last executing test programs: 7m34.959010216s ago: executing program 3 (id=1644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="09032dbd7000fedbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpgrp(0x0) ptrace$setsig(0x4203, r5, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) fcntl$setown(r4, 0x8, r6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x406, r4) write$sndseq(r8, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x5, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0x7f, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @addr={0xd1, 0x9}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x40, 0x0, 0x5, @time={0x5, 0x1000}, {}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0xa8) 7m34.019083796s ago: executing program 3 (id=1647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18) 7m33.864604504s ago: executing program 3 (id=1651): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x40000000000021b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x801) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x5411, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 7m32.212051844s ago: executing program 3 (id=1654): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 7m32.02796899s ago: executing program 3 (id=1659): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r4, r5, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r8 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(r6, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) sendfile(r9, r9, 0x0, 0x200000) 7m30.296650313s ago: executing program 3 (id=1665): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x40000000000021b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x801) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x5411, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 7m28.614041414s ago: executing program 32 (id=1665): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x40000000000021b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x801) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x5411, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 3m47.644117758s ago: executing program 4 (id=2425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000100)={0xf, 0x20000, 0x2, 0xcbc, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m45.756632612s ago: executing program 4 (id=2433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="09032dbd7000fedbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpgrp(0x0) ptrace$setsig(0x4203, r5, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac"], 0x64}}, 0x0) 3m44.161205311s ago: executing program 4 (id=2436): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @empty}, 0x2, 0x2, 0x1, 0x3}}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0xc697, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x50) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x7cb7562f2d67) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r1, r5, 0x9, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m42.432714383s ago: executing program 4 (id=2442): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) 3m39.450295859s ago: executing program 4 (id=2453): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x44, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}, {@metacopy_off}], [], 0x2f}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 3m38.064637689s ago: executing program 4 (id=2455): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3m22.816902309s ago: executing program 33 (id=2455): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3m13.100804909s ago: executing program 2 (id=2528): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r7 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x8000}) r9 = fcntl$dupfd(r8, 0x406, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r10, 0x7001) 3m12.157482072s ago: executing program 2 (id=2531): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0xffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xa, "dae859ec"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x2, '\b3qu'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8d, 0x2, 0x1, {0x22, 0x1f4}}}}, &(0x7f0000000680)={0x2c, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0}) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 3m7.729263526s ago: executing program 2 (id=2543): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c1) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)="017f", 0x2}], 0x1}, 0x20048001) 3m7.447091069s ago: executing program 2 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000028501, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x0, 0x82c65) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000300)) 3m6.384028377s ago: executing program 2 (id=2550): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x44, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}, {@metacopy_off}], [], 0x2f}) 3m5.066851342s ago: executing program 1 (id=2553): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0xffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xa, "dae859ec"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x2, '\b3qu'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8d, 0x2, 0x1, {0x22, 0x1f4}}}}, &(0x7f0000000680)={0x2c, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0}) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 3m3.042106705s ago: executing program 2 (id=2559): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f00000000c0)='V', 0x1) write$char_usb(r1, &(0x7f0000000380)="4e5622b12c8926aa1c2de8", 0xb) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044405}, 0x8044) ioctl$TCSBRKP(r2, 0x5425, 0x6) 3m1.795937616s ago: executing program 1 (id=2564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000002f80)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x252) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x240, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000880)={r6, 0x0, "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", "3ae84ec6a2b39957a20f2703f6cb31dfb02daecf60a2e4bf56e4b489cd942bbc7d83c5e2905d25f8fa51002d0b7785fa810f4cb9b8d54a6e41022c494083330bbe8e0b10c9ffa18131077b3d77b8c073a164502a6be187c3ca59ad0600f23e5d3d72e4e79bb6c38e5ceb75898890b0980bf48a3c4cbaa4ca88834f0d40d530ae39b71f6c990c400f38fbffa680afe8871423a4798de708182839382235952cb18fabe858933c10e3282a7f94fc6c68f19a27e21c49f7b7aa4b2998650e7f800eab2329da398c0ba4fdec68e02c2f97d353429ec6fc76ce8ac34cb9317b1a28f0ad5d7d22346bd0d1b5ce1ce82445b3f1040511ed4249634b74384fb930de73ec9579057598c65cfe647c80e5c664d1781ee89bb16c3b363a9993159c4309fdedc3ce2260ec20e5f4002665b49ac89e8b5cff42bc8f1ef1831060ba564f9732ba3ea6d02cdfdadd930b83ef3e82629cf024cfb1f9e91ec4364e278a470ff8b8b30dbc185290916586cc653556381855225beeee7bae1ea529815c9876b02e1b45c54feed2e8a5e58de2fc011ea07625ad21458e17d0e077488271c5270901be3ac9e2f5c1f7d9064686727db88ce0e50cae0fc0dfc6fa7fcbf75194564009946894d4c3efb462d1200a853688cf79049f22734b7ebc10c1e6c81120d86715cc177f67868c8e20957434d0e434a1d96bdbf6e094f016d42c1a0013fab3c0b4ca6ac8b04d70d8952950d59db28a32f036c776a033177103c02ec3508c4ea06e8f2e7060cee180155889f5593e263631017fce3cfd0620b49a6a3436bccbdeba62ed9eafd61cdae2a6ff62041ebb205e02eea046e536f42c83599ed3916823cee4d7d8739654ac82756745762b801241d769e1bc8b79f47451bb6b81ef03eb64d5d3a520d07ed9d3169f7a8189a4ed35289d541209a6a73313278f0e4642a2d481e33c2d5658177262a84ffeaf3cdfca74609e190d60a37e9dd1a033797daacb3d227e93f75b958a88dbb76cdb1ce7f1a1a05d1f1110a9582d59a35a92765d00273d5642dfe48afc20f9e1c7b7a188509ce03b24e114739739bead6df319c9ce8afa86de38282d26b8554580a7f62029a66591aacd9667904075796e02c10ab3ffe1eaa07a6da37ca8be1a2b30b87e3741e2710f27cb584f9f1bd5af8bb9415f21aedc4b5f3271f1854f38501fe01091ac67f2af9d18653e2d1b37b1bd4e99944b9867a5bb7efc502ae8d61fb958ccf54703bf7324028fe3bd0ffa5b126e8a102f9b38031c789ada6952e1d03589cb8aef31d2e8dd609dcb5727ff35d8d93b1ff06744243ee88185c71faa7e4cc8a43fc4a5b3ed263f76dba8b0d0da45be35987d821cb76b9df208046a36d68ab19600ed98106d0fa57a3ab409384fe38b4b023766f04bf1fab58fe50f56a57933ec82ad4983e559b0c50144a26ba6efc1a3468b65c330e6d8ed7addbf312a2580faafdb390a47beff23adf1afa7d9d6e800b5923a3a549981f839b04bfaaff6d23a0e522155361e367e646370cf3b0498ce4a4fc14af89bb5eceec3d4ecb9e32d92ac3a188e713c75069e0b86623204e095dbfb74183f1f75ae8e8e03b8ea3cf03fd05bc1389bbd2c81bd7fee39636d59c65c23b7638e55a417e86cb368388149a08b8ffdd736093c2c34449d889e9c13442e778de1a804b74344cab92b1ef1f8383e0e91ad2a5b331505df66f23ce6709789169c184a41d3c2eb43ee26fb5b58000d025e3ea830601244c370eb25d976166cd393b9e1ece97890da2e8bc2f4d1c173a08b78f9f2992dc8b7741e9ce71c086e66e976d93d702227a994a11ae3cf8b18a62a7fd09189568b4b7ef3aaa8d04c38d15acd01a35389ab89a91c82f6bedaa155ef5a4b6443d9259254a58d2553d2624ca964351aa9329e5e443887dd8ce96a2b8ae62c0c0f4c25ac7141e0d2adfb1ca7c1f7c69a6a9cbef351060a2925093b408c1ee5d68706ee040771bbab47a43eb24662b20960a92a7c9a1a6a1ceb91083f95c78a5aadf4b7044162f4f2c3a8c2396c4937687b2db2837ceea77fada5f1956a3d7ec16af5705f026be96d8a8c83d6763669a8588440edb685ac95b365de8cd6103d4cd1b67ffa3e49396ae5682fa83a625a20ca3b7b96a54121afa500059ea67c964189b4cfb7da64649b2ff1b2dbe5b0b7e2731ff5e762f36b658c5bcc141ad69c19b44ccbd77a6fe6d91867099ac2e2eb6d83915bf582547e5b3fd03ad1e2c7dda61d8e3db5c1f8ff0e41c01108453b4b4519d3bf35e8f91fc112d57faccf8ebde5e0aa7741c9ea284880d275d0eebbcc04fa892ae5dd9b6761cd5cd656b108b5c6bd178e6e9a2bddf329db9c767be1b866cec0b639feb6678de555f660077c80e887c50c9b4bd61e02ea36e0ca8a8d6240469cb88bf1fb4521846fe2dac7dd85ac6f193938e6aff3871588a165adaa5df46ff9837417eca8daac5be8450f11f3952a16032e2619f2065b108896f06466e164ba22326377cb820a70f72d7f716b974dff7f191f44dd35f3d378937f4e804e84cd7f89e3f9555dd46e0043880f0cebf778fe5bda9edadbfd1571692d641870db9f90b9fd75ca3ed9256a68d96b124c7fc855cbe1a72ef472aba4cd8ac4b3c61fad696c4083ecd1d0b5619d813f2de473e28a345385e13bc9813c6922a9cc2e0807540ce2e3cef7d499799f50be4c555b85d5a8d9884437ad052e3124b2ab094f69a1378b1d219bcdcb308cd0c645fb40f4530bdf8cdcba6048a29fc43c97291b252350d3d3b4aaec55616ab0b699728c6c4929ccd1cef21da116a4d28e78ef482e0c8a3ff1d9189150c92e849280e5fa5dfd8be5d297ef7eeb0d2ea7c11a543f54929e489035de9764501d5e7bbe13d61bbe649457698e2accaa6376b6d9e7c5ff83fc07c7c48adbe468e3d1fe10eb43f52c82f5cc66e0e95845767af2b7646f3766b5e086338d40dca2477a6ab0ea265a9ace0236e0b0a709cda4ca338bdd87fb5ffb0c0357d3f577494a4921063c7bee6543d1a51f1cc28290464d3821a10368c9ec27beeb6d9695955640bfc2807bd3dfce7bc9bce65fde333b823b2cd0e7b77a57fd58e48308e7d611f80159c8988d1e62308b2b635cded376c71b0c5ece00293c05fe4def90e0f4722e822277d49367ec3bfb1c357d61254f257dba93fcb65127c533329b4ff4f7c8ac87543607d69da7b51de402f42dc7440f3cf94fa6b197fc414d607d45744c15aa28aaa2194befdd7466932014782fdaabc1bb05b08ea6b05fda79edfe0da77141fb634900fe3869abfb4fd9137c4a168d2ff37fe4c76a446e9da7133cd29e54886d87e17a73658ccfd38c8f9ec97392ace04c15a4488cfd46cdb9ea219e364d1636cbd8dc06147e40ea384aa66e0bc999ca708b0afa78493c2702f48bc2c519555923181a02c4a48b0199e98307ffc3ba592f9d200b8ddc444608950cc9460ca79487ac983d835bff2b4d562eacb561d5abc8787601fa5fe61c5cfb19be7b54b5f5007f4158347dc2e6391770cc49171bfab12a7f289f49d009f3f0cef601750e72d21619d15f2baf096be0a07d251b7a5891a49fa80e28c4d7b9b1ce25b9970b54383a43f9bd76881e07c0c6e81410514152c6c73d9cc3b028117f7575e2df9044334871f9b873812dcd968e14b17900b9ebac770d89775a8514e029dcaacea80e15eedde2525017068d25fe49004616a3c2c7350c11ae1d05b224f4eee7d10d6af4223163ad2155af5ce3b7cb02ac04f01d90d85f031c450475132f0f51ddc8a9b5b481377d6d15a308ec4dd1383f0b0dbe935080b7a52bbf8fdac5254f792d6b4356f7bad98f1324f7af9ed96e114033720ea8f7398f5e56fe42ce78f7ff83dce84367dc45cb0405391e7eaa05c98dd79703e80b455c3bae54cfad062289d6de7b2cfe5ef71b128cf052cf023283b13b42bacd93295c83938c73c8768e1d1dd4212932be0b3eb3f03b158fa19b81b317b3063b6d36c274d60e98a1ba5a439374b926592f29d7bfcd5d8ee19ac5085d4bd82ffec3207ea7b4c81c8b86dc5e0155f0f38214b43f953e87080df121b90ba25dbba074de949d7784d39a4a5eaa6ec145dc1225ea8615b025c69c23c99292c970a4b1d8130cfccf9d5af05f3d44a767391d8e10c9af1794dd88907925de0cbb299a7beb7ceb0bbcb644beeb25c1ad93ee3906b60d8778b74e2ea339b8fb597a80e89f84b81f5dcc0f184dd52784470c0c4f15bd75797a97a1a5b0d94290caf368f33edf2582f307f9c5e144c35a23b0efb106acafd05dd597d8d7accadce2067b9b378b3b3c621a22fc1c150fd91838e8daf851ef2987d0e9bb207dd764c9e54c982a2c1df15b0fec54d40bf65176b397f45f6feaf8a9aded7f64ead1763e459f384ff878fae1b2bd2b84e210d37a3062f2015eefcf871295689ab0a257b792f98f9b913d79164ef0562dc7882c0e43dda1b55dea66b3a5384abbaf5bb0ecc0870d19aee89baf26309a3c7f0359d7c511e29d6a4b9539ca662b6fa2d83efd9313b12b188824342b7507653a48ceed21a9077cce3c93f298e2b58ebe323c64705a244618642a8c2bdc431c8a0ac6664d9db24b4ca60ecfbab0c7e450812c74659ce4af18d9bb7defabd1b501b60a3a80a7e92bbb4c3b25fbf347961a83cf68e1444031be52da8fedaf5dfe2625f747265d7356111b4e6159cac1d68b274f0c8a4790d131e04e808613b834177d5b41b229b3756ff822f7952e6afed9d483280db77fffa5cc26a6fd7d9a868774a855b9719d9647148b86d1058c2eb665c10ebdea30852aba726314865ddf29cebf2bd9bb2b4da6cff06952647ff7c8483c44c14a180feb1f5f3cc13dd90516f2ef25a5e7e03c4386a7680cb41135018860a5b0f510a6bde8f24a02e7f1b24c01d993ed8696c6df571d63bc3383f886f454714add497b5a63d90a766b7cffec69a0fda94c6d49309e7adab1f17866e61d9d8fd6f14f8a5f59a3dd6c14a12621942994ae832bf479c7f0505a773b4bdbe0c3c5641a23d5a7a758f8dc3fb132bcdb3162561a4af63e45cb92de1b5396b6227f72c80efcf80e31791b71721896fd106f5b18da5c4d47aa5be5212cc39176a8484ea9a667929af2eb29f15a10aec234f73418bfbd2cae752afb3ed65546506357afd155a929d18376a6a8cd22a23d8f7efaf697e381755442434ccfa7dbb78d98a57871e5586b982a0056a6388aee1abeefdbb5aa88f9e4c80c2a41a2c4d78c3034c4de36d9b53d675a263839f345d4039007a2f66e958d7005df6b81a254a4b86c8c7d222703596e6c5312604a81b302984eec92a666c1167f43c1262c5b9d566184b6651b31cc4da00b4b2ef76a3ff462a1b98fb9d5f4926d44988343ff5f92bca75fae437d9dfb1cc662dc7694aacde4"}) 3m0.82288996s ago: executing program 1 (id=2566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x0, 0x5c8c, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x0, 0x1ff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m0.767154013s ago: executing program 1 (id=2567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x60000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x10) 2m59.834995159s ago: executing program 1 (id=2569): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x44, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}, {@metacopy_off}], [], 0x2f}) 2m58.562432125s ago: executing program 1 (id=2571): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x40080, 0x118) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') 2m47.481369688s ago: executing program 34 (id=2559): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f00000000c0)='V', 0x1) write$char_usb(r1, &(0x7f0000000380)="4e5622b12c8926aa1c2de8", 0xb) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044405}, 0x8044) ioctl$TCSBRKP(r2, 0x5425, 0x6) 2m43.132785735s ago: executing program 35 (id=2571): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x40080, 0x118) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') 2m27.24439448s ago: executing program 5 (id=2645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 2m27.132261701s ago: executing program 5 (id=2646): chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 2m27.010426306s ago: executing program 5 (id=2648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000002f80)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x252) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x240, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000880)={r7, 0x0, "d28000f39a1ab401652683ff099bdba9311863e3fdb17b96c682ee65f300ac0126a68b942d44f947ac582ae917747dcf93364f7d730bd6f763476a087239c92863800e5242ced11d7d4b1f3d6e49437f69ab4fdffd8015f76e6642ba132969d7ac0c2700a2399b0c9718d9685f390def6a6a841e13c82754e1d635da2313346f87e99d80ac1443edc7241fa5aa0d977a705d50b206333673f39fc1492f5d2c97d89085b6d6ac475eea52dfec8a297a3b79c058538a0aba12fb6bfad2c5eb0fcebaa72b5cf842e546cfa81d52bbc0aa1199eef781e0792fe3c0c779843f3596652a209a4e1353d6da1e53880ddff3be00c90f6bbce5073e66c84da97b0bc80e79", "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"}) 2m23.979012366s ago: executing program 5 (id=2652): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x4000080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r2, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x7}, &(0x7f0000000080)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', 0x4}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r8, 0x1}, 0x8) 2m23.024581987s ago: executing program 5 (id=2654): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x44, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}, {@metacopy_off}], [], 0x2f}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x803, 0x0) 2m21.896237848s ago: executing program 5 (id=2655): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)) 2m6.650132822s ago: executing program 36 (id=2655): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)) 15.708222577s ago: executing program 0 (id=2928): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 15.440513183s ago: executing program 0 (id=2931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="00000000000000943027"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x2, 0x18}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x30, 0x2e, 0x5f]}}, 0x0, 0x2d}, 0x28) 14.425429138s ago: executing program 0 (id=2933): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000cd83300000000000000000000200"], 0x0, 0x1a, 0x0, 0x1, 0x2, 0x10000}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 13.079560889s ago: executing program 0 (id=2936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@alg={0xe0, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {{'drbg_pr_ctr_aes128\x00'}, '\x00', '\x00', 0x2000, 0x4000}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) 12.257361078s ago: executing program 6 (id=2938): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 12.071423231s ago: executing program 0 (id=2940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lremovexattr(&(0x7f0000000100)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x1, @local, 0x3}, 0x1c) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000013c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x2581) socket$nl_netfilter(0x10, 0x3, 0xc) 10.934695974s ago: executing program 8 (id=2942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000300), 0x2) r2 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="ba7ac64bb371e642d4f3994a251ee7e88a53655f5f2aa8cf13aef63dba46f7465a", @ANYRES64=r0, @ANYBLOB="13acfab638c57fcbb255a60b93304d55410cc329d7144afc09e4ee94ba94fd833efd83dd7596bebd5bc97fef015f373895d0dab0eab438c62265a29892408746528154ea41df89d45f10ea6bfd47aaa80c3f7615c1da872e109dd1e21c1bffc9650e56560f80a00e000e16bd41126b417ecb3bda4cad1129d10dad4a613a1e6a62beb6fd59b28283540ca272e27e856d95c91e79a928e12eac81ff335a6ca7045dfe0321c9aadd9b3e4c0ce5029652fd926646cde14df33e5515210ce77c9c0be8fdfa853ce4592e191fb0f89cb3e801382a0f4b70a30512ec71673a7eb5dc4ab2", @ANYRES8=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001aaaaaaaaaa0aac1414bbaaaaaaaaaa00ac1414bb53911d246eeb2fb1a44a9d5e5585845071538cb11d67e060fe36108d4772faa5b7e90f2e9446c6ad1e610bdadb3dc3de397f6206aa7c4d606151da53cd030df8383922520e1a57ddd84c8190dc4267b7a186c6d6dcb1a798a76bea1825aaf048fd58ec315a62dd873eecd7888b93593f0a6670251fde0ce28ed2600206a3f5c1e1e85721cd061d88"], 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000130a01fa000000000000000002000000"], 0x14}}, 0x4040040) 9.571495216s ago: executing program 7 (id=2946): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100040, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x100000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xff}, 0x18) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x4, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.256416711s ago: executing program 6 (id=2947): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/4068, 0xfe4) 8.803180793s ago: executing program 6 (id=2949): madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 8.463492186s ago: executing program 6 (id=2950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@alg={0xe0, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {{'drbg_pr_ctr_aes128\x00'}, '\x00', '\x00', 0x2000, 0x4000}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) 7.444237587s ago: executing program 6 (id=2951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x10, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendto$unix(r6, &(0x7f0000000000)="96e1825a8935527e2e610c701cea2bb564c4f3345c6a44b804bc2842519c666846c34acc07959ab1775837fe47f7d71eb72ae94e20ca5d34dcc577b4bebc0efe60e6fcb7f0aa9cb21196ab6f65d5e43b36c44f8887a13103f665e9fd646b65e2f4a9ba21d5214c4a6c936bc78f2f59c7a1bf221a1171c6cd4881942dd7acb7803ad6a8f4b8841bc19b805d9ab9765bd220c0b6ac8b0518154812", 0x9a, 0x20044801, 0x0, 0x0) 7.251189022s ago: executing program 8 (id=2953): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f00000002c0)) 6.003120215s ago: executing program 8 (id=2954): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x197302, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_getattr(0x0, &(0x7f0000000440)={0x38}, 0x97, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x20401, 0x30) writev(r4, &(0x7f00000003c0)=[{&(0x7f00000004c0)='V', 0x1}, {&(0x7f0000000180)="fc", 0x1}], 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x7, 0x4, 0x4}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x10001, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.239773077s ago: executing program 9 (id=2955): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) 4.803554211s ago: executing program 9 (id=2957): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000001c40)={0x2, 0xff, @multicast2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4000, 0x4}]}]}, 0x13c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x10) r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000080)={'mpc624\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x400000, 0xfffffffc, 0x7, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0xe00, 0xe2df, 0xaa14, 0x1, 0x4, 0x9, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r9, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x9}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.544396137s ago: executing program 7 (id=2958): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/4068, 0xfe4) 3.5100187s ago: executing program 9 (id=2959): socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18004db6e601001000000000000000e09400f6ffffff00004e1ee99c8c7baba8019842076b0f3a9862ee838bd37928613c3c7f0c656c0f47e632c0dc2fec0074120e040c882aeba98709ebff75b0f87badca49a44ef29620c5dfbb0d11edef461cc392ce10c3a5661f08aa0048973b55daedeb65280951d808d86df047347a2b5225f81a692c8ddeda296b0cbe96ed3f23ecc7a974e90fab1a478b6349d5193e025b589d0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="042c76", @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x32, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 2.781921627s ago: executing program 9 (id=2960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.556300203s ago: executing program 7 (id=2961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = dup(r7) setsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r8) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000f40)=0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f022}) 2.335801793s ago: executing program 9 (id=2962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@alg={0xe0, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {{'drbg_pr_ctr_aes128\x00'}, '\x00', '\x00', 0x2000, 0x4000}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) 2.281280492s ago: executing program 8 (id=2963): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) 1.481091238s ago: executing program 7 (id=2964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0000001080002"], 0x64}}, 0x0) 1.220208283s ago: executing program 8 (id=2965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000240)="25a0621d07897dc11ad5011768738829c78a3620a7f8309ab70207e273cf35c71c4d499eb3440286c9ebf922b8590b7165f9795c7d750d38c98b4d358f2896c6ca97d936298163f9517e15a0b17483801a016d5f1cf4080eb271337bab") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x2, 0x4, 0xfffffffe, r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r5) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) 1.058705482s ago: executing program 9 (id=2966): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r1, 0x2ffb, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaa1576aaaa01809292111e58eb8f4da15676c2d575a0b2c2001f0e08060018080006040009aaaaaaaaaaaaac1414bb0180c2000003ac141430408c52f749b5b6cc02a306fa7ef5319452f67576ad3ab3fc9fdd41a7cce05d5aa3b3d2765880e82c73679e3df2874310b20d1c6d0102000000678a62f9fa418910776edc17ffb64c558964de203d004af333bbcef098a89a9d4a8fe4a51cb7b267422eaa4cd843c414df879e0fe74fde429c66850dd630ff5cd251ffb29edbce7c3cbaacb9c9064b063d8fe4912e412f0eaf79188c2d054475d1d91c1000000000243e853d9d3ad520d9bf9cf45afba0d14c0fd470082461f0ee15c95867bfeeee92613487b4c4ab0f7336affde07c7b62df47b61b42e0081516b1f82ff1"], 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) ioctl$VT_DISALLOCATE(r6, 0x5608) 73.968493ms ago: executing program 7 (id=2968): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) 0s ago: executing program 6 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xc0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000004500), 0x4000) openat(0xffffffffffffffff, 0x0, 0x10040, 0x103) capset(0x0, 0x0) request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='fscrypt:', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) kernel console output (not intermixed with test programs): 605, bcdDevice= a.94 [ 450.393454][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.409799][ T10] usb 2-1: config 0 descriptor?? [ 450.480278][ T5928] IPVS: starting estimator thread 0... [ 450.620188][T11779] IPVS: using max 46 ests per chain, 110400 per kthread [ 450.661591][ T5928] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 450.995807][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 451.005145][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'. [ 451.327750][ T5928] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.498810][T11790] fido_id[11790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 451.620137][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 452.069289][T11800] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 452.069289][T11800] program syz.3.1644 not setting count and/or reply_len properly [ 452.474114][ T10] usb 2-1: USB disconnect, device number 35 [ 454.333544][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 454.365788][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 454.410990][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 455.114333][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 455.270041][ T5973] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 455.428057][T11846] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 455.428057][T11846] program syz.4.1658 not setting count and/or reply_len properly [ 455.841914][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.865244][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.884387][ T5973] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 455.895836][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.969155][ T5973] usb 3-1: config 0 descriptor?? [ 456.022398][T11855] loop2: detected capacity change from 0 to 7 [ 456.044829][T11855] Dev loop2: unable to read RDB block 7 [ 456.055663][T11855] loop2: AHDI p1 p2 p3 [ 456.059848][T11855] loop2: partition table partially beyond EOD, truncated [ 456.076317][T11855] loop2: p1 start 1601398130 is beyond EOD, truncated [ 456.227832][T11855] loop2: p2 start 1702059890 is beyond EOD, truncated [ 457.442618][ T3540] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.484806][ T5973] usb 3-1: USB disconnect, device number 27 [ 457.492203][ T5232] Dev loop2: unable to read RDB block 7 [ 457.497770][ T5232] loop2: AHDI p1 p2 p3 [ 457.543473][ T5232] loop2: partition table partially beyond EOD, truncated [ 457.570907][ T5232] loop2: p1 start 1601398130 is beyond EOD, truncated [ 457.577702][ T5232] loop2: p2 start 1702059890 is beyond EOD, truncated [ 457.720719][ T3540] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.867043][ T3540] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.836262][ T3540] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.302140][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.311872][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.320576][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.329631][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.341164][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.528801][T11892] warning: `syz.4.1672' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 459.778584][ T3540] bridge_slave_1: left allmulticast mode [ 459.804849][T11895] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 459.804849][T11895] program syz.1.1673 not setting count and/or reply_len properly [ 459.811560][ T3540] bridge_slave_1: left promiscuous mode [ 459.869198][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.887690][ T3540] bridge_slave_0: left allmulticast mode [ 459.899412][ T3540] bridge_slave_0: left promiscuous mode [ 459.908011][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.640765][ T5973] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 460.651564][ T5973] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.500205][ T5183] Bluetooth: hci0: command tx timeout [ 462.522802][ T3540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.542512][ T3540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.562074][ T3540] bond0 (unregistering): (slave team0): Releasing backup interface [ 462.601478][ T3540] bond0 (unregistering): Released all slaves [ 462.740962][ T5982] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 463.592381][ T5183] Bluetooth: hci0: command tx timeout [ 463.612079][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.630373][ T5982] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.643374][ T5982] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 463.653653][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.680107][ T5982] usb 3-1: config 0 descriptor?? [ 464.343087][ T3540] hsr_slave_0: left promiscuous mode [ 464.379299][ T3540] hsr_slave_1: left promiscuous mode [ 465.103297][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.111738][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.148024][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.177510][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.205556][T11985] loop4: detected capacity change from 0 to 2560 [ 465.232343][T11985] buffer_io_error: 315 callbacks suppressed [ 465.232392][T11985] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 465.246918][T11985] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 465.256212][T11985] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 465.264754][T11985] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 465.273368][T11985] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 465.281871][T11985] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 465.290754][T11985] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 465.299726][T11985] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 465.308258][T11985] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 465.316819][T11985] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 465.399391][ T5982] usb 3-1: USB disconnect, device number 28 [ 465.534086][ T3540] veth1_macvtap: left promiscuous mode [ 465.565757][ T3540] veth0_macvtap: left promiscuous mode [ 465.581158][ T3540] veth1_vlan: left promiscuous mode [ 465.586696][ T3540] veth0_vlan: left promiscuous mode [ 465.631129][ T5183] Bluetooth: hci0: command tx timeout [ 465.769413][T11993] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 465.769413][T11993] program syz.4.1691 not setting count and/or reply_len properly [ 467.362157][ T3540] team0 (unregistering): Port device team_slave_1 removed [ 467.395627][ T3540] team0 (unregistering): Port device team_slave_0 removed [ 467.714122][ T5183] Bluetooth: hci0: command tx timeout [ 467.827136][T12002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1693'. [ 468.204228][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.213226][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.222153][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.231050][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.239918][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.248808][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.258129][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.267523][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 468.276903][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 469.092719][T11890] chnl_net:caif_netlink_parms(): no params data found [ 469.412280][T12026] binder: 12024:12026 ioctl c0306201 0 returned -14 [ 470.841460][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 470.883545][T11890] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.904193][T11890] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.934363][T11890] bridge_slave_0: entered allmulticast mode [ 470.953302][T11890] bridge_slave_0: entered promiscuous mode [ 471.079060][T11890] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.098507][T11890] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.103223][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.106423][T11890] bridge_slave_1: entered allmulticast mode [ 471.265756][T12066] binder: 12056:12066 ioctl c0306201 0 returned -14 [ 471.548321][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.569821][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 471.570984][T11890] bridge_slave_1: entered promiscuous mode [ 471.587252][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.616616][T12064] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 471.616616][T12064] program syz.4.1708 not setting count and/or reply_len properly [ 471.656917][ T9] usb 3-1: config 0 descriptor?? [ 471.691895][T11890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.714653][T11890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.921358][T11890] team0: Port device team_slave_0 added [ 471.928451][T11890] team0: Port device team_slave_1 added [ 472.224512][T11890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.241925][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.294832][T11890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.356757][T11890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.365285][T12081] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=196629122 (12584263808 ns) > initial count (5377998080 ns). Using initial count to start timer. [ 472.398871][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.536396][T11890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.205186][ T10] usb 3-1: USB disconnect, device number 29 [ 474.079491][T11890] hsr_slave_0: entered promiscuous mode [ 474.108930][T11890] hsr_slave_1: entered promiscuous mode [ 475.329388][T11890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.379086][T12125] loop2: detected capacity change from 0 to 7 [ 475.388971][T12125] Dev loop2: unable to read RDB block 7 [ 475.394883][T12125] loop2: AHDI p1 p2 p3 [ 475.399041][T12125] loop2: partition table partially beyond EOD, truncated [ 475.413323][T12125] loop2: p1 start 1601398130 is beyond EOD, truncated [ 475.420438][T11890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.428189][T12125] loop2: p2 start 1702059890 is beyond EOD, truncated [ 475.467444][T11890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 475.595084][T11890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.906300][T11890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.976543][T11890] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.990176][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 476.003812][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.011418][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.022604][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.029671][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.235167][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.288212][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.311900][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 476.325922][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.433654][ T9] usb 2-1: config 0 descriptor?? [ 476.476685][T11890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.815232][T12146] netlink: 'syz.2.1718': attribute type 11 has an invalid length. [ 477.094587][T12166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.866507][T12170] __nla_validate_parse: 47 callbacks suppressed [ 477.866538][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 477.885142][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'. [ 478.579703][T11890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.627890][ T5982] usb 2-1: USB disconnect, device number 36 [ 480.316823][T11890] veth0_vlan: entered promiscuous mode [ 480.879927][T11890] veth1_vlan: entered promiscuous mode [ 481.045332][T11890] veth0_macvtap: entered promiscuous mode [ 481.536589][T11890] veth1_macvtap: entered promiscuous mode [ 481.571944][T11890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.613487][T11890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.636308][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.671004][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.701243][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.728522][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.893885][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.932740][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.994409][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.060556][T12230] overlayfs: failed to resolve './file0': -2 [ 482.067031][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.388893][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 483.404631][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 483.420952][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 484.333928][T12250] fuse: Bad value for 'fd' [ 484.420113][ T5982] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 484.942565][ T5982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.060472][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1740'. [ 485.069328][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1740'. [ 485.079449][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.093296][ T5982] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 485.102669][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.512740][ T5982] usb 2-1: config 0 descriptor?? [ 485.557501][ T5982] IPVS: starting estimator thread 0... [ 485.572289][T12258] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 485.651309][T12259] IPVS: using max 48 ests per chain, 115200 per kthread [ 486.049145][T12272] netlink: 'syz.5.1745': attribute type 12 has an invalid length. [ 486.461238][ T5982] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 487.543249][ T5943] usb 2-1: USB disconnect, device number 37 [ 487.564584][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.580144][ T5982] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 487.610761][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.627966][ T5982] usb 5-1: config 0 descriptor?? [ 487.860268][ T10] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 488.197366][ T5982] logitech-djreceiver 0003:046D:C71F.0012: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 488.234421][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 488.364699][T12294] binder: 12291:12294 ioctl c0306201 200000000240 returned -11 [ 488.649043][ T5982] usb 5-1: USB disconnect, device number 35 [ 488.800055][ T10] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 490.282504][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 490.291420][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 490.333663][T12331] loop2: detected capacity change from 0 to 7 [ 490.365871][ T6103] Dev loop2: unable to read RDB block 7 [ 490.386545][ T6103] loop2: AHDI p1 p2 p3 [ 490.408536][ T6103] loop2: partition table partially beyond EOD, truncated [ 490.454820][ T6103] loop2: p1 start 1601398130 is beyond EOD, truncated [ 490.492301][ T6103] loop2: p2 start 1702059890 is beyond EOD, truncated [ 490.504535][T12331] Dev loop2: unable to read RDB block 7 [ 490.513635][T12331] loop2: AHDI p1 p2 p3 [ 490.538463][T12331] loop2: partition table partially beyond EOD, truncated [ 490.559492][T12331] loop2: p1 start 1601398130 is beyond EOD, truncated [ 490.609709][T12331] loop2: p2 start 1702059890 is beyond EOD, truncated [ 493.057611][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 493.066907][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 493.482977][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 493.719846][T12398] loop2: detected capacity change from 0 to 7 [ 493.854594][T12398] Dev loop2: unable to read RDB block 7 [ 494.201323][T12398] loop2: AHDI p1 p2 p3 [ 494.205519][T12398] loop2: partition table partially beyond EOD, truncated [ 494.214951][T12398] loop2: p1 start 1601398130 is beyond EOD, truncated [ 494.228585][T12398] loop2: p2 start 1702059890 is beyond EOD, truncated [ 496.161942][ T43] IPVS: starting estimator thread 0... [ 496.226470][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 496.276530][T12441] IPVS: using max 43 ests per chain, 103200 per kthread [ 496.285507][ T43] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 496.352824][ T43] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 496.377483][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 496.912458][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 497.889677][T12458] fido_id[12458]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 498.297487][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 498.345038][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1785'. [ 499.449180][ T5183] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 499.601101][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1793'. [ 500.916389][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.928559][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.845659][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 506.065871][T12582] netlink: 'syz.5.1818': attribute type 10 has an invalid length. [ 506.073716][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1818'. [ 506.095285][T12582] team0: Port device geneve0 added [ 506.215306][ T10] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 506.225550][ T10] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 506.238302][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 506.261480][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 506.283121][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.294581][ T10] usb 2-1: Product: syz [ 506.298768][ T10] usb 2-1: Manufacturer: syz [ 506.304974][ T10] usb 2-1: SerialNumber: syz [ 506.314615][T12580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.322247][T12580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.914761][T12593] fuse: Bad value for 'fd' [ 507.959195][T12607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.842083][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 36:27:e5:21:f8:36 [ 509.280411][ T10] rtl8150 2-1:1.0: eth5: rtl8150 is detected [ 509.481049][ T5183] Bluetooth: latency 16387 > 499 [ 509.644073][ T24] usb 2-1: USB disconnect, device number 38 [ 511.550668][ T5183] Bluetooth: hci0: command tx timeout [ 512.276250][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 512.287672][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 513.597745][T12700] Bluetooth: MGMT ver 1.23 [ 513.700228][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 513.731995][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1846'. [ 514.251354][ T24] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 514.288322][ T24] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 514.396945][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 514.755727][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 514.770069][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.819987][ T24] usb 3-1: Product: syz [ 514.824165][ T24] usb 3-1: Manufacturer: syz [ 514.840078][ T24] usb 3-1: SerialNumber: syz [ 514.859793][T12697] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.894919][T12697] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 515.783187][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1858'. [ 516.842603][T12730] netlink: 'syz.0.1855': attribute type 4 has an invalid length. [ 517.011188][ T24] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:92:42:a9:a2:d3 [ 517.051029][ T24] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 517.882724][ T9] usb 3-1: USB disconnect, device number 30 [ 517.944955][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 518.049675][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1863'. [ 518.126106][T12766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.291559][T12777] team0: Port device team_slave_0 removed [ 519.560235][ T122] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 520.082080][ T122] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 520.326716][T12806] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 520.371853][ T122] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 520.402353][ T122] usb 3-1: config 1 interface 0 has no altsetting 0 [ 520.485159][ T122] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 520.510080][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.518171][ T122] usb 3-1: Product: syz [ 520.524573][ T122] usb 3-1: Manufacturer: syz [ 520.530695][ T122] usb 3-1: SerialNumber: syz [ 520.538511][T12790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.550222][T12790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.810087][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 520.819059][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 520.828101][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 520.837126][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 520.846018][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 520.854957][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 520.863859][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 520.872754][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 523.351053][T12831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.419250][T12834] __nla_validate_parse: 45 callbacks suppressed [ 523.419274][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 523.535430][ T43] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 523.620160][ T43] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 524.531245][ T122] rtl8150 3-1:1.0: couldn't reset the device [ 524.561292][ T122] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 524.780999][ T122] usb 3-1: USB disconnect, device number 31 [ 524.980157][T12867] No control pipe specified [ 525.356309][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 525.365334][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 526.913907][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 527.546457][T12909] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 527.546457][T12909] program syz.5.1902 not setting count and/or reply_len properly [ 527.703990][T12907] No control pipe specified [ 528.161778][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 528.170969][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 529.709124][T12938] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 529.924393][T12944] binder: 12943:12944 ioctl c0306201 0 returned -14 [ 532.347159][T12823] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 532.352631][T12984] binder: 12983:12984 ioctl c0306201 0 returned -14 [ 532.453523][T12823] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.160792][T13027] binder: 13026:13027 ioctl c0306201 0 returned -14 [ 535.358005][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.367079][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.376184][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.385124][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.394031][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.402921][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.411821][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.420711][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.430459][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 535.439877][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 536.570120][ T43] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 537.142073][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 537.172641][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 537.195849][ T43] usb 5-1: config 220 has no interface number 2 [ 537.208925][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 537.319573][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 537.327395][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 537.339115][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 537.552895][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 537.562316][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.571986][ T43] usb 5-1: Product: syz [ 537.576313][ T43] usb 5-1: Manufacturer: syz [ 537.655930][ T43] usb 5-1: SerialNumber: syz [ 538.338991][ T5982] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 538.524433][ T5982] usb 2-1: Using ep0 maxpacket: 8 [ 538.544496][ T5943] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 538.572754][ T5943] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 538.592365][ T5982] usb 2-1: config index 0 descriptor too short (expected 29970, got 18) [ 538.628396][ T5982] usb 2-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 538.776472][ T5982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 538.850974][ T5982] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 538.882894][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.024593][ T5982] usb 2-1: Product: syz [ 539.031167][ T5982] usb 2-1: Manufacturer: syz [ 539.039092][ T5982] usb 2-1: SerialNumber: syz [ 539.053095][ T5982] usb 2-1: config 0 descriptor?? [ 539.067037][ T5982] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 539.116915][ T5982] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 539.163850][T13073] binder: 13072:13073 ioctl c0306201 0 returned -14 [ 539.269774][ T5982] usb 2-1: USB disconnect, device number 39 [ 539.856973][ T43] usb 5-1: selecting invalid altsetting 0 [ 539.915941][ T43] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 539.973374][ T43] usb 5-1: No valid video chain found. [ 540.105421][ T43] usb 5-1: selecting invalid altsetting 0 [ 540.847298][ T43] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 540.932651][T13102] __nla_validate_parse: 45 callbacks suppressed [ 540.932661][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1962'. [ 540.984062][ T43] usb 5-1: USB disconnect, device number 36 [ 542.126940][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 542.135952][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 542.814517][T13149] binder: 13148:13149 ioctl c0306201 0 returned -14 [ 543.345812][ T24] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 544.030232][ T24] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 544.115822][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1973'. [ 544.556970][T13169] fido_id[13169]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 546.143726][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 546.152755][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1979'. [ 546.355153][T13201] binder: 13200:13201 ioctl c0306201 0 returned -14 [ 546.954346][T13214] mkiss: ax0: crc mode is auto. [ 549.039529][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.049663][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.058576][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.067443][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.076421][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.085263][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.094189][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.103025][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 549.852080][T13229] random: crng reseeded on system resumption [ 550.431531][ T122] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 550.445132][ T122] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 550.862255][T13250] binder: 13247:13250 ioctl c0306201 0 returned -14 [ 552.337142][T13260] __nla_validate_parse: 48 callbacks suppressed [ 552.337171][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.352408][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.361307][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.370206][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.379062][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.387963][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.396870][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.405779][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.414691][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 552.423597][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 553.766050][T13272] mkiss: ax0: crc mode is auto. [ 553.818802][T13274] bridge0: port 3(gretap0) entered blocking state [ 553.825405][T13274] bridge0: port 3(gretap0) entered disabled state [ 553.832046][T13274] gretap0: entered allmulticast mode [ 553.838086][T13274] gretap0: entered promiscuous mode [ 553.844527][T13274] bridge0: port 3(gretap0) entered blocking state [ 553.851113][T13274] bridge0: port 3(gretap0) entered forwarding state [ 556.062150][ T122] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 556.062207][T13298] binder: 13297:13298 ioctl c0306201 0 returned -14 [ 556.078397][ T122] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.499386][T13301] fido_id[13301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 557.549434][T13320] __nla_validate_parse: 42 callbacks suppressed [ 557.549443][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 557.626926][T13321] lo speed is unknown, defaulting to 1000 [ 557.633344][T13321] lo speed is unknown, defaulting to 1000 [ 557.650489][T13321] lo speed is unknown, defaulting to 1000 [ 557.678462][T13321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 557.727882][T13321] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 557.919696][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 557.948878][T13321] lo speed is unknown, defaulting to 1000 [ 557.956782][T13321] lo speed is unknown, defaulting to 1000 [ 557.964191][T13321] lo speed is unknown, defaulting to 1000 [ 557.970793][T13321] lo speed is unknown, defaulting to 1000 [ 557.977212][T13321] lo speed is unknown, defaulting to 1000 [ 558.760138][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 559.029987][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 559.111996][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.128729][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.138848][ T43] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 559.148164][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.167478][ T43] usb 6-1: config 0 descriptor?? [ 559.841535][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 559.883703][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 559.926873][ T43] usb 6-1: USB disconnect, device number 4 [ 560.292927][T13353] netlink: 'syz.4.2020': attribute type 10 has an invalid length. [ 560.317518][T13353] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.338044][T13353] bond0: (slave team0): Enslaving as an active interface with an up link [ 561.323870][ T122] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 561.583660][ T122] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.356783][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.368880][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.415439][T13370] fido_id[13370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 566.323491][T13417] netlink: 'syz.1.2035': attribute type 10 has an invalid length. [ 567.117872][ T5928] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 567.162895][ T5928] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 567.976954][T13436] fido_id[13436]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 568.838795][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 568.874303][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 569.427956][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 569.635448][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 569.644660][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 569.680199][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2048'. [ 569.689085][T13459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'. [ 569.768423][T13460] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 569.768423][T13460] program syz.2.2045 not setting count and/or reply_len properly [ 571.342228][T13484] No control pipe specified [ 572.001977][ T122] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 572.051530][ T122] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 573.444014][T13504] fido_id[13504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 573.903162][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 573.925337][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 573.936974][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 573.960567][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 573.969591][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 574.149661][T13522] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 574.149661][T13522] program syz.1.2062 not setting count and/or reply_len properly [ 574.669493][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 574.678548][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 574.711142][T13528] autofs: Bad value for 'fd' [ 576.838274][T13571] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 576.838274][T13571] program syz.1.2076 not setting count and/or reply_len properly [ 577.142096][T13573] mkiss: ax0: crc mode is auto. [ 577.952845][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'. [ 577.961807][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 577.988763][T13584] autofs: Bad value for 'fd' [ 578.404090][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2080'. [ 581.457865][T13620] mkiss: ax0: crc mode is auto. [ 583.784367][T13630] autofs: Bad value for 'fd' [ 584.303063][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 584.312125][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'. [ 585.530781][T13649] netlink: 'syz.0.2095': attribute type 10 has an invalid length. [ 585.560434][T13649] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.583120][T13649] bond0: (slave team0): Enslaving as an active interface with an up link [ 587.768342][T13672] autofs: Unknown parameter '0x0000000000000000' [ 589.601905][T13695] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 592.065711][T13718] autofs: Unknown parameter '0x0000000000000000' [ 592.772583][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 593.516171][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 593.885396][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 594.335421][ T24] usb 2-1: config 220 has no interface number 2 [ 594.446485][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 594.543146][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 594.588353][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 594.695208][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 594.802057][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 594.811291][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.308422][ T24] usb 2-1: Product: syz [ 595.314099][ T24] usb 2-1: Manufacturer: syz [ 595.328512][ T24] usb 2-1: SerialNumber: syz [ 596.757888][T13766] autofs: Unknown parameter '0x0000000000000000' [ 598.994130][ T24] usb 2-1: selecting invalid altsetting 0 [ 599.051562][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 599.061006][ T24] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 599.067363][ T24] usb 2-1: No valid video chain found. [ 599.083277][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'. [ 599.097564][ T24] usb 2-1: selecting invalid altsetting 0 [ 599.104739][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 599.117998][ T24] usb 2-1: USB disconnect, device number 40 [ 599.182019][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 600.891332][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 600.900283][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 600.909228][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 600.918342][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 600.927276][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 600.936240][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 600.945164][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 604.545138][ T122] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 604.714932][ T122] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 604.747930][ T122] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 604.930069][ T122] usb 5-1: config 220 has no interface number 2 [ 605.078672][ T122] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 605.240132][ T122] usb 5-1: config 220 interface 0 has no altsetting 0 [ 605.591385][ T122] usb 5-1: config 220 interface 76 has no altsetting 0 [ 606.041940][ T122] usb 5-1: config 220 interface 1 has no altsetting 0 [ 606.059822][T13874] __nla_validate_parse: 45 callbacks suppressed [ 606.059835][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 606.080599][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2156'. [ 606.689381][ T122] usb 5-1: string descriptor 0 read error: -71 [ 606.695886][ T122] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 606.727582][ T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.944605][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 606.953857][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 606.962898][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 606.971831][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 606.980735][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 606.989631][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 606.998656][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 607.008246][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 607.840585][ T122] usb 5-1: can't set config #220, error -71 [ 607.856011][ T122] usb 5-1: USB disconnect, device number 37 [ 608.871203][T13898] binder: 13897:13898 ioctl c0306201 0 returned -14 [ 611.993301][T13946] binder: 13945:13946 ioctl c0306201 0 returned -14 [ 612.496827][T13959] __nla_validate_parse: 49 callbacks suppressed [ 612.496843][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 613.155873][T13977] binder: 13975:13977 ioctl c0306201 0 returned -14 [ 613.893332][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 613.928928][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2190'. [ 615.694748][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 616.561175][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2203'. [ 616.570323][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2203'. [ 619.440770][T14071] binder: 14070:14071 ioctl c0306201 0 returned -14 [ 619.549248][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 619.558473][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 621.959669][T14111] binder: 14110:14111 ioctl c0306201 0 returned -14 [ 622.038416][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 622.047552][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2229'. [ 622.624726][T14128] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2233'. [ 623.801720][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.808107][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.784324][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.793447][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.802322][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.811209][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.820515][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.830146][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.838985][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.847934][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.856802][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 624.865675][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 625.123725][T14157] QAT: failed to copy from user cfg_data. [ 625.142610][T14158] binder: 14156:14158 ioctl c0306201 0 returned -14 [ 625.167951][T14157] syz.4.2240 uses obsolete (PF_INET,SOCK_PACKET) [ 627.824267][T14210] binder: BINDER_SET_CONTEXT_MGR already set [ 627.833465][T14210] binder: 14208:14210 ioctl 4018620d 200000000040 returned -16 [ 627.935327][T14210] binder: 14208:14210 ioctl c0306201 0 returned -14 [ 632.058108][ T10] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 632.112714][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 632.496857][T14310] __nla_validate_parse: 103 callbacks suppressed [ 632.496869][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 632.512274][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'. [ 632.703463][T14318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2268'. [ 633.555962][T14328] netlink: 892 bytes leftover after parsing attributes in process `syz.5.2271'. [ 634.911325][T14352] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 634.911325][T14352] program syz.0.2277 not setting count and/or reply_len properly [ 636.164422][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 636.173404][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2279'. [ 637.199669][T14377] mkiss: ax0: crc mode is auto. [ 637.411838][T14386] binder: 14382:14386 ioctl c0306201 0 returned -14 [ 637.721716][ T43] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 637.923406][ T43] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 640.181094][T14428] program syz.0.2293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.700017][ T43] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 640.761575][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2295'. [ 640.770570][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2295'. [ 640.976257][T14443] mkiss: ax0: crc mode is auto. [ 641.048421][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 642.005507][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 642.014935][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.023033][ T43] usb 1-1: Product: syz [ 642.027202][ T43] usb 1-1: Manufacturer: syz [ 642.038342][ T43] usb 1-1: SerialNumber: syz [ 642.070210][ T43] usb 1-1: config 0 descriptor?? [ 644.946327][ T43] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 645.001817][ T5928] usb 1-1: USB disconnect, device number 32 [ 645.564685][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 646.219901][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 646.389102][ T43] usb 5-1: config 220 has no interface number 2 [ 646.723002][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 646.856530][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 646.893221][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 646.908543][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 646.916673][ T43] usb 5-1: string descriptor 0 read error: -71 [ 646.933099][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 646.966749][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.087639][ T43] usb 5-1: can't set config #220, error -71 [ 647.104564][ T43] usb 5-1: USB disconnect, device number 38 [ 647.910956][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 647.930750][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 647.939639][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 650.875988][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 651.100027][T14554] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 651.100027][T14554] program syz.5.2322 not setting count and/or reply_len properly [ 651.190128][ T5928] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 651.405017][ T5928] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 651.413364][ T5928] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 651.593322][ T5928] usb 2-1: config 220 has no interface number 2 [ 651.664461][ T5928] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 651.931544][ T5928] usb 2-1: config 220 interface 0 has no altsetting 0 [ 651.960414][ T5928] usb 2-1: config 220 interface 76 has no altsetting 0 [ 651.988696][ T5928] usb 2-1: config 220 interface 1 has no altsetting 0 [ 653.184927][ T5928] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 653.204973][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.226168][ T5928] usb 2-1: Product: syz [ 653.231121][ T5928] usb 2-1: Manufacturer: syz [ 653.238174][ T5928] usb 2-1: SerialNumber: syz [ 653.495831][T14580] netlink: 868 bytes leftover after parsing attributes in process `syz.0.2330'. [ 653.613234][ T5928] usb 2-1: selecting invalid altsetting 0 [ 653.619285][ T5928] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 653.636157][ T5928] usb 2-1: No valid video chain found. [ 653.654828][ T5928] usb 2-1: selecting invalid altsetting 0 [ 653.685378][ T5928] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 654.255938][ T5928] usb 2-1: USB disconnect, device number 41 [ 654.711008][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2334'. [ 655.000015][ T43] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 655.202725][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 655.624137][ T43] usb 2-1: config 0 has no interfaces? [ 655.631626][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 655.649443][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.658317][ T43] usb 2-1: Product: syz [ 655.668339][ T43] usb 2-1: Manufacturer: syz [ 655.680112][ T43] usb 2-1: SerialNumber: syz [ 656.463453][ T43] usb 2-1: config 0 descriptor?? [ 657.154464][T14636] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 657.154464][T14636] program syz.2.2340 not setting count and/or reply_len properly [ 657.887813][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 658.021164][ T5935] usb 2-1: USB disconnect, device number 42 [ 658.200102][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 658.290609][ T43] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 658.450084][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 658.489738][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2346'. [ 658.520735][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.522062][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 658.539392][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 658.566251][ T10] usb 5-1: config 220 has no interface number 2 [ 658.585953][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 658.610008][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 658.610137][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 658.690737][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 658.697926][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 658.717239][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 658.729106][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.737665][ T10] usb 5-1: Product: syz [ 660.116157][ T10] usb 5-1: Manufacturer: syz [ 660.119913][ T43] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 660.121256][ T10] usb 5-1: SerialNumber: syz [ 660.144351][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.183315][ T43] usb 1-1: config 0 descriptor?? [ 660.210793][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 660.875455][T14678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.909989][ T5943] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 662.211439][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 662.225486][ T122] usb 1-1: USB disconnect, device number 33 [ 662.226260][ T5943] usb 2-1: config 0 has no interfaces? [ 662.272324][ T5943] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 662.276033][ T10] usb 5-1: selecting invalid altsetting 0 [ 662.283637][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.295620][ T5943] usb 2-1: Product: syz [ 662.300090][ T5943] usb 2-1: Manufacturer: syz [ 662.309918][ T5943] usb 2-1: SerialNumber: syz [ 662.320930][ T10] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 662.336714][T14693] No control pipe specified [ 662.345200][ T10] usb 5-1: No valid video chain found. [ 662.411545][ T5943] usb 2-1: config 0 descriptor?? [ 662.424341][ T10] usb 5-1: selecting invalid altsetting 0 [ 662.441649][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 662.526934][ T10] usb 5-1: USB disconnect, device number 39 [ 662.760284][T14707] sg_write: data in/out 91/126 bytes for SCSI command 0x0-- guessing data in; [ 662.760284][T14707] program syz.4.2360 not setting count and/or reply_len properly [ 665.035601][T14723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2366'. [ 666.837257][T14732] No control pipe specified [ 666.998590][T14737] program syz.0.2369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.056046][ T5943] usb 2-1: USB disconnect, device number 43 [ 667.309972][ T43] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 668.251300][T14754] netlink: 860 bytes leftover after parsing attributes in process `syz.5.2375'. [ 668.458839][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 668.616058][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 668.656280][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.691560][ T43] usb 1-1: Product: syz [ 668.707348][ T43] usb 1-1: Manufacturer: syz [ 668.949687][ T43] usb 1-1: SerialNumber: syz [ 668.956930][ T43] usb 1-1: config 0 descriptor?? [ 669.131569][T14766] No control pipe specified [ 669.406063][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'. [ 670.851357][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 670.862023][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 671.434978][T14799] netlink: 860 bytes leftover after parsing attributes in process `syz.4.2387'. [ 671.832167][ T5943] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 671.854553][ T5943] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 672.583946][T12823] usb 1-1: USB disconnect, device number 34 [ 673.576959][T14840] binder_alloc: 14838: binder_alloc_buf, no vma [ 673.612801][T14844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2393'. [ 673.747741][T14845] binder: 14838:14845 ioctl c0306201 0 returned -14 [ 674.007768][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 674.016707][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 674.025723][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 674.034725][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 674.043666][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 674.052542][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 675.321391][ T10] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 675.469343][ T10] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 676.164056][T14900] __nla_validate_parse: 51 callbacks suppressed [ 676.164071][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.179296][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.188169][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.197173][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.206065][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.214928][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.223837][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.232689][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.241551][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.250566][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 676.578416][T14909] binder: BINDER_SET_CONTEXT_MGR already set [ 676.593752][T14909] binder: 14907:14909 ioctl 4018620d 200000000040 returned -16 [ 676.925790][T14909] binder: 14907:14909 ioctl c0306201 0 returned -14 [ 677.160156][T14871] Bluetooth: hci0: command 0x0406 tx timeout [ 678.858438][T14959] binder: 14958:14959 ioctl c0306201 0 returned -14 [ 679.855918][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 680.284576][ T24] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 681.190264][T15005] __nla_validate_parse: 49 callbacks suppressed [ 681.190276][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 681.205879][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2433'. [ 681.408964][T14989] fido_id[14989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 682.207077][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 682.379921][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 682.391444][ T24] usb 3-1: config 0 has no interfaces? [ 682.487048][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 682.547825][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 682.568407][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.581644][ T24] usb 3-1: Product: syz [ 682.585900][ T24] usb 3-1: Manufacturer: syz [ 682.604011][ T24] usb 3-1: SerialNumber: syz [ 682.613040][ T24] usb 3-1: config 0 descriptor?? [ 682.707755][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 682.734451][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 682.765149][T15025] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2439'. [ 682.773203][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 682.941553][T15028] mkiss: ax0: crc mode is auto. [ 685.234954][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.241634][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.789495][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 686.251780][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'. [ 686.630679][ T43] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 686.668035][T15063] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2450'. [ 686.688227][ T10] usb 3-1: USB disconnect, device number 32 [ 686.723424][ T43] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 687.429877][T15074] overlayfs: failed to resolve './file1': -2 [ 688.504650][T15078] mkiss: ax0: crc mode is auto. [ 690.311298][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 690.322429][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2460'. [ 690.383060][T15103] netlink: 772 bytes leftover after parsing attributes in process `syz.5.2462'. [ 690.499916][ T5935] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 690.556874][T15105] sd 0:0:1:0: PR command failed: 1026 [ 690.571385][T15105] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 690.579383][T15105] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 690.668071][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 690.685620][ T5935] usb 1-1: config 0 has no interfaces? [ 690.819712][ T5935] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 691.542627][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.552511][ T5935] usb 1-1: Product: syz [ 691.556684][ T5935] usb 1-1: Manufacturer: syz [ 691.561445][ T5935] usb 1-1: SerialNumber: syz [ 691.568152][ T5935] usb 1-1: config 0 descriptor?? [ 691.689969][T12823] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 691.786014][T15125] mkiss: ax0: crc mode is auto. [ 692.791390][T12823] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 692.847303][T12823] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 692.890160][T12823] usb 3-1: config 1 interface 0 has no altsetting 0 [ 692.987878][T12823] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 693.004821][T12823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.015423][T12823] usb 3-1: Product: syz [ 693.019690][T12823] usb 3-1: Manufacturer: syz [ 693.033556][T12823] usb 3-1: SerialNumber: syz [ 693.059740][T15115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 693.070841][T15115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 694.052705][ T122] usb 1-1: USB disconnect, device number 35 [ 694.180911][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.190096][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.199070][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.208004][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.216894][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.225908][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.234836][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.243879][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.252872][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.261766][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 694.993274][T12823] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9e:da:19:ff:99:00 [ 695.068462][T12823] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 695.269445][ T24] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 695.619013][ T24] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 696.202814][T15172] fido_id[15172]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 696.319214][ T24] usb 3-1: USB disconnect, device number 33 [ 698.646562][ T122] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 698.869914][ T122] usb 3-1: Using ep0 maxpacket: 32 [ 698.884912][ T122] usb 3-1: config 0 has no interfaces? [ 698.896693][ T122] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 698.907278][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.919385][ T122] usb 3-1: Product: syz [ 698.926160][ T122] usb 3-1: Manufacturer: syz [ 698.934647][ T122] usb 3-1: SerialNumber: syz [ 698.946397][ T122] usb 3-1: config 0 descriptor?? [ 701.451641][ T24] usb 3-1: USB disconnect, device number 34 [ 701.994110][T15260] __nla_validate_parse: 44 callbacks suppressed [ 701.994123][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2491'. [ 702.011047][T15260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2491'. [ 702.054808][T15262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 702.061522][T15262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 702.081546][T15262] vhci_hcd vhci_hcd.0: Device attached [ 702.314660][ T43] vhci_hcd: vhci_device speed not set [ 702.399109][ T43] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 703.001530][T15263] vhci_hcd: connection reset by peer [ 703.008665][ T3540] vhci_hcd: stop threads [ 703.018549][ T3540] vhci_hcd: release socket [ 703.027666][ T3540] vhci_hcd: disconnect device [ 704.079979][ T5943] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 704.277557][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 704.286283][ T5943] usb 3-1: config 0 has no interfaces? [ 704.310015][ T5943] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 704.322642][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.341745][ T5943] usb 3-1: Product: syz [ 704.345975][ T5943] usb 3-1: Manufacturer: syz [ 704.352777][ T5943] usb 3-1: SerialNumber: syz [ 704.729776][ T5943] usb 3-1: config 0 descriptor?? [ 704.737317][T15296] IPVS: Unknown mcast interface: veth0_to_team [ 704.746602][T14871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.757787][T14871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.770757][T14871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.782825][T14871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.792620][T14871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.893848][T15299] lo speed is unknown, defaulting to 1000 [ 705.088134][ T3562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.178404][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 705.187417][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2504'. [ 705.266845][ T3562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.746213][ T3562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.990228][ T3562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.746178][T15299] chnl_net:caif_netlink_parms(): no params data found [ 706.834611][ T5183] Bluetooth: hci2: command tx timeout [ 707.147014][ T122] usb 3-1: USB disconnect, device number 35 [ 707.536537][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.551536][ T43] vhci_hcd: vhci_device speed not set [ 707.572187][T15299] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.579453][T15299] bridge_slave_0: entered allmulticast mode [ 707.588231][T15299] bridge_slave_0: entered promiscuous mode [ 707.598370][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.607695][T15299] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.634627][T15299] bridge_slave_1: entered allmulticast mode [ 707.654110][T15299] bridge_slave_1: entered promiscuous mode [ 707.682959][ T3562] gretap0: left allmulticast mode [ 707.701803][ T3562] gretap0: left promiscuous mode [ 707.709129][ T3562] bridge0: port 3(gretap0) entered disabled state [ 707.743097][ T3562] bridge_slave_1: left allmulticast mode [ 707.765932][ T3562] bridge_slave_1: left promiscuous mode [ 707.786998][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.826617][ T3562] bridge_slave_0: left allmulticast mode [ 707.849230][ T3562] bridge_slave_0: left promiscuous mode [ 707.866091][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.950628][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 708.110451][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 708.131818][ T5982] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 708.143272][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 708.166995][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 708.212177][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 708.224865][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 708.245197][ T10] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 708.268181][ T10] usb 1-1: Product: syz [ 708.278021][ T10] usb 1-1: Manufacturer: syz [ 708.289195][ T10] usb 1-1: SerialNumber: syz [ 708.310352][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.320655][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.322694][ T10] usb 1-1: config 0 descriptor?? [ 708.367468][ T5982] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 708.378939][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.400479][ T5982] usb 2-1: config 0 descriptor?? [ 708.508546][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.525609][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.548846][ T3562] bond0 (unregistering): (slave team0): Releasing backup interface [ 708.563467][ T3562] bond0 (unregistering): Released all slaves [ 708.795189][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 708.902602][ T5982] hid-picolcd 0003:04D8:C002.0024: unknown main item tag 0x2 [ 708.910458][ T5183] Bluetooth: hci2: command tx timeout [ 708.967992][ T5982] hid-picolcd 0003:04D8:C002.0024: unknown main item tag 0x0 [ 709.002100][ T10] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 709.052858][T15299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.063576][ T5982] hid-picolcd 0003:04D8:C002.0024: No report with id 0x11 found [ 709.376135][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 709.406910][ T10] usb 1-1: USB disconnect, device number 36 [ 709.424857][T15299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.539413][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'. [ 709.548348][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2515'. [ 709.562215][ T5982] usb 2-1: USB disconnect, device number 44 [ 709.566373][T15299] team0: Port device team_slave_0 added [ 709.594586][T15385] mkiss: ax0: crc mode is auto. [ 709.617820][T15299] team0: Port device team_slave_1 added [ 709.757343][T15299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.849892][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.881598][T15299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.355005][ T3562] hsr_slave_0: left promiscuous mode [ 710.365964][ T3562] hsr_slave_1: left promiscuous mode [ 710.382594][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.398664][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.406341][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.423856][ T3562] veth1_macvtap: left promiscuous mode [ 710.434283][ T3562] veth0_macvtap: left promiscuous mode [ 710.439985][ T3562] veth1_vlan: left promiscuous mode [ 710.446990][ T3562] veth0_vlan: left promiscuous mode [ 710.459892][ T5982] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 710.630179][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 710.648575][ T5982] usb 6-1: config 0 has no interfaces? [ 710.668755][ T5982] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 710.723090][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.789588][ T5982] usb 6-1: Product: syz [ 710.791410][ T122] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 710.801696][ T5982] usb 6-1: Manufacturer: syz [ 710.801714][ T5982] usb 6-1: SerialNumber: syz [ 710.832309][ T5982] usb 6-1: config 0 descriptor?? [ 711.014058][ T5183] Bluetooth: hci2: command tx timeout [ 711.079379][ T3562] team0 (unregistering): Port device batadv1 removed [ 711.087020][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 711.143207][ T122] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 711.287491][ T122] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 711.396285][ T122] usb 1-1: config 220 has no interface number 2 [ 711.628948][ T122] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 711.674523][ T122] usb 1-1: config 220 interface 0 has no altsetting 0 [ 711.694613][ T122] usb 1-1: config 220 interface 76 has no altsetting 0 [ 711.710041][ T122] usb 1-1: config 220 interface 1 has no altsetting 0 [ 711.932072][ T122] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 711.964501][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.997927][ T122] usb 1-1: Product: syz [ 712.018507][ T122] usb 1-1: Manufacturer: syz [ 712.398677][ T122] usb 1-1: SerialNumber: syz [ 712.769459][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 712.778530][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 712.932839][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 712.968388][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 713.080025][ T5183] Bluetooth: hci2: command tx timeout [ 713.329778][T15299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.338270][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.365027][T15299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.577641][T15299] hsr_slave_0: entered promiscuous mode [ 713.584476][T15299] hsr_slave_1: entered promiscuous mode [ 713.591175][T15299] debugfs: 'hsr0' already exists in 'hsr' [ 713.596993][T15299] Cannot create hsr debugfs directory [ 714.447546][ T5982] usb 6-1: USB disconnect, device number 5 [ 714.572753][ T122] usb 1-1: selecting invalid altsetting 0 [ 714.584183][ T122] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 714.590701][ T122] usb 1-1: No valid video chain found. [ 715.293301][ T122] usb 1-1: selecting invalid altsetting 0 [ 715.309417][ T122] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 715.339602][ T122] usb 1-1: USB disconnect, device number 37 [ 715.639668][T15465] I/O error, dev mtdblock0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 716.312384][T15465] binder: 15456:15465 unknown command 1915712101 [ 716.318864][T15465] binder: 15456:15465 ioctl c0306201 200000000080 returned -22 [ 716.603401][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 716.624981][T15475] random: crng reseeded on system resumption [ 717.113725][T15299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 717.227524][T15299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 717.284202][T15299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 717.380634][T15299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 717.712013][T15299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.794070][T15299] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.880603][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.887692][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.122248][T15511] input: syz1 as /devices/virtual/input/input13 [ 718.229637][T15511] input: syz1 as /devices/virtual/input/input14 [ 718.528273][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.535401][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.940399][T15299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.154344][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'. [ 720.408691][T15553] overlayfs: failed to resolve './file1': -2 [ 721.477949][T15299] veth0_vlan: entered promiscuous mode [ 721.517461][T15299] veth1_vlan: entered promiscuous mode [ 721.590748][T15299] veth0_macvtap: entered promiscuous mode [ 721.618656][T15299] veth1_macvtap: entered promiscuous mode [ 721.959241][T15299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.981798][T15299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.011734][ T211] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.052781][ T3540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.634453][ T3540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.682586][ T3540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.742405][T15586] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 722.846383][T15586] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 722.861838][T15586] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 723.461956][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.484117][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.509588][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.517748][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.617046][T15606] tipc: Started in network mode [ 723.622648][T15606] tipc: Node identity 6ee6b9dd5bd9, cluster identity 4711 [ 723.632331][T15606] tipc: Enabled bearer , priority 0 [ 723.647173][T15606] syzkaller0: entered promiscuous mode [ 723.654920][T15606] syzkaller0: entered allmulticast mode [ 723.674507][T15606] tipc: Resetting bearer [ 723.689082][T15605] tipc: Resetting bearer [ 723.707993][T15605] tipc: Disabling bearer [ 724.705152][T15612] input: syz1 as /devices/virtual/input/input15 [ 724.869355][T15623] syzkaller1: entered promiscuous mode [ 724.900078][T15623] syzkaller1: entered allmulticast mode [ 725.367872][T15621] lo speed is unknown, defaulting to 1000 [ 727.002988][T15649] overlayfs: failed to resolve './file1': -2 [ 730.252111][T15680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2580'. [ 730.819471][T15692] program syz.5.2582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.089976][ T24] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 731.429870][ T5935] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 731.542907][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.553248][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 731.564554][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 731.575922][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 731.601365][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.622125][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.635919][ T24] usb 1-1: Manufacturer: syz [ 731.655228][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 731.674121][ T24] usb 1-1: config 0 descriptor?? [ 731.761642][ T5935] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 732.003570][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.042463][ T5935] usb 6-1: Product: syz [ 732.051645][ T24] rc_core: IR keymap rc-hauppauge not found [ 732.059169][ T5935] usb 6-1: Manufacturer: syz [ 732.068970][ T24] Registered IR keymap rc-empty [ 732.074261][ T5935] usb 6-1: SerialNumber: syz [ 732.084054][ T5935] usb 6-1: config 0 descriptor?? [ 732.165704][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 732.211304][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 732.233980][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 732.378665][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 732.804911][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 732.900331][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 732.942029][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.005030][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.040235][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.112919][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.161028][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.200152][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.284145][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.343750][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 733.423889][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 733.442173][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 733.463441][ T24] usb 1-1: USB disconnect, device number 38 [ 734.451153][ T9] usb 6-1: USB disconnect, device number 6 [ 734.911022][T15754] netlink: 'syz.5.2592': attribute type 21 has an invalid length. [ 734.919088][T15754] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2592'. [ 734.929656][T15754] netlink: 'syz.5.2592': attribute type 5 has an invalid length. [ 734.937667][T15754] netlink: 'syz.5.2592': attribute type 6 has an invalid length. [ 734.945763][T15754] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2592'. [ 735.330184][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2596'. [ 741.395186][T14871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 741.406113][T14871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 741.414374][T14871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 741.434906][T14871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 741.442578][T14871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 741.649757][T15842] lo speed is unknown, defaulting to 1000 [ 742.312365][T15842] chnl_net:caif_netlink_parms(): no params data found [ 743.470542][T14871] Bluetooth: hci4: command tx timeout [ 743.493379][T15842] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.537914][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.554447][T15842] bridge_slave_0: entered allmulticast mode [ 743.565003][T15842] bridge_slave_0: entered promiscuous mode [ 743.694225][T15842] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.709045][T15842] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.717175][T15842] bridge_slave_1: entered allmulticast mode [ 743.742837][T15842] bridge_slave_1: entered promiscuous mode [ 744.932665][T15874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2615'. [ 745.466555][T15842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.579936][T14871] Bluetooth: hci4: command tx timeout [ 745.647907][T15842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.755896][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 745.781884][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 745.789953][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 745.797555][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 745.804947][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 746.127897][T15842] team0: Port device team_slave_0 added [ 746.143506][T15842] team0: Port device team_slave_1 added [ 746.222760][T15885] qnx6: unable to read the first superblock [ 746.241909][ T5935] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 746.400408][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 746.679651][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.686419][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.873301][ T5935] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 746.892235][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.927453][ T5935] usb 6-1: config 0 descriptor?? [ 746.987874][ T5935] gspca_main: sunplus-2.14.0 probing 041e:400b [ 747.168714][T15889] hugetlbfs: syz.0.2619 (15889): Using mlock ulimits for SHM_HUGETLB is obsolete [ 747.588794][ T5935] gspca_sunplus: reg_w_riv err -110 [ 747.630056][ T5183] Bluetooth: hci4: command tx timeout [ 747.638368][ T5935] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 747.829694][T15842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.846271][T15842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.874240][ T5183] Bluetooth: hci5: command tx timeout [ 747.910569][T15842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.973190][T15842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.989063][T15842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.048378][T15842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.081266][T15878] lo speed is unknown, defaulting to 1000 [ 749.402598][ T5943] usb 6-1: USB disconnect, device number 7 [ 749.701301][T15906] qnx4: no qnx4 filesystem (no root dir). [ 749.736024][ T5183] Bluetooth: hci4: command tx timeout [ 749.980021][ T5183] Bluetooth: hci5: command tx timeout [ 750.322337][T15909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2624'. [ 750.785923][T15842] hsr_slave_0: entered promiscuous mode [ 750.794368][T15842] hsr_slave_1: entered promiscuous mode [ 750.801935][T15842] debugfs: 'hsr0' already exists in 'hsr' [ 750.807774][T15842] Cannot create hsr debugfs directory [ 751.638935][T15927] fuse: Bad value for 'fd' [ 751.921201][ T30] audit: type=1326 audit(1757376275.006:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15924 comm="syz.0.2629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b0118ebe9 code=0x0 [ 752.220616][ T5183] Bluetooth: hci5: command tx timeout [ 753.041178][T15878] chnl_net:caif_netlink_parms(): no params data found [ 754.463311][ T5183] Bluetooth: hci5: command tx timeout [ 754.573629][T15842] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 755.292025][T15878] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.310317][T15878] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.373058][T15878] bridge_slave_0: entered allmulticast mode [ 755.415644][T15878] bridge_slave_0: entered promiscuous mode [ 755.461164][T15878] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.489982][T15878] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.497259][T15878] bridge_slave_1: entered allmulticast mode [ 755.563664][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2635'. [ 755.994611][T15878] bridge_slave_1: entered promiscuous mode [ 756.011717][T15842] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 756.035313][T15842] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 756.103866][T15842] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 756.134232][T15878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.161142][T15878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.299086][T15878] team0: Port device team_slave_0 added [ 756.363529][T15878] team0: Port device team_slave_1 added [ 757.325356][T15982] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 758.282905][T15988] fuse: Bad value for 'fd' [ 758.426866][T15878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.459108][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.597689][T15878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.632508][T15878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.639602][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.672566][T15878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.857064][T15878] hsr_slave_0: entered promiscuous mode [ 758.887288][T15878] hsr_slave_1: entered promiscuous mode [ 758.920994][T15878] debugfs: 'hsr0' already exists in 'hsr' [ 758.945684][T15878] Cannot create hsr debugfs directory [ 760.720605][T16004] mkiss: ax0: crc mode is auto. [ 760.784057][T15842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.217734][T15842] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.243772][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.251150][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.378461][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.385746][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.574158][T15878] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 762.603454][T15878] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 762.668956][T15842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 762.682160][T15842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.009538][T16029] sctp: [Deprecated]: syz.5.2652 (pid 16029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 763.009538][T16029] Use struct sctp_sack_info instead [ 763.245679][T15878] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 763.277437][T15878] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 763.890217][T16045] overlayfs: failed to resolve './file1': -2 [ 764.918770][T15878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.058621][T15878] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.086246][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.093480][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.178568][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.185732][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.631170][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2658'. [ 765.640731][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2658'. [ 765.823758][T15842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.348935][T16067] mkiss: ax0: crc mode is auto. [ 766.464944][T15878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.876787][T15842] veth0_vlan: entered promiscuous mode [ 768.904035][T15842] veth1_vlan: entered promiscuous mode [ 769.596628][T15842] veth0_macvtap: entered promiscuous mode [ 769.612329][T15842] veth1_macvtap: entered promiscuous mode [ 769.782245][T15842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.903937][T15842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.938533][T15878] veth0_vlan: entered promiscuous mode [ 769.977386][ T6479] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.130446][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.152197][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.188314][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.573704][T15878] veth1_vlan: entered promiscuous mode [ 770.962213][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.047687][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.195824][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.228195][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.348929][T15878] veth0_macvtap: entered promiscuous mode [ 771.393210][T15878] veth1_macvtap: entered promiscuous mode [ 771.453033][T15878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.478752][T15878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.577545][ T3497] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.611744][ T3497] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.668424][ T3497] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.687454][ T3497] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.862318][T16112] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2666'. [ 772.691090][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.698988][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.906488][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 772.916243][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 773.421838][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.429706][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.546372][T16122] mkiss: ax0: crc mode is auto. [ 777.727442][ T5183] Bluetooth: hci5: unexpected cc 0x1004 length: 9 < 11 [ 777.748768][T16153] random: crng reseeded on system resumption [ 780.171819][T16173] mkiss: ax0: crc mode is auto. [ 781.808786][ T5183] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 781.822414][ T5183] Bluetooth: hci5: Injecting HCI hardware error event [ 781.841244][ T5183] Bluetooth: hci5: hardware error 0x00 [ 782.079717][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 782.100734][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 782.131195][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 782.167078][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 782.176641][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 784.289909][ T5183] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 784.296442][T14871] Bluetooth: hci1: command tx timeout [ 785.270381][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.523498][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.664778][T16184] lo speed is unknown, defaulting to 1000 [ 786.053573][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.229325][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.353381][ T5183] Bluetooth: hci1: command tx timeout [ 786.389428][T16184] chnl_net:caif_netlink_parms(): no params data found [ 787.317317][T16244] random: crng reseeded on system resumption [ 788.011873][T16184] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.034643][T16184] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.081734][T16184] bridge_slave_0: entered allmulticast mode [ 788.230387][T16184] bridge_slave_0: entered promiscuous mode [ 788.310910][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.426056][T16184] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.434183][ T5183] Bluetooth: hci1: command tx timeout [ 788.471894][T16184] bridge_slave_1: entered allmulticast mode [ 788.504063][T16184] bridge_slave_1: entered promiscuous mode [ 788.821515][T16184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.966447][T16184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.447390][T16184] team0: Port device team_slave_0 added [ 790.269697][T16184] team0: Port device team_slave_1 added [ 790.287270][ T36] bridge_slave_1: left allmulticast mode [ 790.320701][ T36] bridge_slave_1: left promiscuous mode [ 790.340506][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.510912][ T5183] Bluetooth: hci1: command tx timeout [ 790.548291][ T36] bridge_slave_0: left allmulticast mode [ 790.587801][ T36] bridge_slave_0: left promiscuous mode [ 790.630409][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.442524][ T36] team0: Port device geneve0 removed [ 793.600142][ T5943] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 793.801351][ T5943] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 793.823743][ T5943] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 793.847170][ T5943] usb 8-1: config 220 has no interface number 2 [ 793.883319][ T5943] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 793.897666][ T5943] usb 8-1: config 220 interface 0 has no altsetting 0 [ 793.913248][ T5943] usb 8-1: config 220 interface 76 has no altsetting 0 [ 793.920306][ T5943] usb 8-1: config 220 interface 1 has no altsetting 0 [ 793.961696][ T5943] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 793.998332][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.006782][ T5943] usb 8-1: Product: syz [ 794.023169][ T5943] usb 8-1: Manufacturer: syz [ 794.027824][ T5943] usb 8-1: SerialNumber: syz [ 794.272053][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.303477][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.318335][ T36] bond0 (unregistering): Released all slaves [ 794.523554][T16184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.530809][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.556719][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.643635][T16184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.724807][T16184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.764872][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.790945][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.915037][T16184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.599077][T16184] hsr_slave_0: entered promiscuous mode [ 795.704674][T16184] hsr_slave_1: entered promiscuous mode [ 795.757124][T16184] debugfs: 'hsr0' already exists in 'hsr' [ 795.902284][T16184] Cannot create hsr debugfs directory [ 797.937979][ T5943] usb 8-1: selecting invalid altsetting 0 [ 797.950300][ T5943] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 797.956704][ T5943] usb 8-1: No valid video chain found. [ 798.036033][ T5943] usb 8-1: selecting invalid altsetting 0 [ 798.041923][ T5943] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 798.127624][ T5943] usb 8-1: USB disconnect, device number 2 [ 798.405763][T16375] netlink: 'syz.8.2720': attribute type 21 has an invalid length. [ 798.413983][T16375] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2720'. [ 798.855699][T16375] netlink: 'syz.8.2720': attribute type 5 has an invalid length. [ 798.863732][T16375] netlink: 'syz.8.2720': attribute type 6 has an invalid length. [ 798.871737][T16375] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2720'. [ 800.487188][ T36] hsr_slave_0: left promiscuous mode [ 800.525336][ T36] hsr_slave_1: left promiscuous mode [ 800.546669][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.561106][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.588580][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.606409][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.636022][ T36] veth1_macvtap: left promiscuous mode [ 800.652037][ T36] veth0_macvtap: left promiscuous mode [ 800.668093][ T36] veth1_vlan: left promiscuous mode [ 800.678088][ T36] veth0_vlan: left promiscuous mode [ 800.695770][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 802.387937][T16412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.955629][ T36] team0 (unregistering): Port device team_slave_1 removed [ 805.266105][T16442] 9pnet_fd: Insufficient options for proto=fd [ 806.951954][ T5935] lo speed is unknown, defaulting to 1000 [ 806.982124][ T5935] infiniband syz0: ib_query_port failed (-19) [ 807.053623][T16184] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 807.593463][T16184] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 808.116085][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.123645][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.219550][T16184] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 808.361070][T16184] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 811.648321][T16498] tipc: Enabling of bearer rejected, failed to enable media [ 812.298536][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2750'. [ 812.476482][T16184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.467826][T16522] ALSA: mixer_oss: invalid OSS volume '' [ 813.517574][T16522] netlink: 'syz.7.2751': attribute type 8 has an invalid length. [ 814.485607][T16184] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.529675][T11412] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.536967][T11412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.103152][T11412] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.110277][T11412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.198364][ T36] IPVS: stop unused estimator thread 0... [ 817.491528][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2760'. [ 817.555309][T16184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.663742][T16591] kvm: emulating exchange as write [ 821.748171][T16184] veth0_vlan: entered promiscuous mode [ 821.816183][T16184] veth1_vlan: entered promiscuous mode [ 821.824638][T16609] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2768'. [ 822.978744][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2769'. [ 823.210731][T16184] veth0_macvtap: entered promiscuous mode [ 823.217058][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 823.233459][T16184] veth1_macvtap: entered promiscuous mode [ 823.338058][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 823.364567][T16184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.397619][T16184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.535063][ T211] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.587465][ T211] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.759268][ T211] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.529661][ T211] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.547690][T16630] lo speed is unknown, defaulting to 1000 [ 824.585705][T16630] lo speed is unknown, defaulting to 1000 [ 824.626017][T16630] lo speed is unknown, defaulting to 1000 [ 824.821299][T16630] infiniband sz1: set down [ 824.825988][T16630] infiniband sz1: added lo [ 824.831530][T16630] sz1: rxe_create_cq: returned err = -12 [ 824.837492][T16630] infiniband sz1: Couldn't create ib_mad CQ [ 824.843643][T16630] infiniband sz1: Couldn't open port 1 [ 824.871461][ T5943] lo speed is unknown, defaulting to 1000 [ 824.914061][T16630] RDS/IB: sz1: added [ 824.918374][T16630] smc: adding ib device sz1 with port count 1 [ 824.924789][T16630] smc: ib device sz1 port 1 has no pnetid [ 824.942662][T16630] lo speed is unknown, defaulting to 1000 [ 824.968756][ T5943] lo speed is unknown, defaulting to 1000 [ 825.193239][T16630] lo speed is unknown, defaulting to 1000 [ 825.414636][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2777'. [ 825.445693][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2777'. [ 826.504550][T16630] lo speed is unknown, defaulting to 1000 [ 826.504591][T11412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.533796][T11412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.855454][T16630] lo speed is unknown, defaulting to 1000 [ 827.023380][T16630] lo speed is unknown, defaulting to 1000 [ 827.048443][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.198227][T16630] lo speed is unknown, defaulting to 1000 [ 827.317658][T16630] lo speed is unknown, defaulting to 1000 [ 827.519590][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.492960][T16669] netlink: 'syz.0.2783': attribute type 2 has an invalid length. [ 830.672476][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 830.985590][T16693] overlayfs: failed to resolve './file1': -2 [ 832.093999][T16701] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 833.542869][T16712] wg2: entered promiscuous mode [ 833.578072][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2796'. [ 833.595839][T16712] wg2: entered allmulticast mode [ 836.582560][T16740] overlayfs: failed to resolve './file1': -2 [ 838.571090][T16749] ptrace attach of "./syz-executor exec"[16184] was attempted by "./syz-executor exec"[16749] [ 838.816403][T16749] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 838.923151][T16749] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 839.009372][T16749] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 839.041977][T16749] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 839.168890][T16749] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 839.356140][T16749] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 840.096311][T16749] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 840.144922][T16749] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 840.230066][T16749] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 840.319766][T16749] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 843.779922][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2817'. [ 846.633632][T16815] @: renamed from vlan0 (while UP) [ 848.246984][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2828'. [ 851.402873][T16899] vivid-001: ================= START STATUS ================= [ 851.410926][T16899] vivid-001: Radio HW Seek Mode: Bounded [ 851.416670][T16899] vivid-001: Radio Programmable HW Seek: false [ 851.422882][T16899] vivid-001: RDS Rx I/O Mode: Block I/O [ 851.428416][T16899] vivid-001: Generate RBDS Instead of RDS: false [ 851.435387][T16899] vivid-001: RDS Reception: true [ 851.440354][T16899] vivid-001: RDS Program Type: 0 inactive [ 851.446065][T16899] vivid-001: RDS PS Name: inactive [ 851.451310][T16899] vivid-001: RDS Radio Text: inactive [ 851.456866][T16899] vivid-001: RDS Traffic Announcement: false inactive [ 851.463671][T16899] vivid-001: RDS Traffic Program: false inactive [ 851.470077][T16899] vivid-001: RDS Music: false inactive [ 851.475547][T16899] vivid-001: ================== END STATUS ================== [ 851.709817][ T5982] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 852.561213][ T5982] usb 8-1: Using ep0 maxpacket: 16 [ 852.610852][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.751233][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.763316][ T5982] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 852.775065][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.792637][ T5982] usb 8-1: config 0 descriptor?? [ 853.477122][T16920] I/O error, dev mtdblock0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 854.720056][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2844'. [ 854.929474][ T5982] usbhid 8-1:0.0: can't add hid device: -71 [ 854.990168][ T5982] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 855.043141][ T5982] usb 8-1: USB disconnect, device number 3 [ 866.541848][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 867.326629][T17043] input: syz1 as /devices/virtual/input/input17 [ 867.526382][T17020] 9pnet_fd: Insufficient options for proto=fd [ 869.410553][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2876'. [ 869.738201][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.744716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.729122][ T5183] Bluetooth: hci1: link tx timeout [ 873.736018][ T5183] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 873.866514][ T5873] Bluetooth: hci1: link tx timeout [ 873.871952][ T5873] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 875.043916][T17100] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.136035][T17102] mkiss: ax0: crc mode is auto. [ 875.227638][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2889'. [ 875.870417][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 876.347565][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2893'. [ 877.559588][T17121] ubi31: attaching mtd0 [ 877.985833][T17121] ubi31 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry [ 877.997010][T17121] ubi31 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry [ 878.008207][T17121] ubi31 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry [ 878.019344][T17121] ubi31 error: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read 0 bytes [ 878.029433][T17121] CPU: 1 UID: 0 PID: 17121 Comm: syz.9.2893 Not tainted syzkaller #0 PREEMPT(full) [ 878.029462][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.029476][T17121] Call Trace: [ 878.029484][T17121] [ 878.029491][T17121] dump_stack_lvl+0x189/0x250 [ 878.029522][T17121] ? __pfx_ubi_err+0x10/0x10 [ 878.029542][T17121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.029571][T17121] ? __pfx_do_sched_yield+0x10/0x10 [ 878.029605][T17121] ubi_io_read+0x68d/0xb00 [ 878.029641][T17121] ? __pfx_ubi_io_read+0x10/0x10 [ 878.029677][T17121] ? rcu_is_watching+0x15/0xb0 [ 878.029708][T17121] ubi_io_read_ec_hdr+0x9d/0x630 [ 878.029735][T17121] ? ubi_io_is_bad+0xc5/0x280 [ 878.029765][T17121] ubi_attach+0x78a/0x5c00 [ 878.029789][T17121] ? __vmalloc_node_range_noprof+0x1249/0x12f0 [ 878.029849][T17121] ? __pfx_ubi_attach+0x10/0x10 [ 878.029883][T17121] ? vmalloc_noprof+0xb2/0xf0 [ 878.029910][T17121] ubi_attach_mtd_dev+0x1b75/0x37e0 [ 878.029967][T17121] ctrl_cdev_ioctl+0x28b/0x3e0 [ 878.029997][T17121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 878.030047][T17121] ? __fget_files+0x3a0/0x420 [ 878.030071][T17121] ? __fget_files+0x2a/0x420 [ 878.030097][T17121] ? bpf_lsm_file_ioctl+0x9/0x20 [ 878.030120][T17121] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 878.030141][T17121] __se_sys_ioctl+0xfc/0x170 [ 878.030165][T17121] do_syscall_64+0xfa/0xfa0 [ 878.030190][T17121] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.030218][T17121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.030237][T17121] ? clear_bhb_loop+0x60/0xb0 [ 878.030263][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.030282][T17121] RIP: 0033:0x7fab5498ebe9 [ 878.030302][T17121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.030321][T17121] RSP: 002b:00007fab52bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.030344][T17121] RAX: ffffffffffffffda RBX: 00007fab54bc6180 RCX: 00007fab5498ebe9 [ 878.030359][T17121] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000008 [ 878.030371][T17121] RBP: 00007fab54a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 878.030384][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.030395][T17121] R13: 00007fab54bc6218 R14: 00007fab54bc6180 R15: 00007ffece576568 [ 878.030432][T17121] [ 878.261272][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.290597][T17121] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 879.701799][T17136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2898'. [ 880.284310][T17150] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2902'. [ 880.340320][ T43] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 880.564536][T17153] mkiss: ax0: crc mode is auto. [ 880.614220][ T43] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 880.737970][T17155] random: crng reseeded on system resumption [ 880.769847][ T43] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 880.916888][ T43] usb 9-1: config 220 has no interface number 2 [ 880.959129][ T43] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 881.023776][ T43] usb 9-1: config 220 interface 0 has no altsetting 0 [ 881.068928][ T43] usb 9-1: config 220 interface 76 has no altsetting 0 [ 881.131186][ T43] usb 9-1: config 220 interface 1 has no altsetting 0 [ 881.207850][ T43] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 881.217916][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.226215][ T43] usb 9-1: Product: syz [ 881.233948][ T43] usb 9-1: Manufacturer: syz [ 881.239016][ T43] usb 9-1: SerialNumber: syz [ 886.045027][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 886.740368][ T43] usb 9-1: selecting invalid altsetting 0 [ 886.760301][ T43] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 886.915173][ T43] usb 9-1: No valid video chain found. [ 887.918708][ T43] usb 9-1: selecting invalid altsetting 0 [ 887.924723][T17203] mkiss: ax0: crc mode is auto. [ 887.929705][ T43] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 888.154234][ T43] usb 9-1: USB disconnect, device number 2 [ 890.890875][T17231] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2927'. [ 890.917700][T17233] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.633222][T17238] create_pit_timer: 11 callbacks suppressed [ 891.633233][T17238] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 892.256135][T16644] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 892.306426][T17255] mkiss: ax0: crc mode is auto. [ 892.462745][T16644] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 892.478580][T16644] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 892.555228][T16644] usb 8-1: config 220 has no interface number 2 [ 892.736141][T16644] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 893.448276][T16644] usb 8-1: config 220 interface 0 has no altsetting 0 [ 893.666860][T16644] usb 8-1: config 220 interface 76 has no altsetting 0 [ 893.761919][T16644] usb 8-1: config 220 interface 1 has no altsetting 0 [ 893.868546][T16644] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 893.954588][T16644] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.038172][T16644] usb 8-1: Product: syz [ 894.085951][T16644] usb 8-1: Manufacturer: syz [ 894.126175][T16644] usb 8-1: SerialNumber: syz [ 896.220079][T16644] usb 8-1: can't set config #220, error -71 [ 896.259411][T16644] usb 8-1: USB disconnect, device number 4 [ 896.527225][T17289] mkiss: ax0: crc mode is auto. [ 897.669584][T17297] rdma_rxe: rxe_newlink: failed to add lo [ 897.871379][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 897.888201][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 897.897490][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 897.906418][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 897.913988][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 898.012053][T17303] Bluetooth: MGMT ver 1.23 [ 899.214619][T17298] lo speed is unknown, defaulting to 1000 [ 899.611344][T17313] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2952'. [ 899.620628][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2952'. [ 900.404315][ T5183] Bluetooth: hci0: command tx timeout [ 901.039755][T16644] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 901.261533][T16644] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 901.378475][T16644] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 901.438627][T17330] mkiss: ax0: crc mode is auto. [ 901.525683][T16644] usb 9-1: config 220 has no interface number 2 [ 901.587781][T16644] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 901.632603][T16644] usb 9-1: config 220 interface 0 has no altsetting 0 [ 901.634279][T17298] chnl_net:caif_netlink_parms(): no params data found [ 902.315930][T17338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.390016][T16644] usb 9-1: config 220 interface 76 has no altsetting 0 [ 902.492139][ T5873] Bluetooth: hci0: command tx timeout [ 902.507906][T16644] usb 9-1: config 220 interface 1 has no altsetting 0 [ 902.821202][T16644] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 902.850876][T16644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.879316][T16644] usb 9-1: Product: syz [ 902.883823][T16644] usb 9-1: Manufacturer: syz [ 902.888450][T16644] usb 9-1: SerialNumber: syz [ 903.536955][T17298] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.570097][T17298] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.630003][T17298] bridge_slave_0: entered allmulticast mode [ 903.723465][T17298] bridge_slave_0: entered promiscuous mode [ 903.897507][T17298] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.939887][T17298] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.947193][T17298] bridge_slave_1: entered allmulticast mode [ 903.987915][T17298] bridge_slave_1: entered promiscuous mode [ 904.237731][T16644] usb 9-1: can't set config #220, error -71 [ 904.400815][T16644] usb 9-1: USB disconnect, device number 3 [ 904.995850][ T5873] Bluetooth: hci0: command tx timeout [ 905.006988][T17298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.164485][T17298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.265977][T17366] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2964'. [ 906.274986][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2964'. [ 906.606421][T17376] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI [ 906.606450][T17376] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597] [ 906.606469][T17376] CPU: 0 UID: 0 PID: 17376 Comm: syz.8.2967 Not tainted syzkaller #0 PREEMPT(full) [ 906.606490][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 906.606501][T17376] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 906.606526][T17376] Code: e8 f2 1f d7 fc 49 c7 07 00 00 00 00 eb 0e e8 14 1d 73 fc eb 05 e8 0d 1d 73 fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 ce 1e d7 fc 4d 8b 3e 4d 85 ff 74 [ 906.606540][T17376] RSP: 0018:ffffc9000237f9e0 EFLAGS: 00010206 [ 906.606552][T17376] RAX: ffffffff854c8f03 RBX: 0000000000000000 RCX: 0000000000080000 [ 906.606562][T17376] RDX: ffffc90022b0e000 RSI: 000000000000040e RDI: 000000000000040f [ 906.606571][T17376] RBP: ffffc9000237fa90 R08: ffffffff8fc3c7cf R09: 1ffffffff1f878f9 [ 906.606580][T17376] R10: dffffc0000000000 R11: fffffbfff1f878fa R12: 00000000000000b2 [ 906.606588][T17376] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a034a30 [ 906.606597][T17376] FS: 00007fa5ded476c0(0000) GS:ffff8881259f1000(0000) knlGS:0000000000000000 [ 906.606608][T17376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 906.606617][T17376] CR2: 0000000000000000 CR3: 00000000798c6000 CR4: 00000000003526f0 [ 906.606630][T17376] Call Trace: [ 906.606635][T17376] [ 906.606642][T17376] ? vt_disallocate_all+0x3b/0xe0 [ 906.606659][T17376] ? __pfx_vc_deallocate+0x10/0x10 [ 906.606676][T17376] ? is_console_locked+0x9/0x20 [ 906.606687][T17376] vt_disallocate_all+0x60/0xe0 [ 906.606714][T17376] vt_ioctl+0x1adc/0x1f20 [ 906.606730][T17376] ? __pfx_vt_ioctl+0x10/0x10 [ 906.606748][T17376] ? __fget_files+0x2a/0x420 [ 906.606764][T17376] ? tty_jobctrl_ioctl+0x369/0xb70 [ 906.606779][T17376] ? __fget_files+0x3a0/0x420 [ 906.606793][T17376] ? __fget_files+0x2a/0x420 [ 906.606808][T17376] tty_ioctl+0x926/0xde0 [ 906.606819][T17376] ? __pfx_tty_ioctl+0x10/0x10 [ 906.606830][T17376] __se_sys_ioctl+0xfc/0x170 [ 906.606842][T17376] do_syscall_64+0xfa/0xfa0 [ 906.606859][T17376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.606870][T17376] ? asm_sysvec_call_function_single+0x1a/0x20 [ 906.606882][T17376] ? clear_bhb_loop+0x60/0xb0 [ 906.606894][T17376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.606904][T17376] RIP: 0033:0x7fa5e0b8ebe9 [ 906.606914][T17376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.606924][T17376] RSP: 002b:00007fa5ded47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.606937][T17376] RAX: ffffffffffffffda RBX: 00007fa5e0dc6180 RCX: 00007fa5e0b8ebe9 [ 906.606945][T17376] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000009 [ 906.606952][T17376] RBP: 00007fa5e0c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 906.606960][T17376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.606965][T17376] R13: 00007fa5e0dc6218 R14: 00007fa5e0dc6180 R15: 00007ffd999e2938 [ 906.606975][T17376] [ 906.606978][T17376] Modules linked in: [ 906.607000][T17376] ---[ end trace 0000000000000000 ]--- [ 906.607012][T17376] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 906.607066][T17376] Code: e8 f2 1f d7 fc 49 c7 07 00 00 00 00 eb 0e e8 14 1d 73 fc eb 05 e8 0d 1d 73 fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 ce 1e d7 fc 4d 8b 3e 4d 85 ff 74 [ 906.607094][T17376] RSP: 0018:ffffc9000237f9e0 EFLAGS: 00010206 [ 906.607140][T17376] RAX: ffffffff854c8f03 RBX: 0000000000000000 RCX: 0000000000080000 [ 906.607166][T17376] RDX: ffffc90022b0e000 RSI: 000000000000040e RDI: 000000000000040f [ 906.607191][T17376] RBP: ffffc9000237fa90 R08: ffffffff8fc3c7cf R09: 1ffffffff1f878f9 [ 906.607217][T17376] R10: dffffc0000000000 R11: fffffbfff1f878fa R12: 00000000000000b2 [ 906.607243][T17376] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a034a30 [ 906.607269][T17376] FS: 00007fa5ded476c0(0000) GS:ffff8881259f1000(0000) knlGS:0000000000000000 [ 906.607304][T17376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 906.607315][T17376] CR2: 0000000000000000 CR3: 00000000798c6000 CR4: 00000000003526f0 [ 906.608301][T17376] Kernel panic - not syncing: Fatal exception [ 906.608607][T17376] Kernel Offset: disabled