last executing test programs: 25m54.443223436s ago: executing program 3 (id=138): r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x80000062, 0x0, 0x0) 25m54.331106587s ago: executing program 3 (id=139): syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000380)='./file0\x00', 0x101c08a, &(0x7f00000003c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@fat=@quiet}, {@rodir}, {}, {@utf8no}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@uni_xlateno}, {@numtail}]}, 0x6, 0x2cb, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="ee5fada9a608c9928b9241a3e92a944ff28cf679a561e0126f04f86243eae1c5b1b37d7011e81357169a0784064965b9e7a355bac2197237faba98b23d7498c816a47e25799ba626c06eaa36c92adcf5acad93fb1b1ab3323b2ddb6e758bbdb408484d758c4a2aee15b79184fe99a633b08024c23bf522800ded6ce50a54adcf3eba3502c4436879f90c7223104c3a18f9616205e42ee4e28b70510b4557785111fe7c1627cd9be64e1f278394c87d", @ANYBLOB="e13df68c47253ba55f0582d42bdbaa5839ca"], 0x1, 0x0, &(0x7f0000000000)) fallocate(r1, 0x0, 0x0, 0x1001f0) creat(0x0, 0x182) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 25m54.002729581s ago: executing program 3 (id=140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe67) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f01ebbee6, 0x8031, 0xffffffffffffffff, 0xf0ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x19) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x56, 0x0, &(0x7f0000000300)=[@acquire, @dead_binder_done, @clear_death={0x400c630f, 0x3}, @enter_looper], 0x61, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done], 0x0, 0x0, 0x0}) lseek(r3, 0x851, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190001092abd7000000000000218800000fffd0000100000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x34000040}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/40, 0x28) 25m52.879821267s ago: executing program 3 (id=142): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@uni_xlateno}, {@fat=@tz_utc}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x6d}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@rodir}, {@rodir}]}, 0x41, 0x282, &(0x7f00000004c0)="$eJzs3bFqW1cYB/BPtlzJhiINBdNS6C1dOgnbxbtMcaFU0NKioZ1qYpsEyzHEYEgG25vJOySvkIxZAxlC1rxACAQnkCXO5CGgoFxZkRxJsZxIMuT3W/xxz/nrnnN8uBcPPvr/+82N1a3t9aOjw8jnM5EtRzmOM1GMiZiM1H50lel+GQC46I7r9XhVT417LADAaHj/A8CXp9/7P7PfuvbX6EcGAAzLJ/39PzGUIQEAQ/bPv//9sVSpLP+dJPmIzYOd6k41/Zm2L63HlajFWsxFId5E1FvS+rffK8tzScPzYuQ39ybS/N5OdbIzPx+FKHbPzyepqDZyJ/mpmGnmn8zEWixEIb7pnl/omv8qfv6p7f6lKMTjS7EVtViNRjbN5yJidz5Jfv2z0liApkY+964fAAAAAAAAAAAAAAAAAAAAAAAMQylpKXaen5Oe31Mq9WpP8+3nA033Ox+ovnfqfJ5sfJcd79wBAAAAAAAAAAAAAAAAAADgoti+fmNjpVZbu9avuProzoPDXBr4aOf+RaZ538FSB337TJ+eRT4iFiOib+rrH5/d6taUi9yZ1udkJudejalTI0yaH3j/h/Mv78iKh4eXv/1le3axranSvjci25662Zhqx+f02EjZs23IwYuXhYieffIDb8j24u5JUX79QZ9ca5NMj/sXN3u7vHJv9+mLs6b6PDTqk5/7MQQAAAAAAAAAAAAAAAAAAHT8f3vvPoujHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjMH77/8ftMhFx5V8z877454jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8DQAA//8mbYtA") mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) rename(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 25m52.57696342s ago: executing program 3 (id=146): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x82000804) open(0x0, 0x4a0540, 0xc0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000007c0)) syslog(0x3, &(0x7f0000000140)=""/201, 0xc9) 25m46.792057928s ago: executing program 3 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 25m46.535565082s ago: executing program 32 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 19m11.542029039s ago: executing program 4 (id=1426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 19m10.317782605s ago: executing program 4 (id=1430): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) 19m8.883310304s ago: executing program 4 (id=1432): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 19m7.509235532s ago: executing program 4 (id=1437): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 19m6.23645675s ago: executing program 4 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f01ebbee6, 0x8031, 0xffffffffffffffff, 0xf0ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) lseek(r4, 0x851, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/40, 0x28) 19m4.912192547s ago: executing program 4 (id=1443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 18m49.705623559s ago: executing program 33 (id=1443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 11.977723689s ago: executing program 5 (id=4612): io_setup(0x20, 0x0) fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000800)=[r5], &(0x7f0000000100), 0x0, 0x400000000}) 10.889443584s ago: executing program 5 (id=4614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) fadvise64(r2, 0xfffffffffffffffa, 0xa0, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000004060502000020000000000000000000140007800800134004000000080012400006000005000100"], 0x60}}, 0x0) 10.47962523s ago: executing program 2 (id=4616): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1904490, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f00000000c0)="$eJzs3b+LE08Yx/HPbHJ3+X7vOPd+iCBWpweCIDltxOZArrSzsRL1ssJhOEFPUBtPa/EPsLe09Q+wtBJrwc7KyipdZGZnzSaXzYY1ySbx/YKETXae3Wf2hzPPyhEB+Gfd2Pv+/uoP+zJSRRVJ16VAUk2qSjqtM7Wnh0cHR82oMWhDFRdhX0ZxpDnRZv8w6hdq41yEF9pPVa2kv8N41L7puOwcUD539/cRSEv+7nTraxPPbCzaXtl5TNbLzqJpqaVnWi0zHQBA+fz4H/hxfsXP34NA2vbDvhv/fyUBMz5rbJWdwJh9ylmfGv9dldU29vyecqs69Z4r4ez6IKkSi+SyqPjK6ppgmryq0uUS/PfgoBld3n/UbAR6rV1vodNs07034ks3kc721clNb/WpTQco3vdl14cF24cr6fxTTTZGu8d85rP5Yu6YUO/U+DP/q7aNPU3uTIU9Z8rm/yGqZ2/R9XJRtpf1jF6uuZ2c9XvwBvayooyKRMkVtabuBwShO84D8nRR6z1R7rKJdnKiNnqj4nOaE7XZG9W5mrMjx828NbfNln7qo/ZS8//AHu1tDXNn2jauZXwU6gP7U3UtQzee+Lvu+FzflkHRHqGAN7qva1p98vzFw3vNZvR4bhfsnfiX27FD0bR0ZyQLyUUwLfnM7YI9yKXsPRl3im+ntH+ZMEGdk57V4ualvl/zfzPzws67TFz/peqVupus2bewe56+lI7NfYCe2uJORm2w7t7/z67guhj36GE5u4IbtuY6f1G6MMweY6HPc/rsFgkye/qquzz/BwAAAAAAAAAAAAAAAAAAmDWj+5ODmrJWld1HAAAAAAAAAAAAAAAAAAAAAABm3dT9/u8txZ/4/V9g7H4HAAD//zu7fXM=") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1008c, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1518, &(0x7f0000002280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000014cecd5eb6fa00000000028c89b858bb290000000000855414", @ANYRESDEC=r0, @ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000380)={0x2, &(0x7f00000001c0)=[0x81, 0x6]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r6) keyctl$search(0xa, r6, &(0x7f00000000c0)='dns_resolver\x00', 0x0, 0xffffffffffffffff) 10.46146799s ago: executing program 5 (id=4617): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000080)={[{@umask={'umask', 0x3d, 0x296eabae}}, {@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {}, {@part={'part', 0x3d, 0x5}}]}, 0x11, 0x2b6, &(0x7f00000005c0)="$eJzs3U9rE0EYx/HfbNI22lK3tiJ4rBb0Ilov4iUieRGeRG0iFENFrfjnVMWTiN69+xZ8EV4U34CePPkC6mllZifZJLvZTUOTber3Aw2b7D47z2T/zDyBsgLw37rV+Pn52m/7Z6SKKtK7G1IgqSZVJZ3R2dqznd3t3Xarmbejiouwf0ZxpElts7XTygq1cS7CC+27qpZ6P8NkRFF081fZSaB07urPEEgL/up062tTzyzf6zHj9g45j1lj9rWvF1ouOw8AQLn8+B/4cX7Jz9+DQNrww/6RHP/HtV92AhMX5a7tGf9dlRUZe3xPuVVJvedKOLs+6FSJo7Q8N/B+XvGZ1TfBNEVVpcslOPFgu926vPWo3Qz0RnWvZ7M199qMT92OgmzXM2rTHCP03WTPKBddH+ZsHzbj/J9L6st/dcwWx2a+mu/mjgn1Sc3u/K8aGXuY3JEKB45UnP+V4Xt0vQztVvK3jXq9HvRtsuIaOedb8Ap6WcuuSNQ5o1bU/wNBWJSnizo9EBX37mpB1Gpm1Gbn3ZCotb4o25vu2Ty8vUkzH8xts64/+qJGz/w/sPltKPfKTK4asxEPBe4bj/szn91c1e0zTI0c6cul+y0uDEv9b/49DQfwXvd1XctPX756WGm3W0/swr2MhcdL3U/m3kqZ25S8oL3kkwVFTmrjzqA0zcQuHeoO7f2jcGN7lR2Jg3KsFxrfpnsilbFQ8v0JU5Ec9LIzQUnsvMvE9V9Sr1TjyZ59CTPn6SP+EOD3GNk5dreCS2KjeEYu6eSBKrjF4RVcuuZK1Yyu5jp/Uboweouhz/OYMA390F1+/wcAAAAAAAAAAAAAAAAAAJg10/h3grL7CAAAAAAAAAAAAAAAAAAAAADArOs+/1ed5/9qtOf/Dj6K5TCf//txRzz/F5i8fwEAAP//FZd8vg==") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x38440, 0x188) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)={0xb, 0x5, 0x5c31, 0x4080}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9.488685993s ago: executing program 2 (id=4618): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000003640)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) prlimit64(0x0, 0xe, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) fallocate(r0, 0x0, 0x6, 0x8800000) 8.1898346s ago: executing program 1 (id=4621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xb, 0x0, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000440)={0xc1, 0x0, 0x1}) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r7, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x0, 0x0) 8.058600612s ago: executing program 2 (id=4622): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) 7.182346654s ago: executing program 1 (id=4623): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x3517, 0x93c7, 0x42, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 6.788437739s ago: executing program 5 (id=4624): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1, {0x0, 0x0, 0x4}}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r3, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) 6.787614619s ago: executing program 1 (id=4625): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r4, r5, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tcp_congestion(r6, 0x0, 0x0) dup2(r6, r2) close_range(r1, 0xffffffffffffffff, 0x0) 6.74375061s ago: executing program 6 (id=4626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) 6.654534941s ago: executing program 0 (id=4627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) 6.423010224s ago: executing program 6 (id=4628): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x0, 0x2, {0x5, @win={{0x0, 0xd, 0x7, 0x5}, 0x8, 0x8, &(0x7f0000000480)={{0x0, 0x13, 0x4, 0x81}, &(0x7f0000000380)={{0x5, 0x7, 0x800, 0x80000001}, &(0x7f0000000340)={{0x5, 0x5, 0x4, 0x40}}}}, 0x80, &(0x7f00000004c0)="1ad40f0f5d3f20a720b517b4e4bbb21660bf219be8093262012c737a", 0x4}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x80, 0xa3, 0x0) mq_timedreceive(r3, 0x0, 0x0, 0x20000900, &(0x7f0000000100)={0x77359400}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) r5 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r5, &(0x7f0000004380), 0x0, 0x10) read$FUSE(r4, &(0x7f0000006140)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20448, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x1302c2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.523925396s ago: executing program 5 (id=4629): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0xfffffffffffffff9, 0x2, 0x8001, 0x2, [0x7, 0x12ae1acd, 0x7, 0x28]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, &(0x7f0000000bc0)=0x2c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 5.293131989s ago: executing program 6 (id=4630): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.195120454s ago: executing program 0 (id=4631): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x9, 0x81, 0x1, 0x1, 0x6, 0xffff, 0x3, 0xffff0525, 0x5, 0x1, 0x800, 0x8, 0xffffffff, 0x3, 0xb, 0x30, {0x2, 0x47ee}, 0x3, 0x56}}) 4.156534655s ago: executing program 6 (id=4632): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000003640)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) prlimit64(0x0, 0xe, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) fallocate(r0, 0x0, 0x6, 0x8800000) 3.915995098s ago: executing program 0 (id=4633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x81, 0x4ac, &(0x7f00000011c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000000, 0x3) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000080)={0x2c, 0x1, 0x0, 0x40000000, r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 3.843114139s ago: executing program 2 (id=4634): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000080)={[{@umask={'umask', 0x3d, 0x296eabae}}, {@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {}, {@part={'part', 0x3d, 0x5}}]}, 0x11, 0x2b6, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x38440, 0x188) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)={0xb, 0x5, 0x5c31, 0x4080}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.642859761s ago: executing program 1 (id=4635): epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xea5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="f1a0fa9090d465b0", 0x8}], 0x1}}], 0x1, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x306cd2f001fae252, 0x8}}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x2, 0xc, "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", 0x2, 0xa1, 0xf9, 0xe, 0x2, 0x7, 0x3, 0x6}, r2}}, 0x128) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.596389626s ago: executing program 2 (id=4636): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x3517, 0x93c7, 0x42, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 2.595875935s ago: executing program 6 (id=4637): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2.579484325s ago: executing program 0 (id=4638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) 1.963176664s ago: executing program 5 (id=4639): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000002c0)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") open(&(0x7f0000000240)='./file1\x00', 0x165942, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000240), &(0x7f0000000040)=ANY=[], 0xff68, 0x2) 1.727848827s ago: executing program 0 (id=4640): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000010601020000000073b8901ee608797a3100e58ce0cd84f61d864e61"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0x3}, &(0x7f0000000540)=0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000f00)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200"], 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000780)) 1.727419017s ago: executing program 1 (id=4641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 774.94195ms ago: executing program 1 (id=4642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getcwd(&(0x7f00000010c0)=""/4096, 0x1000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYBLOB="00022cbd7000d3723412f69e17e7000000000200000008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x4000) 752.35773ms ago: executing program 2 (id=4643): io_uring_setup(0x125e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x7058, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 12.15043ms ago: executing program 0 (id=4644): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@minixdf}, {@bh}]}, 0x3, 0x50b, &(0x7f0000000a40)="$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") openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r6, 0x407, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008001) unshare(0x62040200) write$FUSE_INIT(r6, &(0x7f0000000340)={0xfffffffffffffd5a, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x1840400, 0x1, 0x1, 0x6, 0x80, 0x0, 0x0, 0x40, 0x20000000}}, 0x50) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r6, 0x407, 0x2000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 0s ago: executing program 6 (id=4645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): nk becomes ready [ 1047.238302][ T4172] usb 6-1: USB disconnect, device number 55 [ 1047.471806][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 1047.782129][ T1110] usb 3-1: config 0 has no interfaces? [ 1048.285170][ T1110] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1048.295473][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.313661][ T1110] usb 3-1: config 0 descriptor?? [ 1048.355889][ T1110] usb 3-1: can't set config #0, error -71 [ 1048.399669][ T1110] usb 3-1: USB disconnect, device number 57 [ 1048.480065][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1048.492516][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1048.507169][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.750980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1048.760942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.611613][T15345] device veth0_vlan entered promiscuous mode [ 1050.663472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.810001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.872929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.889120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.124297][T15345] device veth1_vlan entered promiscuous mode [ 1052.304425][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1053.172612][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1053.250567][T15345] device veth0_macvtap entered promiscuous mode [ 1053.331873][T15345] device veth1_macvtap entered promiscuous mode [ 1053.343541][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3106'. [ 1053.527969][ T4217] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1053.999978][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.011005][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.022573][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.035097][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.053483][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.068577][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.108990][T15345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.120525][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1054.139953][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1054.154812][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.172431][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.183415][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.194665][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.205893][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.216587][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.237333][T15345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.248056][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1054.258745][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1054.281279][T15345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.290602][ T4217] usb 6-1: Using ep0 maxpacket: 32 [ 1054.301249][T15345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.313610][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.313659][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.335267][T15345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.348729][T15345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.472419][ T4217] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1054.592945][ T4217] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 1054.658488][ T4217] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.779805][ T4217] usb 6-1: config 7 has no interface number 0 [ 1054.847778][ T4217] usb 6-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.966161][ T4217] usb 6-1: config 7 interface 187 has no altsetting 0 [ 1055.100521][ T7566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.157323][ T7566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.212185][ T4217] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1055.251196][ T4217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.301947][ T4217] usb 6-1: Product: syz [ 1055.310242][ T4217] usb 6-1: Manufacturer: syz [ 1055.324444][ T4217] usb 6-1: SerialNumber: syz [ 1055.344817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1055.389024][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.519847][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.538932][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 1055.546595][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1055.645963][ T4217] usb 6-1: Limiting number of CPorts to U8_MAX [ 1055.666494][ T4217] usb 6-1: Unknown endpoint type found, address 0x07 [ 1055.673499][ T4217] usb 6-1: Not enough endpoints found in device, aborting! [ 1056.513587][ T21] usb 6-1: USB disconnect, device number 56 [ 1056.736668][T15523] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1056.767959][T15523] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1059.012605][ T9714] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1059.251021][T15552] ksmbd: Unknown IPC event: 8, ignore. [ 1059.762793][ T9714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.793695][ T9714] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1062.208987][ T9714] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1062.219364][ T9714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.236212][ T9714] usb 6-1: Product: syz [ 1062.240437][ T9714] usb 6-1: Manufacturer: syz [ 1062.251903][ T9714] usb 6-1: config 0 descriptor?? [ 1062.282091][ T9714] usb 6-1: can't set config #0, error -71 [ 1062.308144][ T9714] usb 6-1: USB disconnect, device number 57 [ 1063.956584][ T4217] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1064.118237][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3132'. [ 1064.301935][ T4217] usb 3-1: Using ep0 maxpacket: 32 [ 1064.424760][T15591] device syzkaller1 entered promiscuous mode [ 1064.462128][ T4217] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1064.552121][ T4217] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 1064.583908][ T4217] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.654969][ T4217] usb 3-1: config 7 has no interface number 0 [ 1064.685798][ T4217] usb 3-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.784789][ T4217] usb 3-1: config 7 interface 187 has no altsetting 0 [ 1064.981262][T15600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3136'. [ 1065.672062][ T4217] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1065.696995][ T4217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.489092][ T4217] usb 3-1: Product: syz [ 1066.493782][ T4217] usb 3-1: Manufacturer: syz [ 1066.498504][ T4217] usb 3-1: SerialNumber: syz [ 1066.562840][ T4217] usb 3-1: can't set config #7, error -71 [ 1066.742283][ T4217] usb 3-1: USB disconnect, device number 58 [ 1066.911988][ T4172] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1067.945034][ T4172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.792110][ T4172] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1070.021991][ T4172] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1070.031143][ T4172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.070722][ T4172] usb 2-1: config 0 descriptor?? [ 1070.102098][ T4172] usb 2-1: can't set config #0, error -71 [ 1070.119277][ T4172] usb 2-1: USB disconnect, device number 49 [ 1070.226918][T15644] ksmbd: Unknown IPC event: 8, ignore. [ 1073.638275][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 1074.931812][ T9714] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1076.091993][ T9714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.117700][ T9714] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1076.423856][ T9714] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1076.446382][ T9714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.454984][ T9714] usb 1-1: Product: syz [ 1076.459193][ T9714] usb 1-1: Manufacturer: syz [ 1076.465688][ T9714] usb 1-1: SerialNumber: syz [ 1076.474242][ T9714] usb 1-1: config 0 descriptor?? [ 1077.391988][ T9714] usb 1-1: can't set config #0, error -71 [ 1077.436838][ T9714] usb 1-1: USB disconnect, device number 45 [ 1077.833836][T15709] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3167'. [ 1078.034311][T15703] device syzkaller1 entered promiscuous mode [ 1078.164993][ T21] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1078.971793][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 1079.131914][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1079.401898][ T21] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1079.962355][ T21] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.999960][ T21] usb 2-1: config 7 has no interface number 0 [ 1080.072044][ T21] usb 2-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1080.151871][ T21] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1080.342015][ T21] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1080.361869][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.411824][ T21] usb 2-1: Product: syz [ 1080.416050][ T21] usb 2-1: Manufacturer: syz [ 1080.450493][T15726] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1080.474498][ T21] usb 2-1: SerialNumber: syz [ 1080.482070][T15726] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1080.543086][ T21] usb 2-1: can't set config #7, error -71 [ 1080.564915][ T21] usb 2-1: USB disconnect, device number 50 [ 1082.961795][ T4217] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1083.422220][ T4217] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.693357][ T4217] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1083.706190][ T4217] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.781845][ T4217] usb 6-1: string descriptor 0 read error: -71 [ 1084.269508][ T4217] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1084.353417][ T4217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.500269][ T4217] usb 6-1: config 0 descriptor?? [ 1084.522024][ T4217] usb 6-1: can't set config #0, error -71 [ 1084.543124][ T4217] usb 6-1: USB disconnect, device number 58 [ 1084.585632][ T1092] block nbd1: Attempted send on invalid socket [ 1084.591975][ T1092] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.604037][ T1092] block nbd1: Attempted send on invalid socket [ 1084.610232][ T1092] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1084.624090][T15768] Mount JFS Failure: -5 [ 1084.901760][ T4217] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1085.242019][ T4217] usb 6-1: Using ep0 maxpacket: 32 [ 1085.432572][ T4217] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1085.712077][ T4217] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 1086.265984][ T4217] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.356126][ T4217] usb 6-1: config 7 has no interface number 0 [ 1086.408308][ T4217] usb 6-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.519221][ T4217] usb 6-1: config 7 interface 187 has no altsetting 0 [ 1086.810624][T15470] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1087.505956][ T4217] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1087.923026][ T4217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.935666][ T4217] usb 6-1: Product: syz [ 1087.939880][ T4217] usb 6-1: Manufacturer: syz [ 1087.945053][ T4217] usb 6-1: SerialNumber: syz [ 1087.981896][ T4217] usb 6-1: can't set config #7, error -71 [ 1087.992180][ T4217] usb 6-1: USB disconnect, device number 59 [ 1088.391994][T15470] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.463178][T15470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1088.568466][T15470] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.791913][T15470] usb 1-1: string descriptor 0 read error: -71 [ 1089.799751][T15470] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1089.812175][ T4217] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1089.856096][T15470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.873781][T15829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1090.647718][T15470] usb 1-1: config 0 descriptor?? [ 1090.674109][T15470] usb 1-1: can't set config #0, error -71 [ 1090.851820][ T4217] usb 6-1: Using ep0 maxpacket: 16 [ 1091.022150][ T4217] usb 6-1: config 0 has no interfaces? [ 1091.028094][ T4217] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1091.098505][ T4217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.200242][ T4217] usb 6-1: config 0 descriptor?? [ 1091.345524][T15470] usb 1-1: USB disconnect, device number 46 [ 1091.451858][ T4217] usb 6-1: can't set config #0, error -71 [ 1092.035969][ T4217] usb 6-1: USB disconnect, device number 60 [ 1095.607466][ T4172] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1095.691839][T11805] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1095.897431][T15470] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1095.931854][ T4172] usb 6-1: Using ep0 maxpacket: 32 [ 1096.102003][T11805] usb 7-1: Using ep0 maxpacket: 32 [ 1096.242579][T11805] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1096.258468][T11805] usb 7-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1096.272110][T15470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.332520][T15470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1096.390855][T11805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.455189][T15470] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1096.667111][T11805] usb 7-1: config 0 descriptor?? [ 1096.859611][T15470] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1096.878982][T15470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.920197][T15470] usb 2-1: Product: syz [ 1096.945218][T15470] usb 2-1: Manufacturer: syz [ 1096.961878][T15470] usb 2-1: SerialNumber: syz [ 1096.991257][T15470] usb 2-1: config 0 descriptor?? [ 1097.022201][T15860] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1097.042704][T15470] usb 2-1: ucan: probing device on interface #0 [ 1097.055636][T15470] usb 2-1: ucan: invalid EP count (1) [ 1097.081092][T15470] usb 2-1: ucan: probe failed; try to update the device firmware [ 1097.141802][ T4172] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1097.732983][T15883] udc-core: couldn't find an available UDC or it's busy [ 1097.739952][T15883] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1097.742239][ T4172] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1097.791828][ T4172] usb 6-1: can't read configurations, error -71 [ 1098.509914][T15883] program syz.6.3217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1098.711991][T11805] usbhid 7-1:0.0: can't add hid device: -71 [ 1098.821805][T11809] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1099.489415][T11805] usbhid: probe of 7-1:0.0 failed with error -71 [ 1099.506596][T11805] usb 7-1: USB disconnect, device number 27 [ 1099.912878][T11809] usb 3-1: Using ep0 maxpacket: 16 [ 1099.964335][T15898] usb 2-1: USB disconnect, device number 51 [ 1100.842695][T11809] usb 3-1: config 0 has no interfaces? [ 1100.848243][T11809] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1100.873311][T11809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.279708][T11809] usb 3-1: config 0 descriptor?? [ 1102.314726][ T4213] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1102.658695][T15928] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1102.691766][ T4213] usb 7-1: Using ep0 maxpacket: 32 [ 1102.962055][ T9714] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1103.021966][ T4213] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1103.101890][ T4213] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 1103.202065][ T4213] usb 7-1: config 7 has no interface number 0 [ 1103.208333][ T4213] usb 7-1: config 7 interface 187 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 1103.221767][ T4213] usb 7-1: config 7 interface 187 has no altsetting 0 [ 1103.241880][ T9714] usb 1-1: Using ep0 maxpacket: 32 [ 1103.572217][ T9714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1103.642207][ T4213] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1103.943601][ T9714] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1104.025512][ T4213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.051757][ T9714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.059938][ T4213] usb 7-1: Product: syz [ 1104.070114][ T4213] usb 7-1: Manufacturer: syz [ 1104.076002][ T4213] usb 7-1: SerialNumber: syz [ 1104.088850][ T9714] usb 1-1: config 0 descriptor?? [ 1104.140261][T15846] usb 3-1: USB disconnect, device number 59 [ 1104.147240][ T4213] usb 7-1: can't set config #7, error -71 [ 1104.167794][ T4213] usb 7-1: USB disconnect, device number 28 [ 1104.267706][T15943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1104.942374][T15940] device syzkaller1 entered promiscuous mode [ 1105.099301][T15925] udc-core: couldn't find an available UDC or it's busy [ 1105.119987][T15925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1105.251859][T15925] program syz.0.3234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1106.247400][ T4215] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1106.338027][ T9714] hid-generic 0003:1E71:2011.0018: collection stack underflow [ 1106.346486][ T9714] hid-generic 0003:1E71:2011.0018: item 0 0 0 12 parsing failed [ 1106.359171][ T9714] hid-generic: probe of 0003:1E71:2011.0018 failed with error -22 [ 1108.221978][ T4215] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.255450][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1108.287600][ T4215] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.299914][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3247'. [ 1108.537170][T15898] usb 1-1: USB disconnect, device number 47 [ 1108.571836][ T4215] usb 3-1: string descriptor 0 read error: -71 [ 1108.579003][ T4215] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1108.608204][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.677996][T15985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3249'. [ 1109.986754][ T4215] usb 3-1: config 0 descriptor?? [ 1110.031930][ T4215] usb 3-1: can't set config #0, error -71 [ 1110.062570][ T4215] usb 3-1: USB disconnect, device number 60 [ 1111.257935][T15898] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1111.345465][ T4215] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1112.431776][ T4215] usb 3-1: Using ep0 maxpacket: 16 [ 1112.519006][T16020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1112.541836][T15898] usb 1-1: device not accepting address 48, error -71 [ 1112.878733][ T150] block nbd6: Attempted send on invalid socket [ 1112.885284][ T150] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1112.898046][ T150] block nbd6: Attempted send on invalid socket [ 1112.905035][ T150] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1112.916692][T16021] Mount JFS Failure: -5 [ 1112.941974][ T21] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1112.962728][ T4215] usb 3-1: config 0 has no interfaces? [ 1113.241923][ T4215] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1113.251018][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.504365][ T4215] usb 3-1: config 0 descriptor?? [ 1113.558735][ T4215] usb 3-1: can't set config #0, error -71 [ 1113.579136][ T4215] usb 3-1: USB disconnect, device number 61 [ 1113.752338][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.842585][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1113.848674][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1113.854727][ T21] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1114.584061][ T21] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1114.593656][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.602234][ T21] usb 6-1: Product: syz [ 1114.606648][ T21] usb 6-1: Manufacturer: syz [ 1114.613915][ T21] usb 6-1: SerialNumber: syz [ 1114.632844][ T21] usb 6-1: config 0 descriptor?? [ 1114.783927][T16017] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1114.792716][ T21] usb 6-1: ucan: probing device on interface #0 [ 1114.800920][ T21] usb 6-1: ucan: invalid EP count (1) [ 1114.816962][ T21] usb 6-1: ucan: probe failed; try to update the device firmware [ 1114.893266][T16049] xt_policy: output policy not valid in PREROUTING and INPUT [ 1116.112182][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.123889][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.155091][ T4215] usb 6-1: USB disconnect, device number 63 [ 1117.208101][ T4172] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1117.736982][ T4172] usb 1-1: Using ep0 maxpacket: 32 [ 1117.888767][T16070] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3272'. [ 1117.946165][T16071] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1118.861897][T15898] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1118.951834][ T4172] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1118.975585][ T150] block nbd2: Attempted send on invalid socket [ 1118.981962][ T150] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1118.994814][ T150] block nbd2: Attempted send on invalid socket [ 1119.001236][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1119.012760][T16075] Mount JFS Failure: -5 [ 1119.451870][T15898] usb 6-1: Using ep0 maxpacket: 16 [ 1119.772326][ T4172] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1120.114562][ T4172] usb 1-1: can't read configurations, error -71 [ 1120.811977][T15898] usb 6-1: config 0 has no interfaces? [ 1120.817523][T15898] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1120.893349][T16089] xt_policy: output policy not valid in PREROUTING and INPUT [ 1120.911775][T15898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.968760][T15898] usb 6-1: config 0 descriptor?? [ 1121.691966][T15898] usb 6-1: can't set config #0, error -71 [ 1121.850402][T15898] usb 6-1: USB disconnect, device number 64 [ 1125.191840][ T4213] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1126.069901][ T4213] usb 3-1: Using ep0 maxpacket: 32 [ 1127.061802][ T4213] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1127.121839][ T4213] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1127.272728][ T4213] usb 3-1: can't read configurations, error -71 [ 1128.221736][ T9714] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1128.971744][ T9714] usb 1-1: Using ep0 maxpacket: 16 [ 1129.770908][ T9714] usb 1-1: config 0 has no interfaces? [ 1129.831802][ T9714] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1129.840893][ T9714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.870144][ T9714] usb 1-1: config 0 descriptor?? [ 1133.198787][T16170] device syzkaller1 entered promiscuous mode [ 1133.531916][T15898] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1133.831747][T15898] usb 7-1: Using ep0 maxpacket: 32 [ 1133.992063][T15898] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1134.731837][T15898] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1134.739473][T15898] usb 7-1: can't read configurations, error -71 [ 1136.576545][ T4215] usb 1-1: USB disconnect, device number 52 [ 1138.323561][ T1092] block nbd6: Attempted send on invalid socket [ 1138.329958][ T1092] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1138.342852][ T1092] block nbd6: Attempted send on invalid socket [ 1138.349299][ T1092] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1138.361149][T16216] Mount JFS Failure: -5 [ 1139.777690][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3319'. [ 1140.861868][T15898] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1141.050047][T16244] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3323'. [ 1141.582115][T15898] usb 3-1: Using ep0 maxpacket: 32 [ 1141.882070][T15898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1141.904550][ T1110] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1142.746028][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 1143.082047][T15898] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 1143.324809][T15898] usb 3-1: config 7 has no interface number 0 [ 1143.441842][ T1110] usb 1-1: config 0 has no interfaces? [ 1143.447387][ T1110] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1143.485264][T15898] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1143.496053][T15898] usb 3-1: config 7 interface 187 has no altsetting 0 [ 1143.525323][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.550667][ T1110] usb 1-1: config 0 descriptor?? [ 1144.272313][ T4215] Bluetooth: hci3: command 0x0406 tx timeout [ 1144.301862][ T1110] usb 1-1: can't set config #0, error -71 [ 1144.323643][ T1110] usb 1-1: USB disconnect, device number 53 [ 1144.330987][ T7607] device hsr_slave_0 left promiscuous mode [ 1144.371862][ T7607] device hsr_slave_1 left promiscuous mode [ 1144.407822][ T7607] bond2 (unregistering): Released all slaves [ 1144.461829][T15898] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1144.465698][ T7607] bond1 (unregistering): Released all slaves [ 1144.615973][T15898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.403359][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1145.652071][T15898] usb 3-1: can't set config #7, error -71 [ 1146.037849][T15898] usb 3-1: USB disconnect, device number 64 [ 1147.448178][ T7607] bond0 (unregistering): Released all slaves [ 1148.725040][T16308] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3339'. [ 1149.122240][T15898] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1149.560597][T15898] usb 2-1: Using ep0 maxpacket: 16 [ 1149.702832][T15898] usb 2-1: config 0 has no interfaces? [ 1149.793918][T15898] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1149.840388][T15898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.988822][T15898] usb 2-1: config 0 descriptor?? [ 1151.909819][ T4215] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1151.917522][ T150] block nbd0: Attempted send on invalid socket [ 1151.924246][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1151.941738][ T150] block nbd0: Attempted send on invalid socket [ 1151.947945][ T150] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1151.965328][T16329] Mount JFS Failure: -5 [ 1152.171843][ T4215] usb 7-1: Using ep0 maxpacket: 32 [ 1152.179500][T15898] usb 2-1: USB disconnect, device number 52 [ 1152.631996][ T4215] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1154.691811][ T4215] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1155.558900][ T4215] usb 7-1: can't read configurations, error -71 [ 1158.636214][ T150] block nbd5: Attempted send on invalid socket [ 1158.642591][ T150] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1158.655398][ T150] block nbd5: Attempted send on invalid socket [ 1158.662053][ T150] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1158.673702][T16383] Mount JFS Failure: -5 [ 1159.355085][ T1110] Bluetooth: hci0: command 0x0406 tx timeout [ 1163.161933][T16405] xt_policy: output policy not valid in PREROUTING and INPUT [ 1164.996830][ T150] block nbd2: Attempted send on invalid socket [ 1165.003264][ T150] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1165.016136][ T150] block nbd2: Attempted send on invalid socket [ 1165.022736][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1165.034458][T16431] Mount JFS Failure: -5 [ 1172.583636][T16501] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3395'. [ 1173.411782][ T4213] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1173.826401][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.634588][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.751987][ T4213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.906531][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.925947][ T4213] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1174.937168][ T4213] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1175.191241][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.218393][T16518] chnl_net:caif_netlink_parms(): no params data found [ 1175.312258][ T4213] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1175.332074][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1175.357331][ T4213] usb 2-1: Product: syz [ 1175.363711][ T4213] usb 2-1: Manufacturer: syz [ 1175.368436][ T4213] usb 2-1: SerialNumber: syz [ 1175.393909][ T4213] usb 2-1: config 0 descriptor?? [ 1175.415928][T16518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.423796][T16518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.440321][T16518] device bridge_slave_0 entered promiscuous mode [ 1175.462920][ T4213] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 1175.476396][T16518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.488036][T16518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.498622][ T4213] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 1175.514558][T16518] device bridge_slave_1 entered promiscuous mode [ 1175.523393][ T4213] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1175.794937][T16540] netlink: set zone limit has 8 unknown bytes [ 1176.003748][ T4213] Bluetooth: hci1: command 0x0409 tx timeout [ 1176.175708][T16518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.249952][T16518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.250140][T16546] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3408'. [ 1177.260785][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.268164][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.315635][T11809] usb 2-1: USB disconnect, device number 53 [ 1177.609506][T16518] team0: Port device team_slave_0 added [ 1177.684025][T16518] team0: Port device team_slave_1 added [ 1178.071795][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 1178.198383][T16518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.214468][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.304639][T16518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.479652][T16518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.954461][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.988249][T16518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.480473][T16518] device hsr_slave_0 entered promiscuous mode [ 1179.495957][T16518] device hsr_slave_1 entered promiscuous mode [ 1179.862730][T16604] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3420'. [ 1180.408953][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 1181.580542][T16623] fuse: Unknown parameter 'grou00000000000000000000' [ 1182.455637][ T150] block nbd2: Attempted send on invalid socket [ 1182.462866][ T150] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1182.471824][ T4213] Bluetooth: hci1: command 0x0419 tx timeout [ 1182.483157][ T150] block nbd2: Attempted send on invalid socket [ 1182.489547][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1182.500855][T16622] Mount JFS Failure: -5 [ 1182.609611][ T154] device hsr_slave_0 left promiscuous mode [ 1182.711938][ T154] device hsr_slave_1 left promiscuous mode [ 1182.789789][ T154] device veth1_macvtap left promiscuous mode [ 1182.820211][ T154] device veth0_macvtap left promiscuous mode [ 1182.832193][ T154] device veth1_vlan left promiscuous mode [ 1182.839183][ T154] device veth0_vlan left promiscuous mode [ 1182.841207][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 1183.386261][T16656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1184.159356][ T154] bond0 (unregistering): Released all slaves [ 1184.653629][T16667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1186.900720][T16687] ksmbd: Unknown IPC event: 8, ignore. [ 1188.572978][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3444'. [ 1188.607415][T16518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1188.719365][T16518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1188.732958][T16518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1188.743184][T16518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1188.852961][T11791] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1189.043793][T16711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1189.631979][T11791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1189.660088][T11791] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1189.688548][T16518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.722054][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1189.738901][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1189.756259][T16518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.815233][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1189.835477][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1189.872735][T11791] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1189.882074][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.889214][ T5504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.086197][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1190.219332][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.394076][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.546993][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.554170][ T5504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.704818][T11791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.712957][T11791] usb 7-1: Product: syz [ 1190.717138][T11791] usb 7-1: Manufacturer: syz [ 1190.725477][T11791] usb 7-1: SerialNumber: syz [ 1190.732688][T11791] usb 7-1: config 0 descriptor?? [ 1190.752038][T16700] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1190.766325][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1190.772803][T11791] usb 7-1: ucan: probing device on interface #0 [ 1190.781114][T11791] usb 7-1: ucan: invalid EP count (1) [ 1190.782815][T16733] ksmbd: Unknown IPC event: 8, ignore. [ 1190.787065][T11791] usb 7-1: ucan: probe failed; try to update the device firmware [ 1190.952347][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1191.270813][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1191.294655][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1191.345146][T16518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1194.527895][T16518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1194.611164][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1194.620826][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1194.912957][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1194.982530][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1194.991317][T11791] usb 7-1: USB disconnect, device number 33 [ 1195.059881][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1195.080502][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1195.156268][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1195.371520][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1195.424044][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1198.218869][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1198.258453][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1198.480253][T16518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.732390][T16794] ksmbd: Unknown IPC event: 8, ignore. [ 1199.818498][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1199.999312][T16811] binder: 16810:16811 ioctl c0306201 2000000003c0 returned -14 [ 1200.151406][ T9714] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1200.201078][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1200.248559][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1200.306326][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1200.516961][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1200.712414][ T9714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1201.291180][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.299564][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.314524][T16518] device veth0_vlan entered promiscuous mode [ 1201.341004][ T9714] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1201.548215][T16518] device veth1_vlan entered promiscuous mode [ 1202.182254][ T9714] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1202.322595][ T9714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.344620][ T9714] usb 1-1: Product: syz [ 1202.393369][ T9714] usb 1-1: Manufacturer: syz [ 1202.398025][ T9714] usb 1-1: SerialNumber: syz [ 1203.626439][ T9714] usb 1-1: config 0 descriptor?? [ 1203.651892][ T9714] usb 1-1: can't set config #0, error -71 [ 1203.657130][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1203.665715][ T9714] usb 1-1: USB disconnect, device number 54 [ 1203.709694][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1203.728240][T16518] device veth0_macvtap entered promiscuous mode [ 1203.784816][T16518] device veth1_macvtap entered promiscuous mode [ 1203.883415][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.978956][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1204.011920][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.061920][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1204.119790][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.161887][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1204.178390][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.197440][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1204.221702][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.243486][T16518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.274043][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1204.294882][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1204.342269][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1204.632623][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.801723][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.851746][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1204.893017][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1204.929868][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.160431][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.202309][T16518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1205.337950][T16518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.378772][T16518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.611802][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1205.716637][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1205.992450][T16518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.063502][ T150] block nbd6: Attempted send on invalid socket [ 1206.069897][ T150] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1206.082880][ T150] block nbd6: Attempted send on invalid socket [ 1206.089361][ T150] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1206.101582][T16893] Mount JFS Failure: -5 [ 1206.175440][T16518] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.345184][T16518] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.456967][T16518] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.061950][T15470] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1207.156657][T16909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3486'. [ 1207.611831][T15470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1207.629569][ T5504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.638673][ T5504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.649791][T15470] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1207.710532][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1207.966597][ T7607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.982075][T15470] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1207.987687][ T7607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.991335][T15470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.003008][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1208.187556][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.785339][T15470] usb 1-1: Product: syz [ 1208.789592][T15470] usb 1-1: Manufacturer: syz [ 1208.794273][T15470] usb 1-1: SerialNumber: syz [ 1208.811735][T15470] usb 1-1: config 0 descriptor?? [ 1208.832346][T16896] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1208.855050][T15470] usb 1-1: ucan: probing device on interface #0 [ 1208.861393][T15470] usb 1-1: ucan: invalid EP count (1) [ 1208.872724][T15470] usb 1-1: ucan: probe failed; try to update the device firmware [ 1210.907408][T16922] usb 1-1: USB disconnect, device number 55 [ 1211.051798][ T150] block nbd2: Attempted send on invalid socket [ 1211.058159][ T150] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1211.071049][ T150] block nbd2: Attempted send on invalid socket [ 1211.077572][ T150] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1211.089229][T16947] Mount JFS Failure: -5 [ 1212.034252][T16950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1213.581859][T16967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1215.001858][T16922] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1215.014875][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3511'. [ 1215.422444][T16922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1215.479752][T16922] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1215.958776][ T154] device macvlan1 left promiscuous mode [ 1215.984207][ T154] device batadv0 left promiscuous mode [ 1216.021989][T16922] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1216.059287][T16922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.085793][T16922] usb 3-1: Product: syz [ 1216.100612][T16922] usb 3-1: Manufacturer: syz [ 1216.106570][T16922] usb 3-1: SerialNumber: syz [ 1216.121172][ T154] device hsr_slave_0 left promiscuous mode [ 1216.129412][T16990] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1216.151835][T16990] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1216.153528][T16922] usb 3-1: config 0 descriptor?? [ 1216.246009][ T150] block nbd5: Attempted send on invalid socket [ 1216.252395][ T150] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1216.265109][ T150] block nbd5: Attempted send on invalid socket [ 1216.271414][ T150] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1216.283573][T17000] Mount JFS Failure: -5 [ 1216.382398][ T154] device hsr_slave_1 left promiscuous mode [ 1216.982064][T16982] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1217.002549][T16922] usb 3-1: ucan: probing device on interface #0 [ 1217.008856][T16922] usb 3-1: ucan: invalid EP count (1) [ 1217.021408][ T154] device veth1_macvtap left promiscuous mode [ 1217.027596][T16922] usb 3-1: ucan: probe failed; try to update the device firmware [ 1217.039248][ T154] device veth0_macvtap left promiscuous mode [ 1217.102988][ T154] device veth1_vlan left promiscuous mode [ 1217.108810][ T154] device veth0_vlan left promiscuous mode [ 1217.331796][T16149] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1217.587548][T16149] usb 6-1: Using ep0 maxpacket: 32 [ 1217.712091][T16149] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1217.728080][T16149] usb 6-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1217.755298][T16149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.795391][T16149] usb 6-1: config 0 descriptor?? [ 1217.976389][ T154] bond0 (unregistering): Released all slaves [ 1218.096553][T17014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3517'. [ 1218.847575][ T4172] usb 3-1: USB disconnect, device number 65 [ 1219.022140][T17003] netlink: 'syz.5.3515': attribute type 1 has an invalid length. [ 1219.164600][T17003] program syz.5.3515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.668651][T16149] usbhid 6-1:0.0: can't add hid device: -71 [ 1220.681765][T16149] usbhid: probe of 6-1:0.0 failed with error -71 [ 1220.763923][T16149] usb 6-1: USB disconnect, device number 65 [ 1220.892434][T17037] ksmbd: Unknown IPC event: 8, ignore. [ 1221.121218][ T1092] block nbd5: Attempted send on invalid socket [ 1221.127657][ T1092] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1221.141176][ T1092] block nbd5: Attempted send on invalid socket [ 1221.147849][ T1092] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1221.159989][T17043] Mount JFS Failure: -5 [ 1222.036662][T17045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1223.982820][T11791] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1224.577430][T11791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1224.741784][T11791] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1224.788000][T16149] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1224.826222][T17075] ksmbd: Unknown IPC event: 8, ignore. [ 1225.061819][T11791] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1225.152649][T16149] usb 3-1: Using ep0 maxpacket: 32 [ 1225.380991][T16149] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1225.388283][T16149] usb 3-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1225.397525][T16149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.414778][T16149] usb 3-1: config 0 descriptor?? [ 1225.482877][T11791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.564202][T11791] usb 6-1: Product: syz [ 1225.588752][T11791] usb 6-1: Manufacturer: syz [ 1225.614516][T11791] usb 6-1: SerialNumber: syz [ 1225.651436][T11791] usb 6-1: config 0 descriptor?? [ 1225.801903][T11791] usb 6-1: can't set config #0, error -71 [ 1225.828249][T11791] usb 6-1: USB disconnect, device number 66 [ 1226.148991][T17068] netlink: 'syz.2.3534': attribute type 1 has an invalid length. [ 1227.673782][T17068] program syz.2.3534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1228.215789][T16149] hid-generic 0003:1E71:2011.0019: collection stack underflow [ 1228.231825][T16149] hid-generic 0003:1E71:2011.0019: item 0 0 0 12 parsing failed [ 1228.472093][T16149] hid-generic: probe of 0003:1E71:2011.0019 failed with error -22 [ 1229.668362][T17117] xt_policy: output policy not valid in PREROUTING and INPUT [ 1229.751991][T16149] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1230.312120][ T4172] usb 3-1: USB disconnect, device number 66 [ 1230.344409][T16149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1230.369949][T17121] ksmbd: Unknown IPC event: 8, ignore. [ 1230.376378][T16149] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1231.571887][T16149] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1231.591769][T16149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.599869][T16149] usb 1-1: Product: syz [ 1231.621783][T16149] usb 1-1: Manufacturer: syz [ 1231.632541][T16149] usb 1-1: SerialNumber: syz [ 1231.681251][T16149] usb 1-1: config 0 descriptor?? [ 1231.742074][T17114] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1231.762584][T16149] usb 1-1: ucan: probing device on interface #0 [ 1231.768882][T16149] usb 1-1: ucan: invalid EP count (1) [ 1231.781678][T16149] usb 1-1: ucan: probe failed; try to update the device firmware [ 1233.104872][T16149] usb 1-1: USB disconnect, device number 56 [ 1234.202495][T17153] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 1234.362453][T17157] ksmbd: Unknown IPC event: 8, ignore. [ 1234.820541][T17165] xt_policy: output policy not valid in PREROUTING and INPUT [ 1236.901710][ T1110] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1237.981750][ T21] Bluetooth: hci1: command 0x0405 tx timeout [ 1239.851474][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.857849][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.021750][ T1110] usb 1-1: device descriptor read/all, error -71 [ 1241.557887][T17203] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1244.153410][T17208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1248.392356][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1249.613214][ T9732] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1249.991955][T15846] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1250.052128][ T9732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1250.662619][T15846] usb 1-1: Using ep0 maxpacket: 16 [ 1250.818200][T17253] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3587'. [ 1250.917012][T17257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1251.091061][ T9732] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1251.222220][T15846] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1251.240280][T15846] usb 1-1: config 0 has no interface number 0 [ 1251.256880][T15846] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xB9, skipping [ 1251.267956][ T9732] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1251.287847][ T9732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.311744][ T9732] usb 7-1: Product: syz [ 1251.315959][ T9732] usb 7-1: Manufacturer: syz [ 1251.341157][ T9732] usb 7-1: SerialNumber: syz [ 1251.386030][ T9732] usb 7-1: config 0 descriptor?? [ 1251.454906][T17240] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1252.243995][T15846] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1252.255665][ T9732] usb 7-1: ucan: probing device on interface #0 [ 1252.262044][T15846] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1252.270458][T15846] usb 1-1: Product: syz [ 1252.274719][ T9732] usb 7-1: ucan: invalid EP count (1) [ 1252.280269][ T9732] usb 7-1: ucan: probe failed; try to update the device firmware [ 1252.288773][T15846] usb 1-1: SerialNumber: syz [ 1252.298325][T15846] usb 1-1: config 0 descriptor?? [ 1252.304197][ T9732] usb 7-1: USB disconnect, device number 34 [ 1252.612324][T15846] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1253.107072][T15846] usb 1-1: USB disconnect, device number 59 [ 1254.445771][T17280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3597'. [ 1257.348772][T17306] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3602'. [ 1257.925891][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1259.582092][T17339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3611'. [ 1260.160441][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3621'. [ 1260.172494][T17353] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1260.426229][T17357] xt_policy: output policy not valid in PREROUTING and INPUT [ 1261.048308][ T150] block nbd5: Attempted send on invalid socket [ 1261.055273][ T150] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1261.067965][ T150] block nbd5: Attempted send on invalid socket [ 1261.074314][ T150] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1261.086290][T17358] Mount JFS Failure: -5 [ 1262.633628][T17385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3628'. [ 1263.884811][T17396] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1266.061851][T17411] xt_policy: output policy not valid in PREROUTING and INPUT [ 1266.062488][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3638'. [ 1266.958750][T17437] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3644'. [ 1269.725469][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3647'. [ 1270.962066][ T150] block nbd6: Attempted send on invalid socket [ 1270.968463][ T150] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1270.981001][ T150] block nbd6: Attempted send on invalid socket [ 1270.987659][ T150] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1270.999498][T17451] Mount JFS Failure: -5 [ 1272.460882][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3652'. [ 1272.969152][T17474] xt_policy: output policy not valid in PREROUTING and INPUT [ 1273.749019][T17480] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3656'. [ 1273.801683][ T4215] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1274.042354][ T4215] usb 1-1: Using ep0 maxpacket: 32 [ 1274.305031][ T4215] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1274.447220][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3658'. [ 1274.568536][ T4215] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1274.801900][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.832693][ T4215] usb 1-1: config 0 descriptor?? [ 1274.839373][T17489] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1274.847934][T17489] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1274.856230][T17489] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1274.864462][T17489] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.301313][T17477] netlink: 'syz.0.3655': attribute type 1 has an invalid length. [ 1275.398913][T17477] program syz.0.3655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1275.919646][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1277.581813][ T4215] usbhid 1-1:0.0: can't add hid device: -71 [ 1277.588514][ T4215] usbhid: probe of 1-1:0.0 failed with error -71 [ 1277.642483][ T4215] usb 1-1: USB disconnect, device number 60 [ 1279.532541][T17528] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1281.878107][ T1092] block nbd0: Attempted send on invalid socket [ 1281.884605][ T1092] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1281.897271][ T1092] block nbd0: Attempted send on invalid socket [ 1281.904067][ T1092] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1281.915858][T17549] Mount JFS Failure: -5 [ 1282.011864][ T1110] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1282.841871][ T1110] usb 2-1: Using ep0 maxpacket: 32 [ 1282.941733][ T4215] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1282.981874][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1282.994350][ T1110] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1283.191678][ T4215] usb 1-1: Using ep0 maxpacket: 32 [ 1283.315118][ T4215] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1283.938558][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.958895][ T1110] usb 2-1: config 0 descriptor?? [ 1283.997771][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.026558][ T4215] usb 1-1: config 0 descriptor?? [ 1284.104125][ T4215] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1284.559791][T17569] xt_policy: output policy not valid in PREROUTING and INPUT [ 1285.435390][ T4215] gspca_nw80x: reg_w err -110 [ 1285.440601][ T4215] nw80x: probe of 1-1:0.0 failed with error -110 [ 1285.771740][ T1110] usbhid 2-1:0.0: can't add hid device: -71 [ 1285.777774][ T1110] usbhid: probe of 2-1:0.0 failed with error -71 [ 1285.867391][ T1110] usb 2-1: USB disconnect, device number 54 [ 1286.116834][T17584] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1287.795614][ T1110] usb 1-1: USB disconnect, device number 61 [ 1288.186274][T17604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1288.882770][ T150] block nbd6: Attempted send on invalid socket [ 1288.889046][ T150] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.901051][ T150] block nbd6: Attempted send on invalid socket [ 1288.907382][ T150] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.918459][T17601] Mount JFS Failure: -5 [ 1289.270157][T17616] xt_policy: output policy not valid in PREROUTING and INPUT [ 1290.024015][T17615] netlink: 'syz.6.3694': attribute type 1 has an invalid length. [ 1290.051289][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1290.188053][T17615] program syz.6.3694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1291.160539][T17624] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1292.530283][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1297.804884][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 1297.972557][T17654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3703'. [ 1297.983958][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3704'. [ 1298.568602][T17659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3706'. [ 1299.736166][T17678] netlink: 'syz.5.3710': attribute type 1 has an invalid length. [ 1300.066178][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.075901][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.436025][T17694] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3714'. [ 1304.009856][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 1304.933830][T15898] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1306.587082][T17720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3718'. [ 1307.289628][T17722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3720'. [ 1308.187401][ T150] block nbd1: Attempted send on invalid socket [ 1308.193880][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1308.206806][ T150] block nbd1: Attempted send on invalid socket [ 1308.213252][ T150] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1308.224608][T17731] Mount JFS Failure: -5 [ 1310.700580][T17746] xt_policy: output policy not valid in PREROUTING and INPUT [ 1310.977041][T17744] infiniband syz2: set down [ 1310.977186][T17744] infiniband syz2: added ipvlan1 [ 1311.029467][T17744] infiniband syz2: Couldn't open port 1 [ 1311.078771][T17744] RDS/IB: syz2: added [ 1311.079505][T17744] smc: adding ib device syz2 with port count 1 [ 1311.079696][T17744] smc: ib device syz2 port 1 has pnetid [ 1311.832385][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 1313.777860][T17780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1317.415383][T17817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3749'. [ 1319.393462][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3753'. [ 1319.731670][T17837] xt_policy: output policy not valid in PREROUTING and INPUT [ 1322.677107][T17863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1325.351846][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1325.955431][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1326.065738][T17894] xt_policy: output policy not valid in PREROUTING and INPUT [ 1333.683222][T17929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1334.004378][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3781'. [ 1334.302777][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'. [ 1340.125740][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1340.795535][T17984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1341.053968][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1348.499209][T18033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1349.350080][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3812'. [ 1349.733131][T18044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3810'. [ 1353.529169][T18081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3823'. [ 1356.091813][T18092] xt_policy: output policy not valid in PREROUTING and INPUT [ 1357.610140][T18100] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3826'. [ 1361.892433][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.898977][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.186088][T18139] xt_policy: output policy not valid in PREROUTING and INPUT [ 1362.688332][T18142] binder: BINDER_SET_CONTEXT_MGR already set [ 1362.697835][T18142] binder: 18141:18142 ioctl 4018620d 200000000040 returned -16 [ 1364.090615][T18149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3839'. [ 1364.271678][T15470] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1364.642028][T15470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1364.691703][T15470] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1364.871852][T15470] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1364.897228][T15470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.907691][T15470] usb 3-1: Product: syz [ 1364.922273][T15470] usb 3-1: Manufacturer: syz [ 1364.931413][T15470] usb 3-1: SerialNumber: syz [ 1364.964822][T15470] usb 3-1: config 0 descriptor?? [ 1364.981961][T18156] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1365.004510][T15470] usb 3-1: ucan: probing device on interface #0 [ 1365.021052][T15470] usb 3-1: ucan: invalid EP count (1) [ 1365.041306][T15470] usb 3-1: ucan: probe failed; try to update the device firmware [ 1369.471910][ T4172] usb 3-1: USB disconnect, device number 67 [ 1371.230131][T18207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1371.454140][T18200] device syzkaller1 entered promiscuous mode [ 1372.535080][T15846] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1372.801699][T15846] usb 3-1: Using ep0 maxpacket: 16 [ 1373.294136][T15846] usb 3-1: config 0 has no interfaces? [ 1373.299686][T15846] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1373.308836][T15846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.320727][T15846] usb 3-1: config 0 descriptor?? [ 1373.960229][ T4213] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1375.132221][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1376.729715][ T4213] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1376.946426][ T4217] usb 3-1: USB disconnect, device number 68 [ 1377.573545][ T4213] usb 2-1: string descriptor 0 read error: -71 [ 1377.579938][ T4213] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1378.338144][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.358147][ T4213] usb 2-1: config 0 descriptor?? [ 1378.411846][ T4213] usb 2-1: can't set config #0, error -71 [ 1378.440948][ T4213] usb 2-1: USB disconnect, device number 55 [ 1379.293266][T18270] device syzkaller1 entered promiscuous mode [ 1380.311336][T15470] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1381.220224][T15470] usb 7-1: Using ep0 maxpacket: 16 [ 1381.351757][T15470] usb 7-1: config 0 has no interfaces? [ 1381.357427][T15470] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1381.432880][T18298] ksmbd: Unknown IPC event: 8, ignore. [ 1381.562205][T15201] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1382.414034][T15201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1383.131440][T15201] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1383.402043][T15201] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1383.466711][T15201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.579648][T15201] usb 6-1: Product: syz [ 1383.636530][T15201] usb 6-1: Manufacturer: syz [ 1383.698555][T15201] usb 6-1: SerialNumber: syz [ 1383.898404][T15470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.971110][T15201] usb 6-1: config 0 descriptor?? [ 1384.011986][T15201] usb 6-1: can't set config #0, error -71 [ 1384.073606][T15201] usb 6-1: USB disconnect, device number 67 [ 1384.089408][T15470] usb 7-1: config 0 descriptor?? [ 1384.111800][T15470] usb 7-1: can't set config #0, error -71 [ 1384.513529][T15470] usb 7-1: USB disconnect, device number 36 [ 1386.811737][T18307] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1387.051685][T15470] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1387.081655][T18307] usb 3-1: Using ep0 maxpacket: 16 [ 1387.212240][T18307] usb 3-1: config 0 has no interfaces? [ 1387.219351][T18307] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1387.299726][T18307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.437227][T18307] usb 3-1: config 0 descriptor?? [ 1387.452405][T15470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1387.518340][T15470] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1387.802433][T15470] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1387.845682][T15470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.934773][T15470] usb 6-1: Product: syz [ 1387.975059][T15470] usb 6-1: Manufacturer: syz [ 1388.028295][T15470] usb 6-1: SerialNumber: syz [ 1388.181740][T15470] usb 6-1: config 0 descriptor?? [ 1388.212132][T18342] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1388.252558][T15470] usb 6-1: ucan: probing device on interface #0 [ 1388.263332][T15470] usb 6-1: ucan: invalid EP count (1) [ 1388.268727][T15470] usb 6-1: ucan: probe failed; try to update the device firmware [ 1389.797133][T17940] usb 3-1: USB disconnect, device number 69 [ 1390.912351][T15470] usb 6-1: USB disconnect, device number 68 [ 1391.084046][T18387] ksmbd: Unknown IPC event: 8, ignore. [ 1392.188605][T18397] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1393.379320][T18376] device syzkaller1 entered promiscuous mode [ 1393.518718][ T1092] block nbd6: Attempted send on invalid socket [ 1393.525142][ T1092] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1393.537946][ T1092] block nbd6: Attempted send on invalid socket [ 1393.544394][ T1092] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1393.555856][T18406] Mount JFS Failure: -5 [ 1394.563870][T15846] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1394.815233][T15846] usb 7-1: Using ep0 maxpacket: 16 [ 1394.934948][T15846] usb 7-1: config 0 has no interfaces? [ 1394.940922][T15846] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1394.966464][T15846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.986642][T15846] usb 7-1: config 0 descriptor?? [ 1395.171650][ T1110] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1395.307648][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1395.542605][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1395.583016][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1395.782008][ T1110] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1395.799813][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.808812][ T1110] usb 3-1: Product: syz [ 1395.825964][ T1110] usb 3-1: Manufacturer: syz [ 1395.830831][ T1110] usb 3-1: SerialNumber: syz [ 1395.870751][ T1110] usb 3-1: config 0 descriptor?? [ 1395.953194][T18416] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1395.965039][T18423] ptrace attach of "./syz-executor exec"[9655] was attempted by "./syz-executor exec"[18423] [ 1395.976659][ T1110] usb 3-1: ucan: probing device on interface #0 [ 1395.985268][ T1110] usb 3-1: ucan: invalid EP count (1) [ 1395.990882][ T1110] usb 3-1: ucan: probe failed; try to update the device firmware [ 1398.070239][T18438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1398.615633][T11809] usb 3-1: USB disconnect, device number 70 [ 1399.380031][T15898] usb 7-1: USB disconnect, device number 37 [ 1399.411831][T11809] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1399.540454][T18459] ksmbd: Unknown IPC event: 8, ignore. [ 1399.688231][T18456] device syzkaller1 entered promiscuous mode [ 1399.721630][T11809] usb 3-1: Using ep0 maxpacket: 32 [ 1399.841821][T11809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1399.848496][T11809] usb 3-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1399.902232][T11809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.943748][T11809] usb 3-1: config 0 descriptor?? [ 1400.610585][T18448] netlink: 'syz.2.3926': attribute type 1 has an invalid length. [ 1400.770197][T18448] program syz.2.3926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1402.621828][T11809] usbhid 3-1:0.0: can't add hid device: -71 [ 1402.723344][T11809] usbhid: probe of 3-1:0.0 failed with error -71 [ 1402.911719][T11809] usb 3-1: USB disconnect, device number 71 [ 1403.092188][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3933'. [ 1403.578932][T18489] fuse: Bad value for 'fd' [ 1403.611633][T11809] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1403.922392][T18494] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3937'. [ 1404.432827][T11809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1404.465889][T11809] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1404.781967][T11809] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1405.747497][T11809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.789503][T11809] usb 3-1: Product: syz [ 1405.808651][T11809] usb 3-1: Manufacturer: syz [ 1405.831080][T11809] usb 3-1: SerialNumber: syz [ 1405.851051][T11809] usb 3-1: config 0 descriptor?? [ 1405.881738][T11809] usb 3-1: can't set config #0, error -71 [ 1405.890108][T11809] usb 3-1: USB disconnect, device number 72 [ 1407.027834][T18505] device syzkaller1 entered promiscuous mode [ 1410.076480][T18531] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3948'. [ 1411.507501][T18545] ksmbd: Unknown IPC event: 8, ignore. [ 1411.805307][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1411.898463][T18536] fuse: Bad value for 'fd' [ 1411.951652][T11809] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1412.342205][T11809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1412.407356][T11809] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1412.851762][T11809] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1412.878506][T11809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.931763][T11809] usb 3-1: Product: syz [ 1412.935976][T11809] usb 3-1: Manufacturer: syz [ 1412.940604][T11809] usb 3-1: SerialNumber: syz [ 1412.966414][T11809] usb 3-1: config 0 descriptor?? [ 1413.026296][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1413.112058][T18548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1413.134822][T11809] usb 3-1: ucan: probing device on interface #0 [ 1413.141127][T11809] usb 3-1: ucan: invalid EP count (1) [ 1413.649336][T11809] usb 3-1: ucan: probe failed; try to update the device firmware [ 1413.975838][ T1110] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1414.165940][T11809] usb 3-1: USB disconnect, device number 73 [ 1415.080575][T18572] device syzkaller1 entered promiscuous mode [ 1417.345595][ T150] block nbd6: Attempted send on invalid socket [ 1417.351950][ T150] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1417.363899][ T150] block nbd6: Attempted send on invalid socket [ 1417.370283][ T150] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1417.381815][T18587] Mount JFS Failure: -5 [ 1417.392669][T18592] ksmbd: Unknown IPC event: 8, ignore. [ 1417.495389][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 1417.791375][T18597] fuse: Bad value for 'fd' [ 1418.129473][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 1419.391823][T11809] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1420.021801][T11809] usb 7-1: device descriptor read/all, error -71 [ 1420.680954][T18625] xt_policy: output policy not valid in PREROUTING and INPUT [ 1422.085631][ T150] block nbd0: Attempted send on invalid socket [ 1422.092188][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.105698][ T150] block nbd0: Attempted send on invalid socket [ 1422.112452][ T150] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.124666][T18642] Mount JFS Failure: -5 [ 1422.627019][T18654] fuse: Unknown parameter '0xffffffffffffffff' [ 1422.749601][T18660] ksmbd: Unknown IPC event: 8, ignore. [ 1423.010347][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.081713][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.199718][T18668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3987'. [ 1424.769005][T18684] xt_policy: output policy not valid in PREROUTING and INPUT [ 1425.028540][T18685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1426.086384][T18687] device syzkaller1 entered promiscuous mode [ 1426.169302][ T1092] block nbd0: Attempted send on invalid socket [ 1426.177555][ T1092] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1426.189281][ T1092] block nbd0: Attempted send on invalid socket [ 1426.195573][ T1092] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1426.207354][T18696] Mount JFS Failure: -5 [ 1426.891255][T18705] ptrace attach of "./syz-executor exec"[9655] was attempted by "./syz-executor exec"[18705] [ 1427.986524][T18709] fuse: Unknown parameter '0x0000000000000006' [ 1428.371881][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1431.708811][ T1092] block nbd2: Attempted send on invalid socket [ 1431.715129][ T1092] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1431.729199][ T1092] block nbd2: Attempted send on invalid socket [ 1431.735558][ T1092] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1431.750138][T18756] Mount JFS Failure: -5 [ 1432.143059][T18761] fuse: Unknown parameter '0x0000000000000006' [ 1432.383408][T18767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4017'. [ 1436.100118][ T150] block nbd6: Attempted send on invalid socket [ 1436.100196][ T150] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1436.202643][ T1092] block nbd6: Attempted send on invalid socket [ 1436.202667][ T1092] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1436.313791][T18804] Mount JFS Failure: -5 [ 1436.619745][T18797] block nbd2: shutting down sockets [ 1436.847579][T18812] fuse: Unknown parameter '0x0000000000000006' [ 1436.966877][T18816] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4031'. [ 1439.625482][T18836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1440.886994][T18853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1441.654007][T18855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4042'. [ 1442.877543][ T4217] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1443.211670][ T4217] usb 3-1: Using ep0 maxpacket: 32 [ 1443.332003][ T4217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1443.342397][ T4217] usb 3-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1443.366440][T18877] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4049'. [ 1443.413786][ T4217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.493690][ T4217] usb 3-1: config 0 descriptor?? [ 1444.859988][T18863] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4045'. [ 1444.974165][T18887] program syz.2.4045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.235227][ T4217] hid-generic 0003:1E71:2011.001A: collection stack underflow [ 1445.279215][ T4217] hid-generic 0003:1E71:2011.001A: item 0 0 0 12 parsing failed [ 1445.303732][ T4217] hid-generic: probe of 0003:1E71:2011.001A failed with error -22 [ 1446.383878][T18899] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1446.563390][T18901] fuse: Unknown parameter '0x0000000000000006' [ 1447.108850][ T4217] usb 3-1: USB disconnect, device number 74 [ 1453.021633][ T1110] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1453.291712][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 1453.349205][T18966] fuse: Unknown parameter 'fd0x0000000000000006' [ 1453.504842][ T1110] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1453.531371][ T1110] usb 3-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1453.557876][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.583454][ T1110] usb 3-1: config 0 descriptor?? [ 1453.973543][T18971] fuse: Bad value for 'group_id' [ 1453.990015][T18971] device syzkaller1 entered promiscuous mode [ 1454.321433][T18979] program syz.2.4070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1454.895830][T18959] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4070'. [ 1455.080482][T18987] ksmbd: Unknown IPC event: 8, ignore. [ 1455.242048][ T1110] usbhid 3-1:0.0: can't add hid device: -71 [ 1455.249576][ T1110] usbhid: probe of 3-1:0.0 failed with error -71 [ 1455.323898][ T1110] usb 3-1: USB disconnect, device number 75 [ 1457.831650][T11809] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1458.201787][T11809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1458.230743][T11809] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1458.410222][T19016] fuse: Unknown parameter 'fd0x0000000000000006' [ 1458.427287][T11809] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1458.446695][T11809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.471658][T11809] usb 2-1: Product: syz [ 1458.483489][T11809] usb 2-1: Manufacturer: syz [ 1458.492448][T11809] usb 2-1: SerialNumber: syz [ 1458.514827][T11809] usb 2-1: config 0 descriptor?? [ 1458.542558][T19010] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1458.562548][T11809] usb 2-1: ucan: probing device on interface #0 [ 1458.575272][T11809] usb 2-1: ucan: invalid EP count (1) [ 1458.589165][T11809] usb 2-1: ucan: probe failed; try to update the device firmware [ 1460.331718][ T4217] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1461.069919][ T4215] usb 2-1: USB disconnect, device number 56 [ 1461.438557][ T4217] usb 6-1: Using ep0 maxpacket: 32 [ 1461.571731][ T4217] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1461.578501][ T4217] usb 6-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1461.696292][ T4217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.727157][ T4217] usb 6-1: config 0 descriptor?? [ 1461.896852][T19054] ksmbd: Unknown IPC event: 8, ignore. [ 1462.571021][T19061] fuse: Unknown parameter 'fd0x0000000000000006' [ 1462.867436][T19030] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4090'. [ 1462.898600][T19030] program syz.5.4090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1463.014402][ T4217] hid-generic 0003:1E71:2011.001B: collection stack underflow [ 1463.031431][ T4217] hid-generic 0003:1E71:2011.001B: item 0 0 0 12 parsing failed [ 1463.044413][ T4217] hid-generic: probe of 0003:1E71:2011.001B failed with error -22 [ 1464.283759][T17940] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1464.303631][T15201] usb 6-1: USB disconnect, device number 69 [ 1464.346736][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1464.691791][T17940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1464.717414][T17940] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1464.942412][T17940] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1464.957905][T17940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.981677][T17940] usb 3-1: Product: syz [ 1464.985987][T17940] usb 3-1: Manufacturer: syz [ 1464.990600][T17940] usb 3-1: SerialNumber: syz [ 1465.016786][T17940] usb 3-1: config 0 descriptor?? [ 1465.285711][T19098] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4109'. [ 1465.532379][T19083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1465.552392][T17940] usb 3-1: ucan: probing device on interface #0 [ 1465.558739][T17940] usb 3-1: ucan: invalid EP count (1) [ 1465.565463][T17940] usb 3-1: ucan: probe failed; try to update the device firmware [ 1467.193073][T17940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1467.202593][T17940] Bluetooth: hci2: Injecting HCI hardware error event [ 1467.213281][ T9656] Bluetooth: hci2: hardware error 0x00 [ 1467.256278][T17940] usb 3-1: USB disconnect, device number 76 [ 1467.705638][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4114'. [ 1468.871786][T19121] kAFS: No cell specified [ 1469.761440][T19131] ksmbd: Unknown IPC event: 8, ignore. [ 1470.531649][ T4215] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1470.824511][T19143] sctp: [Deprecated]: syz.2.4122 (pid 19143) Use of int in max_burst socket option deprecated. [ 1470.824511][T19143] Use struct sctp_assoc_value instead [ 1471.711240][ T4215] usb 7-1: Using ep0 maxpacket: 32 [ 1471.981940][ T4215] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1472.022872][ T4215] usb 7-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1472.149606][ T4215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.459237][ T4215] usb 7-1: config 0 descriptor?? [ 1472.881731][ T4215] usbhid 7-1:0.0: can't add hid device: -71 [ 1473.020546][ T4215] usbhid: probe of 7-1:0.0 failed with error -71 [ 1473.051780][ T4215] usb 7-1: USB disconnect, device number 40 [ 1475.176836][T19168] device syzkaller1 entered promiscuous mode [ 1476.854445][T19181] kAFS: No cell specified [ 1478.587412][T19195] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4129'. [ 1478.608356][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1478.681613][ T4215] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1479.115448][ T4215] usb 7-1: Using ep0 maxpacket: 32 [ 1479.662849][ T4215] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1479.669526][ T4215] usb 7-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1479.691570][ T4215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.716922][ T4215] usb 7-1: config 0 descriptor?? [ 1480.627005][T19190] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4135'. [ 1480.673240][T19190] program syz.6.4135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1480.874578][ T4215] hid-generic 0003:1E71:2011.001C: collection stack underflow [ 1480.906162][ T4215] hid-generic 0003:1E71:2011.001C: item 0 0 0 12 parsing failed [ 1481.003943][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4139'. [ 1481.047853][ T4215] hid-generic: probe of 0003:1E71:2011.001C failed with error -22 [ 1481.737121][T19218] ksmbd: Unknown IPC event: 8, ignore. [ 1482.695437][ T4215] usb 7-1: USB disconnect, device number 41 [ 1482.766892][T19217] device syzkaller1 entered promiscuous mode [ 1484.384802][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.391207][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.311749][T19238] kAFS: No cell specified [ 1485.874167][ T26] audit: type=1326 audit(1746665859.205:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729fb71969 code=0x7ffc0000 [ 1485.978486][ T26] audit: type=1326 audit(1746665859.235:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f729fb71969 code=0x7ffc0000 [ 1486.060687][ T26] audit: type=1326 audit(1746665859.235:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729fb71969 code=0x7ffc0000 [ 1486.348744][T19244] ptrace attach of "./syz-executor exec"[16518] was attempted by "./syz-executor exec"[19244] [ 1486.961596][ T26] audit: type=1326 audit(1746665859.235:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f729fb71969 code=0x7ffc0000 [ 1487.097192][ T26] audit: type=1326 audit(1746665859.235:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729fb71969 code=0x7ffc0000 [ 1487.147383][ T26] audit: type=1326 audit(1746665859.235:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f729fb71969 code=0x7ffc0000 [ 1487.200544][ T26] audit: type=1326 audit(1746665859.235:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1487.301609][ T26] audit: type=1326 audit(1746665859.235:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19239 comm="syz.5.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729fb71969 code=0x7ffc0000 [ 1487.516461][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1487.861659][T15201] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1488.131766][T15201] usb 2-1: Using ep0 maxpacket: 32 [ 1488.252148][T15201] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1488.259953][T15201] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1489.895261][T15201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.041230][T15201] usb 2-1: config 0 descriptor?? [ 1490.897348][T19258] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4154'. [ 1490.973552][T19258] program syz.1.4154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.211831][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4160'. [ 1491.397306][T15201] usbhid 2-1:0.0: can't add hid device: -71 [ 1491.403892][T15201] usbhid: probe of 2-1:0.0 failed with error -71 [ 1491.606652][T15201] usb 2-1: USB disconnect, device number 57 [ 1491.738584][T19295] ptrace attach of "./syz-executor exec"[13888] was attempted by "./syz-executor exec"[19295] [ 1492.493390][T19297] ksmbd: Unknown IPC event: 8, ignore. [ 1493.668996][T19313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4167'. [ 1494.273869][T19321] device syzkaller1 entered promiscuous mode [ 1494.331843][T17689] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1494.611655][T17689] usb 6-1: Using ep0 maxpacket: 32 [ 1494.731866][T17689] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1494.757398][T17689] usb 6-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1494.784741][T17689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.835880][T17689] usb 6-1: config 0 descriptor?? [ 1495.552595][T19320] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4172'. [ 1495.579078][T19320] program syz.5.4172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1495.794447][T17689] hid-generic 0003:1E71:2011.001D: collection stack underflow [ 1495.811604][T17689] hid-generic 0003:1E71:2011.001D: item 0 0 0 12 parsing failed [ 1495.819794][T17689] hid-generic: probe of 0003:1E71:2011.001D failed with error -22 [ 1496.789187][T19360] binder: 19359:19360 ioctl 4018620d 0 returned -22 [ 1496.964278][T19362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1497.103355][T17689] usb 6-1: USB disconnect, device number 70 [ 1497.161416][T19368] ksmbd: Unknown IPC event: 8, ignore. [ 1497.533926][T19374] device syzkaller1 entered promiscuous mode [ 1499.464885][T19399] binder: 19398:19399 ioctl 4018620d 0 returned -22 [ 1499.580614][T19401] xt_policy: output policy not valid in PREROUTING and INPUT [ 1499.676322][T19403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1499.987113][ T4215] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1500.311906][ T4215] usb 1-1: Using ep0 maxpacket: 32 [ 1500.442785][ T4215] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1500.455459][ T4215] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1500.538621][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.626457][ T4215] usb 1-1: config 0 descriptor?? [ 1501.261958][T17940] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1501.428010][T19422] device syzkaller1 entered promiscuous mode [ 1501.541584][T17940] usb 6-1: Using ep0 maxpacket: 32 [ 1501.570118][T19405] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1501.581209][T19405] program syz.0.4197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1501.684671][ T4215] hid-generic 0003:1E71:2011.001E: collection stack underflow [ 1501.697969][ T4215] hid-generic 0003:1E71:2011.001E: item 0 0 0 12 parsing failed [ 1501.707713][T17940] usb 6-1: descriptor type invalid, skip [ 1501.842592][T17940] usb 6-1: descriptor type invalid, skip [ 1501.849078][ T4215] hid-generic: probe of 0003:1E71:2011.001E failed with error -22 [ 1501.857106][T17940] usb 6-1: descriptor type invalid, skip [ 1501.863251][T17940] usb 6-1: descriptor type invalid, skip [ 1501.979708][T19429] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4204'. [ 1502.004565][T17940] usb 6-1: config 1 interface 0 altsetting 251 bulk endpoint 0x1 has invalid maxpacket 32 [ 1502.014924][T17940] usb 6-1: config 1 interface 0 altsetting 251 bulk endpoint 0x82 has invalid maxpacket 32 [ 1502.082878][T17940] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1502.848659][T19436] binder: 19435:19436 ioctl 4018620d 0 returned -22 [ 1503.041777][T17940] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1503.381592][T17940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.396712][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4209'. [ 1503.426919][T17940] usb 6-1: SerialNumber: syz [ 1503.448400][T11809] usb 1-1: USB disconnect, device number 63 [ 1503.462255][T19414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1503.469426][T19414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1506.795016][T17940] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 251 proto 1 vid 0x0525 pid 0xA4A8 [ 1506.833932][T17940] usb 6-1: USB disconnect, device number 71 [ 1506.860514][T17940] usblp0: removed [ 1507.318332][T19470] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4218'. [ 1508.557464][T19474] binder: BINDER_SET_CONTEXT_MGR already set [ 1508.571588][T19474] binder: 19473:19474 ioctl 4018620d 200000000040 returned -16 [ 1508.662966][T19476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4221'. [ 1509.824109][ T150] block nbd1: Attempted send on invalid socket [ 1509.830319][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1509.856500][ T150] block nbd1: Attempted send on invalid socket [ 1509.862757][ T150] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1509.888324][T19491] Mount JFS Failure: -5 [ 1513.356252][T19522] xt_policy: output policy not valid in PREROUTING and INPUT [ 1513.566177][T19520] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4234'. [ 1514.094322][T19531] ptrace attach of "./syz-executor exec"[9655] was attempted by "./syz-executor exec"[19531] [ 1517.656881][T19551] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1519.272643][T19567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1519.696589][T19578] ptrace attach of "./syz-executor exec"[9655] was attempted by "./syz-executor exec"[19578] [ 1522.702654][T19603] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4257'. [ 1525.138469][T19615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1529.076326][T19650] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4272'. [ 1530.132808][T19654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4275'. [ 1531.884021][T19660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1533.817547][T19692] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4287'. [ 1541.857932][T19741] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1541.894783][ T154] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.928707][ T154] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.647167][ T154] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.675687][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4307'. [ 1543.715189][ T154] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.802288][ T154] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.824089][ T154] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.916326][ T154] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.927694][ T154] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.826947][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.833679][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.981917][T16922] Bluetooth: hci4: command 0x0409 tx timeout [ 1547.356709][T19791] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4313'. [ 1548.464548][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 1550.782021][T15201] Bluetooth: hci4: command 0x040f tx timeout [ 1551.051044][T19771] chnl_net:caif_netlink_parms(): no params data found [ 1552.607809][ T154] device hsr_slave_0 left promiscuous mode [ 1552.750612][ T154] device hsr_slave_1 left promiscuous mode [ 1552.921244][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.985536][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.131390][T15201] Bluetooth: hci4: command 0x0419 tx timeout [ 1553.462021][T19856] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1554.174201][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.218063][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.272567][ T154] device bridge_slave_1 left promiscuous mode [ 1554.542293][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.892918][ T154] device bridge_slave_0 left promiscuous mode [ 1554.958084][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.094827][ T154] device veth1_macvtap left promiscuous mode [ 1555.131574][ T154] device veth0_macvtap left promiscuous mode [ 1555.144248][ T154] device veth1_vlan left promiscuous mode [ 1555.150068][ T154] device veth0_vlan left promiscuous mode [ 1557.362737][T19879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1557.428514][ T154] bond1 (unregistering): Released all slaves [ 1557.810649][ T154] device team_slave_1 left promiscuous mode [ 1557.966318][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1558.029616][ T154] device team_slave_0 left promiscuous mode [ 1559.286826][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1559.347318][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.584720][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.340993][ T154] bond0 (unregistering): Released all slaves [ 1561.477651][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4344'. [ 1561.684033][T19771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.691246][T19771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.767473][T19771] device bridge_slave_0 entered promiscuous mode [ 1561.798799][T19771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.810761][T19771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.921106][T19771] device bridge_slave_1 entered promiscuous mode [ 1561.971748][T19771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1562.093195][T19771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.789501][T19771] team0: Port device team_slave_0 added [ 1562.873064][T19771] team0: Port device team_slave_1 added [ 1563.084624][T17708] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1563.103199][T19771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.110186][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.192347][T19771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.206272][T19771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.213645][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.240528][T19771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.308518][T19771] device hsr_slave_0 entered promiscuous mode [ 1563.330243][T19771] device hsr_slave_1 entered promiscuous mode [ 1563.347687][T19771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1563.365304][T19771] Cannot create hsr debugfs directory [ 1563.521869][T17708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1563.551555][T17708] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1563.752041][T17708] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1563.781609][T17708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.789656][T17708] usb 3-1: Product: syz [ 1563.814519][T17708] usb 3-1: Manufacturer: syz [ 1563.819173][T17708] usb 3-1: SerialNumber: syz [ 1563.859778][T17708] usb 3-1: config 0 descriptor?? [ 1563.891920][T19927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1563.912483][T17708] usb 3-1: ucan: probing device on interface #0 [ 1563.918787][T17708] usb 3-1: ucan: invalid EP count (1) [ 1563.954773][T17708] usb 3-1: ucan: probe failed; try to update the device firmware [ 1564.476587][T19771] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1564.508353][T19771] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1564.546832][T19771] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1564.578272][T19771] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1565.587458][T16922] usb 3-1: USB disconnect, device number 77 [ 1567.938151][T19771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.977466][ T7570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1568.024946][ T7570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1568.105139][T19771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.837076][ T7570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1568.852368][ T7570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1568.871710][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.878852][ T7570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.030653][ T7570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1569.182800][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1569.215413][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1569.378697][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4356'. [ 1569.667593][T20005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4358'. [ 1570.106934][T15741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.114110][T15741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.163153][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1570.243080][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1570.319778][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1570.383900][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1570.455838][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1570.520819][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1570.690629][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1570.882410][T15741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1571.187501][T19771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1572.939460][T19771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1573.056479][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1573.071798][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1573.296732][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1573.335295][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1573.817464][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1576.476622][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1576.484357][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1576.586613][T19771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.576834][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1578.663903][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1578.997575][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1579.022616][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1579.084766][T19771] device veth0_vlan entered promiscuous mode [ 1579.119640][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1579.152446][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1579.168214][T19771] device veth1_vlan entered promiscuous mode [ 1579.172107][ T26] audit: type=1326 audit(1746665952.505:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20102 comm="syz.0.4377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f200c5c5969 code=0x0 [ 1579.258656][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1579.268129][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1579.286840][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1579.306581][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1579.338528][T19771] device veth0_macvtap entered promiscuous mode [ 1579.359433][T19771] device veth1_macvtap entered promiscuous mode [ 1579.462883][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.473640][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.483674][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.494317][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.504414][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.613900][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.626242][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1579.637006][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.648747][T19771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.706823][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.763156][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.821177][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.875598][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.940635][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.015741][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.067704][T19771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.131727][T19771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.171613][T19771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.179106][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1580.199773][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1580.222758][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1580.257596][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1580.325239][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1580.413648][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1580.582878][T19771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.676159][T19771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.746525][T19771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.834411][T19771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.323952][T20022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.356880][T20022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.653314][T20022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1581.690377][T20022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.727905][T20022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.828083][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1584.515301][T20151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4389'. [ 1585.796273][T20160] xt_policy: output policy not valid in PREROUTING and INPUT [ 1589.058175][T20188] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4400'. [ 1590.497609][ T150] block nbd5: Attempted send on invalid socket [ 1590.504037][ T150] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1590.517409][ T150] block nbd5: Attempted send on invalid socket [ 1590.523793][ T150] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1590.534913][T20201] Mount JFS Failure: -5 [ 1592.229315][T20223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4411'. [ 1597.695670][T17689] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1597.961735][T17689] usb 6-1: Using ep0 maxpacket: 8 [ 1598.998964][T17689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.251715][T17689] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1599.260801][T17689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.286950][T17689] usb 6-1: Product: syz [ 1599.291175][T17689] usb 6-1: Manufacturer: syz [ 1599.307076][T17689] usb 6-1: SerialNumber: syz [ 1599.329494][T17689] usb 6-1: config 0 descriptor?? [ 1599.405159][T17689] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1599.411379][T17689] usb 6-1: selecting invalid altsetting 1 [ 1599.627341][T17689] gspca_stk014: reg_r err -71 [ 1599.632274][T17689] stk014: probe of 6-1:0.0 failed with error -71 [ 1599.704412][T17689] usb 6-1: USB disconnect, device number 72 [ 1601.262953][ T1092] block nbd2: Attempted send on invalid socket [ 1601.269305][ T1092] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1601.281256][ T1092] block nbd2: Attempted send on invalid socket [ 1601.287502][ T1092] blk_update_request: I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1601.298846][T20301] Mount JFS Failure: -5 [ 1602.257052][T20311] fuse: Bad value for 'fd' [ 1602.277689][T20311] device syzkaller1 entered promiscuous mode [ 1605.554869][T20341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4443'. [ 1607.301788][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.309027][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.431643][T15201] Bluetooth: hci4: command 0x0405 tx timeout [ 1616.308215][T20449] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4473'. [ 1618.103445][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4474'. [ 1619.992494][ T150] block nbd1: Attempted send on invalid socket [ 1619.998797][ T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1620.010762][ T150] block nbd1: Attempted send on invalid socket [ 1620.017745][ T150] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1620.030923][T20459] Mount JFS Failure: -5 [ 1624.632703][ T1092] block nbd1: Attempted send on invalid socket [ 1624.638926][ T1092] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1624.650515][ T1092] block nbd1: Attempted send on invalid socket [ 1624.657338][ T1092] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1624.668467][T20507] Mount JFS Failure: -5 [ 1624.676424][T20505] bridge0: port 3(syz_tun) entered blocking state [ 1624.721181][T20505] bridge0: port 3(syz_tun) entered disabled state [ 1624.729833][T20505] device syz_tun entered promiscuous mode [ 1624.737567][T20505] bridge0: port 3(syz_tun) entered blocking state [ 1624.744147][T20505] bridge0: port 3(syz_tun) entered forwarding state [ 1628.942469][ T1092] block nbd6: Attempted send on invalid socket [ 1628.948840][ T1092] blk_update_request: I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1628.962910][ T1092] block nbd6: Attempted send on invalid socket [ 1628.969116][ T1092] blk_update_request: I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1628.980446][T20552] Mount JFS Failure: -5 [ 1629.345040][T20554] fuse: Bad value for 'fd' [ 1629.370152][T20554] device syzkaller1 entered promiscuous mode [ 1633.650994][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1633.668736][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1633.690447][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1633.737383][T20597] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1633.865768][T20597] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1633.934262][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1633.942335][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1634.099735][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1634.360118][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1634.582463][T20597] hsr0 speed is unknown, defaulting to 1000 [ 1635.491664][T20609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4523'. [ 1641.195792][ T1092] block nbd0: Attempted send on invalid socket [ 1641.202080][ T1092] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1641.214094][ T1092] block nbd0: Attempted send on invalid socket [ 1641.220376][ T1092] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1641.231562][T20652] Mount JFS Failure: -5 [ 1642.156172][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1648.018923][ T1092] block nbd0: Attempted send on invalid socket [ 1648.025234][ T1092] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1648.039865][ T150] block nbd0: Attempted send on invalid socket [ 1648.046773][ T150] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1648.060797][T20710] Mount JFS Failure: -5 [ 1653.827252][T15201] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1653.856477][T20759] binder: 20758:20759 ioctl c0306201 0 returned -14 [ 1654.271710][T15201] usb 3-1: config index 0 descriptor too short (expected 32804, got 36) [ 1654.848432][T15201] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1654.858804][T15201] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1655.321787][T15201] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1655.367712][T15201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.495055][T15201] usb 3-1: Product: syz [ 1655.499347][T15201] usb 3-1: Manufacturer: syz [ 1655.507260][T15201] usb 3-1: SerialNumber: syz [ 1655.527525][T15201] usb 3-1: config 0 descriptor?? [ 1655.971715][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4574'. [ 1656.066629][T20757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1656.100021][T20757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1656.312417][T15201] usb 3-1: ucan: probing device on interface #0 [ 1656.318802][T15201] usb 3-1: ucan: invalid EP count (1) [ 1656.343204][T15201] usb 3-1: ucan: probe failed; try to update the device firmware [ 1656.517559][T15201] usb 3-1: USB disconnect, device number 78 [ 1657.933894][T20802] binder: 20799:20802 ioctl c0306201 0 returned -14 [ 1658.226516][T20801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4580'. [ 1658.294055][T20807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4582'. [ 1658.342368][T20807] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.351306][T20807] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.360288][T20807] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.369176][T20807] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1658.821948][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4583'. [ 1660.971873][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4589'. [ 1663.123963][T20855] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4595'. [ 1665.138617][T20869] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4602'. [ 1668.704952][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.711451][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.841728][T20912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4611'. [ 1669.962813][T20919] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4614'. [ 1671.190137][ T4217] Bluetooth: hci4: command 0x0406 tx timeout [ 1673.973522][T20963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4624'. [ 1679.936590][T21011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4640'. [ 1680.267562][T21022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4642'. [ 1680.773709][T21026] ------------[ cut here ]------------ [ 1680.788417][T21026] WARNING: CPU: 0 PID: 21026 at mm/page_alloc.c:5441 __alloc_pages+0x391/0x470 [ 1680.811948][T21026] Modules linked in: [ 1680.829761][T21026] CPU: 0 PID: 21026 Comm: syz.0.4644 Not tainted 5.15.181-syzkaller #0 [ 1680.951624][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1680.986881][T21026] RIP: 0010:__alloc_pages+0x391/0x470 [ 1681.036334][T21026] Code: 31 ff e9 b2 fe ff ff e8 6d a8 ed 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 a4 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 95 90 4e 7e 41 83 fd 08 [ 1681.064228][T21026] RSP: 0018:ffffc90002ecfb20 EFLAGS: 00010246 [ 1681.070539][T21026] RAX: ffffc90002ecfb60 RBX: 1ffff920005d9f68 RCX: 0000000000000000 [ 1681.086010][T21026] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90002ecfb88 [ 1681.104958][T21026] RBP: ffffc90002ecfc18 R08: dffffc0000000000 R09: ffffc90002ecfb60 [ 1681.117535][T21026] R10: fffff520005d9f71 R11: 1ffff920005d9f6c R12: dffffc0000000000 [ 1681.144376][T21026] R13: 0000000000000000 R14: 0000000000040d40 R15: 000000000000001e [ 1681.156085][T21026] FS: 00007f200a42d6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1681.183395][T21026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.205952][T21026] CR2: 000020000000f000 CR3: 0000000066189000 CR4: 00000000003526f0 [ 1681.225396][T21026] DR0: 000000000000264d DR1: 0000000000000000 DR2: 0000000000000000 [ 1681.245951][T21026] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1681.264843][T21026] Call Trace: [ 1681.277355][T21026] [ 1681.285143][T21026] ? zone_statistics+0x170/0x170 [ 1681.305249][T21026] ? v9fs_fid_xattr_get+0x1b2/0x220 [ 1681.322232][T21026] ? refcount_inc+0x70/0x70 [ 1681.335980][T21026] ? alloc_pages+0x438/0x550 [ 1681.347492][T21026] kmalloc_order+0x40/0x150 [ 1681.360065][T21026] kmalloc_order_trace+0x14/0xf0 [ 1681.375376][T21026] __v9fs_get_acl+0x40/0x110 [ 1681.385819][T21026] v9fs_get_acl+0x97/0x260 [ 1681.400708][T21026] v9fs_mount+0x6c0/0x850 [ 1681.413378][T21026] legacy_get_tree+0xe6/0x180 [ 1681.418176][T21026] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 1681.434333][T21026] vfs_get_tree+0x88/0x270 [ 1681.438822][T21026] do_new_mount+0x24a/0xa40 [ 1681.445778][T21026] __se_sys_mount+0x2d6/0x3c0 [ 1681.450523][T21026] ? __x64_sys_mount+0xc0/0xc0 [ 1681.460747][T21026] ? lockdep_hardirqs_on+0x94/0x140 [ 1681.468340][T21026] ? __x64_sys_mount+0x1c/0xc0 [ 1681.476686][T21026] do_syscall_64+0x4c/0xa0 [ 1681.481161][T21026] ? clear_bhb_loop+0x15/0x70 [ 1681.489646][T21026] ? clear_bhb_loop+0x15/0x70 [ 1681.498240][T21026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1681.508413][T21026] RIP: 0033:0x7f200c5c5969 [ 1681.520526][T21026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.555531][T21026] RSP: 002b:00007f200a42d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1681.571547][T21026] RAX: ffffffffffffffda RBX: 00007f200c7ecfa0 RCX: 00007f200c5c5969 [ 1681.580903][T21026] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1681.593727][T21026] RBP: 00007f200c647ab1 R08: 0000200000000500 R09: 0000000000000000 [ 1681.604373][T21026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.616374][T21026] R13: 0000000000000000 R14: 00007f200c7ecfa0 R15: 00007ffe33d23378 [ 1681.633533][T21026] [ 1681.636768][T21026] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1681.644043][T21026] CPU: 0 PID: 21026 Comm: syz.0.4644 Not tainted 5.15.181-syzkaller #0 [ 1681.652297][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1681.662370][T21026] Call Trace: [ 1681.665662][T21026] [ 1681.668602][T21026] dump_stack_lvl+0x168/0x230 [ 1681.673293][T21026] ? show_regs_print_info+0x20/0x20 [ 1681.678518][T21026] ? load_image+0x3b0/0x3b0 [ 1681.683061][T21026] panic+0x2c9/0x7f0 [ 1681.686980][T21026] ? bpf_jit_dump+0xd0/0xd0 [ 1681.691508][T21026] ? __alloc_pages+0x391/0x470 [ 1681.696276][T21026] __warn+0x248/0x2b0 [ 1681.700259][T21026] ? __alloc_pages+0x391/0x470 [ 1681.705029][T21026] report_bug+0x1b7/0x2e0 [ 1681.709376][T21026] handle_bug+0x3a/0x70 [ 1681.713532][T21026] exc_invalid_op+0x16/0x40 [ 1681.718051][T21026] asm_exc_invalid_op+0x16/0x20 [ 1681.722905][T21026] RIP: 0010:__alloc_pages+0x391/0x470 [ 1681.728293][T21026] Code: 31 ff e9 b2 fe ff ff e8 6d a8 ed 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 a4 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 95 90 4e 7e 41 83 fd 08 [ 1681.747893][T21026] RSP: 0018:ffffc90002ecfb20 EFLAGS: 00010246 [ 1681.753955][T21026] RAX: ffffc90002ecfb60 RBX: 1ffff920005d9f68 RCX: 0000000000000000 [ 1681.761916][T21026] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90002ecfb88 [ 1681.769899][T21026] RBP: ffffc90002ecfc18 R08: dffffc0000000000 R09: ffffc90002ecfb60 [ 1681.777859][T21026] R10: fffff520005d9f71 R11: 1ffff920005d9f6c R12: dffffc0000000000 [ 1681.785823][T21026] R13: 0000000000000000 R14: 0000000000040d40 R15: 000000000000001e [ 1681.793809][T21026] ? zone_statistics+0x170/0x170 [ 1681.798744][T21026] ? v9fs_fid_xattr_get+0x1b2/0x220 [ 1681.803940][T21026] ? refcount_inc+0x70/0x70 [ 1681.808437][T21026] ? alloc_pages+0x438/0x550 [ 1681.813024][T21026] kmalloc_order+0x40/0x150 [ 1681.817527][T21026] kmalloc_order_trace+0x14/0xf0 [ 1681.822460][T21026] __v9fs_get_acl+0x40/0x110 [ 1681.827054][T21026] v9fs_get_acl+0x97/0x260 [ 1681.831480][T21026] v9fs_mount+0x6c0/0x850 [ 1681.835815][T21026] legacy_get_tree+0xe6/0x180 [ 1681.840485][T21026] ? xfs_fs_commit_blocks+0x6b0/0x6b0 [ 1681.845852][T21026] vfs_get_tree+0x88/0x270 [ 1681.850265][T21026] do_new_mount+0x24a/0xa40 [ 1681.854766][T21026] __se_sys_mount+0x2d6/0x3c0 [ 1681.859441][T21026] ? __x64_sys_mount+0xc0/0xc0 [ 1681.864202][T21026] ? lockdep_hardirqs_on+0x94/0x140 [ 1681.869394][T21026] ? __x64_sys_mount+0x1c/0xc0 [ 1681.874152][T21026] do_syscall_64+0x4c/0xa0 [ 1681.878560][T21026] ? clear_bhb_loop+0x15/0x70 [ 1681.883225][T21026] ? clear_bhb_loop+0x15/0x70 [ 1681.887894][T21026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1681.893788][T21026] RIP: 0033:0x7f200c5c5969 [ 1681.898215][T21026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.917815][T21026] RSP: 002b:00007f200a42d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1681.926230][T21026] RAX: ffffffffffffffda RBX: 00007f200c7ecfa0 RCX: 00007f200c5c5969 [ 1681.934201][T21026] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1681.942163][T21026] RBP: 00007f200c647ab1 R08: 0000200000000500 R09: 0000000000000000 [ 1681.950122][T21026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1681.958082][T21026] R13: 0000000000000000 R14: 00007f200c7ecfa0 R15: 00007ffe33d23378 [ 1681.966059][T21026] [ 1681.969317][T21026] Kernel Offset: disabled [ 1681.974014][T21026] Rebooting in 86400 seconds..