb7] [ 1250.119862][T25741] CPU: 0 UID: 0 PID: 25741 Comm: syz.3.5509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1250.130812][T25741] Tainted: [L]=SOFTLOCKUP [ 1250.135128][T25741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.145185][T25741] RIP: 0010:ovl_iterate+0x645/0x1120 [ 1250.150497][T25741] Code: 07 00 00 49 8b 46 08 48 83 c0 10 48 39 c3 0f 84 b0 fd ff ff e8 bc 94 77 fe 4c 8d 63 31 4c 89 e0 4c 89 e2 48 c1 e8 03 83 e2 07 <0f> b6 04 28 38 d0 7f 08 84 c0 0f 85 01 07 00 00 44 0f b6 6b 31 31 [ 1250.170115][T25741] RSP: 0018:ffffc90003367d20 EFLAGS: 00010206 [ 1250.176201][T25741] RAX: 0000009110a1fb76 RBX: 00000488850fdb85 RCX: ffffc90019118000 [ 1250.184176][T25741] RDX: 0000000000000006 RSI: ffffffff83473ee4 RDI: 0000000000000007 [ 1250.192148][T25741] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1250.200120][T25741] R10: 0000000000000000 R11: ffff888026ca66b0 R12: 00000488850fdbb6 [ 1250.208088][T25741] R13: ffff888056ed2598 R14: ffff888033b4e900 R15: ffffc90003367e70 [ 1250.216059][T25741] FS: 00007f78892aa6c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 1250.224993][T25741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1250.231577][T25741] CR2: 00007f0c09f72100 CR3: 000000001270e000 CR4: 0000000000350ef0 [ 1250.239547][T25741] Call Trace: [ 1250.242815][T25741] [ 1250.245744][T25741] ? __pfx_ovl_iterate+0x10/0x10 [ 1250.250722][T25741] wrap_directory_iterator+0xa2/0xe0 [ 1250.256015][T25741] iterate_dir+0x296/0xaf0 [ 1250.260439][T25741] __x64_sys_getdents+0x13c/0x2b0 [ 1250.265476][T25741] ? __pfx___x64_sys_getdents+0x10/0x10 [ 1250.271026][T25741] ? __pfx_filldir+0x10/0x10 [ 1250.275632][T25741] do_syscall_64+0xcd/0xf80 [ 1250.280167][T25741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.286063][T25741] RIP: 0033:0x7f788838f749 [ 1250.290479][T25741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.310092][T25741] RSP: 002b:00007f78892aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1250.318513][T25741] RAX: ffffffffffffffda RBX: 00007f78885e5fa0 RCX: 00007f788838f749 [ 1250.326483][T25741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1250.334451][T25741] RBP: 00007f7888413f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1250.342422][T25741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.350394][T25741] R13: 00007f78885e6038 R14: 00007f78885e5fa0 R15: 00007ffe66aedea8 [ 1250.358375][T25741] [ 1250.361388][T25741] Modules linked in: [ 1250.366494][T25741] ---[ end trace 0000000000000000 ]--- [ 1250.444367][T25741] RIP: 0010:ovl_iterate+0x645/0x1120 [ 1250.454159][T25741] Code: 07 00 00 49 8b 46 08 48 83 c0 10 48 39 c3 0f 84 b0 fd ff ff e8 bc 94 77 fe 4c 8d 63 31 4c 89 e0 4c 89 e2 48 c1 e8 03 83 e2 07 <0f> b6 04 28 38 d0 7f 08 84 c0 0f 85 01 07 00 00 44 0f b6 6b 31 31 [ 1250.489554][T25741] RSP: 0018:ffffc90003367d20 EFLAGS: 00010206 [ 1250.495744][T25741] RAX: 0000009110a1fb76 RBX: 00000488850fdb85 RCX: ffffc90019118000 [ 1250.503832][T25741] RDX: 0000000000000006 RSI: ffffffff83473ee4 RDI: 0000000000000007 [ 1250.513449][T25741] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1250.521435][T25741] R10: 0000000000000000 R11: ffff888026ca66b0 R12: 00000488850fdbb6 [ 1250.562625][T25741] R13: ffff888056ed2598 R14: ffff888033b4e900 R15: ffffc90003367e70 [ 1250.592886][T25741] FS: 00007f78892aa6c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 1250.602607][T25741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1250.618155][T24911] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1250.640463][T25741] CR2: 000055e2adb4d000 CR3: 000000001270e000 CR4: 0000000000350ef0 [ 1250.648565][T25741] Kernel panic - not syncing: Fatal exception [ 1250.654919][T25741] Kernel Offset: disabled [ 1250.659233][T25741] Rebooting in 86400 seconds..