last executing test programs: 10m7.193499795s ago: executing program 32 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100001000000", @ANYBLOB="000000004000000034001680300001"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 10m6.082198425s ago: executing program 33 (id=432): socket$inet6(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 10m1.992581971s ago: executing program 34 (id=441): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xdf}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9m57.293047842s ago: executing program 35 (id=452): acct(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 9m49.891672227s ago: executing program 36 (id=459): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f00000000c0)=0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="20001100000004"], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0xb, 0xc8, {0xc8, 0x6, "78ae788ec5f6b70747965485621a57797dc7cd2912521fd75fd467e8658f02ca1a4e6c1685dfbd7a22bc089a57f57be733b093b8f541db971450b995b09eda865aa59b41a9d771f933e2e2ee31e69ddaef8f94e6d68dacb432904d349a3677ef0ad610e1188cf5465191a70f00310287f36a3e6a461fc36d298ebc9591ef4eade8dae976f529c806e79079cca8939a1944672e67fbbd19dbce765b0f743cf90d3c68d3bb9481dad1fffe5046d7c19076e95ebe881ace074f07b50e4ea5e13f6c045da4dd328d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000380)={0x0, 0xf, 0x62, {0x5, 0xf, 0x62, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x8000, 0xf00, 0x4, [0x30]}, @generic={0x4d, 0x10, 0x2, "8943fbc7706c46ca367ba251de985a97e07c01873c05f54d841d2d95c78a4bc477190bf08b309d250c09aed2f52be28d05ed7c7ecb5bc6fd779c7615a32272a254a4a45ea8be2151fc6c"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x80, 0x6, 0x2, "9971306b", "cb230538"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x2, 0x8c, 0x3, 0x5, 0x25}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="2001cf0000005053ddfd4ccc2dd88689dbcd08a972184f7c7498a9f50cb13ee8a36695baf646bb5cd41e0f6b4f10b7d27d51c5b962c7d3ba12bfbf9c4b8fba13b571db0473ac3cec8f9e412eed284e5a099c038a69c43520d81f963094e2abc93a57bf874789c444ac078d2fc83ea513a2bbf247c341fb9c4b9638553fa4e21e43b474b7de3ba2bf5a5c561b3587a0b57db4a5e7ade49a0fce479c5d4eb7586de5a9bfffffff72e303681b47ffa074b39455810038e2b6ebcbf9adaa2d3b18dd42e803d7b906625351ee09f9490e9174d6eff9dbff"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x400, 0x48}}, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0xb, 0x2, "a508"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xa4}, &(0x7f0000000800)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "ae04"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x5f4e}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x11}}) syz_io_uring_setup(0x1866, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) 9m7.09374558s ago: executing program 37 (id=564): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186300000700000000000000010000001836000003000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000200000000000000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000b800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f00000001c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0xcc}}, 0x0) r5 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0xffffffffffffff1b}}], 0x2, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x1409, 0x105, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x810) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 8m49.416533724s ago: executing program 38 (id=606): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8m48.306402336s ago: executing program 8 (id=610): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m48.174796906s ago: executing program 8 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x900000, 0x52424752, 0x3, @discrete={0x8, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x3, 0x10) iopl(0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000080)=0x3c) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000002c0)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 8m47.548687913s ago: executing program 8 (id=614): set_mempolicy(0x3, 0x0, 0xe0) syz_clone(0x2843080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(0x0, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendfile(r3, r2, &(0x7f0000000000)=0x7, 0x1) close_range(r0, r2, 0x0) 8m46.425100133s ago: executing program 8 (id=617): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x8a) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 8m45.840265684s ago: executing program 8 (id=618): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x0) r2 = dup(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x4, 0xb) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m45.378788243s ago: executing program 8 (id=619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff00"/127]}, 0xf7) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 8m45.144648828s ago: executing program 39 (id=619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff00"/127]}, 0xf7) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 8m26.211137454s ago: executing program 2 (id=661): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = fsopen(&(0x7f0000000740)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0xfffffffffffffffe, 0x0) r2 = syz_io_uring_setup(0x2293, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8m23.248082184s ago: executing program 2 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000001740)=0x10006, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) pwrite64(r7, 0x0, 0x0, 0x6343) close(r5) 8m21.042870676s ago: executing program 2 (id=670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000001740)=0x10006, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) pwrite64(r7, 0x0, 0x0, 0x6343) close(r5) 8m19.836999981s ago: executing program 2 (id=673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000001740)=0x10006, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) pwrite64(r7, 0x0, 0x0, 0x6343) close(r5) 8m17.225097632s ago: executing program 2 (id=677): setreuid(0xee01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000002200)={0x20, r5, 0x0, 0x0, &(0x7f0000000140)}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1ffffffffffe}, {0x2, 0x6}]}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r5, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x1c}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r5, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLL', 0x15, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000003c0)={0x18, r5}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r5, 0x1c, 0x3, 0x2}) setpriority(0x0, 0x0, 0xfffffffffffffffb) socket$key(0xf, 0x3, 0x2) 8m15.008844255s ago: executing program 2 (id=681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x8a) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 8m6.308511307s ago: executing program 4 (id=699): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x78a}], 0x1, 0x40031022, 0x0) sendmsg$can_raw(r0, 0x0, 0x20000000) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8m5.042730785s ago: executing program 4 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) socket$isdn_base(0x22, 0x3, 0x0) write$UHID_INPUT(r4, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 8m2.827172692s ago: executing program 4 (id=706): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3b, 0x4) sendto$packet(r0, &(0x7f00000000c0), 0x0, 0x28000000, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m1.834741297s ago: executing program 4 (id=709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x8a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m58.847329593s ago: executing program 40 (id=681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x8a) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m58.717172607s ago: executing program 4 (id=715): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xe7d, 0x80, 0x3, 0x3aa}, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 7m57.142281912s ago: executing program 4 (id=719): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010417"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-neon)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000c5fc28fa9700e0f6aa378af7e1430c2ffce6139d6a936d72702800d0888141f04731a43a5a3b84", @ANYRES16=r2, @ANYBLOB="0500000000000000000006000000080003", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0xffffffe2, 0x1, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000200)=[0x8000, 0x5, 0x8, 0x401, 0x7ff], 0x0, &(0x7f0000000480), 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES8=r4, @ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7m56.840204022s ago: executing program 41 (id=719): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010417"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-neon)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000c5fc28fa9700e0f6aa378af7e1430c2ffce6139d6a936d72702800d0888141f04731a43a5a3b84", @ANYRES16=r2, @ANYBLOB="0500000000000000000006000000080003", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0xffffffe2, 0x1, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000200)=[0x8000, 0x5, 0x8, 0x401, 0x7ff], 0x0, &(0x7f0000000480), 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES8=r4, @ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="5b000e0080000000080211000000080211000001505050505050000000000000000000006400000004060000000000000602000025030034003c040106b8042d1a000000000000000000000000000000000000000000020000000000080026006c09000008000c006400000008000d0000000000d6000f0001d0b9e5539072016263b860b62760ce8121f099c99af28a9374232a08c9aa9d51cb2ddb6a6c9e9752086616674fcea9f5f1891363b7857547d31a5d04c02af72ebb0bff99a076c069e936881bed27fb15bfd00d84048560dfe82e285700cda9d527165d5abab2faabbd068fab2376e98e88833b538cc788f96e951678a04f7404667c360b85aacd7847044a78e53110ff891a35967afda3ebdc55a1ed7d95578e90e01bbd13b1e77b31b0"], 0x168}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7m53.765590934s ago: executing program 9 (id=726): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) socket(0x1d, 0x2, 0x6) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x9d9, 0x40c) 7m52.188278185s ago: executing program 9 (id=728): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) 7m44.605844409s ago: executing program 9 (id=740): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 7m41.291125444s ago: executing program 9 (id=747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m39.786907709s ago: executing program 9 (id=748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$unix(0x1, 0x1, 0x0) 7m39.221675214s ago: executing program 9 (id=751): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmmsg$sock(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7m38.733004583s ago: executing program 42 (id=751): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmmsg$sock(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7m32.706416321s ago: executing program 0 (id=762): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) 7m28.996591261s ago: executing program 0 (id=766): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x25cc, 0x8000000, 0x0, 0x1, 0x10}, 0x401, 0x1, 0x9, 0x0, 0x2, 0x19, 0xc, 0x14, 0x7, 0xc, {0x3ff, 0xf9, 0x6, 0x3, 0x9, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 7m28.161671444s ago: executing program 0 (id=768): socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) 7m26.965697311s ago: executing program 0 (id=770): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x8a) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m26.143441199s ago: executing program 0 (id=771): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) 7m25.621026206s ago: executing program 0 (id=772): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x0) r2 = dup(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x4, 0xb) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m25.344183794s ago: executing program 43 (id=772): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x0) r2 = dup(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x4, 0xb) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.989921538s ago: executing program 7 (id=2286): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x40}}, 0x0) 46.769331434s ago: executing program 7 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 46.124698381s ago: executing program 7 (id=2292): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) 42.006829396s ago: executing program 7 (id=2294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='tcp_probe\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65c", 0x58, 0x40040, 0x0, 0x0) 41.959030538s ago: executing program 7 (id=2295): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x204101, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r3, 0x200004) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 41.179174767s ago: executing program 7 (id=2298): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x15, 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x85, &(0x7f0000000840)=""/133}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 35.517506187s ago: executing program 1 (id=2316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x4, 0x8}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 35.437314998s ago: executing program 5 (id=2317): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d00f07251ca60bc24eab556a71a251e6182949a3651f60a84c910d5938037e786a6d0bdd7fcf50e4509985300782c37ba90adcd1500000080bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) 34.905879321s ago: executing program 5 (id=2320): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000380)="f56e083b2ed241eb727c6ef5298126c25a0234", 0x13}, {&(0x7f0000000280)="48a0e8", 0x3}], 0x3, 0x0, 0x0, 0x40884}}], 0x1, 0x0) 34.701672556s ago: executing program 5 (id=2321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) close(r1) 34.511227162s ago: executing program 5 (id=2323): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x2, 0x1, "32401804000200100000090000000000000000002100000000000008ac00", 0x31324d59}) 34.367005018s ago: executing program 5 (id=2324): sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000880), 0x20840, 0x0) 34.234060808s ago: executing program 5 (id=2325): r0 = openat$tun(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bond0\x00', 0x200}) 28.841849541s ago: executing program 6 (id=2335): sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000880), 0x20840, 0x0) 25.633542579s ago: executing program 44 (id=2298): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x15, 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x85, &(0x7f0000000840)=""/133}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 23.566408986s ago: executing program 1 (id=2337): getitimer(0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) mkdir(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000500)=""/4096, 0x1000) 18.684948714s ago: executing program 45 (id=2325): r0 = openat$tun(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bond0\x00', 0x200}) 16.847558258s ago: executing program 6 (id=2341): syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000030000000000008100000088a863"], 0x0) 16.757243976s ago: executing program 1 (id=2342): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {0x3}, {}, {0xfffffffd}], 0x0, 0x0, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) 16.604044117s ago: executing program 6 (id=2343): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x0, 0x0, 0x5}}) 16.507506522s ago: executing program 6 (id=2344): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7000004, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 13.981672254s ago: executing program 6 (id=2345): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xfff8, 0xf}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.286944003s ago: executing program 3 (id=2348): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) copy_file_range(r1, 0x0, r0, 0x0, 0xa78, 0x10000000000000) 12.177133654s ago: executing program 1 (id=2349): sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000880), 0x20840, 0x0) 12.088453342s ago: executing program 3 (id=2350): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@alg={0xe0, 0x10, 0xcf1d58f91855edcb, 0x70bd26, 0x0, {{'wp256-generic\x00'}, '\x00', '\x00', 0x2000, 0x2400}}, 0xe0}}, 0x40010) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001000090500000000"], 0xe0}], 0x1}, 0x0) 11.906756065s ago: executing program 3 (id=2351): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) splice(r4, 0x0, r5, 0x0, 0x1fffffffffff, 0x0) 10.986077956s ago: executing program 3 (id=2352): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x6c) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x38c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 10.880535753s ago: executing program 3 (id=2353): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) r2 = epoll_create(0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = dup2(r2, r3) close_range(r4, 0xffffffffffffffff, 0x0) 286.572515ms ago: executing program 6 (id=2354): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)='4', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=ANY=[], 0xb0}}], 0x2, 0x400c878) 93.4347ms ago: executing program 1 (id=2355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @bcast]}, 0x48) 92.153716ms ago: executing program 3 (id=2356): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c472a440b72040155ab7d29a03010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000006c0)={0x40, 0xe, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000540)={0x40, 0x30, 0x1, 'a'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=2357): r0 = io_uring_setup(0xfc2, &(0x7f0000000180)={0x0, 0x200000}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) openat$hwrng(0xffffffffffffff9c, 0x0, 0x80200, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): number 41 [ 564.016427][T10559] udevd[10559]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.037211][ T5913] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 564.063726][ T5913] usb 4-1: USB disconnect, device number 34 [ 564.067452][ T5881] usb 2-1: USB disconnect, device number 37 [ 564.332714][ T7635] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 566.218347][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 566.286865][ T7635] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 566.300437][ T7635] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 566.319999][ T7635] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 566.354329][ T7635] usb 8-1: USB disconnect, device number 31 [ 566.610789][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.621258][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 566.641429][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.652371][T11765] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 566.735855][T11765] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 566.745134][T11765] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 566.764174][ T9] usb 7-1: config 0 descriptor?? [ 566.777699][T12278] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 566.790736][T11765] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 566.801127][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 566.830060][T11765] usb 6-1: USB disconnect, device number 29 [ 567.443604][ T9] pwc: send_video_command error -71 [ 567.449373][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 567.458869][ T9] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 567.474576][ T9] usb 7-1: USB disconnect, device number 42 [ 567.948860][T11765] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 567.978253][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 568.108261][T11765] usb 8-1: Using ep0 maxpacket: 8 [ 568.117847][T11765] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.130300][T11765] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 568.155290][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.167228][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 568.176582][T11765] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.187243][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.196076][T11765] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.211911][T11765] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.221119][T11765] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.243662][ T9] usb 7-1: config 0 descriptor?? [ 568.263611][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 568.698930][ T7635] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 568.718267][T11765] usb 8-1: usb_control_msg returned -32 [ 568.723992][T11765] usbtmc 8-1:16.0: can't read capabilities [ 568.788314][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 568.823341][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 568.844299][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 568.858375][ T7635] usb 4-1: Using ep0 maxpacket: 32 [ 568.861900][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 568.876342][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 568.884883][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 568.892704][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 568.892771][ T7635] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 568.901033][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 568.915858][ T7635] usb 4-1: config 0 has no interface number 0 [ 568.916846][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 568.935072][ T7635] usb 4-1: config 0 interface 12 has no altsetting 0 [ 569.076763][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 569.249746][T12318] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 569.290120][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 569.297535][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 569.308103][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 569.727388][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 569.878986][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 569.907170][ T5881] usb 8-1: USB disconnect, device number 32 [ 569.941973][ T9] pwc: Registered as video103. [ 569.982223][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 570.070239][ T9] usb 7-1: USB disconnect, device number 43 [ 570.093542][ T7635] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 570.102850][ T7635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.111405][ T7635] usb 4-1: Product: syz [ 570.115631][ T7635] usb 4-1: Manufacturer: syz [ 570.125068][ T7635] usb 4-1: SerialNumber: syz [ 570.159192][ T7635] usb 4-1: config 0 descriptor?? [ 570.211242][ T7635] f81534 4-1:0.12: required endpoints missing [ 570.692788][T12338] dns_resolver: Unsupported content type (24) [ 572.960281][ T5881] usb 4-1: USB disconnect, device number 35 [ 574.880459][ T7635] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 575.068513][ T7635] usb 6-1: Using ep0 maxpacket: 32 [ 575.121668][ T7635] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 575.382580][ T7635] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.416914][ T7635] usb 6-1: config 0 has no interface number 0 [ 575.427303][ T7635] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.637400][ T7635] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 575.649392][ T7635] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 575.661121][ T7635] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 575.673423][ T7635] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 575.685213][ T7635] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 575.695254][ T7635] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 576.560628][ T7635] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 576.569788][ T7635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.595210][ T7635] usb 6-1: config 0 descriptor?? [ 577.609641][ T7635] usb 6-1: can't set config #0, error -71 [ 577.617855][ T7635] usb 6-1: USB disconnect, device number 30 [ 579.928312][T11765] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 580.328604][T11765] usb 7-1: Using ep0 maxpacket: 32 [ 580.359910][T11765] usb 7-1: config 0 has an invalid interface number: 136 but max is 0 [ 580.546010][T11765] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.713675][T11765] usb 7-1: config 0 has no interface number 0 [ 580.751909][T11765] usb 7-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 580.764548][T11765] usb 7-1: config 0 interface 136 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 580.807171][T11765] usb 7-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 580.833186][T12432] netlink: 'syz.5.1329': attribute type 10 has an invalid length. [ 580.878298][T11765] usb 7-1: config 0 interface 136 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 580.892996][T12432] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 581.039363][T12438] ip6t_rpfilter: unknown options [ 581.501282][ T5913] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 581.602379][T11765] usb 7-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 581.622126][T11765] usb 7-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 581.631291][T11765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.646646][T11765] usb 7-1: config 0 descriptor?? [ 581.657366][T11765] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.812675][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 581.839994][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 581.858416][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 581.870839][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 581.880863][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 581.894004][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 581.903287][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.740829][T12457] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 583.188287][ T5913] usb 4-1: usb_control_msg returned -32 [ 583.194866][T11765] snd-usb-audio 7-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 583.199856][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 583.208442][T11765] usb 7-1: USB disconnect, device number 44 [ 583.288300][ T5878] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 583.462498][ T5878] usb 8-1: Using ep0 maxpacket: 32 [ 583.473980][T12465] netlink: 828 bytes leftover after parsing attributes in process `syz.1.1336'. [ 583.641909][ T5878] usb 8-1: config 0 has an invalid interface number: 136 but max is 0 [ 583.652152][ T5878] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.689236][ T7635] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 583.713098][ T5878] usb 8-1: config 0 has no interface number 0 [ 583.767757][ T5878] usb 8-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 583.786512][ T5878] usb 8-1: config 0 interface 136 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 583.797732][ T5878] usb 8-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 583.813404][ T5878] usb 8-1: config 0 interface 136 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 583.828856][ T5878] usb 8-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 583.829326][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.846273][ T5878] usb 8-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 583.872529][ T7635] usb 6-1: Using ep0 maxpacket: 8 [ 583.890544][ T7635] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 583.903301][ T7635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.911668][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.923475][ T7635] usb 6-1: Product: syz [ 583.927752][ T7635] usb 6-1: Manufacturer: syz [ 583.933377][ T7635] usb 6-1: SerialNumber: syz [ 583.942375][ T5878] usb 8-1: config 0 descriptor?? [ 583.961166][ T5878] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.973113][ T7635] usb 6-1: config 0 descriptor?? [ 584.037268][ T5878] snd-usb-audio 8-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 584.109566][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.202873][ T7635] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 584.224687][T11765] usb 8-1: USB disconnect, device number 33 [ 585.273567][ T5878] usb 4-1: USB disconnect, device number 36 [ 586.812471][T12496] can0: slcan on ttyS3. [ 587.653835][T12495] can0 (unregistered): slcan off ttyS3. [ 587.734904][T12503] netlink: 828 bytes leftover after parsing attributes in process `syz.6.1347'. [ 587.976965][ T7635] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 588.228592][ T5913] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 588.338681][ T5878] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 588.498547][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 588.520194][ T5878] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 588.583795][ T5913] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 588.611986][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.642615][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.703468][ T5878] usb 2-1: config 0 has no interface number 0 [ 588.722878][ T5913] usb 8-1: Product: syz [ 588.734525][ T5913] usb 8-1: Manufacturer: syz [ 588.736596][ T5877] usb 6-1: USB disconnect, device number 31 [ 588.766194][ T5913] usb 8-1: SerialNumber: syz [ 588.787066][ T5878] usb 2-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 588.860453][ T5913] usb 8-1: config 0 descriptor?? [ 588.874856][ T5878] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 588.888014][ T5878] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 588.943765][ T5878] usb 2-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 588.982970][ T5878] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 589.009117][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.049931][ T5878] usb 2-1: config 0 descriptor?? [ 589.090427][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 589.101983][ T5913] hso 8-1:0.0: Failed to find BULK IN ep [ 589.117942][ T5913] usb-storage 8-1:0.0: USB Mass Storage device detected [ 589.190944][ T5878] snd-usb-audio 2-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 589.454801][ T5878] usb 2-1: USB disconnect, device number 38 [ 589.525764][ T5877] usb 8-1: USB disconnect, device number 34 [ 589.611536][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.638306][T12544] netlink: 'syz.6.1355': attribute type 1 has an invalid length. [ 589.646141][T12544] netlink: 'syz.6.1355': attribute type 2 has an invalid length. [ 590.530156][T12556] netlink: 828 bytes leftover after parsing attributes in process `syz.7.1359'. [ 591.678447][ T46] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 591.964484][T12583] ip6t_rpfilter: unknown options [ 592.384392][ T5921] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 592.409369][ T46] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.420485][ T46] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 592.432477][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 592.464639][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 593.294592][ T46] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.314321][ T46] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 593.336675][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 593.349164][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.357514][ T46] usb 8-1: Product: syz [ 593.361838][ T46] usb 8-1: Manufacturer: syz [ 593.366818][ T46] usb 8-1: SerialNumber: syz [ 593.393881][ T46] usb 8-1: config 0 descriptor?? [ 593.406872][ T5921] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 593.416183][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.424535][ T5921] usb 4-1: Product: syz [ 593.429976][ T5921] usb 4-1: Manufacturer: syz [ 593.434725][ T5921] usb 4-1: SerialNumber: syz [ 593.459895][T12569] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 593.466206][ T5921] usb 4-1: config 0 descriptor?? [ 593.633101][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1366'. [ 593.802565][ T5921] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 594.207333][ T46] rc_core: IR keymap rc-xbox-dvd not found [ 594.213468][ T46] Registered IR keymap rc-empty [ 594.219343][ T46] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 594.229675][ T46] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input37 [ 594.308390][ T46] usb 8-1: USB disconnect, device number 35 [ 594.308446][ C1] xbox_remote 8-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 594.392886][T12614] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 594.422491][T12614] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.430126][T12614] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.628269][T12614] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.635479][T12614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.643103][T12614] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.650283][T12614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.746262][T12614] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 595.260477][ T5913] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 595.418295][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 595.435974][ T5913] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 595.476596][ T5913] usb 6-1: config 0 has no interface number 0 [ 595.546750][ T5913] usb 6-1: config 0 interface 12 has no altsetting 0 [ 595.708582][ T5913] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 595.834007][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.940099][ T5913] usb 6-1: Product: syz [ 595.993441][ T5913] usb 6-1: Manufacturer: syz [ 596.015067][ T5913] usb 6-1: SerialNumber: syz [ 596.206545][ T5913] usb 6-1: config 0 descriptor?? [ 596.913691][ T5921] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 596.943449][ T5921] usb 4-1: USB disconnect, device number 37 [ 597.232294][ T5877] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 597.413623][ T5877] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.424232][ T5877] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 597.447460][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.487749][ T5877] usb 8-1: config 0 descriptor?? [ 597.517593][ T5877] pwc: Askey VC010 type 2 USB webcam detected. [ 597.528415][ T5921] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 597.611671][T12659] netlink: 'syz.6.1381': attribute type 72 has an invalid length. [ 597.620275][T12659] netlink: 'syz.6.1381': attribute type 8 has an invalid length. [ 597.698293][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 597.709469][ T5921] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 597.726508][ T5877] pwc: send_video_command error -71 [ 597.735089][ T5877] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 597.750125][ T5921] usb 2-1: config 0 has no interface number 0 [ 597.751298][ T5877] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 597.783292][ T5921] usb 2-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 597.813861][ T5877] usb 8-1: USB disconnect, device number 36 [ 597.827431][ T5921] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 597.865965][ T5921] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 597.879790][ T5921] usb 2-1: config 0 interface 136 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 597.900569][ T5921] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 597.910487][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.979000][ T5921] usb 2-1: config 0 descriptor?? [ 598.034091][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.182999][ T5921] snd-usb-audio 2-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 598.249895][ T5921] usb 2-1: USB disconnect, device number 39 [ 598.251994][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.352406][ T5913] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 598.375706][ T5913] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 598.385463][ T5913] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 598.399881][ T5913] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 598.446173][ T5913] usb 6-1: USB disconnect, device number 32 [ 599.240540][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 599.250162][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.258534][T12679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.752191][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.207695][T12679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.248036][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1386'. [ 602.168360][ T5881] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 602.178293][ T5880] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 602.318332][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 602.324810][ T5881] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 602.336327][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.344879][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.370633][ T5880] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 602.390166][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.431087][ T5880] usb 7-1: config 0 descriptor?? [ 602.438405][ T5881] usb 6-1: config 0 descriptor?? [ 602.446060][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 602.459232][ T5881] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 602.841731][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.876543][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.926257][ T5880] pwc: recv_control_msg error -71 req 02 val 2b00 [ 602.950502][ T5880] pwc: recv_control_msg error -71 req 02 val 2700 [ 602.977500][ T5880] pwc: recv_control_msg error -71 req 02 val 2c00 [ 603.001859][ T5880] pwc: recv_control_msg error -71 req 04 val 1000 [ 603.012875][ T5880] pwc: recv_control_msg error -71 req 04 val 1300 [ 603.022481][ T5880] pwc: recv_control_msg error -71 req 04 val 1400 [ 603.029566][ T5880] pwc: recv_control_msg error -71 req 02 val 2000 [ 603.037146][ T5880] pwc: recv_control_msg error -71 req 02 val 2100 [ 603.044349][ T5880] pwc: recv_control_msg error -71 req 04 val 1500 [ 603.053202][ T5880] pwc: recv_control_msg error -71 req 02 val 2500 [ 603.061535][ T5880] pwc: recv_control_msg error -71 req 02 val 2400 [ 603.069537][ T5880] pwc: recv_control_msg error -71 req 02 val 2600 [ 603.077306][ T5880] pwc: recv_control_msg error -71 req 02 val 2900 [ 603.088822][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 603.104505][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 603.114110][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 603.129663][ T5880] pwc: Registered as video103. [ 603.135973][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 603.171824][ T5880] usb 7-1: USB disconnect, device number 45 [ 604.978801][ T5880] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 605.130273][ T5880] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 605.141275][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.164284][ T5880] usb 7-1: config 0 descriptor?? [ 605.240377][ T5881] gspca_vc032x: reg_r err -71 [ 605.245242][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.256499][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.264991][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.273887][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.287687][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.303381][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.308891][ T5837] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 605.326862][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.339295][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.344629][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.368847][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.384024][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.400962][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.415249][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.427251][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.442001][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.457608][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.477972][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 605.484875][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 605.490365][ T5881] gspca_vc032x: Unknown sensor... [ 605.495444][ T5881] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 605.515192][ T5837] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 605.541957][ T5881] usb 6-1: USB disconnect, device number 33 [ 605.551253][ T5837] usb 2-1: config 0 has no interface number 0 [ 605.581745][ T5837] usb 2-1: config 0 interface 12 has no altsetting 0 [ 605.596081][ T5880] ath6kl: Failed to read usb control message: -71 [ 605.622447][ T5880] ath6kl: Unable to read the bmi data from the device: -71 [ 605.641219][ T5837] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 605.658964][ T5880] ath6kl: Unable to recv target info: -71 [ 605.669707][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.684856][ T5880] ath6kl: Failed to init ath6kl core: -71 [ 605.705206][ T5837] usb 2-1: Product: syz [ 605.711313][ T5880] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 605.736774][ T5837] usb 2-1: Manufacturer: syz [ 605.743421][ T5837] usb 2-1: SerialNumber: syz [ 605.759124][ T5880] usb 7-1: USB disconnect, device number 46 [ 605.771872][ T5837] usb 2-1: config 0 descriptor?? [ 606.225036][ T5880] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 606.718791][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 606.725426][ T5880] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 606.734020][ T5880] usb 6-1: config 0 has no interface number 0 [ 606.747480][ T5880] usb 6-1: config 0 interface 12 has no altsetting 0 [ 606.765702][ T5880] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 606.784909][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.802212][ T5880] usb 6-1: Product: syz [ 606.812970][ T5880] usb 6-1: Manufacturer: syz [ 606.823978][ T5880] usb 6-1: SerialNumber: syz [ 606.840170][ T5880] usb 6-1: config 0 descriptor?? [ 607.921350][ T5837] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 607.946246][ T5837] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 607.963990][ T5837] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 607.983843][ T5837] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 608.012729][ T5837] usb 2-1: USB disconnect, device number 40 [ 608.672969][ T5880] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 608.688275][ T5880] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 608.705878][ T5880] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 608.729219][ T5880] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 608.830106][ T5880] usb 6-1: USB disconnect, device number 34 [ 609.115330][T12913] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 609.268993][ T5881] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 609.438583][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 609.490553][ T5881] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 609.542006][ T5881] usb 7-1: config 0 has no interface number 0 [ 609.593819][ T5881] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 609.806936][ T5881] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 609.844087][ T5881] usb 7-1: config 0 interface 41 has no altsetting 0 [ 609.867634][ T5881] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 609.911381][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.929936][ T5881] usb 7-1: Product: syz [ 609.945051][ T5881] usb 7-1: Manufacturer: syz [ 609.960060][ T5881] usb 7-1: SerialNumber: syz [ 609.977111][ T5881] usb 7-1: config 0 descriptor?? [ 610.040736][T12910] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 610.063787][T12910] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 610.148211][ T5880] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 610.330869][T12910] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 610.338250][T12910] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 610.341909][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.388369][ T5880] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 610.668815][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.914307][ T5880] usb 6-1: config 0 descriptor?? [ 610.940523][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 610.962963][ T5881] Error reading MAC address [ 610.972767][T12910] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 610.982528][T12910] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 611.337701][ T5880] pwc: recv_control_msg error -71 req 02 val 2b00 [ 611.347104][ T5880] pwc: recv_control_msg error -71 req 02 val 2700 [ 611.354692][ T5880] pwc: recv_control_msg error -71 req 02 val 2c00 [ 611.361386][ T5837] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 611.372438][ T5880] pwc: recv_control_msg error -71 req 04 val 1000 [ 611.388757][ T5880] pwc: recv_control_msg error -71 req 04 val 1300 [ 611.404491][ T5880] pwc: recv_control_msg error -71 req 04 val 1400 [ 611.411776][ T5880] pwc: recv_control_msg error -71 req 02 val 2000 [ 611.418887][ T5881] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 611.428846][ T5880] pwc: recv_control_msg error -71 req 02 val 2100 [ 611.439449][ T5880] pwc: recv_control_msg error -71 req 04 val 1500 [ 611.459319][ T5881] usb 7-1: USB disconnect, device number 47 [ 611.480089][ T5880] pwc: recv_control_msg error -71 req 02 val 2500 [ 611.515843][ T5880] pwc: recv_control_msg error -71 req 02 val 2400 [ 611.524692][ T5837] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 611.534239][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.557528][ T5880] pwc: recv_control_msg error -71 req 02 val 2600 [ 611.576788][ T5837] usb 2-1: config 0 descriptor?? [ 611.587102][ T5880] pwc: recv_control_msg error -71 req 02 val 2900 [ 611.607970][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 611.624629][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 611.632482][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 611.640982][ T5880] pwc: Registered as video103. [ 611.647521][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 611.661778][ T5880] usb 6-1: USB disconnect, device number 35 [ 612.877133][ T5837] ath6kl: Failed to read usb control message: -71 [ 613.444611][ T5837] ath6kl: Unable to read the bmi data from the device: -71 [ 613.452860][ T5837] ath6kl: Unable to recv target info: -71 [ 613.460765][ T5837] ath6kl: Failed to init ath6kl core: -71 [ 613.466825][ T5837] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 613.618455][ T5837] usb 2-1: USB disconnect, device number 41 [ 613.772894][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1410'. [ 615.516157][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1413'. [ 615.745431][ T5880] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 616.323046][T13022] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1417'. [ 616.621396][T13031] overlayfs: failed to resolve './file0': -2 [ 616.850453][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.861445][ T5880] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 616.871185][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.933120][ T5880] usb 2-1: config 0 descriptor?? [ 616.951180][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 617.158780][ T5880] pwc: send_video_command error -71 [ 617.166819][ T5880] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 617.180382][ T5880] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 617.256373][ T5880] usb 2-1: USB disconnect, device number 42 [ 618.151349][T13055] bond0: (slave bridge0): Releasing backup interface [ 618.369470][ T5837] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 618.442644][T13070] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 618.461931][ T5880] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 618.555238][ T5837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.587792][ T5837] usb 8-1: config 0 has no interfaces? [ 618.641963][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.759531][ T5880] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 618.833680][ T5837] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 618.927591][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.955221][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.109178][ T5837] usb 8-1: Product: syz [ 619.113392][ T5837] usb 8-1: Manufacturer: syz [ 619.117996][ T5837] usb 8-1: SerialNumber: syz [ 619.141398][ T5880] usb 2-1: config 0 descriptor?? [ 619.147538][ T5837] usb 8-1: config 0 descriptor?? [ 619.158578][ T5880] usb 2-1: can't set config #0, error -71 [ 619.327545][ T5880] usb 2-1: USB disconnect, device number 43 [ 619.439465][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1427'. [ 619.554745][ T5880] usb 8-1: USB disconnect, device number 37 [ 620.371221][T13090] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1431'. [ 622.188309][ T5881] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 622.508277][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 622.520168][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.737787][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.964108][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1441'. [ 623.058598][ T5878] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 623.098893][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.271290][ T5881] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 623.288275][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 623.293661][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.307597][ T5881] usb 6-1: config 0 descriptor?? [ 623.316546][ T5878] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 623.358387][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.386834][ T5878] usb 8-1: Product: syz [ 623.407092][ T5878] usb 8-1: Manufacturer: syz [ 623.418346][ T5878] usb 8-1: SerialNumber: syz [ 623.435032][ T5878] usb 8-1: config 0 descriptor?? [ 623.526966][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.556664][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.733337][ T5878] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 624.595974][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.602543][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.775139][ T5881] usbhid 6-1:0.0: can't add hid device: -71 [ 624.785484][ T5881] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 624.823700][ T5881] usb 6-1: USB disconnect, device number 36 [ 624.872679][T13155] bridge_slave_0: left allmulticast mode [ 624.905068][T13155] bridge_slave_0: left promiscuous mode [ 624.928065][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.979104][T13155] bridge_slave_1: left allmulticast mode [ 624.995210][T13155] bridge_slave_1: left promiscuous mode [ 625.006151][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.038745][ T46] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 625.046926][T13155] bond0: (slave bond_slave_0): Releasing backup interface [ 625.082900][T13155] bond0: (slave bond_slave_1): Releasing backup interface [ 625.143723][T13155] team0: Port device team_slave_0 removed [ 625.166743][T13155] team0: Port device team_slave_1 removed [ 625.188814][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 625.197375][T13155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.202656][ T46] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 625.211694][T13155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.218812][ T46] usb 7-1: config 0 has no interface number 0 [ 625.236928][ T46] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.250915][T13155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.259737][T13155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.269452][ T46] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 625.291710][ T46] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 625.303850][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 625.318048][ T46] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 625.348468][ T46] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 625.378242][ T46] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 625.392706][ T46] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 625.403839][ T46] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.421742][ T46] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.457487][ T46] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 625.467275][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.488286][ T46] usb 7-1: Product: syz [ 625.498235][ T46] usb 7-1: Manufacturer: syz [ 625.508346][ T46] usb 7-1: SerialNumber: syz [ 625.513646][ T5881] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 625.517824][ T46] usb 7-1: config 0 descriptor?? [ 625.537213][T13153] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 625.554364][ T46] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 625.635939][T13165] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1448'. [ 625.679853][ T5881] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 625.693893][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.706462][ T5881] usb 2-1: config 0 descriptor?? [ 625.776760][ T5913] usb 7-1: USB disconnect, device number 48 [ 626.126989][ T5881] ath6kl: Failed to read usb control message: -71 [ 626.137766][ T5881] ath6kl: Unable to read the bmi data from the device: -71 [ 626.151282][ T5881] ath6kl: Unable to recv target info: -71 [ 626.157822][ T5881] ath6kl: Failed to init ath6kl core: -71 [ 626.164984][ T5881] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 626.192872][ T5881] usb 2-1: USB disconnect, device number 44 [ 626.352352][ T5878] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 626.381752][ T5878] usb 8-1: USB disconnect, device number 38 [ 626.518456][ T5913] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 626.614144][T13208] overlayfs: failed to resolve './file1': -2 [ 626.758606][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 626.827533][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 626.877963][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.955561][ T5913] usb 4-1: Product: syz [ 626.978743][ T5913] usb 4-1: Manufacturer: syz [ 627.011359][ T5913] usb 4-1: SerialNumber: syz [ 627.030425][ T5913] usb 4-1: config 0 descriptor?? [ 627.249355][ T5913] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 627.368706][ T5878] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 627.542219][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 627.600761][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.613492][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.627059][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.678054][ T5878] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.720713][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.805574][ T5878] usb 6-1: config 0 descriptor?? [ 628.036606][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.058850][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.473347][T13240] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1460'. [ 630.548765][ T5913] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 630.698484][ T5913] usb 4-1: USB disconnect, device number 38 [ 630.997477][ T5878] usbhid 6-1:0.0: can't add hid device: -71 [ 631.028574][ T5878] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 631.073114][ T5878] usb 6-1: USB disconnect, device number 37 [ 631.248246][ T9] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 631.640218][ T9] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 631.668419][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.741028][T13298] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.1471'. [ 631.759156][ T9] usb 8-1: Product: syz [ 631.763873][ T9] usb 8-1: Manufacturer: syz [ 631.769503][ T9] usb 8-1: SerialNumber: syz [ 631.780417][ T9] usb 8-1: config 0 descriptor?? [ 631.781658][T13298] openvswitch: netlink: Flow actions attr not present in new flow. [ 632.021420][ T9] hso 8-1:0.0: Failed to find BULK IN ep [ 632.039352][ T9] usb-storage 8-1:0.0: USB Mass Storage device detected [ 632.333133][ T9] usb 8-1: USB disconnect, device number 39 [ 632.402460][T13323] blktrace: Concurrent blktraces are not allowed on sg0 [ 633.022532][ T29] audit: type=1326 audit(633.041:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 633.065607][ T29] audit: type=1326 audit(633.071:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 633.087464][T11765] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 633.218374][ T29] audit: type=1326 audit(633.071:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 633.479118][T13358] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 633.866626][T13359] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 633.877720][T13359] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 633.978868][T11765] usb 7-1: Using ep0 maxpacket: 32 [ 633.986974][T11765] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 634.001181][ T29] audit: type=1326 audit(633.071:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 634.002353][T11765] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 634.080499][T11765] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 634.119662][T11765] usb 7-1: Product: syz [ 634.139384][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 634.144528][T11765] usb 7-1: Manufacturer: syz [ 634.159230][ T29] audit: type=1326 audit(633.071:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 634.180361][T11765] usb 7-1: SerialNumber: syz [ 634.198800][T11765] usb 7-1: config 0 descriptor?? [ 634.219490][ T29] audit: type=1326 audit(633.071:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 634.220206][T13342] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 634.294413][ T29] audit: type=1326 audit(633.071:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 634.398387][ T29] audit: type=1326 audit(633.071:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 634.553899][ T29] audit: type=1326 audit(633.071:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 634.701672][ T29] audit: type=1326 audit(633.071:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13351 comm="syz.7.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40c57e719 code=0x7ffc0000 [ 635.314261][ T5921] usb 7-1: USB disconnect, device number 49 [ 636.007996][ T5832] Bluetooth: hci3: unexpected cc 0x0c1a length: 3 > 1 [ 636.016039][ T5832] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 636.266723][T13452] smc: net device bond0 applied user defined pnetid SYZ0 [ 636.615199][T13471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1510'. [ 636.661716][T13468] sp0: Synchronizing with TNC [ 636.788244][T13479] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1513'. [ 637.590475][T13497] 9pnet_virtio: no channels available for device syz [ 638.550900][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 638.703111][T13527] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1520'. [ 638.715029][T13527] netlink: 'syz.7.1520': attribute type 10 has an invalid length. [ 638.833206][T13527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 639.205439][ T5832] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 639.412061][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 639.436749][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 639.448411][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 639.613327][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 639.654459][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 639.756426][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 639.886093][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 639.915888][T13536] vivid-000: disconnect [ 639.979606][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.008469][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.020423][T13534] vivid-000: reconnect [ 640.031269][ T5836] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 640.040003][ T5836] Bluetooth: hci3: Injecting HCI hardware error event [ 640.048167][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.049957][ T5832] Bluetooth: hci3: hardware error 0x00 [ 640.104273][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.147353][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.168927][T13543] geneve0 speed is unknown, defaulting to 1000 [ 640.169038][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.181136][T13543] geneve0 speed is unknown, defaulting to 1000 [ 640.191088][T13543] geneve0 speed is unknown, defaulting to 1000 [ 640.253552][T13532] 9pnet_virtio: no channels available for device syz [ 640.271160][T13532] overlay: Unknown parameter '/' [ 640.290475][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.299526][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.310539][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.413763][ T46] geneve0 speed is unknown, defaulting to 1000 [ 640.427747][T13543] infiniband syz2: set active [ 640.434852][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.437674][T13543] infiniband syz2: added geneve0 [ 640.445050][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.460330][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.482028][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.491051][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.502133][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.539970][T13543] RDS/IB: syz2: added [ 640.558299][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.567238][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.590089][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.609117][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 640.609151][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 640.609173][ T9] usb 2-1: Product: syz [ 640.609188][ T9] usb 2-1: Manufacturer: syz [ 640.609204][ T9] usb 2-1: SerialNumber: syz [ 640.613160][ T9] usb 2-1: config 0 descriptor?? [ 640.616353][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 640.619424][T13543] smc: adding ib device syz2 with port count 1 [ 640.619675][T13543] smc: ib device syz2 port 1 has pnetid [ 640.621641][ T5881] geneve0 speed is unknown, defaulting to 1000 [ 640.707616][T13543] geneve0 speed is unknown, defaulting to 1000 [ 640.884370][ T9] usb 2-1: USB disconnect, device number 45 [ 640.889815][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 641.429742][T13543] geneve0 speed is unknown, defaulting to 1000 [ 641.608568][ T5921] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 641.621881][T13543] geneve0 speed is unknown, defaulting to 1000 [ 641.878287][ T5921] usb 8-1: Using ep0 maxpacket: 8 [ 641.885329][ T5921] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.896047][ T5921] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.906519][ T5921] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.920874][ T5921] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.934899][ T5921] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 641.987830][T13543] geneve0 speed is unknown, defaulting to 1000 [ 642.093633][T13543] geneve0 speed is unknown, defaulting to 1000 [ 642.178363][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.195966][ T5832] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 642.293996][T13586] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1532'. [ 642.306827][T13586] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 643.005869][ T5921] usb 8-1: GET_CAPABILITIES returned 0 [ 643.011855][ T5921] usbtmc 8-1:16.0: can't read capabilities [ 643.112052][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1536'. [ 643.188279][ T5881] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 643.292909][ T5921] usb 8-1: USB disconnect, device number 40 [ 643.349566][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 643.357149][ T5881] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 643.373916][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 643.409282][T13605] mkiss: ax0: crc mode is auto. [ 643.409368][ T5881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 643.467355][ T5881] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.505943][ T5881] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 643.536381][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.787136][ T5881] usb 6-1: GET_CAPABILITIES returned 0 [ 643.803957][ T5881] usbtmc 6-1:16.0: can't read capabilities [ 644.089960][T13618] tipc: Started in network mode [ 644.106759][T13618] tipc: Node identity f7, cluster identity 4711 [ 644.126583][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 644.153676][T13618] tipc: Node number set to 247 [ 644.191379][T13620] usbtmc 6-1:16.0: Unable to send data, error -71 [ 644.222174][ T5881] usb 6-1: USB disconnect, device number 38 [ 644.882188][T13644] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1547'. [ 645.014612][T13651] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.1545'. [ 645.092579][T13651] openvswitch: netlink: Flow actions attr not present in new flow. [ 645.597543][T13659] openvswitch: netlink: Actions may not be safe on all matching packets [ 646.042251][T13658] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 646.045566][T13659] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 647.512850][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1553'. [ 647.579391][T13689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1553'. [ 648.580354][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 649.339284][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'. [ 650.429682][T13746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 650.458247][T13746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 650.781233][T13746] input: syz1 as /devices/virtual/input/input40 [ 651.770428][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1570'. [ 651.811479][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 652.737396][T13781] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 652.783504][T13781] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 652.916552][T13781] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 652.940157][T13781] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 653.299734][T13781] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 653.306322][T13781] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 653.585781][T13806] openvswitch: netlink: Actions may not be safe on all matching packets [ 654.039884][T13781] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 654.045961][T13781] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 654.126954][T13805] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 654.127472][T13806] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 654.337879][T13813] netlink: 'syz.6.1579': attribute type 1 has an invalid length. [ 654.393309][T13813] netlink: 9344 bytes leftover after parsing attributes in process `syz.6.1579'. [ 654.571670][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1581'. [ 654.587091][T13818] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1581'. [ 654.748464][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 655.013405][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 655.033391][ T5832] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 655.302838][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 655.318580][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 655.327868][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 655.851520][T13836] infiniband syz0: set active [ 655.856629][T13836] infiniband syz0: added ip_vti0 [ 655.888661][ T7635] ip_vti0 speed is unknown, defaulting to 1000 [ 655.896035][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 656.020804][T13836] RDS/IB: syz0: added [ 656.025257][T13836] smc: adding ib device syz0 with port count 1 [ 656.031926][T13836] smc: ib device syz0 port 1 has pnetid [ 656.038448][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 656.074627][ T5880] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 656.093506][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 656.110869][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 656.167837][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 656.225240][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 656.232062][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.285656][T13836] ip_vti0 speed is unknown, defaulting to 1000 [ 656.393237][ T7635] ip_vti0 speed is unknown, defaulting to 1000 [ 656.414506][ T5880] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 656.431245][ T5880] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 656.440427][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.449813][T13835] Bluetooth: MGMT ver 1.23 [ 656.479048][ T5880] usb 2-1: config 0 descriptor?? [ 656.488896][T13842] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1588'. [ 656.502977][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 656.509816][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 656.518715][T13844] binder: 13840:13844 ioctl c018620c 0 returned -14 [ 656.601365][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 656.616759][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 656.631590][ T5880] usb 2-1: media controller created [ 656.679475][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.697963][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 656.704403][T13829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.720740][T13829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.799541][T13849] binder: 13834:13849 ioctl c0306201 20000140 returned -14 [ 657.138045][T13829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.146726][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 657.152760][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 657.276481][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 657.301117][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 657.315041][T13829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.334411][T13843] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1586'. [ 657.345555][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 657.544707][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 657.551727][ T5880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 657.555970][T13829] Invalid option length (1025773) for dns_resolver key [ 657.873647][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 658.098273][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 658.101043][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 658.211834][ T5880] dvb-usb: error while querying for an remote control event. [ 658.237267][T13862] geneve0 speed is unknown, defaulting to 1000 [ 658.354107][ T5880] usb 2-1: USB disconnect, device number 46 [ 658.409091][ T5880] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 658.691916][T13862] ip_vti0 speed is unknown, defaulting to 1000 [ 659.112138][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 659.194073][ T5842] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 659.201506][ T4991] Bluetooth: (null): Invalid header checksum [ 659.210196][ T4991] Bluetooth: (null): Invalid header checksum [ 659.282680][T13887] Bluetooth: (null): Invalid header checksum [ 659.347968][T13887] fuse: Bad value for 'fd' [ 659.352591][ T6268] Bluetooth: (null): Invalid header checksum [ 659.396110][ T6268] Bluetooth: (null): Invalid header checksum [ 659.452879][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 659.509560][ T6268] Bluetooth: (null): Invalid header checksum [ 659.613360][ T7354] Bluetooth: (null): Invalid header checksum [ 659.718551][ T7354] Bluetooth: (null): Invalid header checksum [ 660.548595][ T5878] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 660.880954][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 660.904308][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 660.966946][T13923] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1603'. [ 661.003686][ T5878] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 661.087412][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 661.121495][ T5878] usb 6-1: Product: syz [ 661.135453][ T2150] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 661.143561][ T5878] usb 6-1: Manufacturer: syz [ 661.158988][ T5878] usb 6-1: SerialNumber: syz [ 661.192045][ T5878] usb 6-1: config 0 descriptor?? [ 661.217515][T13916] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 661.331116][ T2150] usb 2-1: Using ep0 maxpacket: 32 [ 661.349401][ T2150] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 661.379351][ T2150] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 661.399911][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 661.408476][ T2150] usb 2-1: Product: syz [ 661.426422][ T2150] usb 2-1: Manufacturer: syz [ 661.441395][ T2150] usb 2-1: SerialNumber: syz [ 661.498654][ T2150] usb 2-1: config 0 descriptor?? [ 661.527530][T13933] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 661.570607][ T2150] chaoskey 2-1:0.0: Unable to register with hwrng [ 661.594698][T13962] 9pnet_virtio: no channels available for device syz [ 661.664638][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 661.664656][ T29] audit: type=1800 audit(661.858:202): pid=13962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1610" name="bus" dev="overlay" ino=773 res=0 errno=0 [ 661.743251][ T969] usb 6-1: USB disconnect, device number 39 [ 662.034647][ T5878] usb 2-1: USB disconnect, device number 47 [ 662.767529][T14001] 9pnet_virtio: no channels available for device syz [ 662.811261][ T29] audit: type=1800 audit(663.011:203): pid=14001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1621" name="bus" dev="overlay" ino=1380 res=0 errno=0 [ 663.184508][ T5842] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 663.195628][ T5842] Bluetooth: hci2: Injecting HCI hardware error event [ 663.203615][ T5842] Bluetooth: hci2: hardware error 0x00 [ 664.245577][T14045] 9pnet_virtio: no channels available for device syz [ 664.309856][ T29] audit: type=1800 audit(664.508:204): pid=14045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1636" name="bus" dev="overlay" ino=825 res=0 errno=0 [ 665.039167][T14066] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1642'. [ 665.228733][ T5842] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 665.236710][T14078] tipc: Started in network mode [ 665.251805][T14078] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 665.276507][T14078] tipc: Enabling of bearer rejected, failed to enable media [ 665.679677][T14092] input: syz0 as /devices/virtual/input/input42 [ 665.825134][T14096] 9pnet_virtio: no channels available for device syz [ 665.861871][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 666.052430][T14105] tipc: Enabled bearer , priority 10 [ 667.466089][T14128] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 667.527956][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1658'. [ 667.696075][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.908507][T14143] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1663'. [ 669.464435][T14173] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 669.591020][ T29] audit: type=1326 audit(669.916:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 669.637992][T14159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.649019][T14173] hsr0: entered promiscuous mode [ 669.658733][T14173] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 669.693775][T14173] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 669.731818][ T29] audit: type=1326 audit(669.916:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 669.754625][ T29] audit: type=1326 audit(669.947:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 669.775691][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.785782][ T29] audit: type=1326 audit(669.947:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 669.831143][ T29] audit: type=1326 audit(669.947:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 669.833427][T14173] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 669.865954][T14173] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 669.915596][ T29] audit: type=1326 audit(669.947:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 669.981670][ T29] audit: type=1326 audit(669.957:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 670.107102][ T29] audit: type=1326 audit(669.957:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 670.144318][ T29] audit: type=1326 audit(669.957:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 670.824943][ T29] audit: type=1326 audit(669.957:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14159 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 672.151069][T14216] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 672.286484][T14223] Bluetooth: MGMT ver 1.23 [ 672.300187][T14219] fuse: Unknown parameter 'user_i00000000000000000000' [ 673.653443][T14231] sctp: failed to load transform for md5: -2 [ 675.005045][T14225] bond0 (unregistering): Released all slaves [ 675.026741][T14236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1681'. [ 676.878381][ T5878] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 677.063439][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 677.072562][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 677.086239][ T5878] usb 4-1: config 0 has no interface number 0 [ 677.096664][T14327] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 677.113087][ T5878] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.130043][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1700'. [ 677.144816][ T5878] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 677.158301][T14323] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1700'. [ 677.177762][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.193992][ T5878] usb 4-1: config 0 descriptor?? [ 677.200043][T14327] netlink: 'syz.7.1702': attribute type 10 has an invalid length. [ 677.216307][ T5878] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 677.245486][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.252801][T14327] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.361084][T14327] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.368210][T14327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.375632][T14327] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.382759][T14327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.420055][T14327] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 677.470980][ T6268] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 678.892706][ T5880] usb 4-1: USB disconnect, device number 39 [ 678.913322][ T5880] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 680.327708][ T5842] Bluetooth: hci1: Invalid handle: 0x1000 > 0x0eff [ 680.633646][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1726'. [ 680.687861][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1726'. [ 680.974084][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1733'. [ 681.386791][T14407] capability: warning: `syz.6.1732' uses 32-bit capabilities (legacy support in use) [ 681.965657][T14413] netlink: 'syz.1.1734': attribute type 1 has an invalid length. [ 681.990777][T14413] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1734'. [ 682.274366][T14411] tipc: Started in network mode [ 682.284824][T14411] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 682.323979][T14411] tipc: Enabling of bearer rejected, failed to enable media [ 682.404217][ T5832] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 682.415615][T14425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.520300][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 682.520318][ T29] audit: type=1326 audit(682.954:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.6.1744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x0 [ 682.717128][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1747'. [ 683.196041][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1752'. [ 683.809498][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1754'. [ 683.932911][ T2150] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 684.110706][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 684.119664][ T2150] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.138123][ T2150] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.197105][ T2150] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 684.211176][ T2150] usb 2-1: config 0 interface 0 has no altsetting 0 [ 684.218120][ T2150] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 684.229228][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.253007][ T2150] usb 2-1: config 0 descriptor?? [ 684.398027][T14488] 9pnet_virtio: no channels available for device syz [ 684.694890][ T2150] usbhid 2-1:0.0: can't add hid device: -71 [ 684.707965][ T2150] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 684.722760][ T2150] usb 2-1: USB disconnect, device number 48 [ 685.613830][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.620234][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.819205][T14516] libceph: resolve '. [ 685.819205][T14516] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 685.819205][T14516] ' (ret=-3): failed [ 685.920887][T14520] loop7: detected capacity change from 0 to 16384 [ 685.971263][T14516] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 686.271583][ T5837] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 686.429888][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 686.478532][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.519525][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.541375][ T5837] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 686.551629][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.573501][ T5837] usb 2-1: config 0 descriptor?? [ 687.186861][ T969] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 687.369818][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 687.381694][ T969] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.424487][ T969] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.498216][ T969] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 687.551970][ T969] usb 7-1: config 0 interface 0 has no altsetting 0 [ 687.576599][ T969] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 687.626221][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.668721][ T969] usb 7-1: config 0 descriptor?? [ 687.703576][ T5837] usbhid 2-1:0.0: can't add hid device: -71 [ 687.717269][ T5837] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 687.811806][ T5837] usb 2-1: USB disconnect, device number 49 [ 688.102298][ T969] usbhid 7-1:0.0: can't add hid device: -71 [ 688.114281][ T969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 688.152766][ T969] usb 7-1: USB disconnect, device number 50 [ 688.769261][T14557] 9pnet_virtio: no channels available for device syz [ 689.050273][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1789'. [ 689.071394][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1789'. [ 689.336476][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'. [ 689.423140][T14584] 9pnet_virtio: no channels available for device syz [ 689.456659][T14584] overlayfs: failed to resolve './file0': -2 [ 690.279609][T14609] 9pnet_virtio: no channels available for device syz [ 690.335898][T14611] overlayfs: failed to resolve './file0': -2 [ 690.634492][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1812'. [ 691.812741][ T29] audit: type=1326 audit(692.251:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.100433][ T29] audit: type=1326 audit(692.251:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.133530][T14630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.170199][ T29] audit: type=1326 audit(692.251:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.191218][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.239519][ T29] audit: type=1326 audit(692.261:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.260641][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.327883][ T29] audit: type=1326 audit(692.261:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.410282][ T29] audit: type=1326 audit(692.271:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.509217][ T29] audit: type=1326 audit(692.291:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.532404][ T29] audit: type=1326 audit(692.291:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.579629][ T29] audit: type=1326 audit(692.291:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.634659][T14647] 9pnet_virtio: no channels available for device syz [ 692.641717][ T29] audit: type=1326 audit(692.291:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14630 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857c97e719 code=0x7ffc0000 [ 692.650369][T14647] overlayfs: failed to resolve './file0': -2 [ 692.985199][ T5832] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 693.018837][T14658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.342588][ T5837] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 693.497142][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 693.602241][T14676] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1828'. [ 693.617877][T14676] netlink: 'syz.3.1828': attribute type 10 has an invalid length. [ 694.151789][ T5837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 694.163108][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 694.225992][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.287912][ T5837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.313694][T14680] 9pnet_virtio: no channels available for device syz [ 694.331538][T14680] overlayfs: failed to resolve './file1': -2 [ 694.351542][ T5837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 694.415371][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.882445][T14681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.897994][ T5837] usb 6-1: GET_CAPABILITIES returned 0 [ 694.903616][ T5837] usbtmc 6-1:16.0: can't read capabilities [ 694.975703][T14690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1838'. [ 695.170900][ T46] usb 6-1: USB disconnect, device number 40 [ 695.943673][ T5832] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 695.962063][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.229984][ T46] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 696.250101][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1847'. [ 696.389632][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 696.397994][ T46] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 696.428085][ T46] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 696.439466][ T46] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 696.467487][ T46] usb 7-1: Product: syz [ 696.471940][ T46] usb 7-1: Manufacturer: syz [ 696.476573][ T46] usb 7-1: SerialNumber: syz [ 696.501768][ T46] usb 7-1: config 0 descriptor?? [ 696.508032][T14710] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 696.678293][T14724] 9pnet_virtio: no channels available for device syz [ 696.705085][T14724] overlayfs: failed to resolve './file1': -2 [ 696.920795][ T46] usb 7-1: USB disconnect, device number 51 [ 697.193365][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1857'. [ 698.264550][T14757] 9pnet_virtio: no channels available for device syz [ 698.277974][T14757] overlayfs: failed to resolve './file1': -2 [ 699.848775][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 699.940814][T14782] netlink: 'syz.6.1869': attribute type 10 has an invalid length. [ 699.953134][T14782] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1869'. [ 700.003638][ T5921] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 700.012110][T14782] team0: Port device geneve0 added [ 700.153799][ T5921] usb 8-1: Using ep0 maxpacket: 8 [ 700.160549][ T5921] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 700.169436][ T5921] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.181095][ T5921] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.191058][ T5921] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.205463][ T5921] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.229019][ T5921] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.238237][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.259537][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1871'. [ 700.388587][T14797] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1873'. [ 700.487966][ T5921] usb 8-1: usb_control_msg returned -32 [ 700.505245][ T5921] usbtmc 8-1:16.0: can't read capabilities [ 700.608496][T14805] 9pnet_virtio: no channels available for device syz [ 700.660748][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 700.660828][ T29] audit: type=1800 audit(701.141:263): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1875" name="bus" dev="overlay" ino=1202 res=0 errno=0 [ 700.851207][ T5921] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 700.879549][T14810] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 700.888646][ T5878] usb 8-1: USB disconnect, device number 41 [ 701.021038][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 701.028400][ T5921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 701.042207][ T5921] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 701.052267][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 701.060555][ T5921] usb 4-1: Product: syz [ 701.065734][ T5921] usb 4-1: Manufacturer: syz [ 701.070437][ T5921] usb 4-1: SerialNumber: syz [ 701.078648][ T5921] usb 4-1: config 0 descriptor?? [ 701.090128][T14803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 701.314500][T14823] netlink: 'syz.6.1882': attribute type 4 has an invalid length. [ 701.366882][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 701.574730][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 701.607178][ T5837] usb 4-1: USB disconnect, device number 40 [ 703.171671][T14855] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 703.298125][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1892'. [ 703.355069][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1896'. [ 705.005457][ T5921] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 705.171420][ T5921] usb 8-1: Using ep0 maxpacket: 32 [ 705.271823][ T5921] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 705.287825][ T5921] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 705.297161][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 705.305517][ T5921] usb 8-1: Product: syz [ 705.309898][ T5921] usb 8-1: Manufacturer: syz [ 705.314531][ T5921] usb 8-1: SerialNumber: syz [ 705.325458][ T5921] usb 8-1: config 0 descriptor?? [ 705.331734][T14886] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 706.321469][ T5881] usb 8-1: USB disconnect, device number 42 [ 706.924778][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1907'. [ 706.977740][T14904] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 707.107327][T14910] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1908'. [ 708.181124][T14933] netlink: 'syz.3.1916': attribute type 39 has an invalid length. [ 708.551633][ T5921] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 709.031034][ T5921] usb 7-1: Using ep0 maxpacket: 32 [ 709.039357][ T5921] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 709.067096][ T5921] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 709.076381][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 709.109731][ T5921] usb 7-1: Product: syz [ 709.120056][ T5921] usb 7-1: Manufacturer: syz [ 709.130581][ T5921] usb 7-1: SerialNumber: syz [ 709.161466][ T5921] usb 7-1: config 0 descriptor?? [ 709.183121][T14948] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 709.200915][T14936] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 709.448032][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1925'. [ 709.688513][ T5881] usb 7-1: USB disconnect, device number 52 [ 710.939387][ T46] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 711.088992][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 711.095808][ T46] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.119320][ T46] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.129539][ T46] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 711.152291][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 711.161051][ T46] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 711.195201][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.261940][ T46] usb 2-1: config 0 descriptor?? [ 711.391294][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1940'. [ 712.005588][ T46] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.000A/input/input43 [ 712.072169][T15000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.094585][ T46] kye 0003:0458:5010.000A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 713.684394][ C1] kye 0003:0458:5010.000A: usb_submit_urb(ctrl) failed: -1 [ 714.316862][ T46] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 714.477126][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 714.519331][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 714.536830][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 714.556407][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.704631][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.718171][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 714.727675][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.739499][ T5921] usb 2-1: USB disconnect, device number 50 [ 714.743220][T15042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.409397][T15060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1956'. [ 715.447928][ T46] usb 4-1: usb_control_msg returned -71 [ 715.454064][ T46] usbtmc 4-1:16.0: can't read capabilities [ 715.477097][ T46] usb 4-1: USB disconnect, device number 41 [ 715.496049][T15064] can0: slcan on ptm0. [ 715.677266][T15069] can0 (unregistered): slcan off ptm0. [ 719.393210][T15145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1983'. [ 720.737064][T15179] tipc: Started in network mode [ 720.752643][T15179] tipc: Node identity ba8099362ba3, cluster identity 4711 [ 720.772628][T15179] tipc: Enabled bearer , priority 10 [ 721.190370][T15189] tipc: Enabling of bearer rejected, failed to enable media [ 721.493458][T15198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2005'. [ 721.664445][T15211] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2009'. [ 721.687902][T15206] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2009'. [ 721.909015][ T5881] tipc: Node number set to 2435029302 [ 723.911971][ T46] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 724.062855][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 724.073156][ T46] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 724.093114][ T46] usb 2-1: config 0 has no interface number 0 [ 724.099369][ T46] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 724.142569][ T46] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 724.169308][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.199437][ T46] usb 2-1: config 0 descriptor?? [ 724.229423][ T46] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 724.361518][ T5881] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 724.512543][ T5881] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 724.521492][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.531711][ T5881] usb 4-1: config 0 has no interfaces? [ 724.538735][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.549118][ T5881] usb 4-1: config 0 has no interfaces? [ 724.556782][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.566952][ T5881] usb 4-1: config 0 has no interfaces? [ 724.575021][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.586236][ T5881] usb 4-1: config 0 has no interfaces? [ 724.602840][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.622179][ T5881] usb 4-1: config 0 has no interfaces? [ 724.645611][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.670159][ T5881] usb 4-1: config 0 has no interfaces? [ 724.690791][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.719766][ T5881] usb 4-1: config 0 has no interfaces? [ 724.747521][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.764501][ T5881] usb 4-1: config 0 has no interfaces? [ 724.787684][ T5881] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 724.797175][ T5881] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 724.805620][ T5881] usb 4-1: Product: syz [ 724.810038][ T5881] usb 4-1: Manufacturer: syz [ 724.815886][ T5881] usb 4-1: SerialNumber: syz [ 724.835314][ T5881] usb 4-1: config 0 descriptor?? [ 725.482421][ T5921] usb 4-1: USB disconnect, device number 42 [ 725.578872][ T46] usb 2-1: USB disconnect, device number 51 [ 725.666984][ T46] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 726.780829][ T29] audit: type=1800 audit(727.282:264): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2050" name="file1" dev="overlay" ino=1326 res=0 errno=0 [ 727.092881][T15331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 727.612098][T15343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2057'. [ 727.642897][T15345] netlink: 'syz.7.2058': attribute type 39 has an invalid length. [ 728.210392][ T5921] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 728.380549][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 728.395918][ T5921] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.433322][ T5921] usb 4-1: config 0 has no interface number 0 [ 728.440506][ T5921] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.496472][ T5921] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 728.509386][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.535805][ T5921] usb 4-1: config 0 descriptor?? [ 728.591277][ T5921] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 728.623380][T15359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.678474][T15370] binder: BINDER_SET_CONTEXT_MGR already set [ 728.690032][T15370] binder: 15365:15370 ioctl 4018620d 20000040 returned -16 [ 728.777539][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 729.827563][ T5921] usb 4-1: USB disconnect, device number 43 [ 729.916398][ T5921] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 730.134668][T15386] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2071'. [ 730.179878][ T5881] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 730.331303][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 730.338961][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.353561][ T5881] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 730.364592][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.400961][ T5881] usb 6-1: config 0 descriptor?? [ 730.630507][ T5881] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 730.837949][ T5881] usb 6-1: USB disconnect, device number 41 [ 730.851748][ T5881] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 731.864871][T15409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.981990][ T5881] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 732.023867][ T5880] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 732.140670][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 732.167267][ T5881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.175696][ T5881] usb 6-1: config 0 has no interface number 0 [ 732.190066][ T5881] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 732.201630][ T5881] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 732.211308][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.219477][ T5880] usb 7-1: Using ep0 maxpacket: 8 [ 732.229902][ T5880] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.239932][ T5880] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 732.252645][ T5881] usb 6-1: config 0 descriptor?? [ 732.258584][ T5880] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.269019][ T5880] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.282243][ T5880] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 732.294374][ T5881] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 732.312129][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.532279][ T5880] usb 7-1: GET_CAPABILITIES returned 0 [ 732.538143][ T5880] usbtmc 7-1:16.0: can't read capabilities [ 732.784402][T15446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2092'. [ 733.543609][ T2150] usb 6-1: USB disconnect, device number 42 [ 733.545115][ T5881] usb 7-1: USB disconnect, device number 53 [ 733.577783][ T2150] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 733.679213][ T5880] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 733.706519][T15466] overlayfs: missing 'lowerdir' [ 733.861487][ T5880] usb 8-1: Using ep0 maxpacket: 32 [ 733.884664][ T5880] usb 8-1: config 0 has no interfaces? [ 733.927603][ T5880] usb 8-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=c0.3b [ 733.950031][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.958470][ T5880] usb 8-1: Product: syz [ 733.963524][ T5880] usb 8-1: Manufacturer: syz [ 733.968247][ T5880] usb 8-1: SerialNumber: syz [ 733.985582][ T5880] usb 8-1: config 0 descriptor?? [ 734.303589][T15470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.378147][ T5881] usb 8-1: USB disconnect, device number 43 [ 734.563627][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2108'. [ 735.195046][ T2150] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 735.268824][ T5921] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 735.289904][T15525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2121'. [ 735.368809][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 735.390466][ T2150] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 735.408774][ T2150] usb 2-1: config 0 has no interface number 0 [ 735.414936][ T2150] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 735.464811][ T2150] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 735.488933][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.508686][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.517057][ T5921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 735.554709][ T2150] usb 2-1: config 0 descriptor?? [ 735.564133][ T5921] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.591569][ T2150] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 735.622963][T15530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.646380][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.668036][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.693547][ T5921] usb 6-1: Product: syz [ 735.698145][ T5921] usb 6-1: Manufacturer: syz [ 735.703533][ T5921] usb 6-1: SerialNumber: syz [ 735.714696][ T5921] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 735.722425][ T5921] cdc_ncm 6-1:1.0: bind() failure [ 735.954593][ T5921] usb 6-1: USB disconnect, device number 43 [ 736.583042][T15556] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2134'. [ 737.029808][ T46] usb 2-1: USB disconnect, device number 52 [ 737.037493][ T46] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 737.646503][T15575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.098675][ T5881] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 738.392826][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 738.418241][ T5881] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.429641][ T5881] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.439538][ T5881] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 738.454470][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 738.461528][ T5881] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 738.471716][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.482406][ T5881] usb 4-1: config 0 descriptor?? [ 738.490835][T15618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2154'. [ 739.642785][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 739.650718][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 739.669134][ T5881] usb 4-1: USB disconnect, device number 44 [ 739.996381][T15634] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 740.478431][T15632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.979961][ T46] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 741.148050][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 741.643700][ T46] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.652070][ T46] usb 7-1: config 0 has no interface number 0 [ 741.658374][ T46] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.671687][ T46] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 741.687965][ T5880] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 741.695710][ T5881] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 741.741665][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.762453][ T46] usb 7-1: config 0 descriptor?? [ 741.774021][ T46] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 741.867981][ T5881] usb 8-1: Using ep0 maxpacket: 8 [ 741.875294][ T5881] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 741.885291][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 741.890784][ T5881] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.908371][ T5881] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.918566][ T5880] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.929834][ T5880] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.942047][ T5880] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 741.955376][ T5881] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.955465][T15667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2173'. [ 741.965382][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 741.965427][ T5880] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 741.965450][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.967372][ T5880] usb 4-1: config 0 descriptor?? [ 742.004631][ T5881] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.026996][ T5881] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 742.048237][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.273717][ T5881] usb 8-1: usb_control_msg returned -32 [ 742.279651][ T5881] usbtmc 8-1:16.0: can't read capabilities [ 742.481366][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 742.498350][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 742.521627][ T5880] usb 4-1: USB disconnect, device number 45 [ 742.680879][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2179'. [ 742.691883][T15684] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2179'. [ 742.702020][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2179'. [ 743.433906][ T5881] usb 8-1: USB disconnect, device number 44 [ 743.441116][ T5880] usb 7-1: USB disconnect, device number 54 [ 743.462744][ T5880] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 743.491973][T15689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.227755][ T46] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 744.407770][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 744.473604][ T46] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.672140][ T46] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.846082][ T46] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 744.954099][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 744.961216][ T46] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 744.972287][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.994887][ T46] usb 2-1: config 0 descriptor?? [ 745.425772][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 745.448294][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 745.471499][ T46] usb 2-1: USB disconnect, device number 53 [ 746.129827][T15792] overlayfs: failed to resolve './file0': -2 [ 746.353666][T15805] binder: 15804:15805 ioctl c0306201 20000480 returned -14 [ 746.747391][ T5878] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 746.757303][ T46] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 746.920304][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 746.928907][ T46] usb 8-1: config 0 has no interfaces? [ 746.939124][ T46] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 746.949441][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.968199][ T5878] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.982718][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.982762][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.000658][ T5878] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.011580][ T46] usb 8-1: config 0 descriptor?? [ 747.032999][ T5878] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 747.058223][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 747.065073][ T5878] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 747.077137][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.091909][ T5878] usb 4-1: config 0 descriptor?? [ 747.497307][ T2150] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 747.657322][ T2150] usb 7-1: Using ep0 maxpacket: 32 [ 747.671132][ T2150] usb 7-1: config 0 has no interfaces? [ 747.681265][ T2150] usb 7-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=c0.3b [ 747.694680][ T2150] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.703316][ T2150] usb 7-1: Product: syz [ 747.713541][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 747.721662][ T2150] usb 7-1: Manufacturer: syz [ 747.737064][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 747.745233][ T2150] usb 7-1: SerialNumber: syz [ 747.758120][ T2150] usb 7-1: config 0 descriptor?? [ 747.772504][ T5878] usb 4-1: USB disconnect, device number 46 [ 747.807321][ T46] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 747.947198][ T46] usb 6-1: device descriptor read/64, error -71 [ 748.003399][ T5878] usb 7-1: USB disconnect, device number 55 [ 748.187205][ T46] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 748.327261][ T46] usb 6-1: device descriptor read/64, error -71 [ 748.447587][ T46] usb usb6-port1: attempt power cycle [ 748.789196][ T46] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 748.946960][ T29] audit: type=1326 audit(749.455:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 748.960693][ T46] usb 6-1: device descriptor read/8, error -71 [ 748.987273][ T29] audit: type=1326 audit(749.485:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.096837][ T29] audit: type=1326 audit(749.495:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.225118][ T29] audit: type=1326 audit(749.495:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.345900][T15859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.347133][ T46] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 749.377169][ T29] audit: type=1326 audit(749.525:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.398166][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.398454][ T46] usb 6-1: device descriptor read/8, error -71 [ 749.425148][ T29] audit: type=1326 audit(749.525:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.454014][ T29] audit: type=1326 audit(749.525:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.476624][ T29] audit: type=1326 audit(749.525:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.497638][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.505780][ T29] audit: type=1326 audit(749.525:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.527475][ T46] usb usb6-port1: unable to enumerate USB device [ 749.548485][ T29] audit: type=1326 audit(749.525:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15859 comm="syz.6.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8802f7e719 code=0x7ffc0000 [ 749.567324][ T46] usb 8-1: USB disconnect, device number 45 [ 751.012462][T15895] netlink: 'syz.1.2252': attribute type 39 has an invalid length. [ 751.679240][T15897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.016017][T15910] overlayfs: missing 'workdir' [ 753.825221][T15934] overlayfs: failed to resolve './file0': -2 [ 753.832379][T15936] netlink: 'syz.7.2273': attribute type 3 has an invalid length. [ 756.149133][T15976] overlayfs: failed to resolve './file0': -2 [ 760.136245][T15987] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 760.420616][T15987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 760.439850][T15987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 762.483469][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 762.504540][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 762.510893][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 764.509142][T16031] netlink: 'syz.3.2304': attribute type 10 has an invalid length. [ 764.785779][T16031] veth0_macvtap: left promiscuous mode [ 765.442999][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2309'. [ 766.183961][T16039] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 766.205374][T16039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 766.214472][T16039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 767.470158][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 768.131000][T16066] netlink: 'syz.5.2317': attribute type 29 has an invalid length. [ 768.149453][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2317'. [ 768.259900][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 768.266047][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 768.896892][T16088] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 768.903596][T16088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 768.917952][T16088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 769.796765][ T5880] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 769.967598][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 769.977687][ T5880] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 769.992198][ T5880] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 770.002411][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 770.012599][ T5880] usb 7-1: Product: syz [ 770.019946][ T5880] usb 7-1: Manufacturer: syz [ 770.024800][ T5880] usb 7-1: SerialNumber: syz [ 770.041328][ T5880] usb 7-1: config 0 descriptor?? [ 770.050595][T16092] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 770.508509][ T5880] usb 7-1: USB disconnect, device number 56 [ 770.988457][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 770.994573][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 771.003618][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 771.249395][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2328'. [ 785.884560][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 785.884581][ T29] audit: type=1800 audit(786.396:302): pid=16124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2339" name="bus" dev="overlay" ino=1690 res=0 errno=0 [ 786.058866][T16116] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 786.069284][T16116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 786.075501][T16116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 786.140732][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 786.153214][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 786.163794][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 786.171880][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 786.179731][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 786.187187][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.232844][T16095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 786.253627][T16095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 786.264691][T16095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 786.275136][T16095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 786.283918][T16095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 786.291401][T16095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 786.444365][T16118] geneve0 speed is unknown, defaulting to 1000 [ 786.784938][T16122] geneve0 speed is unknown, defaulting to 1000 [ 786.793172][T16118] ip_vti0 speed is unknown, defaulting to 1000 [ 787.226656][T16122] ip_vti0 speed is unknown, defaulting to 1000 [ 787.894443][T16122] chnl_net:caif_netlink_parms(): no params data found [ 788.096341][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 788.102548][T16095] Bluetooth: hci0: command 0x0406 tx timeout [ 788.256398][T16095] Bluetooth: hci4: command tx timeout [ 788.336261][T16095] Bluetooth: hci6: command tx timeout [ 790.338575][T16095] Bluetooth: hci4: command tx timeout [ 790.426488][T16095] Bluetooth: hci6: command tx timeout [ 790.950476][ T29] audit: type=1800 audit(791.466:303): pid=16168 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2348" name="bus" dev="overlay" ino=1720 res=0 errno=0 [ 792.416516][ T5832] Bluetooth: hci4: command tx timeout [ 792.506280][T16095] Bluetooth: hci6: command tx timeout [ 794.496271][T16095] Bluetooth: hci4: command tx timeout [ 794.579246][T16095] Bluetooth: hci6: command tx timeout [ 802.958105][T16170] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 802.966381][T16170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 802.972481][T16170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 802.981248][T16170] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 803.001647][T16170] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 803.019829][ T9059] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.031497][T16170] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 803.039481][T16170] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 803.064532][T16170] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 803.100771][T16118] chnl_net:caif_netlink_parms(): no params data found [ 803.161803][T16195] ax25_connect(): syz.1.2355 uses autobind, please contact jreuter@yaina.de [ 803.163752][T16122] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.179326][T16122] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.186700][T16122] bridge_slave_0: entered allmulticast mode [ 803.193758][T16122] bridge_slave_0: entered promiscuous mode [ 803.203777][T16122] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.210959][T16122] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.218973][T16122] bridge_slave_1: entered allmulticast mode [ 803.226054][T16122] bridge_slave_1: entered promiscuous mode [ 803.260272][ T9059] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.327158][ T9059] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.344180][T16122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.365390][T16122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.376201][ T2150] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 803.398795][T16118] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.407767][T16118] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.415002][T16118] bridge_slave_0: entered allmulticast mode [ 803.424284][T16118] bridge_slave_0: entered promiscuous mode [ 803.455526][ T9059] bond0: (slave netdevsim0): Releasing backup interface [ 803.464582][ T9059] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.491971][T16122] team0: Port device team_slave_0 added [ 803.498285][T16118] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.505436][T16118] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.515341][T16118] bridge_slave_1: entered allmulticast mode [ 803.527790][T16118] bridge_slave_1: entered promiscuous mode [ 803.539829][ T2150] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 803.551957][ T2150] usb 4-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 803.561513][ T2150] usb 4-1: Product: syz [ 803.565872][ T2150] usb 4-1: Manufacturer: syz [ 803.571193][ T2150] usb 4-1: SerialNumber: syz [ 803.578975][ T2150] usb 4-1: config 0 descriptor?? [ 803.589482][T16122] team0: Port device team_slave_1 added [ 803.627871][T16118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.651197][T16122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.659031][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.685176][T16122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.701323][T16118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.721134][T16122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.728732][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.761977][T16122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.797379][T16118] team0: Port device team_slave_0 added [ 803.815737][T16118] team0: Port device team_slave_1 added [ 803.887336][T16122] hsr_slave_0: entered promiscuous mode [ 803.894857][T16122] hsr_slave_1: entered promiscuous mode [ 803.941050][T16118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.948778][T16118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.979388][T16118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.002246][ T9059] bridge_slave_1: left allmulticast mode [ 804.010649][ T9059] bridge_slave_1: left promiscuous mode [ 804.016799][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.025533][ T9059] bridge_slave_0: left allmulticast mode [ 804.034825][ T9059] bridge_slave_0: left promiscuous mode [ 804.041152][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.055807][ T9059] tipc: Resetting bearer [ 804.061539][ T11] [ 804.063532][ T9059] ------------[ cut here ]------------ [ 804.065525][ T11] ============================= [ 804.070909][ T9059] DEBUG_LOCKS_WARN_ON(1) [ 804.070979][ T9059] WARNING: CPU: 0 PID: 9059 at kernel/locking/lockdep.c:232 __lock_acquire+0x58c/0x2050 [ 804.075837][ T11] WARNING: suspicious RCU usage [ 804.080058][ T9059] Modules linked in: [ 804.080091][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: kworker/u8:13 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 804.080109][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 804.080120][ T9059] Workqueue: netns cleanup_net [ 804.080151][ T9059] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 804.080178][ T9059] Code: 00 00 83 3d b5 bc ab 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 7f 7c e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 804.089959][ T11] 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 Not tainted [ 804.094713][ T9059] RSP: 0018:ffffc90002d9f3f0 EFLAGS: 00010046 [ 804.094737][ T9059] RAX: cc2a9d19067cea00 RBX: 000000000000115c RCX: ffff88807cb08000 [ 804.098828][ T11] ----------------------------- [ 804.109540][ T9059] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.109564][ T9059] RBP: 0000000000000014 R08: ffffffff8155d222 R09: 1ffff110170c519a [ 804.109576][ T9059] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88807cb08000 [ 804.109588][ T9059] R13: 000000000000115c R14: 1ffff1100f961174 R15: ffff88807cb08ba0 [ 804.109601][ T9059] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 804.109616][ T9059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.109628][ T9059] CR2: 0000562573cad220 CR3: 0000000063a0e000 CR4: 00000000003526f0 [ 804.109643][ T9059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 804.109653][ T9059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 804.109665][ T9059] Call Trace: [ 804.109674][ T9059] [ 804.109685][ T9059] ? __warn+0x168/0x4e0 [ 804.119959][ T11] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 804.124564][ T9059] ? __lock_acquire+0x58c/0x2050 [ 804.130154][ T11] [ 804.130154][ T11] other info that might help us debug this: [ 804.130154][ T11] [ 804.149691][ T9059] ? report_bug+0x2b3/0x500 [ 804.149716][ T9059] ? __lock_acquire+0x58c/0x2050 [ 804.149740][ T9059] ? handle_bug+0x60/0x90 [ 804.149759][ T9059] ? exc_invalid_op+0x1a/0x50 [ 804.149778][ T9059] ? asm_exc_invalid_op+0x1a/0x20 [ 804.149803][ T9059] ? __warn_printk+0x292/0x360 [ 804.149822][ T9059] ? __lock_acquire+0x58c/0x2050 [ 804.149851][ T9059] lock_acquire+0x1ed/0x550 [ 804.157001][ T11] [ 804.157001][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 804.163081][ T9059] ? down+0x39/0xc0 [ 804.163112][ T9059] ? ib_device_get_by_netdev+0x85/0x5e0 [ 804.171292][ T11] 8 locks held by kworker/u8:0/11: [ 804.175915][ T9059] ? __pfx_lock_acquire+0x10/0x10 [ 804.175953][ T9059] _raw_spin_lock_irqsave+0xd5/0x120 [ 804.175970][ T9059] ? down+0x39/0xc0 [ 804.175987][ T9059] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 804.176005][ T9059] down+0x39/0xc0 [ 804.176023][ T9059] __dev_close_many+0x107/0x300 [ 804.176040][ T9059] ? __pfx___dev_close_many+0x10/0x10 [ 804.176058][ T9059] ? mark_lock+0x9a/0x360 [ 804.176073][ T9059] dev_close_many+0x24e/0x4c0 [ 804.176092][ T9059] ? __pfx_dev_close_many+0x10/0x10 [ 804.184058][ T11] #0: [ 804.191997][ T9059] unregister_netdevice_many_notify+0x530/0x1da0 [ 804.192030][ T9059] ? net_generic+0x1f/0x240 [ 804.192049][ T9059] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 804.200062][ T11] ffff88802a4eb948 [ 804.207961][ T9059] ? unregister_netdevice_queue+0x26b/0x370 [ 804.207987][ T9059] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 804.208014][ T9059] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 804.216963][ T11] ( [ 804.223495][ T9059] cleanup_net+0x75d/0xcc0 [ 804.231588][ T11] (wq_completion)bond0 [ 804.239498][ T9059] ? __pfx_cleanup_net+0x10/0x10 [ 804.239526][ T9059] ? process_scheduled_works+0x976/0x1850 [ 804.239549][ T9059] process_scheduled_works+0xa63/0x1850 [ 804.239577][ T9059] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.239601][ T9059] ? assign_work+0x364/0x3d0 [ 804.239621][ T9059] worker_thread+0x870/0xd30 [ 804.239647][ T9059] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 804.247650][ T11] #16 [ 804.250869][ T9059] ? __kthread_parkme+0x169/0x1d0 [ 804.253902][ T11] ){+.+.}-{0:0} [ 804.258067][ T9059] ? __pfx_worker_thread+0x10/0x10 [ 804.258093][ T9059] kthread+0x2f0/0x390 [ 804.258179][ T9059] ? __pfx_worker_thread+0x10/0x10 [ 804.258201][ T9059] ? __pfx_kthread+0x10/0x10 [ 804.258217][ T9059] ret_from_fork+0x4b/0x80 [ 804.258241][ T9059] ? __pfx_kthread+0x10/0x10 [ 804.267059][ T11] , at: process_scheduled_works+0x93b/0x1850 [ 804.271882][ T9059] ret_from_fork_asm+0x1a/0x30 [ 804.282157][ T11] #1: [ 804.286589][ T9059] [ 804.286603][ T9059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 804.286615][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: kworker/u8:13 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 804.286636][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 804.286649][ T9059] Workqueue: netns cleanup_net [ 804.286672][ T9059] Call Trace: [ 804.286679][ T9059] [ 804.286688][ T9059] dump_stack_lvl+0x241/0x360 [ 804.286713][ T9059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.286734][ T9059] ? __pfx__printk+0x10/0x10 [ 804.286753][ T9059] ? _printk+0xd5/0x120 [ 804.286772][ T9059] ? __init_begin+0x41000/0x41000 [ 804.286794][ T9059] ? vscnprintf+0x5d/0x90 [ 804.286818][ T9059] panic+0x349/0x880 [ 804.286838][ T9059] ? __warn+0x177/0x4e0 [ 804.286857][ T9059] ? __pfx_panic+0x10/0x10 [ 804.286875][ T9059] ? show_trace_log_lvl+0x3b2/0x410 [ 804.286897][ T9059] ? ret_from_fork_asm+0x1a/0x30 [ 804.286922][ T9059] __warn+0x34b/0x4e0 [ 804.286939][ T9059] ? __lock_acquire+0x58c/0x2050 [ 804.286964][ T9059] report_bug+0x2b3/0x500 [ 804.286983][ T9059] ? __lock_acquire+0x58c/0x2050 [ 804.287008][ T9059] handle_bug+0x60/0x90 [ 804.287029][ T9059] exc_invalid_op+0x1a/0x50 [ 804.287051][ T9059] asm_exc_invalid_op+0x1a/0x20 [ 804.287070][ T9059] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 804.287103][ T9059] Code: 00 00 83 3d b5 bc ab 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 7f 7c e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 804.287118][ T9059] RSP: 0018:ffffc90002d9f3f0 EFLAGS: 00010046 [ 804.287135][ T9059] RAX: cc2a9d19067cea00 RBX: 000000000000115c RCX: ffff88807cb08000 [ 804.287149][ T9059] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.287162][ T9059] RBP: 0000000000000014 R08: ffffffff8155d222 R09: 1ffff110170c519a [ 804.287175][ T9059] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88807cb08000 [ 804.287189][ T9059] R13: 000000000000115c R14: 1ffff1100f961174 R15: ffff88807cb08ba0 [ 804.287205][ T9059] ? __warn_printk+0x292/0x360 [ 804.287235][ T9059] lock_acquire+0x1ed/0x550 [ 804.287258][ T9059] ? down+0x39/0xc0 [ 804.287279][ T9059] ? ib_device_get_by_netdev+0x85/0x5e0 [ 804.287302][ T9059] ? __pfx_lock_acquire+0x10/0x10 [ 804.287334][ T9059] _raw_spin_lock_irqsave+0xd5/0x120 [ 804.287351][ T9059] ? down+0x39/0xc0 [ 804.287370][ T9059] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 804.287392][ T9059] down+0x39/0xc0 [ 804.287411][ T9059] __dev_close_many+0x107/0x300 [ 804.287430][ T9059] ? __pfx___dev_close_many+0x10/0x10 [ 804.287450][ T9059] ? mark_lock+0x9a/0x360 [ 804.287468][ T9059] dev_close_many+0x24e/0x4c0 [ 804.287487][ T9059] ? __pfx_dev_close_many+0x10/0x10 [ 804.287507][ T9059] unregister_netdevice_many_notify+0x530/0x1da0 [ 804.287537][ T9059] ? net_generic+0x1f/0x240 [ 804.287557][ T9059] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 804.287581][ T9059] ? unregister_netdevice_queue+0x26b/0x370 [ 804.287604][ T9059] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 804.287629][ T9059] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 804.287656][ T9059] cleanup_net+0x75d/0xcc0 [ 804.287677][ T9059] ? __pfx_cleanup_net+0x10/0x10 [ 804.287700][ T9059] ? process_scheduled_works+0x976/0x1850 [ 804.287722][ T9059] process_scheduled_works+0xa63/0x1850 [ 804.287755][ T9059] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.287781][ T9059] ? assign_work+0x364/0x3d0 [ 804.287804][ T9059] worker_thread+0x870/0xd30 [ 804.287829][ T9059] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 804.287850][ T9059] ? __kthread_parkme+0x169/0x1d0 [ 804.287874][ T9059] ? __pfx_worker_thread+0x10/0x10 [ 804.287896][ T9059] kthread+0x2f0/0x390 [ 804.287913][ T9059] ? __pfx_worker_thread+0x10/0x10 [ 804.287935][ T9059] ? __pfx_kthread+0x10/0x10 [ 804.287952][ T9059] ret_from_fork+0x4b/0x80 [ 804.287975][ T9059] ? __pfx_kthread+0x10/0x10 [ 804.287991][ T9059] ret_from_fork_asm+0x1a/0x30 [ 804.288019][ T9059] [ 804.291836][ T9059] Kernel Offset: disabled