last executing test programs: 19m31.61587052s ago: executing program 1 (id=173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x7, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @empty}}}}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @broadcast}, 0x80002}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) r6 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0), &(0x7f0000001480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x210820, &(0x7f0000000140)={[{@gid}, {}]}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) 19m29.447378971s ago: executing program 1 (id=177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) timer_create(0x3, 0x0, &(0x7f0000006bc0)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0xfa, {0x9, 0x21, 0xa8, 0x5, 0x1, {0x22, 0xba5}}, {{{0x9, 0x5, 0x81, 0x3, 0x38f, 0x80, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x1, 0x9}]}, 0x1, [{0x0, 0x0}]}) 19m24.370479303s ago: executing program 1 (id=184): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x3, 0x402, 0x5, 0xffffffeb, 0x4, 0x9, 0x4}, &(0x7f00000001c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x2, 0x7}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 19m22.680542868s ago: executing program 1 (id=187): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x1, @local, 0xc}]}, &(0x7f0000000100)=0x1f) close_range(r0, 0xffffffffffffffff, 0x0) 19m19.554910907s ago: executing program 1 (id=192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) timer_create(0x3, 0x0, &(0x7f0000006bc0)) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) 19m17.702121645s ago: executing program 1 (id=196): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 19m1.797568851s ago: executing program 32 (id=196): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 16m49.475409347s ago: executing program 2 (id=381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) timer_create(0x3, 0x0, &(0x7f0000006bc0)) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0xfa, {0x9, 0x21, 0xa8, 0x5, 0x1, {0x22, 0xba5}}, {{{0x9, 0x5, 0x81, 0x3, 0x38f, 0x80, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x1, 0x9}]}, 0x1, [{0x0, 0x0}]}) 16m42.926348573s ago: executing program 2 (id=391): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r2, 0x10, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(r2, &(0x7f00000003c0)=@hci, &(0x7f0000000080)=0x80, 0x800) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) ioperm(0x0, 0x82, 0x1f) r6 = socket$unix(0x1, 0x5, 0x0) fchown(r6, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x28, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r7 = semget$private(0x0, 0x6, 0x0) semop(r7, &(0x7f00000000c0)=[{}, {0x1, 0x4000, 0x1800}], 0x2) semop(r7, &(0x7f0000000180)=[{}, {0x0, 0x6}], 0x2) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000080)) accept4(r1, 0x0, 0x0, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) 16m37.554176972s ago: executing program 2 (id=396): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0xcc0c}], 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) creat(&(0x7f0000000480)='./file0\x00', 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80440, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x15) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1e, 0x13, r7, 0x82cfc000) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x400c885) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000052000100000000000000000002"], 0x1c}}, 0x0) r8 = socket(0x10, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x3, 0x0, 'syz1\x00', 0x5}, 0x2, 0x3, 0x9, 0x0, 0x0, 0x400003, 'syz1\x00', 0x0}) 16m34.567352772s ago: executing program 2 (id=398): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r3, 0x10, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(r3, &(0x7f00000003c0)=@hci, &(0x7f0000000080)=0x80, 0x800) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000040)=0x10000) ioperm(0x0, 0x82, 0x1f) r7 = socket$unix(0x1, 0x5, 0x0) fchown(r7, 0x0, 0x0) socket(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRES32], 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r8 = semget$private(0x0, 0x6, 0x0) semop(r8, &(0x7f00000000c0)=[{}, {0x1, 0x4000, 0x1800}], 0x2) semop(r8, &(0x7f0000000180)=[{}, {0x0, 0x6}], 0x2) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000080)) accept4(r1, 0x0, 0x0, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) 16m33.791601123s ago: executing program 2 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r2, r2, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x2}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) close(r3) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 16m29.842838955s ago: executing program 2 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x850001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x207ffd) openat$hwrng(0xffffffffffffff9c, 0x0, 0x206200, 0x0) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) r5 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) mmap(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x8d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x0, 0x1000}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES8], 0xd4}}, 0x0) 16m14.452814303s ago: executing program 33 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x850001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x207ffd) openat$hwrng(0xffffffffffffff9c, 0x0, 0x206200, 0x0) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) r5 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) mmap(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x8d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x0, 0x1000}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES8], 0xd4}}, 0x0) 4m21.101103446s ago: executing program 4 (id=2184): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000c20000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m20.419370995s ago: executing program 4 (id=2187): r0 = io_uring_setup(0x5163, &(0x7f0000000400)={0x0, 0xacb8, 0x8, 0x0, 0xda}) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x9, 0x100020000000003}) syz_io_uring_setup(0x1562, &(0x7f0000000480)={0x0, 0x1276, 0x1, 0x1, 0x183, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000540)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgid(0xee00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0x0, 0x40}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 4m19.48265078s ago: executing program 4 (id=2190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x1, @sdr={0x3247504d, 0x8}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4m15.340438436s ago: executing program 4 (id=2203): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2000004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4m13.831252317s ago: executing program 4 (id=2208): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000080)=[{}, {}], 0x20000000000000e8, &(0x7f0000000140), &(0x7f00000000c0), 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faf7ffff0000000000000000850000002c0000001801000002000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000180)=0x7fffffff, 0x6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160000000000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000000000000000000000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 4m11.972490798s ago: executing program 4 (id=2218): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000080)=[{}, {}], 0x20000000000000e8, &(0x7f0000000140), &(0x7f00000000c0), 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faf7ffff0000000000000000850000002c0000001801000002000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000180)=0x7fffffff, 0x6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160000000000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000000000000000000000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m56.505047326s ago: executing program 34 (id=2218): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000080)=[{}, {}], 0x20000000000000e8, &(0x7f0000000140), &(0x7f00000000c0), 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000e80)=0x9, 0x9, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faf7ffff0000000000000000850000002c0000001801000002000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000180)=0x7fffffff, 0x6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160000000000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000000000000000000000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2m38.068292303s ago: executing program 7 (id=2499): r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x21a043, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x400c041) io_uring_setup(0x23ea, &(0x7f00000002c0)={0x0, 0x49ce, 0x80, 0x0, 0x200019f}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb9) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="ac36035fbfd7867b3aab5b6400000000003702402600000000004000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffffffd, @mcast2, 0xfb8891c}, {0xa, 0x4e23, 0x0, @empty}, r2, 0x6}}, 0x48) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) unlink(0x0) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m37.215376444s ago: executing program 7 (id=2502): r0 = getpid() socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x4001) socket$inet(0x2, 0x2000000080002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dfe, 0xfffffffffffffffe) r4 = socket(0x2a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000100)=0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socket$nl_generic(0x10, 0x3, 0x10) acct(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x10, 0x0, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2004, 0x5}, 0xfffffffffffffe1b) syz_pidfd_open(r0, 0x0) 2m24.218310052s ago: executing program 7 (id=2506): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0xfffffe08) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000100)=""/4, 0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')M', 0x2, 0x0, 0x1000}], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) membarrier(0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80c0}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x5, 0x89}, 0x0) socket$isdn(0x22, 0x2, 0x23) mq_open(&(0x7f0000000540)=',):\x00', 0x40, 0x260, 0x0) 2m24.217183803s ago: executing program 7 (id=2508): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 2m24.212918495s ago: executing program 7 (id=2510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x40100) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="400000000000000008001b"], 0x28}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = accept(r1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2m24.212457484s ago: executing program 7 (id=2511): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x3d, 0xa3, 0x77, 0x20, 0x572, 0xcafe, 0x5501, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x96, 0xdb, 0xa8, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x10}}]}}]}}]}}, 0x0) sync() sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 2m18.623386303s ago: executing program 35 (id=2511): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x3d, 0xa3, 0x77, 0x20, 0x572, 0xcafe, 0x5501, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x96, 0xdb, 0xa8, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x10}}]}}]}}]}}, 0x0) sync() sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000200), &(0x7f0000000240)) 1m8.609059408s ago: executing program 5 (id=2991): read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3b}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 1m4.528863003s ago: executing program 5 (id=3007): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0x1010101}) 1m4.209298342s ago: executing program 5 (id=3011): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r3 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x11, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x14}, [@FRA_FLOW={0x8, 0xb, 0x1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x30}}, 0x4040) 1m2.658490777s ago: executing program 5 (id=3012): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5f, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/65, 0x41) getdents64(r1, &(0x7f0000001f80)=""/4102, 0x1006) 1m2.508631344s ago: executing program 5 (id=3016): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x205, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss={0x2, 0xfff}, @timestamp, @window], 0x21a5) 1m0.728136787s ago: executing program 5 (id=3019): unshare(0x62040200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 45.747881908s ago: executing program 36 (id=3019): unshare(0x62040200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 23.900178976s ago: executing program 3 (id=3103): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e24, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x2}, 0x1c) 23.792018477s ago: executing program 3 (id=3105): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) 23.638395459s ago: executing program 3 (id=3107): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000020601010000000000000000ef1bf359c66d1650037ab10028e98bdd000000000500"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14}]}]}, 0x34}}, 0x4040) 23.40470423s ago: executing program 3 (id=3110): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="ee43a8f8855298a8290b47b6eb9ecbe3b5cc7d6c5531c6b9218388565017628705c4c32fd55292c0c3f883dbf2e8034edf548838c491174fa9ac73e1c9cc70bf5a3522661ea6daeb623ad80d7d2c07b34a3c60821044fcdef7787b6571dfdf4179e6fe0b1d1a55e1804b1c64f153b46f3ea2ddeb087377540bd71dd01663b7fcb827815c7f8a0045e3e851ccf0c6e73fee19fedd3098a97fbef63ff5eb7c1c1f2facda43aba1f2cdf493a3539ab05e525711238ea2b5e70c7bf56091e3fdd7de8cc3ff7b43e649b5c7378c1f9538f8cd9adc78d0893204f65f7d3b0c7d4d5dd1441cf6d19035e5382545c8c91521551b6347bf4d2356b015b77d05a492e1f8a5a356afeec8b308d8f2c838bd0c9b28dde9239783312362e311e727d23d8545f171dfad77a54fc618378a8088c4627b29643e40ddabc200ae14284084d327e439fa1901f9bf6c52e9a2b7176cd308b3c0d82f6ac370a95055c37b56478f8f33648164250f2c4ec4ff44ff22fc62308909ac5f6b3ee783169933dd421a77bdc238b6e54ed292d033fc80b2f4f6e9200589ef32be4de445d981ed0df390fa2691cf5a22eb7dd1277eed9f79cc489fcbd424f9e42683b4891d54d93d1d12eb6076af805bd5ab5a6007da7daa9eaa4763c5ff36b4d6547145e90e5b74041e24bd3c4b996412637757dcc343784511f09bce6e91908b1a3d4f2bc8310105bef2474b2a7e3204a475a1aa5b6189ca02892342e4ce48e4e7a34eac5f5a973ad1fdeb2404e8899bfa9e40f411c84f75d76a4c680ca107e8cc134527f942d15a17011ffed9f11947a2054d8875d6a562a10685e73c92b78ed8b8c05ac12bdc7b627f0f00a2048027ef15085179610b3142e65b73e931ffd17a40f207e682cd567213c4b88ece6f8e41917944da92b7b834027b0ca18d3f1d1264a920dda9f494bdc359e060be1298dcf3be313cbbc61a70bc02dadc0bbaa4fcc2ce0575651adf3d277f0d4e0bf7ef449e0a6a9d9ff5a20f659fd0b5515d46dd1ed1b412b19a7ab40eff607d26b71056de718acdf6ac40f5e50bfd2a65984242fc20d69bba826d308e0cbafe1b6bd336bc2f1c205bd454a06e5199a23ca1c0a7595cae2550c21aae006001cfa7cdc428cded037397e6b6d009f6b9bee1615aa52da336538e045bf324c71dad2997d87801f87d4d3e0a9a7038573b6220b0676af9b56240f3db4af583ff2a8b9242a6568bc0994d89639a88fea8ede9c59b04591378ec636088dd6ec82c4de4c9de7776ca070a3e7103551ad58eee1ccc0e4d3a0392285802d23b8b5be7b407bb8e38dd7fb793c295c16167c6761ab88f28d509854314f5b7120eaa00f0665c4131cad14a86cd4a758716426eb189b9ad7736d7c7b4a49e7be11019cd28d8869a9f30d8ae52ce35c5a69163d514884fb0e404f59bb7f378dae93d3b1c77db574c5115136a7a0d751486cb0dfc6231b3e242ef88c0d983f65e78e74001e50019fd124d1a0761362cd0ee6d6212c55f37837e21356db7fb5fe79c05db8e45425222f3c4d1fc09667accd4164b8ef336ae3db5b215c82dc0ae4e44c98db78481b9942555dc0ca311c4cabdddd318c5e4f8d477294aa43820f3e4c334987423acd6736196a2990789b4b2d65f48ba3039eeecb2ab8abbf1004c10cc1b563ad368df3513b152878c08fefe65744210432347bf4a67f09dda78be9f1024e077c7191f39b718eb12d7bc7500e855f40673d9975c12ac0bc3526d5017cbfa2a07263f58293bb8c7500b8e365533161295d9ca65c6b8b29482ce3078295a6454bdb574476249c0f7b4cdf3ae3ef55afa3ef653e712f14dd7e270ef728ff4c4f38d09b03daad2868e922a7723ec00884ddfd19a527744ef6cecbc74e8c74aa37b62734286ef94d400a7f884f20c2891ebe78b70a7ea6535c1f1d2a421fd3a05a45749f1511a10eb6f45e54e1b83a2e437df5127be5b54cdaf39bbc96187e46cde341a948bc6999ff738a8abb8da9b943e8e2de28d37cd07c346d05b18b90dc98310d8de6286c42bad83393f3f57ab3c54ad753588909c7eaa08eaccfbda485af7423bcfb58966a0f2b1362801223a99228865b1dfba3d102b63fe3a1dfedd561d205358a276d3887612ce91de546ce6d0b9f5420b667675bc597964910891bf71f949e186f4fe96324b1690c53a8ac12bcbd86e046f3752453bc8c3abc04ca05aeaa4539419dcc2985eb0ba64faa63733a417c25eb4e0a94d4237c9f305fc1a5575b85835f2a71d9dbebbf13a8f58ae798feac3f36af38970b89a705fdb4964ad62c2e3bcf80078a03bff48b9a7c948010789fcd4930999ab49c8dbac946ae3e51ce06b24d0a96fd51070e79950f4477fa39452180ae8cf0dae34079354e0772283d07f0580fc9e03cdac4b27edcf59587746871b1739daf3db43e78d832039f3d82f2fc9aee5798b4d19ae96b9b81c73bc2633a32db2b0452bd22a0cc557d20d46343b244051e0aa33edb3edf35d26114e59424454225e4468131ba1ab70c320a321d5771f18c8fc48617763f77cd3d0b51d90a0d05bef340cc4d52fd65e6b39f2e4f7a7bb8722641df73ec3931541a6cdc43cafa6c5e885ebcc00d230f5d03e59e46feb996da8fa59d16d1e271b0faf2f3f1e1eeda53b9f6bee341b94f4ac6c2f0431253c2beb3d3dac49ae543643a2a4b6aaf5ae46d85a102b71d7ae6cbcd50ab8c6a7a61a972cd6c0ecc8ac1cb7c2b7b732e268c0155b918559afe4f470a9f3e61a41acdee97605332613bce6cb5eadf3786a6ab6bd90d672cd4861f273b1a16998a22c03a81fd8295f6a3068581844ffee8b1e7b95b246167b367b2696508d51b2fa3ccdaae9edd68a04a85a95603b28c273f24715267b8e066cfbbce136ea2cbcc9087fcfe17da753734ce7c47195d9aa65149dc2d0e6155d52ac5173160b84d21906704ea06b34c6f7696f81f39ea3c3b2e5ccb3866357143da1ea3362fa2567b3822f3cfa547cab553f16c589339cefd6620f290273be6375afe68d09f910c6121c84d787b6fbb46ea6561f78459d08a15d8e712606015709fbf5902e46f84ac3d270df370acb8f6c7ee59f61eccd167a885068da639fb3f1c4c7722d7a0fed2489855dd31783bfe807926dff94b6d98535364ea1117592025d20942d2090b0706ae357f98f1e2b7511a9f37b3a9d3d2bacc5aff1e8b3d5f3d5134e75f8af24bf348d50a5222eb0cb2ac2a53ae4e069bce30cda581df56adfe41f7c1831bb2e4370914be2d3c6b5f33c5414597c7248d402e373aa246535d69385da9da1c4a3584b8d280fea95ab160ac8c4303c3f2800ccb7b5797395418b4f3c7dc728dac80404c576e6731644089bc7fc82bc3c6abbd5e174a40e6f1d56c5023669aa08130eee2a0b7263eb215af283b7422689b1966d0bb8e34b8b2b8acd118f125c3d45c4297ff38e1e45c5eb1f3d9b5ef283a7f188baf6ca030b9dbf624e23f8455bb8afe8314bc1acd0beda0cd477a16d982ddbc9c525c8c24b9e53ddb4ff9d03c6db15b121738c4d5a24e638a0c238e3cb865eb7433d672401f6dae1ce7ffe330045e44644f185b2d47c82108dd6052d2a928d7f49e9e22b7cdd94c09a6c9820ff22169acc82e08b430926c5af7d290ca92598fa2d212154a10e17e5af05b5c2141475d7ab034bd384cf663fec9e1f9d8f50c1d3e0406f2665cb273ca0185281ee3a65cd76a1a350fe9aeae6e49cb8f0eb4dba4c19ecf27479833fc47dfee6ae7806723ba5c2f24c62e26a3d8a74cb43546d28acb0fbf287c03dcdac6699c3c7f9a3b806ac2318118395fa4e052eb620f02a90dc0556e6338266d5529f968359372a21c5b54a46ae61dcd528d7569435311abf1133be800f466dc19ade70b233ab4a5fa04ddcc476ba44aafd2c443a0c6738a422477a8da46420dbc8cf09302e8e59ce967a4832b46e74bf81306ccb497bcd35ae1e552566c5414982ba51151a4f1b13dc1d0065ea65e5272d9a004ffa84574ce96d94561d46664659dd9ebabd1a907b5127b140801720c1d92a40530040c03a869debffa977a57a8d6196cfc24e844f2486639ed630f5eae1dafd32ebaa1d71a7cfbe98badd7f0962fdce731e2ebd4b97fbbfb82a6cbf94d9d67a58f74d0856ae50e757823976f018281590e6adb9b6d5c0e58833d747957196d502f0f96f70bc351fb9599dd3d177162d087f25f4ef07c2796d2b3b1d2ed1d45bd3ee150d0b9569c4ba640526df0c91825fa8442045ca8397aaa16a39f179dd04fa63c9195617849868f0018756391089827fd090b898b165c0528f835d7726c18cd81f1613c5607d54d074d0c3e37a76c884f963ff8070cb25e441d215c02328ea43f518e139a5df4c033e429a27ca9ec62b103578c075baee7a047e070892c169401bd1d3b9b94bb3375af9ef41d75e4199e486042c0c50bf7b2b883251938ec16150cdcd3806b1df7c6bf190567afbfc540145e9f4885a02a2e0a32f878c097799b728eb6db95061c741526f9a8f988f6c6c24b459fa236b27e978628e38c6a4e0a88199f645e64a535a13e8aec318c43c55c7e61160851d534383b76e300718553a710ddbf937f2f16bff9a2cb883d4d96151b2ce87b6269dce42b153d8d4d7cdd1f1d041bd0a58e76f169f8a3ca5fe9d1cd0d5023b9caaec86fbd65b67c7a972a9616cbeee989942b965d6fc0eaa1ac40240dbc910a72cb5ac4af89b390eabfa9fb8740028f0db6c52036df330d65b958d54b92e156a560648e83fc662d63f1a2af989c03a035f539ae047d611c3eff899ea684e02eb0021ab1a7a20ada3a7bc671935238232b785bc740aeda2a9a8107d63aaea386b9b4462921f2a57c9f681ac4d2e5688de78480826fd0c2646c6922a337a121efad078e8032b9adae398d02da7ab5144f9cde3cc6306c4250788f365f7a51f59e4bd7b4944f5c3acf6046e5ac66fb5d0f83ffbd24de6b43ca32547138609099bb2615fb1ffd971a7117b21e2b70002b5de395f14bf5bd96869bb858687c69026453e2f2f058736603f95f80d8c8d0a22f4f547bf5873ec896f46ce6699682f375cc3d460e836ab58e19830d10dd6458eca0b31dc8b568a1d99b7f01ae483f8c9e99245a5437d4af82b3925aee36b3dc77d5b588d9e225050ee847bbf1c4d0a26fa55eed6f8586d979e9b0e0fadafc8cb56bb74f16efdf4967627a11f669aa5eea716f957d2352e158dec9d295f9d50ca846fda87fcbaeac91df406b7250da41177587dc7102f8fcd9086e263feec335ed1312b71d74403f81c7c7d5731d4b8a10475f86bfeb59a52e769d8c1322facd03960286cda9b6fbea84b06b443baf710d29a209e01d572beb43ddd6ffef3c35afd79a3b12099680a377ee7469610fa26210522d8764d93a00d4a63061f7d0c777199984217b34b4f247ceabff49eed8f404739cb76c6a3f3a1c5804074756266294e2ed4fb15ef2f2cbbf98183dc5dfcb568da748ddf2e5ff56688e1ea25410321d0015c45ceb9eff7c855f683e6a7da716ae15363f98a17fa602edc2cda3ba3bf3d0f53adf56618b2629d4feb77bf70f80c68beea0a37034270c6599498d995c91468fcc4c6650471227af2e38eb3ba208bb7c3c7c326ef744c58bb10e548a770caf35e0ee64053bd8820cdcb4cee1f5ef3dc45ecf8f2a6a0d8e3978c5456ea5989316d75ec5743faf8e63c6b1d68186c7dc2bb8b04f239b42af853e39a43d5891ba3479c0efcb885466710ea1112bd2a7561a6ddbb744ba207ab8ff1e755f3f304d286de3a739b2801af5bab3fd7f034ede2dd38da60415393d6b12ea96ee6cf3b1a87b12b034719e9d907497e1114c888ff2ead6cbc00aa4e9db18186913c35147c9ad06748971a7aed0fa87b4c864150ff06e37b2ef984f0d6e2838e099bcfb92939c75082fa5dc9c7c8455b119866939ef78a594d48b1e233ab2530058a7c2ae8f4147528d0ba328aabdd8d61c2270fb9ab790fbf913e97d15d5e20553016791855e617131474ef0b75081a0c43fc5fa1ecb67c7edeeecc97cd7d941845dad2e54b42e18e68ce41f849313143fe0152e104a2a401e42f982145d9bce7ed874705bf7576ce102ebbe11d6187acba2d06e2b3762cdc8c3f67aa66fd1d70e4ee55e739ebe0b390c8205edc63a9895969ec6fd13b798d5a0401c2e18a580f10505d5abc79a799088d59481a6c26b94180efda1c5c23e9b884f658d8fb0cd80e8e6b3a20c81676f47e929433c27bacb24257edf3e8630755e17d800d8db4f2be1fda9317ba2ecb53756fb0ca80701e49e209859f006a4324c0de093b3da7c23be79567990c7d887a03ab64b787832dbaf2579e76d343d41d37431475d11e918393296bff7a33feb659948d554405fac79bf7cc7c4f702e0d74a3cc384f44bdcb800cb24ee11c9531418c1c82453c0410514391cf5679e4d0d9949a8ce20ac70c12694ea6ca08a87307a98a05d48c7608783e0acc829c65425d8677f103a92e1c852164f09ab67f9a155f3575b2ec3ccfd7cb9ad431dd875369abb7ea31b994e2e39a59e5bd93bc8852ea3e2efff3707c8e1319e6c16be14e3386ad2bb5affb435c2436762b58dc6ffeec0743ea0dca0384ef1217db3d6219fb2921861b176fa0b714decb2e5bfe305691d92c4c65a427ab02b8cbf11a701fe74c20de74ef56ed85fd9136ca03b15d0d99e553ba4ebc8ac4e6c41506c97a33c9a05ce53d19bf62cf6ff16ede1bdbee982553bcf11ea5d2d4922f4e7ba82c83a6307610e34da0ca81c43193cdd16a8bd73b6b119461dd245e1f033da72e644614743741b34bc7813a3937a6447e499f036440781a43ccef1bcc15c8b58999e60ad807e82529bd8c819194f0e396b0d93168fc800c0fec2b7b260d1b6c18956d66ad2db20acb3117a2bd17ddb5c046559461f5e91c74b89535c49efb89bf78ec20743017eae6e1f7c393d28f5c8f7c0f0914a30eb2626a294a3ed7ada207e51bd7a95204605af2b8586c29fdf88ece2a3a5a068430a571d98c26e51a45bbb50231197363845c76f58506bf31738a23fe792f678c042e30d7dd5f19ed5ab4bb36536671e160925d4af6ff078c2b7dbdf9c55ed31e61eacc01babc62d9d2e671bc6c1932e170e3dcc5ad67a9ea7d46fca2f256fbf781019782d4066331fe10f62a6ae077a8b9569dc4bac6b90fb730a968f1782cbfc5e005bad8d9b00ae9199c81e317d91196abc75f1887cb8ffcb440f37a972d4ced20f158844e0ee36111a4247dfda14cc5cada6d372e75ee370149d7fa822f73ef0edc835a338c6d5699911fea2fedd7f3e381caff836a690331327f96ab7904a461ef5a36ce5f552bc1d1d9968106a7b8e07eef4aae2e716422a2fb7b0c1e05f09c29ca83f3405adb80e237d6f145383ec4885573e50ca2ad014308ed70477257f4d904089eec809c55d85684265a1d3b00718cfb14d644463623ba225aa95bee2a95e13a0817e2c98d96b822e6e4ef36d18a831699889034d116c84e45467f46140b88c765339b04ee65e3ef12356fe6d7ef1c80653d2e34af6e03c4503431f775e161ab7edbbfd9316372084e5e69d98443d529c9488e26c40734a636d3cb2f3b7e9bf248d647382937e623f1a7119a8deb731db5e2dbb5cc9d7b60e80f35ada2ee398d3a6c1d1d9c485d4c31c4e3beb69017bc92d9d1eba03994832aa7081bc0d29d97154c20f29d183c589e939f2e62ee71ebcbbf42ecdc9b0342920112b6a50bfa1558ca9b8af99008a8a9be29d121b4cb879ad0f61a21d57698cbda61acf65abd1912e1956226ee646c1e87315939ec9d98db2e49101964e26b28350c7fa529bbcad3c1794c2c52fa63755f09b6e1e2ee4d63050f7197b8d013296b1594a8aa16aafbb3cd4cead348e1c1a9cbdcbc09908e8696a72528ecdf12579e3a9d16afcc7b995398e3f0e6c169363195c454c0d761b20a073c962b29d0dc6dc053a586fe928ca31a759781744ed81844ae0c002b039c32538d35cc293d1fe828123110c07a81e6e0ecabf7075cd890c88c4b67a900464a234dc7043ad678f189c4c47068f16d9cc2ea87211cac5d3c3db3e220eb2463a548d4329093d486ea81c020bb72bffaaf205490011900e3dec6dc911343298a47019dd4d18a8bd71cad38ada40ffe14072790ab40c0a586a3ce452dc15940847ce5c794a6840ff6222c934893226bf8315a0be2f2fb6371cfeeedfe94736af945259bee27ce07827b4fa6dfab66e28ebde09053cf8ec25861aad91cfd1efcb69e60cf8ff3c1b8283301c0b5c1122f7b0733fcfe7f71066d74da3a0fa3abe052de9acf07aa091c139120bf5a35fadf7894d494d34f4e10b5cba392de299c971b1cd8eb8c5fcfba94585f58b995c89136383742f318bb3c738ecf00014d9025b7b01b905aafbb58910a873e6dad1227dc062455b1390d8835e1ca0e0799993239fcc387f2bcc85380286c7931000000000000000019b4847c97840fab93d928a2d664edf10c610110188c69cbcba07e95a7659ee5311dbb4fbbdb63c8c561a1d8e6f3c8c940c4ea4d8ebf8e18ca586f8da46e82dfd1fe22a396518f81b97fed2a3b1d36a7e5348e64838594f9f9aacc3494d01f2bf7cf78c5ab4d715aaa3300b384d80265c9675a9db90ea034d91731dd4c0186bdf370df405a8c3aac525aee5dc5174d61e0ea993b79f47f63ca6d7fa2cb2ac622020e7f7b1c4701a248835de588056c4ca462777cca604c3df4d4984ae969c3bfd440906360341b624a234f28de5e5f2fd22b13daae2ce5afcec92a7950930b771c18f18926cedbfe440ec532e343ba80da0ae9f5f5357094052c26d554715a08670aa16bc4d7787a5d81af654e37133e3557d36ca5a9b6206b0d5a0e82c210e4f9693a91d8a5d7d074cce6c9b9f52ca31f0895add87f9fd430b6cf3e9ad17aeae6ed22278b41a2ae03eebb14d679a11372a5850d2456714bf379799d4b8fae37c0e6176c2b6017a73c2234133632a4f0b582a79573e3fb1669a94708da158443266feefe6cfe3b618d1a9cadc213952c420267016deed5cdcfbd521fb8d0f93f5d445b682a67f214d73467c4c76719eef00990fbcbc327ad082a111bc618593bdb67bad926a47c4a5bf18a37abb8f8b6808d69c36520e9dd74799f565cdb5cdea0d89888b4e83b885aaf1c08131f9bb680392b83aae52911f824865a0678160aceebbfb599871399319c4743ae40fdb9d8219ff9ca1c910e42eeb8e79c902b2bfa71ca623ca5ab04b191c50a2a131dbfa051fa4419161285e39ba8eced0fa666b0a83d7677e786396e63efcb0122c437b2396d4b93047320c136e965f24884bbc7f7211c92330205241b1b50013881ba99c1f630f9942be247bbb8db79d517d60d71d16270d7abc0780b812efba3dec50711bd7cbdfa1606bafca8401c44f3672b64a5fd53fd6f8f4dbde88e3dee77df73eba8deeebe60ebbea469fc95e69210be69cf3c483c1ed1e109dd96f4c87e23a2350574e7c6d856628dced7383176ec275fcec450a0cd3c3762d7646ea93c3dc83914127c344c05f6d951e733da419dc5ffb448cbac887194560a0e6072c4bb6c46678a15e6c4086dcae730ac7100d2fa6885002ee67fdb3191179646fcbffd570d4c788e21557acddb0a169e358b3ad891db2013f5155793a8cd8b30a89081709a9d32abe87b8c659439443c5b2a2b4154a531220c7ed0a1719b379d0586ba129b64c6c648546e127e2a9e12121d7a23d453ced5d1659fae2e8472d0a57837dea21faae210abdc7647491cff768dc4b22a3848be5fa919f475117eb9be58660db072ca53c4496308c75a341deb2637c58b58d33e06659d0ef2b89f2e39d7489365ff42204353887b2911b8ab780ca4939033717223286671fe3a91eace5eb8ef8e613cb2256e9cf98a828f3568e89a8124a23f796f49243a5d9e194f4dc832a756fa800cf25a919ca672d027b9aea023261f8d2e923020f9f80292e9a5288160632ceb2017c3f355d1e87371a2db60d6ef950161c9aab029e9e41d3539ec0b73041586063d060e7c1a03d40347b25f6c304f37babf81ad29acd7e7843a15024de14d6f4eb41ac1bf595938c8c831802bddfda06c714c05ffd88954b230d1bdcc1e186ce5e856483b571b7181770c29df1b1997916949194066134a3ec3ad3ffe2075cc4c327f6a50dedb03c63e791f5d2ecc04fe56c96d7e24175c6d9fa6c0f9bbbc51686ae9ad58c7ce31744610e4ba65c86f19cb03cb93fc570d5b8a3e14b5500df16c8929e263193f57d6dd358a1d958bb43a21b5bb59e218bf7eac475c852a0291fdda5a07c8a35a34ffe25d869c769242bc2ac43b9a7a3c6699a5dc51d5289a075406e893adc7cf3bc460914fe02f287c8bed53fb562c36561caee0a49aeb021235aecfa1897bd118f876d7b10b274ce0328eae9b6586296347c8021ea5d3bb651d7fc7ef7810dd8358850c0f6bd2e17b56cd904c52d6f09f3488c6888e78558cc2c1ec1ae10aee278a3d6aa94ea83e2c62fb3fe9f109e34b1911f87cc37d4ec57f0df5aeae79aa4fa669efef94a35298d9cb0221dceb1579094df98bbbc2f5934c52c4dceca9c3296e8a19ca944c8a9222cd0a98dcdc399fd7ed7eee87d90faa80c5a87a13dd195683e94ff03eed98cc5015a31e587497f9152e43423b8f60df798384be82b41736aba5e40ce8ddfd4197637769fa8143886dd72af1ec9bb9b2860fb23f64ac33e8dfa5496fe2099a0d2a7d6c5991e858b909221981dd426bdaa2f98a4d85d8bc6bbe054861c83c2a7c817ed30aff28942165c0a97e0705a759d38c204b41d757501cf5692645c561e9f74e9fc0e77aa2c72880066d7397be02931ac1e51e3a4a624110e89d782479b7566d711504c62724617648ddae642e45696909bc03f4dee792cb7065ad13b4098400bb1f5b85602f8abb6c3cd0e113a04df48cc27b3524de423bcd2468b96262059958c3b576fd755a3f47e6e8adb9707b781545eff74eba17e3165e0aa070a113c9dfe8e02628581a31284d10b4bae5fed080f3fc34785e388e4ea17107945e3542f103e2991084d55165ddc8a42e66ab8011d030c9b2b8ce7dbbe556b40bd37e8adb463cbcb98f721dbafec0effa06975360cf73d1402f973fad361769f7a6fc58b4e4309e973b180662ce8bcbcd2856dc869cad595c9403c34745f59a48648397c8bac67e3df1f5f9463f4ee0cdb6f0e0e14d88b7b56627bad0e79c9b1449efe71517125591671122b482887b36af65250efb90d6de209b38285305fb4460d418046e422c5726b095ea16396878d2884bf0342f3909b9b497cad70fb25d6a6edd41df986bd4586608c45c9dbe452424f1b339cea49d88b2c4e9968e27da1b6bbb62074fd24368cc0f60dadb5965efaf09788d618a76cec20920bcf1634c93b101f15cdf12ad81ab311a0963679be0b1fa1fddada5c37e0fee1cf92952375133b518edac696889a54c6c42bf655f8b982704ee2356133d78c20ef8ec58bc4b1b3b71b8440aca555ddb82e8c6774970298116369847d443e0fc134aab890c658bce45801df1e1ca6b2eb433e0af4ccf7436d700", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x0, {{0x2, 0x80, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r5 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000000}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 17.766501067s ago: executing program 3 (id=3126): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, 0xee00, 0x100, 0x6}, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}) r3 = dup(r0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4b4a) 16.89497637s ago: executing program 8 (id=3129): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) statx(r0, 0x0, 0x800, 0x200, 0x0) setfsuid(0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 15.429191877s ago: executing program 8 (id=3132): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) 14.308169101s ago: executing program 8 (id=3137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = shmget$private(0x0, 0x2000, 0x400, &(0x7f00006d2000/0x2000)=nil) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000180)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 12.320317627s ago: executing program 3 (id=3140): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x68d00) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) write$sndseq(r2, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 12.120367341s ago: executing program 37 (id=3140): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x68d00) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) write$sndseq(r2, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 5.179092495s ago: executing program 9 (id=3160): r0 = syz_open_dev$vim2m(&(0x7f0000012040), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@fd={0x6, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x0, 0xc5, 0x85, 0x0, 0xcc, "c47e603b"}, 0x7, 0x4, {}, 0xfd}) 4.968277604s ago: executing program 0 (id=3162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x5, 0x1, 0x0, 0x2, 0x40, 0x0, 0x9}, {0x4, 0x0, 0xff, 0x9, 0x69, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0xa5, 0xfc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe0ec}], 0x5}) 4.967999123s ago: executing program 9 (id=3163): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) eventfd2(0x8000, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) getrlimit(0x4, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000440)={0x3, "f50af879001ad483136be030c6993acd417c3da67923ee626eff53513a68f8c6"}) 4.918487509s ago: executing program 6 (id=3164): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x2, 0x4) 4.781904113s ago: executing program 0 (id=3165): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000840000000500007a"], 0x10}}], 0x2, 0x0) 4.772587419s ago: executing program 9 (id=3166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9094e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, 0x5, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x801) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x8b32, &(0x7f0000000040)) getrlimit(0x4, &(0x7f0000000280)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.652189153s ago: executing program 6 (id=3167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40081, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a6e, 0x4, 0x20000000000, 0x80000000, 0xe017, 0xc0, 0xb2f, 0x2, 0x1, 0xf51], 0xeeef4000, 0x1341}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.585570636s ago: executing program 0 (id=3168): socket$inet6(0xa, 0x3, 0x2f) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x2a1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) 4.188103585s ago: executing program 6 (id=3169): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) unshare(0x24020400) unshare(0x22020400) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.555931102s ago: executing program 6 (id=3170): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2c}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000ac0)={0x24, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "b958e6f5"}]}}, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) close_range(r0, 0xffffffffffffffff, 0x0) 2.386613745s ago: executing program 0 (id=3171): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x1d, "df1e97f8742d3b90c5b51127cc9d2ba567e2cc9859bdc9f247234237cbf7d78b23"}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) mount_setattr(r2, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000100)={0x100006, 0x0, 0x0, {r3}}, 0x20) close(r0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x1907bb5d180ed938, &(0x7f0000000140)={@private=0xa010100, @local, r5}, 0xc) 2.038420094s ago: executing program 9 (id=3172): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000140)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f0000000180)={0x0, 0x71, 0x9}) socket(0x2b, 0x80801, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite\x00') socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x7, 0x0, 0x200000000000000, 0x0, 0x5}, 0x0, 0x0) 1.940095552s ago: executing program 8 (id=3173): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) 1.770180616s ago: executing program 6 (id=3174): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/42, 0x2a}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) 421.085366ms ago: executing program 0 (id=3175): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) eventfd2(0x8000, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) getrlimit(0x4, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000440)={0x3, "f50af879001ad483136be030c6993acd417c3da67923ee626eff53513a68f8c6"}) 420.613187ms ago: executing program 8 (id=3176): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x2, 0x4) 164.244336ms ago: executing program 9 (id=3177): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5eaf1604, 0x2082) ioctl$BLKPG(r0, 0x1269, 0x0) 158.357205ms ago: executing program 0 (id=3178): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x3, 0xc9, 0x9, 0x2}}}, 0x9) 73.425311ms ago: executing program 9 (id=3179): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x2000, 0x2, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 48.36888ms ago: executing program 6 (id=3180): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x5) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, r1}, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) dup(0xffffffffffffffff) 0s ago: executing program 8 (id=3181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9094e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, 0x5, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x801) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x8b32, &(0x7f0000000040)) getrlimit(0x4, &(0x7f0000000280)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 49][ T5864] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1121.067173][T15345] --map-set only usable from mangle table [ 1121.466470][ T5867] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1121.673418][ T96] usb 6-1: USB disconnect, device number 31 [ 1121.793797][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1122.077281][T15356] dlm: no local IP address has been set [ 1122.082983][T15356] dlm: cannot start dlm midcomms -107 [ 1122.361975][ T5867] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 1122.379082][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.391212][ T5867] usb 1-1: Product: syz [ 1122.395408][ T5867] usb 1-1: Manufacturer: syz [ 1122.527886][ T5867] usb 1-1: SerialNumber: syz [ 1122.608275][T15357] loop5: detected capacity change from 0 to 7 [ 1122.616318][T15357] buffer_io_error: 18 callbacks suppressed [ 1122.616361][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.624374][ T5867] usb 1-1: config 0 descriptor?? [ 1122.630323][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.644452][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.655499][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.667049][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.757819][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2407'. [ 1122.786200][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.809408][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2407'. [ 1122.810325][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.830223][T15357] ldm_validate_partition_table(): Disk read failed. [ 1122.839718][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.954069][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1122.973165][T15357] Buffer I/O error on dev loop5, logical block 0, async page read [ 1123.385110][ T5864] usb 4-1: device not accepting address 38, error -71 [ 1123.390039][T15361] gtp0: entered promiscuous mode [ 1123.444371][T15357] Dev loop5: unable to read RDB block 0 [ 1123.450386][T15357] loop5: unable to read partition table [ 1123.456568][T15357] loop5: partition table beyond EOD, truncated [ 1123.462802][T15357] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1123.462802][T15357] ) failed (rc=-5) [ 1123.483984][T10062] usb 1-1: USB disconnect, device number 48 [ 1123.490401][T15361] gtp0: entered allmulticast mode [ 1123.804717][T15371] ptrace attach of "./syz-executor exec"[8279] was attempted by "./syz-executor exec"[15371] [ 1125.088284][T15384] No such timeout policy "syz1" [ 1125.157625][T15385] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 1125.193602][T15385] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 1126.773789][T15403] delete_channel: no stack [ 1127.558180][T15045] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1127.629833][T15404] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 1127.641437][T15404] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1128.036558][T15406] --map-set only usable from mangle table [ 1128.652154][T15045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.665253][T15045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.679114][T15045] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1128.700889][T15045] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1128.711847][T15045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.117197][T15045] usb 6-1: config 0 descriptor?? [ 1129.265323][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1129.625608][T15045] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 1129.647840][T15045] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1129.662852][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1129.756071][T15424] ptrace attach of "./syz-executor exec"[8279] was attempted by "./syz-executor exec"[15424] [ 1130.707240][ T8] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 1130.716699][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.724769][ T8] usb 4-1: Product: syz [ 1130.729091][ T8] usb 4-1: Manufacturer: syz [ 1130.733716][ T8] usb 4-1: SerialNumber: syz [ 1130.743463][ T8] usb 4-1: config 0 descriptor?? [ 1130.798223][ T6400] usb 6-1: USB disconnect, device number 32 [ 1130.999809][T15435] No such timeout policy "syz1" [ 1131.101787][T15441] --map-set only usable from mangle table [ 1131.681600][ T6400] usb 4-1: USB disconnect, device number 40 [ 1134.260861][T15469] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[15469] [ 1134.298238][ T5867] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1134.686743][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.709578][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.776702][ T5867] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1134.823060][ T5867] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1134.852314][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.890494][ T5867] usb 8-1: config 0 descriptor?? [ 1135.194630][T15045] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1135.708156][ T5867] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 1135.735055][ T5867] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1135.763591][T15478] dlm: no local IP address has been set [ 1135.769495][T15478] dlm: cannot start dlm midcomms -107 [ 1135.781334][T15482] --map-set only usable from mangle table [ 1135.823417][T15045] usb 1-1: Using ep0 maxpacket: 32 [ 1136.097963][T15045] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.117878][T15045] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1136.351152][T15045] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1136.366196][T15045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1136.373003][T15045] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1136.382923][T15045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.393593][T15045] usb 1-1: config 0 descriptor?? [ 1137.016889][T15045] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0 [ 1137.073380][T15045] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0 [ 1137.136165][T15045] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0 [ 1137.427491][T15490] loop5: detected capacity change from 0 to 7 [ 1137.438319][T15045] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0 [ 1137.466514][T15490] buffer_io_error: 4 callbacks suppressed [ 1137.466554][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.481325][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.490652][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.501869][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.514536][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.526484][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.528851][T15491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.538122][T15045] hid-thrustmaster 0003:044F:B65D.001B: unknown main item tag 0x0 [ 1137.557481][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.566872][T15490] ldm_validate_partition_table(): Disk read failed. [ 1137.574267][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.582903][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.592426][T15490] Buffer I/O error on dev loop5, logical block 0, async page read [ 1137.604146][T15490] Dev loop5: unable to read RDB block 0 [ 1137.614888][T15490] loop5: unable to read partition table [ 1137.622177][T15490] loop5: partition table beyond EOD, truncated [ 1137.628760][T15490] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1137.628760][T15490] ) failed (rc=-5) [ 1137.745182][T15491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.804536][T15045] hid-thrustmaster 0003:044F:B65D.001B: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1137.823274][T15491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.845982][ T5867] usb 8-1: USB disconnect, device number 3 [ 1138.074044][T15045] hid-thrustmaster 0003:044F:B65D.001B: setup data couldn't be sent [ 1138.100323][ C0] hid-thrustmaster 0003:044F:B65D.001B: URB to get model id failed with error -71 [ 1138.146530][T15045] usb 1-1: USB disconnect, device number 49 [ 1140.091314][T15512] ptrace attach of "./syz-executor exec"[8279] was attempted by "./syz-executor exec"[15512] [ 1141.170598][T15523] No such timeout policy "syz1" [ 1141.825334][T15527] --map-set only usable from mangle table [ 1142.654119][T15045] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1142.996049][T15045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.599913][T15045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.609887][T15045] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1143.623057][T15045] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1143.639892][T15045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.661769][T15045] usb 6-1: config 0 descriptor?? [ 1143.779028][ T5818] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1144.076891][T15544] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 1144.087810][T15544] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1144.283309][T15045] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 1144.320286][T15045] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1144.673658][T15045] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1144.823544][T15045] usb 8-1: Using ep0 maxpacket: 32 [ 1145.012369][T15045] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.022899][T15045] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1145.033942][T15045] usb 8-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1145.042612][T15563] --map-set only usable from mangle table [ 1145.058753][T15045] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1145.065548][T15045] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1145.075612][T15045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.163659][T15045] usb 8-1: config 0 descriptor?? [ 1145.233095][T15564] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[15564] [ 1146.434600][T15045] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1146.472699][T15045] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1146.522201][T15045] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1146.556120][T15045] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1146.576496][T15045] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 1146.583970][T15569] dlm: no local IP address has been set [ 1146.590008][T15569] dlm: cannot start dlm midcomms -107 [ 1146.605059][T15045] hid-thrustmaster 0003:044F:B65D.001D: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1146.948698][T15580] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1146.956652][T15580] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1146.965369][T15580] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1146.973201][T15580] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1147.146208][T15582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.651809][T15548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.739873][T15548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.781113][ T9674] usb 6-1: USB disconnect, device number 33 [ 1147.804242][T15045] hid-thrustmaster 0003:044F:B65D.001D: setup data couldn't be sent [ 1147.812761][ C0] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71 [ 1147.825723][T15045] usb 8-1: USB disconnect, device number 4 [ 1148.019641][T15591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2474'. [ 1148.236570][T15590] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2474'. [ 1148.328148][T15590] openvswitch: netlink: Message has 44053 unknown bytes. [ 1149.530739][T15604] loop5: detected capacity change from 0 to 7 [ 1149.539061][T15604] buffer_io_error: 4 callbacks suppressed [ 1149.539099][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.553770][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.562114][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.743330][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.752246][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.761274][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.769934][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.778322][T15604] ldm_validate_partition_table(): Disk read failed. [ 1149.785860][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.794455][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.802929][T15604] Buffer I/O error on dev loop5, logical block 0, async page read [ 1149.811598][T15604] Dev loop5: unable to read RDB block 0 [ 1149.818761][T15604] loop5: unable to read partition table [ 1149.825952][T15604] loop5: partition table beyond EOD, truncated [ 1149.832372][T15604] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1149.832372][T15604] ) failed (rc=-5) [ 1150.203247][ T9674] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1150.453466][ T9674] usb 6-1: Using ep0 maxpacket: 32 [ 1151.046751][ T9674] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.056708][ T9674] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1151.067653][ T9674] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1151.080886][ T9674] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1151.087596][ T9674] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1151.096929][ T9674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.117838][ T9674] usb 6-1: config 0 descriptor?? [ 1151.543083][T15353] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1151.691665][ T9674] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1151.712726][ T9674] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1151.719228][T15353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.720620][ T9674] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1151.738084][T15353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.739506][ T9674] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1151.757114][T15353] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1151.770102][ T9674] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1151.772973][ T9674] hid-thrustmaster 0003:044F:B65D.001E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 1151.831834][T15353] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1151.857652][T15353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.915001][T15353] usb 1-1: config 0 descriptor?? [ 1152.186565][T15601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.336114][T15353] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 1152.371573][ T5818] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1152.586019][T15601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.598180][T15353] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1152.630142][T15353] usb 1-1: USB disconnect, device number 50 [ 1152.656116][T15601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.699584][ T9674] hid-thrustmaster 0003:044F:B65D.001E: setup data couldn't be sent [ 1152.708075][ C0] hid-thrustmaster 0003:044F:B65D.001E: URB to get model id failed with error -71 [ 1152.769086][ T9674] usb 6-1: USB disconnect, device number 34 [ 1153.172693][T10062] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1153.306864][T15635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2488'. [ 1153.353123][T10062] usb 8-1: Using ep0 maxpacket: 32 [ 1153.353348][T15635] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2488'. [ 1153.362783][T10062] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.367738][T15635] openvswitch: netlink: Message has 44053 unknown bytes. [ 1153.504768][T10062] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1153.533285][T10062] usb 8-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1153.563451][T10062] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1153.576766][T10062] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1153.747858][T10062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.764959][T10062] usb 8-1: config 0 descriptor?? [ 1154.072715][ T9674] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1154.208483][T10062] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 1154.217698][T10062] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 1154.226157][T10062] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 1154.234952][T10062] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 1154.248287][ T9674] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1154.258600][T10062] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 1154.266809][ T9674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.291482][T10062] hid-thrustmaster 0003:044F:B65D.0020: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1154.307023][ T9674] usb 6-1: config 0 descriptor?? [ 1154.317996][ T9674] cp210x 6-1:0.0: cp210x converter detected [ 1154.585438][T15644] xt_TCPMSS: Only works on TCP SYN packets [ 1154.722806][T15630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.744998][ T9674] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1154.818203][ T9674] cp210x 6-1:0.0: querying part number failed [ 1154.858125][ T9674] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1154.876287][T15630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.907870][T10062] hid-thrustmaster 0003:044F:B65D.0020: setup data couldn't be sent [ 1154.923165][ C0] hid-thrustmaster 0003:044F:B65D.0020: URB to get model id failed with error -71 [ 1154.941973][T10062] usb 8-1: USB disconnect, device number 5 [ 1154.971148][ T9674] usb 6-1: USB disconnect, device number 35 [ 1154.981037][ T9674] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1155.004921][ T9674] cp210x 6-1:0.0: device disconnected [ 1155.275950][T15651] mkiss: ax0: crc mode is auto. [ 1156.626951][T15662] loop5: detected capacity change from 0 to 7 [ 1156.640728][T15662] buffer_io_error: 4 callbacks suppressed [ 1156.640878][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.657856][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.667446][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.689163][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.713183][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.732504][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.741448][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.750634][T15662] ldm_validate_partition_table(): Disk read failed. [ 1156.783571][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.814023][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.841818][T15662] Buffer I/O error on dev loop5, logical block 0, async page read [ 1156.870842][T15662] Dev loop5: unable to read RDB block 0 [ 1156.891969][T15662] loop5: unable to read partition table [ 1156.915989][T15662] loop5: partition table beyond EOD, truncated [ 1156.932410][T15662] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1156.932410][T15662] ) failed (rc=-5) [ 1156.935279][ T6400] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1157.173677][ T6400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.200546][ T6400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.210637][ T6400] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1157.224101][ T6400] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1157.235257][ T6400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.266118][ T6400] usb 6-1: config 0 descriptor?? [ 1157.774387][ T6400] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 1157.803928][ T6400] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1158.101278][T15675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2500'. [ 1158.167132][T15677] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2500'. [ 1158.176889][T15677] openvswitch: netlink: Message has 44053 unknown bytes. [ 1159.054136][T15680] xt_TCPMSS: Only works on TCP SYN packets [ 1159.842967][T15695] delete_channel: no stack [ 1160.081564][T13976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1160.782911][T10062] usb 6-1: USB disconnect, device number 36 [ 1161.161872][T15045] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1161.372323][T10062] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1161.618375][T10062] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 1161.627106][T10062] usb 6-1: config 0 has no interface number 0 [ 1161.636604][T10062] usb 6-1: config 0 interface 210 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1161.681580][T10062] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice= 7.b4 [ 1161.691082][T10062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.699375][T10062] usb 6-1: Product: syz [ 1161.703895][T10062] usb 6-1: Manufacturer: syz [ 1161.708632][T10062] usb 6-1: SerialNumber: syz [ 1161.723567][T10062] usb 6-1: config 0 descriptor?? [ 1161.953711][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.963062][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.006558][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.015531][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.079545][T10062] usb 6-1: probing VID:PID(2201:012C) [ 1162.087093][T10062] usb 6-1: vub300 testing UNKNOWN EndPoint(0) 07 [ 1162.097936][T10062] usb 6-1: vub300 ignoring EndPoint(0) 07 [ 1162.103787][T10062] usb 6-1: vub300 testing UNKNOWN EndPoint(1) 0A [ 1162.110327][T10062] usb 6-1: vub300 ignoring EndPoint(1) 0A [ 1162.120435][T10062] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 1162.165309][T10062] vub300 6-1:0.210: probe with driver vub300 failed with error -22 [ 1162.183481][T10062] usb 6-1: USB disconnect, device number 37 [ 1162.714920][T15724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1162.738127][T15724] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1162.747722][T15724] openvswitch: netlink: Message has 44053 unknown bytes. [ 1163.329727][T15731] dlm: no local IP address has been set [ 1163.350200][T15731] dlm: cannot start dlm midcomms -107 [ 1166.321222][T15045] usb 8-1: device descriptor read/64, error -110 [ 1166.561175][T15045] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1166.691081][T15045] usb 8-1: device descriptor read/64, error -32 [ 1166.801385][T15045] usb usb8-port1: attempt power cycle [ 1167.141166][T15045] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1167.161438][T15045] usb 8-1: device descriptor read/8, error -32 [ 1167.275650][T15045] raw-gadget.1 gadget.7: failed to queue suspend event [ 1167.282905][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1167.354640][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1167.421044][T15045] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1167.441251][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1167.448395][T15045] usb 8-1: device descriptor read/8, error -32 [ 1167.563425][T15045] raw-gadget.1 gadget.7: failed to queue suspend event [ 1167.570550][T15045] usb usb8-port1: unable to enumerate USB device [ 1171.077758][T15740] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1171.839058][T15749] dlm: no local IP address has been set [ 1171.845081][T15749] dlm: cannot start dlm midcomms -107 [ 1172.561675][T15752] loop5: detected capacity change from 0 to 7 [ 1172.595023][T15752] buffer_io_error: 4 callbacks suppressed [ 1172.595215][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.696714][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.719078][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.734287][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.745417][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.758354][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.766564][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.776703][T15752] ldm_validate_partition_table(): Disk read failed. [ 1172.783580][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.798635][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.824949][T15752] Buffer I/O error on dev loop5, logical block 0, async page read [ 1172.861440][T15752] Dev loop5: unable to read RDB block 0 [ 1172.877426][T15752] loop5: unable to read partition table [ 1172.890448][T15752] loop5: partition table beyond EOD, truncated [ 1172.903758][T15752] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1172.903758][T15752] ) failed (rc=-5) [ 1172.920576][T15353] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1173.050649][T15353] usb 1-1: device descriptor read/64, error -71 [ 1173.450679][T15353] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1173.610470][T15353] usb 1-1: device descriptor read/64, error -71 [ 1173.720715][T15353] usb usb1-port1: attempt power cycle [ 1174.037613][T15782] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1174.120361][T15353] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1174.155228][T15353] usb 1-1: device descriptor read/8, error -71 [ 1174.420584][T15353] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1174.594986][T15353] usb 1-1: device descriptor read/8, error -71 [ 1175.560143][T15353] usb usb1-port1: unable to enumerate USB device [ 1175.768381][T15789] delete_channel: no stack [ 1175.846004][T15794] binder: 15790:15794 ioctl c0306201 0 returned -14 [ 1177.010895][T15803] loop5: detected capacity change from 0 to 7 [ 1177.040935][T15803] ldm_validate_partition_table(): Disk read failed. [ 1177.051745][T15803] Dev loop5: unable to read RDB block 0 [ 1177.061111][T15803] loop5: unable to read partition table [ 1177.069643][T15803] loop5: partition table beyond EOD, truncated [ 1177.076189][T15803] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1177.076189][T15803] ) failed (rc=-5) [ 1177.335661][T15802] --map-set only usable from mangle table [ 1177.807816][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.814905][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.065754][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1178.092378][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1178.110303][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1178.125905][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1178.134442][ T5818] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1178.142546][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1178.179553][T15810] dummy0 speed is unknown, defaulting to 1000 [ 1178.187501][T15810] lo speed is unknown, defaulting to 1000 [ 1178.462965][T15810] chnl_net:caif_netlink_parms(): no params data found [ 1178.857449][T15810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.088525][ T96] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1179.604728][T15810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.612272][T15810] bridge_slave_0: entered allmulticast mode [ 1179.619423][T15810] bridge_slave_0: entered promiscuous mode [ 1179.627203][T15810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.635611][T15810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.643117][T15810] bridge_slave_1: entered allmulticast mode [ 1179.650955][T15810] bridge_slave_1: entered promiscuous mode [ 1179.701719][T15810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.750668][T15810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.820054][ T96] usb 1-1: Using ep0 maxpacket: 16 [ 1179.834334][ T96] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1179.845472][ T96] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.904245][ T96] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1179.965138][ T9674] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1179.965675][ T96] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1180.043353][ T96] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.080195][ T96] usb 1-1: Product: syz [ 1180.095447][ T96] usb 1-1: Manufacturer: syz [ 1180.104083][ T96] usb 1-1: SerialNumber: syz [ 1180.123168][ T9674] usb 6-1: Using ep0 maxpacket: 16 [ 1180.191924][ T5818] Bluetooth: hci6: command tx timeout [ 1180.193262][ T9674] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.269597][ T9674] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1180.459347][ T9674] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1180.469918][ T9674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.495709][T15810] team0: Port device team_slave_0 added [ 1180.502679][ T9674] usb 6-1: Product: syz [ 1180.508493][ T9674] usb 6-1: Manufacturer: syz [ 1180.530193][T15810] team0: Port device team_slave_1 added [ 1180.539716][ T9674] usb 6-1: SerialNumber: syz [ 1180.600113][T15810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.619158][T15810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.656385][T15810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.825975][T15810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.833596][T15810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.853552][ T96] usb 1-1: 0:2 : does not exist [ 1180.868099][T15810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.308973][T15810] hsr_slave_0: entered promiscuous mode [ 1181.316239][T15810] hsr_slave_1: entered promiscuous mode [ 1181.323299][T15810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1181.331612][T15810] Cannot create hsr debugfs directory [ 1181.336210][T15852] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1181.496217][T15810] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1181.508663][T15810] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1181.522231][T15810] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1181.532264][T15810] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1181.939368][T15859] loop5: detected capacity change from 0 to 7 [ 1181.963876][T15859] buffer_io_error: 18 callbacks suppressed [ 1181.963982][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1181.980228][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1181.990129][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.002608][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.013301][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.025223][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.036305][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.045694][T15859] ldm_validate_partition_table(): Disk read failed. [ 1182.053268][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.062336][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.073923][T15859] Buffer I/O error on dev loop5, logical block 0, async page read [ 1182.083096][T15859] Dev loop5: unable to read RDB block 0 [ 1182.093055][T15859] loop5: unable to read partition table [ 1182.101127][T15859] loop5: partition table beyond EOD, truncated [ 1182.107748][T15859] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1182.107748][T15859] ) failed (rc=-5) [ 1182.207190][T15810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.254165][T15810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.264847][ T9674] usb 1-1: USB disconnect, device number 55 [ 1182.271511][ T5818] Bluetooth: hci6: command tx timeout [ 1182.292624][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.299786][ T6738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.349186][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.356393][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.972849][ T96] usb 6-1: USB disconnect, device number 38 [ 1183.116309][T15866] kAFS: No cell specified [ 1183.691489][T15810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.349458][ T5818] Bluetooth: hci6: command tx timeout [ 1185.798442][T15810] veth0_vlan: entered promiscuous mode [ 1185.808573][T15810] veth1_vlan: entered promiscuous mode [ 1185.823871][T15810] veth0_macvtap: entered promiscuous mode [ 1185.852917][T15810] veth1_macvtap: entered promiscuous mode [ 1185.859478][T15896] delete_channel: no stack [ 1185.927545][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.957949][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.977480][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.998956][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.009187][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.019904][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.034464][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.045303][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.055471][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.066419][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.114969][T15810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.153088][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.176151][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.189731][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.200781][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.216585][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.231681][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.246647][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.258208][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.268760][T15810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.279948][T15810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.291744][T15810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.303126][T15810] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.312835][T15810] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.325586][T15810] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.369051][T15810] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.430173][ T5818] Bluetooth: hci6: command tx timeout [ 1186.555539][T15916] delete_channel: no stack [ 1186.623816][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.647115][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.724166][ T6076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.733431][ T6076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.786285][T15924] dlm: no local IP address has been set [ 1187.695723][T15924] dlm: cannot start dlm midcomms -107 [ 1188.508865][T15935] dlm: no local IP address has been set [ 1188.514656][T15935] dlm: cannot start dlm midcomms -107 [ 1190.834474][T15945] delete_channel: no stack [ 1190.935787][T15957] binder: 15950:15957 ioctl c0306201 0 returned -14 [ 1191.770168][T15956] gfs2: not a GFS2 filesystem [ 1192.277952][T15971] gfs2: not a GFS2 filesystem [ 1192.489483][T15965] loop5: detected capacity change from 0 to 7 [ 1192.496540][T15965] buffer_io_error: 4 callbacks suppressed [ 1192.496571][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.511805][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.520088][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.528333][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.536455][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.544994][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.553385][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.561629][T15965] ldm_validate_partition_table(): Disk read failed. [ 1192.568527][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.576682][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.585188][T15965] Buffer I/O error on dev loop5, logical block 0, async page read [ 1192.593586][T15965] Dev loop5: unable to read RDB block 0 [ 1192.599847][T15965] loop5: unable to read partition table [ 1192.605917][T15965] loop5: partition table beyond EOD, truncated [ 1192.612745][T15965] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1192.612745][T15965] ) failed (rc=-5) [ 1192.768971][T15963] kvm: emulating exchange as write [ 1193.316978][T15991] dummy0 speed is unknown, defaulting to 1000 [ 1193.350250][T15991] lo speed is unknown, defaulting to 1000 [ 1193.378179][T15998] syz.6.2588: attempt to access beyond end of device [ 1193.378179][T15998] nbd6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1193.453023][T15998] EXT4-fs (nbd6): unable to read superblock [ 1194.190740][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1194.190758][ T29] audit: type=1326 audit(1736427671.804:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16008 comm="syz.0.2592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab90185d29 code=0x0 [ 1194.254684][T16014] overlayfs: overlapping lowerdir path [ 1195.149494][T16043] warning: `syz.8.2605' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1195.541011][T16056] syzkaller0: entered promiscuous mode [ 1195.546551][T16056] syzkaller0: entered allmulticast mode [ 1195.619088][ T5818] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 1195.921767][T16072] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 1196.068266][T16080] dummy0 speed is unknown, defaulting to 1000 [ 1196.075400][T16080] lo speed is unknown, defaulting to 1000 [ 1197.126234][ T96] kernel write not supported for file /snd/seq (pid: 96 comm: kworker/1:2) [ 1197.793876][T16196] usb usb1: usbfs: process 16196 (syz.8.2653) did not claim interface 3 before use [ 1197.939796][T16201] dummy0 speed is unknown, defaulting to 1000 [ 1197.946953][T16201] lo speed is unknown, defaulting to 1000 [ 1198.897890][T10062] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1199.063064][T10062] usb 4-1: Using ep0 maxpacket: 8 [ 1199.083561][T10062] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1199.102597][T10062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.136949][T10062] usb 4-1: config 0 has no interface number 0 [ 1199.154162][T10062] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1199.187450][T10062] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1199.224449][T10062] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1199.239289][T10062] usb 4-1: New USB device found, idVendor=06cb, idProduct=0013, bcdDevice=e8.00 [ 1199.258057][T10062] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1199.268419][T10062] usb 4-1: Manufacturer: syz [ 1199.298502][T10062] usb 4-1: config 0 descriptor?? [ 1199.343365][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.360038][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.386318][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.404066][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.431836][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.447727][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.471312][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.497317][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.519215][T10062] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input30 [ 1199.520881][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.546010][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.580381][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.592740][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.607794][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.624325][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.632743][ T5818] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1199.642924][ T5818] Bluetooth: hci4: Injecting HCI hardware error event [ 1199.653799][ T5818] Bluetooth: hci4: hardware error 0x00 [ 1199.670510][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.677913][T16267] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1199.686072][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.686560][T16267] kvm: pic: non byte read [ 1199.693791][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.693825][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.693851][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.721155][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.728931][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.736619][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.744234][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.751963][T10062] usb 4-1: USB disconnect, device number 41 [ 1199.752025][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.766164][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.773893][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.778910][T16267] kvm: pic: non byte read [ 1199.781619][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.786072][T16267] kvm: pic: non byte read [ 1199.793322][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.793363][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.793390][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.793416][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.793443][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.793468][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.793493][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.793552][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.868129][T16267] kvm: pic: single mode not supported [ 1199.868264][T16267] kvm: pic: non byte read [ 1199.879255][T16267] kvm: pic: non byte read [ 1199.883873][T16267] kvm: pic: non byte read [ 1199.891349][T16267] kvm: pic: single mode not supported [ 1199.891654][T16267] kvm: pic: level sensitive irq not supported [ 1199.898442][T16267] kvm: pic: non byte read [ 1199.909436][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.921448][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.943590][T16267] kvm: pic: non byte read [ 1199.950098][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1199.994713][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1200.003398][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1200.011028][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1200.018651][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1200.026072][T15353] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1200.057776][T15353] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1200.664437][T16292] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1200.797579][ T6400] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1200.967521][ T6400] usb 9-1: Using ep0 maxpacket: 32 [ 1200.975213][T16285] syz.8.2685 (16285): attempted to duplicate a private mapping with mremap. This is not supported. [ 1201.044990][ T6400] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1201.071309][ T6400] usb 9-1: too many configurations: 205, using maximum allowed: 8 [ 1201.120687][ T6400] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1201.139304][ T6400] usb 9-1: can't read configurations, error -71 [ 1201.363056][T16312] IPv6: Can't replace route, no match found [ 1201.707504][ T5818] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1202.375023][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2701'. [ 1202.562333][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2709'. [ 1203.164293][T16365] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1203.177984][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1203.401646][T16368] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2719'. [ 1204.221822][T16399] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2731'. [ 1204.817028][ T96] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1204.903646][T16411] cgroup: Unknown subsys name 'cpuset' [ 1204.979034][ T96] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.996941][ T96] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1205.008063][ T96] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1205.026912][ T96] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1205.051466][ T96] usb 9-1: SerialNumber: syz [ 1205.235682][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 1205.331969][ T96] usb 9-1: 0:2 : does not exist [ 1205.376812][ T96] usb 9-1: USB disconnect, device number 4 [ 1205.383593][T16423] syzkaller0: entered promiscuous mode [ 1205.410301][T16423] syzkaller0: entered allmulticast mode [ 1205.467172][ T9674] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1205.524542][T16434] bridge_slave_0: default FDB implementation only supports local addresses [ 1205.628619][ T9674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.650757][ T9674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1205.664182][ T9674] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1205.673868][ T9674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.715462][ T9674] usb 1-1: config 0 descriptor?? [ 1206.170193][ T9674] Bluetooth: Can't get version to change to load ram patch err [ 1206.178733][ T9674] Bluetooth: Loading patch file failed [ 1206.216760][ T9674] ath3k 1-1:0.0: probe with driver ath3k failed with error -32 [ 1206.280735][ T9674] usb 1-1: USB disconnect, device number 56 [ 1206.354293][ T5864] kernel write not supported for file /snd/seq (pid: 5864 comm: kworker/0:4) [ 1208.567075][T15353] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1208.738059][T15353] usb 6-1: config 0 has an invalid interface number: 33 but max is 0 [ 1208.758353][T15353] usb 6-1: config 0 has no interface number 0 [ 1208.764685][T15353] usb 6-1: config 0 interface 33 has no altsetting 0 [ 1208.795711][T15353] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.fc [ 1208.810854][T15353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.826425][T15353] usb 6-1: Product: syz [ 1208.830662][T15353] usb 6-1: Manufacturer: syz [ 1208.835288][T15353] usb 6-1: SerialNumber: syz [ 1208.850153][T15353] usb 6-1: config 0 descriptor?? [ 1209.077555][T15353] keyspan 6-1:0.33: Keyspan 1 port adapter converter detected [ 1209.098212][T15353] keyspan 6-1:0.33: found no endpoint descriptor for endpoint 82 [ 1209.107759][T15353] keyspan 6-1:0.33: found no endpoint descriptor for endpoint 81 [ 1209.115879][T15353] keyspan 6-1:0.33: found no endpoint descriptor for endpoint 1 [ 1209.167268][T15353] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1209.196788][T15353] usb 6-1: USB disconnect, device number 39 [ 1209.220368][T15353] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1209.230392][T15353] keyspan 6-1:0.33: device disconnected [ 1210.736442][ T9674] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1210.916202][ T9674] usb 4-1: Using ep0 maxpacket: 32 [ 1210.923743][ T9674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.946235][ T9674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.956031][ T9674] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1210.981903][ T9674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.030792][ T9674] usb 4-1: config 0 descriptor?? [ 1211.136491][T15353] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1211.289452][T15353] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1211.306147][T15353] usb 6-1: config 1 has no interface number 0 [ 1211.314647][T15353] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.334490][T15353] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1211.343873][T15353] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1211.365474][T15353] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1211.374893][T15353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.391099][T15353] usb 6-1: Product: syz [ 1211.398820][T15353] usb 6-1: Manufacturer: syz [ 1211.432547][T15353] usb 6-1: SerialNumber: syz [ 1211.455382][ T9674] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1211.748462][ T96] usb 4-1: USB disconnect, device number 42 [ 1212.315477][T15353] cdc_ncm 6-1:1.1: bind() failure [ 1212.580587][T15353] usb 6-1: USB disconnect, device number 40 [ 1212.936049][T10062] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1212.966146][ T5864] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1213.087276][T10062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.103072][T10062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.113238][T10062] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1213.143647][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.164330][T10062] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1213.173647][ T5864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 4844, setting to 1024 [ 1213.184903][T10062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.201560][ T5864] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1213.214205][T10062] usb 9-1: config 0 descriptor?? [ 1213.224962][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1213.234314][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.242759][ T5864] usb 4-1: Product: syz [ 1213.247120][ T5864] usb 4-1: Manufacturer: syz [ 1213.251781][ T5864] usb 4-1: SerialNumber: syz [ 1213.260865][T16567] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1213.272024][ T5864] usb 4-1: selecting invalid altsetting 1 [ 1213.489741][ T5864] cdc_ncm 4-1:1.0: bind() failure [ 1213.507129][ T5864] cdc_ncm 4-1:1.1: invalid descriptor buffer length [ 1213.524083][ T5864] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1213.534241][ T5864] cdc_ncm 4-1:1.1: bind() failure [ 1213.560172][ T5864] usb 4-1: USB disconnect, device number 43 [ 1213.630562][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.645954][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.663681][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.676158][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.683682][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.713281][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.725889][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.739304][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.755908][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.773640][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.785227][T10062] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1213.807774][T10062] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 1213.846237][T10062] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1214.265691][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1214.277245][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1214.285624][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1214.297568][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1214.305350][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1214.312837][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1214.340017][T15353] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1214.373790][T16613] dummy0 speed is unknown, defaulting to 1000 [ 1214.381111][T16613] lo speed is unknown, defaulting to 1000 [ 1214.609820][T16613] chnl_net:caif_netlink_parms(): no params data found [ 1214.668630][T15353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.681024][T15353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.691855][T15353] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1214.701058][T15353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.867504][T15353] usb 6-1: config 0 descriptor?? [ 1215.365158][T16613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.382825][T16613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.394227][T16613] bridge_slave_0: entered allmulticast mode [ 1215.407807][T16613] bridge_slave_0: entered promiscuous mode [ 1215.427992][T16613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.457111][T16613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.464399][T16613] bridge_slave_1: entered allmulticast mode [ 1215.494955][T16613] bridge_slave_1: entered promiscuous mode [ 1215.536867][T15353] arvo 0003:1E7D:30D4.0025: collection stack underflow [ 1215.543844][T15353] arvo 0003:1E7D:30D4.0025: item 0 4 0 12 parsing failed [ 1215.553045][T16613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.562868][T15353] arvo 0003:1E7D:30D4.0025: parse failed [ 1215.568953][T15353] arvo 0003:1E7D:30D4.0025: probe with driver arvo failed with error -22 [ 1215.580576][T16613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.646737][T16613] team0: Port device team_slave_0 added [ 1215.669034][T16613] team0: Port device team_slave_1 added [ 1215.716999][T16613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.724091][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.758837][T16613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.772469][T16613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.785373][ T8941] usb 6-1: USB disconnect, device number 41 [ 1215.792265][ T6400] usb 9-1: USB disconnect, device number 5 [ 1215.814063][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.841081][T16613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.917236][T16613] hsr_slave_0: entered promiscuous mode [ 1215.937052][T16613] hsr_slave_1: entered promiscuous mode [ 1215.946835][T16613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1215.954722][T16613] Cannot create hsr debugfs directory [ 1217.000216][T13976] Bluetooth: hci0: command tx timeout [ 1217.150317][T16613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.283789][T16613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.316203][ T5864] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1217.460453][T16613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.484180][ T5864] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1217.494735][ T5864] usb 4-1: config 0 has no interface number 0 [ 1217.513162][ T5864] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1217.538408][ T5864] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1217.562557][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.572925][ T5864] usb 4-1: Product: syz [ 1217.584237][ T5864] usb 4-1: Manufacturer: syz [ 1217.592611][ T5864] usb 4-1: SerialNumber: syz [ 1217.609929][ T5864] usb 4-1: config 0 descriptor?? [ 1217.633065][T16650] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1217.663003][T16613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.674704][ T5864] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1217.685481][T10062] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1217.694814][ T5864] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1217.837350][T10062] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1217.853375][T10062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.874014][T10062] usb 6-1: config 0 descriptor?? [ 1217.911801][ T5864] scsi host1: usb-storage 4-1:0.20 [ 1217.918565][T16613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1217.931990][ T5864] usb 4-1: USB disconnect, device number 44 [ 1217.932563][T16613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1217.972397][T16613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1217.990265][T16613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1218.151744][T16613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.177438][T16613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.213596][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.220782][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.240856][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.248033][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.629718][T16613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.733060][T16613] veth0_vlan: entered promiscuous mode [ 1218.768307][T16613] veth1_vlan: entered promiscuous mode [ 1218.829728][T16613] veth0_macvtap: entered promiscuous mode [ 1218.846621][T16613] veth1_macvtap: entered promiscuous mode [ 1218.863966][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.885726][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.907111][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.935911][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.947307][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.968086][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.980697][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.000293][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.025401][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.045533][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.068254][T13976] Bluetooth: hci0: command tx timeout [ 1219.072186][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.103963][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.133340][T16613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.173898][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.194680][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.215140][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.265576][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.285300][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.297336][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.312877][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.323721][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.334328][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.345864][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.356013][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.366713][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.378310][T16613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.388334][T16613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.397162][T16613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.406310][T16613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.415118][T16613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.534954][T16163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.543257][T16163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.596860][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.613033][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.237602][T10062] usb 6-1: Cannot set autoneg [ 1220.273301][T10062] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1220.323450][T10062] usb 6-1: USB disconnect, device number 42 [ 1220.578079][ T29] audit: type=1326 audit(1736427698.207:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faeb85d29 code=0x7ffc0000 [ 1220.651759][ T29] audit: type=1326 audit(1736427698.207:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faeb85d29 code=0x7ffc0000 [ 1220.677752][ T29] audit: type=1326 audit(1736427698.207:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f4faeb85d29 code=0x7ffc0000 [ 1220.699551][ T29] audit: type=1326 audit(1736427698.207:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faeb85d29 code=0x7ffc0000 [ 1220.745346][ T29] audit: type=1326 audit(1736427698.207:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.3.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faeb85d29 code=0x7ffc0000 [ 1221.035520][ T5818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1221.070012][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1221.085241][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1221.108262][ T5818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1221.155142][ T5818] Bluetooth: hci0: command tx timeout [ 1221.290859][ T5818] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1221.298760][ T5818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1221.348482][T16743] dummy0 speed is unknown, defaulting to 1000 [ 1221.355530][T16743] lo speed is unknown, defaulting to 1000 [ 1221.780238][T16743] chnl_net:caif_netlink_parms(): no params data found [ 1222.175194][T16743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.195256][T16743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.202594][T16743] bridge_slave_0: entered allmulticast mode [ 1222.256085][T16743] bridge_slave_0: entered promiscuous mode [ 1222.276983][T16743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.284278][T16743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.300292][T16743] bridge_slave_1: entered allmulticast mode [ 1222.317876][T16743] bridge_slave_1: entered promiscuous mode [ 1222.407451][T16743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.506693][T16743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.225256][ T5818] Bluetooth: hci0: command tx timeout [ 1223.349843][T16743] team0: Port device team_slave_0 added [ 1223.385528][ T5818] Bluetooth: hci7: command tx timeout [ 1223.413604][T16743] team0: Port device team_slave_1 added [ 1223.582428][T16743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.603321][T16743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.639874][T16743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.685731][T16743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.692721][T16743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.720116][T16743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.811261][T16743] hsr_slave_0: entered promiscuous mode [ 1223.825994][T16743] hsr_slave_1: entered promiscuous mode [ 1223.846969][T16743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1223.854616][T16743] Cannot create hsr debugfs directory [ 1223.875944][T16813] lo: entered allmulticast mode [ 1224.120265][T16743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.145505][ T6400] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1224.226473][T16743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.303291][ T6400] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1224.314805][ T6400] usb 1-1: config 0 has no interface number 0 [ 1224.323270][T16743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.328461][ T6400] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1224.337809][ T5864] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1224.364355][ T6400] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1224.377945][ T6400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.393471][ T6400] usb 1-1: Product: syz [ 1224.404716][ T6400] usb 1-1: Manufacturer: syz [ 1224.414845][ T6400] usb 1-1: SerialNumber: syz [ 1224.436103][ T6400] usb 1-1: config 0 descriptor?? [ 1224.441887][T16819] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1224.459107][T16743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.461910][ T6400] usb-storage 1-1:0.20: USB Mass Storage device detected [ 1224.499218][ T6400] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1224.528709][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.545293][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.555690][ T5864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1224.569102][ T5864] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1224.578336][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.653492][ T5864] usb 6-1: config 0 descriptor?? [ 1225.098246][ T5864] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1225.177443][ T5864] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 1225.207059][ T6400] scsi host1: usb-storage 1-1:0.20 [ 1225.217511][ T6400] usb 1-1: USB disconnect, device number 57 [ 1225.228761][ T5864] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1225.271159][T16743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1225.304886][T16743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1225.313967][T16743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1225.335751][T16743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1225.464771][ T5818] Bluetooth: hci7: command tx timeout [ 1225.486339][T16743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.501768][T16743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.519732][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.527013][T16163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.562578][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.569755][T16163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.637981][ T5864] usb 6-1: USB disconnect, device number 43 [ 1225.929803][T16743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.040023][T16743] veth0_vlan: entered promiscuous mode [ 1226.408139][T16743] veth1_vlan: entered promiscuous mode [ 1226.779318][T16743] veth0_macvtap: entered promiscuous mode [ 1226.837241][T16743] veth1_macvtap: entered promiscuous mode [ 1226.852310][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.883507][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.903679][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.924401][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.956111][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.975582][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.994439][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.014428][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.041816][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.074421][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.096672][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.118357][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.152833][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.178239][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.200923][T16743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.229526][T16865] dummy0 speed is unknown, defaulting to 1000 [ 1227.241274][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.274159][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.290557][T16874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input32 [ 1227.304446][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.324406][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.334280][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.368067][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.409163][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.444462][ T5867] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1227.462973][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.524352][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.544658][ T5818] Bluetooth: hci7: command tx timeout [ 1227.550279][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.564450][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.575614][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.585683][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.596275][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.607344][T16743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.611935][ T5867] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 1227.617171][T16743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.631923][T16743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.640939][T16743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.644051][ T5867] usb 6-1: config 0 has no interface number 0 [ 1227.649729][T16743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.670634][T16865] lo speed is unknown, defaulting to 1000 [ 1227.679119][ T5867] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1227.691955][ T5867] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1227.713906][ T5867] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.741130][ T5867] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1227.750879][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.761823][ T5867] usb 6-1: config 0 descriptor?? [ 1227.773626][ T5867] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1227.938038][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.957315][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.983057][ T5867] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 1228.001425][ T5867] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.010232][ T5867] usb 6-1: MIDIStreaming interface descriptor not found [ 1228.020481][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.034604][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.074679][ T5867] usb 6-1: USB disconnect, device number 44 [ 1229.474802][T15045] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1229.625683][ T5818] Bluetooth: hci7: command tx timeout [ 1229.654291][T15045] usb 4-1: Using ep0 maxpacket: 32 [ 1229.662511][T15045] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1229.676426][T15045] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1229.685743][T15045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.694238][T15045] usb 4-1: Product: syz [ 1229.698831][T15045] usb 4-1: Manufacturer: syz [ 1229.703712][T15045] usb 4-1: SerialNumber: syz [ 1229.714494][T15045] usb 4-1: config 0 descriptor?? [ 1229.730366][T16891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1229.740801][T15045] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1229.986877][T15045] usb 4-1: USB disconnect, device number 45 [ 1230.377536][T16916] netlink: 'syz.5.2919': attribute type 4 has an invalid length. [ 1230.414079][ T5864] lo speed is unknown, defaulting to 1000 [ 1231.084184][ T6400] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1231.092916][ T5867] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1231.144666][T15353] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1231.324121][ T6400] usb 4-1: Using ep0 maxpacket: 16 [ 1231.337766][ T6400] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1231.371764][ T6400] usb 4-1: config 0 has no interface number 0 [ 1231.430652][T15353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.450615][ T5867] usb 1-1: config 235 has too many interfaces: 38, using maximum allowed: 32 [ 1231.509560][ T6400] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1231.589902][ T5867] usb 1-1: config 235 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.606825][T15353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.634619][ T6400] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1231.653991][T15353] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1231.667477][ T5867] usb 1-1: config 235 has 0 interfaces, different from the descriptor's value: 38 [ 1231.688190][ T6400] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1231.786900][T15353] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1231.796258][T15353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.808110][ T5867] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1231.817517][ T5867] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1231.825885][ T5867] usb 1-1: Manufacturer: syz [ 1231.833989][T15353] usb 9-1: config 0 descriptor?? [ 1231.848751][ T6400] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1231.859146][ T6400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.867739][ T6400] usb 4-1: Product: syz [ 1231.872087][ T6400] usb 4-1: Manufacturer: syz [ 1231.876861][ T6400] usb 4-1: SerialNumber: syz [ 1231.882955][ T6400] usb 4-1: config 0 descriptor?? [ 1231.888669][T16937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1231.898792][T16937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1232.031473][ T5864] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1232.065972][ T5867] usb 1-1: USB disconnect, device number 58 [ 1232.119617][T16937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1232.127155][T16937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1232.195775][ T5864] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 1232.204227][ T5864] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 1232.212416][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.223175][ T5864] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1232.240596][ T5864] usb 6-1: config 0 has no interface number 0 [ 1232.247098][ T5864] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1232.256577][T15353] plantronics 0003:047F:FFFF.0027: unknown main item tag 0xd [ 1232.257330][ T5864] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1232.266497][T15353] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 1232.275737][ T5864] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1232.293189][ T5864] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.307654][ T5864] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1232.317333][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.326504][T15353] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1232.328032][ T5864] usb 6-1: config 0 descriptor?? [ 1232.347504][ T5864] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1232.545458][ T6400] Error reading MAC address [ 1232.556912][T16937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1232.567450][T16937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1232.603015][ T5864] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 1232.628567][ T5864] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1232.654194][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.662776][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.672965][ T5864] usb 6-1: MIDIStreaming interface descriptor not found [ 1232.704770][ T5864] usb 6-1: USB disconnect, device number 45 [ 1232.958135][T15353] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1233.119550][T15353] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1233.129088][T15353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.147778][T15353] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1233.157025][T15353] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1233.165281][T15353] usb 1-1: Manufacturer: syz [ 1233.171837][T15353] usb 1-1: config 0 descriptor?? [ 1233.234262][T15353] rc_core: IR keymap rc-hauppauge not found [ 1233.251766][T15353] Registered IR keymap rc-empty [ 1233.258547][T15353] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1233.270637][T15353] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 1233.544651][T15353] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1233.597840][T16948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.606811][T16948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.623609][ C1] igorplugusb 1-1:0.0: receive overflow, at least 33 lost [ 1233.722938][T15353] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1233.732225][T15353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.740390][T15353] usb 6-1: Product: syz [ 1233.744680][T15353] usb 6-1: Manufacturer: syz [ 1233.749335][T15353] usb 6-1: SerialNumber: syz [ 1233.759909][T15353] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1233.767573][T15353] r8152-cfgselector 6-1: config 0 descriptor?? [ 1233.825248][ T5867] usb 1-1: USB disconnect, device number 59 [ 1234.188226][ T5867] r8152-cfgselector 6-1: USB disconnect, device number 46 [ 1234.384824][ T5866] usb 9-1: USB disconnect, device number 6 [ 1234.823789][ T5866] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1234.832931][ T6400] sr9700 4-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, b2:b3:8d:74:ab:1d [ 1234.848854][ T6400] usb 4-1: USB disconnect, device number 46 [ 1234.864942][ T6400] sr9700 4-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 1235.000726][ T5866] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1235.011071][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.024380][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.053744][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.064740][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.076122][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.108778][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.130997][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.148412][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.167914][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.194041][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.202986][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.230973][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.239585][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.249037][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.261916][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.269842][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.279117][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.291379][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.299325][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.308696][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.321137][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.329787][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1235.339258][ T5866] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1235.364331][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1235.383056][ T5866] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1235.398042][ T5866] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1235.415323][ T5866] usb 1-1: Product: syz [ 1235.429936][ T5866] usb 1-1: Manufacturer: syz [ 1235.435302][ T5866] usb 1-1: SerialNumber: syz [ 1235.452336][ T5866] usb 1-1: config 0 descriptor?? [ 1235.463952][ T5866] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1235.493580][ T6400] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1235.658516][ T6400] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1235.668346][ T6400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.679991][ T6400] usb 9-1: config 0 descriptor?? [ 1235.691121][T16956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.692575][ T6400] cp210x 9-1:0.0: cp210x converter detected [ 1235.707408][T16956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.715652][ T5864] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1235.875254][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.897436][ T5864] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1235.918367][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.939527][ T5864] usb 6-1: config 0 descriptor?? [ 1236.122085][ T6400] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1236.168874][ T5864] usbhid 6-1:0.0: can't add hid device: -71 [ 1236.175231][ T5864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1236.185515][ T5864] usb 6-1: USB disconnect, device number 47 [ 1236.332065][T16956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.341523][T16956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.358339][T10062] usb 1-1: USB disconnect, device number 60 [ 1236.367954][T10062] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1236.375322][ T5866] usb 9-1: USB disconnect, device number 7 [ 1236.384467][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1236.401460][ T5866] cp210x 9-1:0.0: device disconnected [ 1238.073352][ T5864] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1238.253472][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 1238.265452][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.290396][ T5864] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1238.309898][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.572647][T17027] fuse: Bad value for 'fd' [ 1238.763732][ T5866] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1239.065539][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.075690][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.390771][ T5864] usb 6-1: config 0 descriptor?? [ 1239.398437][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 1239.409501][ T5866] usb 1-1: config 0 has an invalid interface number: 194 but max is 0 [ 1239.417838][ T5866] usb 1-1: config 0 has no interface number 0 [ 1239.424130][ T5866] usb 1-1: config 0 interface 194 altsetting 20 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1239.434434][ T5866] usb 1-1: config 0 interface 194 altsetting 20 bulk endpoint 0x82 has invalid maxpacket 8 [ 1239.444778][ T5866] usb 1-1: config 0 interface 194 has no altsetting 0 [ 1239.569641][ T5866] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=a5.b5 [ 1239.582667][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.636982][ T5866] usb 1-1: Product: syz [ 1239.641289][ T5866] usb 1-1: Manufacturer: syz [ 1239.701064][ T5866] usb 1-1: SerialNumber: syz [ 1239.735853][ T5866] usb 1-1: config 0 descriptor?? [ 1239.790430][T17025] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1239.810105][T17025] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1240.349053][ T5864] usb 6-1: can't set config #0, error -71 [ 1240.357938][ T5864] usb 6-1: USB disconnect, device number 48 [ 1241.353057][T17031] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2965'. [ 1241.365318][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.168092][ T5866] usb 1-1: probing VID:PID(2201:012C) [ 1242.301927][ T5866] usb 1-1: vub300 testing BULK OUT EndPoint(0) 06 [ 1242.342469][ T5866] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 1242.380754][ T5866] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1242.502214][ T5866] vub300 1-1:0.194: probe with driver vub300 failed with error -22 [ 1242.864689][ T5864] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1242.974508][T10062] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1243.333920][T10062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.377207][T10062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.397050][ T5866] usb 1-1: USB disconnect, device number 61 [ 1243.413319][T10062] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1243.442763][T10062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.498720][T10062] usb 9-1: config 0 descriptor?? [ 1243.512697][ T5864] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=a5.ed [ 1243.522988][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.541705][ T5864] usb 6-1: Product: syz [ 1243.547394][ T5864] usb 6-1: Manufacturer: syz [ 1243.552029][ T5864] usb 6-1: SerialNumber: syz [ 1243.603332][ T5864] usb 6-1: config 0 descriptor?? [ 1243.644138][ T5864] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1243.652156][ T5864] ftdi_sio ttyUSB0: unknown device type: 0xa5ed [ 1243.859287][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.884232][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.898424][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.898638][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.900361][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.900522][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.901963][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.902113][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.220737][ T5864] usb 6-1: USB disconnect, device number 49 [ 1244.252984][T10062] usbhid 9-1:0.0: can't add hid device: -71 [ 1244.259149][T10062] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1244.284860][ T5864] ftdi_sio 6-1:0.0: device disconnected [ 1244.292415][T10062] usb 9-1: USB disconnect, device number 8 [ 1245.652776][ T6400] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1245.893234][ T6400] usb 1-1: Using ep0 maxpacket: 8 [ 1246.033572][ T6400] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1246.043441][ T6400] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1246.053782][ T6400] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1246.064201][ T6400] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1246.074762][ T6400] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.158537][ T6400] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1246.204124][ T6400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.527605][ T6400] usb 1-1: GET_CAPABILITIES returned 0 [ 1246.556858][ T6400] usbtmc 1-1:16.0: can't read capabilities [ 1246.672709][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1246.752462][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1246.760215][ T6400] usb 1-1: USB disconnect, device number 62 [ 1246.834285][T17112] input: syz1 as /devices/virtual/input/input34 [ 1247.282374][T15045] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1247.307677][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1247.317497][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1247.401271][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1247.492232][T15045] usb 8-1: device descriptor read/64, error -32 [ 1247.609748][T15045] raw-gadget.1 gadget.7: failed to queue suspend event [ 1247.621342][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1248.652222][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1248.722956][T15045] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1248.730885][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1248.749169][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1248.822845][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1248.906812][T15045] usb 8-1: device descriptor read/64, error -32 [ 1249.022230][T15045] raw-gadget.1 gadget.7: failed to queue suspend event [ 1249.054300][T15045] usb usb8-port1: attempt power cycle [ 1249.076657][T15045] raw-gadget.1 gadget.7: failed to queue disconnect event [ 1249.106961][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1249.202078][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1249.210158][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1249.508848][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1249.642149][ T5867] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1249.740907][T15045] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1249.762177][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1249.769380][T15045] usb 8-1: device descriptor read/8, error -32 [ 1249.842433][ T5867] usb 9-1: Using ep0 maxpacket: 32 [ 1249.855718][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.882116][T15045] raw-gadget.1 gadget.7: failed to queue suspend event [ 1249.891924][ T5867] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.892257][T15045] raw-gadget.1 gadget.7: failed to queue reset event [ 1249.922502][ T5867] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1249.947624][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.023381][ T5867] usb 9-1: config 0 descriptor?? [ 1250.028412][T15045] raw-gadget.1 gadget.7: failed to queue resume event [ 1250.111460][T15045] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1250.111807][ T5867] hub 9-1:0.0: USB hub found [ 1250.315744][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1250.326254][ T5867] hub 9-1:0.0: 1 port detected [ 1250.326415][T15045] usb 8-1: device descriptor read/8, error -32 [ 1250.472466][T15045] raw-gadget.1 gadget.7: failed to queue suspend event [ 1250.501276][T15045] usb usb8-port1: unable to enumerate USB device [ 1250.982021][ T5867] hub 9-1:0.0: activate --> -90 [ 1252.552654][T15353] usb 9-1: USB disconnect, device number 9 [ 1254.420720][T17182] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1254.427537][T17182] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1254.436044][ T9674] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1254.499304][T17182] vhci_hcd vhci_hcd.0: Device attached [ 1254.537736][T17193] dummy0 speed is unknown, defaulting to 1000 [ 1254.567813][T17193] lo speed is unknown, defaulting to 1000 [ 1254.638256][ T9674] usb 1-1: config index 0 descriptor too short (expected 65315, got 92) [ 1254.680068][ T9674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.717714][T17196] syzkaller0: entered promiscuous mode [ 1254.771731][ T9674] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1254.772114][T15353] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1254.784315][T17196] syzkaller0: entered allmulticast mode [ 1254.851740][ T5864] usb 34-1: SetAddress Request (2) to port 0 [ 1254.858333][ T5864] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1255.631613][ T9674] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.640858][ T9674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.657164][ T9674] usb 1-1: Product: syz [ 1255.661463][ T9674] usb 1-1: Manufacturer: syz [ 1255.666505][ T9674] usb 1-1: SerialNumber: syz [ 1255.756494][T15353] usb 9-1: Using ep0 maxpacket: 16 [ 1255.763732][T15353] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1255.801510][T15353] usb 9-1: config 0 has no interface number 0 [ 1255.819158][T15353] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1255.848734][T15353] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1255.859391][T15353] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1255.890708][T15353] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1255.910664][T15353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.919650][T15353] usb 9-1: Product: syz [ 1255.934847][T15353] usb 9-1: Manufacturer: syz [ 1255.939587][T15353] usb 9-1: SerialNumber: syz [ 1255.952537][T15353] usb 9-1: config 0 descriptor?? [ 1255.958651][T17191] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1255.976429][T17191] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1256.051527][ T9674] cdc_ncm 1-1:1.0: bind() failure [ 1256.059906][ T9674] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1256.066809][ T9674] cdc_ncm 1-1:1.1: bind() failure [ 1256.097978][ T9674] usb 1-1: USB disconnect, device number 63 [ 1256.197938][T17191] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1256.211517][T17191] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1256.649885][T15353] Error reading MAC address [ 1256.671445][T17191] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1256.688447][T17191] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1256.885015][T17184] vhci_hcd: connection reset by peer [ 1256.895388][ T52] vhci_hcd: stop threads [ 1256.903576][ T52] vhci_hcd: release socket [ 1256.915664][ T52] vhci_hcd: disconnect device [ 1258.261326][ T5867] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1258.451090][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 1258.813567][ T5867] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1258.823822][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.843241][ T5867] usb 1-1: config 0 descriptor?? [ 1258.852310][ T5867] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1259.026225][T17225] xt_hashlimit: max too large, truncated to 1048576 [ 1259.042691][T17225] Cannot find set identified by id 0 to match [ 1259.157556][ T29] audit: type=1326 audit(1736427736.781:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d185d29 code=0x7ffc0000 [ 1259.179373][ T29] audit: type=1326 audit(1736427736.781:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f471d185d29 code=0x7ffc0000 [ 1259.235580][ T29] audit: type=1326 audit(1736427736.781:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d185d29 code=0x7ffc0000 [ 1259.322537][ T29] audit: type=1326 audit(1736427736.781:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f471d185d29 code=0x7ffc0000 [ 1259.400583][ T29] audit: type=1326 audit(1736427736.781:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d185d29 code=0x7ffc0000 [ 1259.422951][ T29] audit: type=1326 audit(1736427736.781:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f471d185d29 code=0x7ffc0000 [ 1259.481196][ T29] audit: type=1326 audit(1736427736.781:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17226 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d185d29 code=0x7ffc0000 [ 1260.672248][ T5864] usb 34-1: device descriptor read/8, error -110 [ 1261.061830][ T5864] usb usb34-port1: attempt power cycle [ 1262.063398][ T5864] usb usb34-port1: unable to enumerate USB device [ 1262.192692][ T5867] gspca_sonixj: reg_w err -71 [ 1262.197500][ T5867] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1262.212292][ T5867] usb 1-1: USB disconnect, device number 64 [ 1265.635224][T17222] lo: entered promiscuous mode [ 1265.645534][T17223] lo: entered allmulticast mode [ 1265.668142][T15353] sr9700 9-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet, da:cb:2a:74:9d:bb [ 1265.810454][ T52] bridge_slave_1: left allmulticast mode [ 1265.816162][T15353] usb 9-1: USB disconnect, device number 10 [ 1265.823454][T15353] sr9700 9-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.8-1, CoreChip SR9700 USB Ethernet [ 1265.829047][ T52] bridge_slave_1: left promiscuous mode [ 1265.840960][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.849698][ T52] bridge_slave_0: left allmulticast mode [ 1265.855560][ T52] bridge_slave_0: left promiscuous mode [ 1265.868399][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.918487][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.931617][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.942442][ T52] bond0 (unregistering): Released all slaves [ 1269.307098][T17223] lo: left allmulticast mode [ 1269.312142][T17223] lo: left promiscuous mode [ 1269.423187][T17291] Bluetooth: MGMT ver 1.23 [ 1269.778659][T13976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1269.781848][T17294] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1269.833014][T13976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1269.841369][T13976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1269.853522][T13976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1269.861464][T13976] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1269.874254][T13976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1270.038827][T15353] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1270.973596][ T52] hsr_slave_0: left promiscuous mode [ 1271.478099][ T52] hsr_slave_1: left promiscuous mode [ 1271.488330][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.517590][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.538636][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.559692][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.600786][ T52] veth1_macvtap: left promiscuous mode [ 1271.606293][ T52] veth0_macvtap: left promiscuous mode [ 1271.638602][ T52] veth1_vlan: left promiscuous mode [ 1271.658943][ T52] veth0_vlan: left promiscuous mode [ 1271.729812][T15353] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1271.739671][T15045] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1271.827442][ T52] pim6reg (unregistering): left allmulticast mode [ 1271.899898][T15353] usb 9-1: Using ep0 maxpacket: 16 [ 1271.901678][T15045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.921075][T15353] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 1271.929347][T15353] usb 9-1: config 0 has no interface number 0 [ 1271.936346][T15045] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1271.945891][ T5818] Bluetooth: hci1: command tx timeout [ 1271.968539][T15353] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1271.976904][T15045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.002669][T15045] usb 1-1: config 0 descriptor?? [ 1272.008018][T15353] usb 9-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1272.062866][T15353] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1272.200893][T15353] usb 9-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1272.215435][T15353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.216294][T15045] usbhid 1-1:0.0: can't add hid device: -71 [ 1272.239788][T15045] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1272.251072][T15353] usb 9-1: Product: syz [ 1272.257844][T15353] usb 9-1: Manufacturer: syz [ 1272.261741][T15045] usb 1-1: USB disconnect, device number 65 [ 1272.276692][T15353] usb 9-1: SerialNumber: syz [ 1272.290511][T15353] usb 9-1: config 0 descriptor?? [ 1272.296184][T17318] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1272.324478][T17318] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1272.729532][T15045] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1272.909489][T15045] usb 1-1: Using ep0 maxpacket: 16 [ 1272.921265][T15045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.933985][T15045] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1272.959468][T15045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.973981][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1272.999893][T15045] usb 1-1: config 0 descriptor?? [ 1273.185255][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1273.421520][T15045] kye 0003:0458:5016.0028: control desc unexpectedly large [ 1273.446313][T15045] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0028/input/input35 [ 1273.550563][T15045] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0028/input/input36 [ 1273.652181][T15045] kye 0003:0458:5016.0028: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1273.877799][T15045] usb 1-1: USB disconnect, device number 66 [ 1274.019658][ T5818] Bluetooth: hci1: command tx timeout [ 1274.457763][ T6400] usb 9-1: USB disconnect, device number 12 [ 1277.104201][ T5818] Bluetooth: hci1: command tx timeout [ 1277.959079][T17302] dummy0 speed is unknown, defaulting to 1000 [ 1277.966278][T17302] lo speed is unknown, defaulting to 1000 [ 1278.202561][T10062] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1279.341721][ T5818] Bluetooth: hci1: command tx timeout [ 1279.552896][T17302] chnl_net:caif_netlink_parms(): no params data found [ 1280.849057][T10062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.828510][T10062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.838311][T10062] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1281.852105][T10062] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1281.861572][T10062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.013789][T10062] usb 4-1: config 0 descriptor?? [ 1282.022061][T10062] usb 4-1: can't set config #0, error -71 [ 1282.084716][T10062] usb 4-1: USB disconnect, device number 47 [ 1283.098120][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.238517][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.245820][T17302] bridge_slave_0: entered allmulticast mode [ 1283.330315][T17302] bridge_slave_0: entered promiscuous mode [ 1283.396346][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.458690][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.465987][T17302] bridge_slave_1: entered allmulticast mode [ 1283.559927][T17302] bridge_slave_1: entered promiscuous mode [ 1284.040448][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.063382][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.234127][T17302] team0: Port device team_slave_0 added [ 1284.680413][ T5818] Bluetooth: hci5: unexpected event for opcode 0x080b [ 1285.064141][T17302] team0: Port device team_slave_1 added [ 1285.842312][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.861242][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.896402][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.916960][ T52] IPVS: stop unused estimator thread 0... [ 1285.928400][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.935381][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.996480][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.119983][T17302] hsr_slave_0: entered promiscuous mode [ 1286.153685][T17302] hsr_slave_1: entered promiscuous mode [ 1286.193711][ T6400] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1288.931061][ T6400] usb 1-1: Using ep0 maxpacket: 16 [ 1290.881142][ T5818] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1290.890338][ T5818] Bluetooth: hci5: Injecting HCI hardware error event [ 1290.899689][ T5818] Bluetooth: hci5: hardware error 0x00 [ 1290.908205][ T6400] usb 1-1: device descriptor read/all, error -71 [ 1291.500864][T17302] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1291.538154][T17302] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1291.561215][T17302] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1291.580023][T17302] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1291.822032][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.138414][ T5818] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1293.151645][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.185701][T17302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1293.203537][T17302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.417140][T16186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.424388][T16186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.433969][T16186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.441123][T16186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.110748][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.225726][T17302] veth0_vlan: entered promiscuous mode [ 1296.423141][T17302] veth1_vlan: entered promiscuous mode [ 1297.322696][T17302] veth0_macvtap: entered promiscuous mode [ 1297.433324][T17302] veth1_macvtap: entered promiscuous mode [ 1297.762801][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.935573][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.956802][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.977506][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.987506][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.998045][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.016744][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.027228][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.037370][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.047867][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.058237][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.069154][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.079037][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.089527][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.100649][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.113762][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.124263][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.134102][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.144593][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.154940][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.165909][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.175814][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.186373][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.196229][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.206821][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.216716][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.227192][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.237364][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.247861][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.259793][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.340424][T17302] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.356835][T17302] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.376397][T17302] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.385805][T17302] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.079303][T17539] hub 2-0:1.0: USB hub found [ 1299.085876][T17539] hub 2-0:1.0: 1 port detected [ 1299.909500][T16163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.926625][T16163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.059523][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.068417][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.419207][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.906543][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.708200][ T3469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.899359][T17550] Bluetooth: hci6: command 0x0406 tx timeout [ 1303.190449][ T3469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.826306][T17550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1304.836745][T17550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1304.849521][T17550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1304.876162][T17550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1304.906295][T17550] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1304.931278][T17550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1305.223304][ T3469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.146624][T17575] dummy0 speed is unknown, defaulting to 1000 [ 1306.153212][T17575] lo speed is unknown, defaulting to 1000 [ 1306.321785][ T3469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.688133][T17575] chnl_net:caif_netlink_parms(): no params data found [ 1307.695973][T17550] Bluetooth: hci4: command tx timeout [ 1307.761328][ T3469] bridge_slave_1: left allmulticast mode [ 1307.775330][ T3469] bridge_slave_1: left promiscuous mode [ 1307.835907][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.864891][ T3469] bridge_slave_0: left allmulticast mode [ 1307.882804][ T3469] bridge_slave_0: left promiscuous mode [ 1307.901310][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.829162][T17550] Bluetooth: hci4: command tx timeout [ 1312.650486][T17550] Bluetooth: hci4: command tx timeout [ 1312.924113][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.948820][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.969236][ T3469] bond0 (unregistering): Released all slaves [ 1314.905036][ T5818] Bluetooth: hci4: command tx timeout [ 1315.137658][ T30] INFO: task syz.7.2511:15710 blocked for more than 143 seconds. [ 1315.163143][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1315.212115][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1315.355038][ T30] task:syz.7.2511 state:D stack:25928 pid:15710 tgid:15709 ppid:14941 flags:0x00004004 [ 1315.366320][ T30] Call Trace: [ 1315.369653][ T30] [ 1315.372603][ T30] __schedule+0x17fb/0x4be0 [ 1315.384727][ T30] ? __pfx___schedule+0x10/0x10 [ 1315.394848][ T30] ? __pfx_lock_release+0x10/0x10 [ 1315.415790][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1315.445757][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1315.452432][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1316.134823][ T30] ? schedule+0x90/0x320 [ 1316.144952][ T30] schedule+0x14b/0x320 [ 1316.149170][ T30] ? down_read+0x6a5/0xa40 [ 1316.286870][ T30] schedule_preempt_disabled+0x13/0x30 [ 1316.292411][ T30] down_read+0x705/0xa40 [ 1316.384783][ T30] ? __pfx_down_read+0x10/0x10 [ 1316.389643][ T30] super_lock+0x27c/0x400 [ 1316.394007][ T30] ? __pfx_lock_release+0x10/0x10 [ 1316.399850][ T30] ? __pfx_super_lock+0x10/0x10 [ 1316.404790][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1316.410037][ T30] iterate_supers+0x8c/0x190 [ 1316.414651][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1316.420487][ T30] ksys_sync+0xbd/0x1c0 [ 1316.424675][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1316.429595][ T30] ? do_syscall_64+0x100/0x230 [ 1316.434412][ T30] ? do_syscall_64+0xb6/0x230 [ 1316.439208][ T30] __do_sys_sync+0xe/0x20 [ 1316.443563][ T30] do_syscall_64+0xf3/0x230 [ 1316.448205][ T30] ? clear_bhb_loop+0x35/0x90 [ 1316.452907][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.458959][ T30] RIP: 0033:0x7f1124385d29 [ 1316.463422][ T30] RSP: 002b:00007f112516c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1316.471913][ T30] RAX: ffffffffffffffda RBX: 00007f1124575fa0 RCX: 00007f1124385d29 [ 1316.480151][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1316.488429][ T30] RBP: 00007f1124575fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.496694][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.504760][ T30] R13: 0000000000000000 R14: 00007f1124575fa0 R15: 00007ffc2f3d46e8 [ 1316.512762][ T30] [ 1316.515871][ T30] [ 1316.515871][ T30] Showing all locks held in the system: [ 1316.523673][ T30] 1 lock held by khungtaskd/30: [ 1316.528795][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1316.538885][ T30] 2 locks held by kworker/u8:3/52: [ 1316.544013][ T30] #0: ffff888145ebe148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1316.555366][ T30] #1: ffffc90000bc7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1316.567687][ T30] 4 locks held by kworker/u8:6/3469: [ 1316.572996][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1316.584436][ T30] #1: ffffc9000cd1fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1316.595161][ T30] #2: ffffffff8fc94550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 1316.604579][ T30] #3: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1316.614797][ T30] 6 locks held by kworker/u8:7/3496: [ 1316.620105][ T30] 2 locks held by getty/5576: [ 1316.624898][ T30] #0: ffff888035ff10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1316.634721][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1316.644982][ T30] 1 lock held by syz-executor/5828: [ 1316.650278][ T30] #0: ffff888011ca80e0 (&type->s_umount_key#82){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 1316.660700][ T30] 3 locks held by kworker/0:3/10062: [ 1316.666331][ T30] #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1316.676391][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 1316.689497][ T30] #2: ffffffff9a611380 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 1316.700276][ T30] 1 lock held by syz.7.2511/15710: [ 1316.708125][ T30] #0: ffff888011ca80e0 (&type->s_umount_key#82){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 1316.718072][ T30] 3 locks held by kworker/u8:5/16163: [ 1316.723436][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1316.735492][ T30] #1: ffffc9000585fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1316.746860][ T30] #2: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1316.756067][ T30] 3 locks held by kworker/u8:18/16176: [ 1316.761541][ T30] #0: ffff888030f1a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1316.773210][ T30] #1: ffffc9000bb87d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1316.787073][ T30] #2: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1316.797809][ T30] 3 locks held by kworker/u8:22/16186: [ 1316.803288][ T30] #0: ffff888145eb9948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1316.814499][ T30] #1: ffffc9000420fd00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1316.828845][ T30] #2: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 1316.839774][ T30] 3 locks held by syz-executor/17575: [ 1316.845200][ T30] #0: ffffffff8f44a0a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 1316.855033][ T30] #1: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 1316.864172][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1316.875227][ T30] 1 lock held by syz.9.3179/17687: [ 1316.880373][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1316.891335][ T30] 1 lock held by syz.8.3181/17692: [ 1316.897484][ T30] #0: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0x102/0x530 [ 1316.907230][ T30] [ 1316.909582][ T30] ============================================= [ 1316.909582][ T30] [ 1316.944765][ T30] NMI backtrace for cpu 1 [ 1316.949154][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1316.959781][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1316.969863][ T30] Call Trace: [ 1316.973159][ T30] [ 1316.976117][ T30] dump_stack_lvl+0x241/0x360 [ 1316.980824][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1316.986042][ T30] ? __pfx__printk+0x10/0x10 [ 1316.990661][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1316.995679][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1317.001170][ T30] ? _printk+0xd5/0x120 [ 1317.005378][ T30] ? __pfx__printk+0x10/0x10 [ 1317.010001][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1317.014874][ T30] ? __pfx__printk+0x10/0x10 [ 1317.019484][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1317.024527][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1317.030713][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1317.036712][ T30] watchdog+0xff6/0x1040 [ 1317.040957][ T30] ? watchdog+0x1ea/0x1040 [ 1317.045375][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.050052][ T30] kthread+0x2f0/0x390 [ 1317.054122][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.058802][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.063395][ T30] ret_from_fork+0x4b/0x80 [ 1317.067818][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.072428][ T30] ret_from_fork_asm+0x1a/0x30 [ 1317.077214][ T30] [ 1317.081180][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1317.086891][ C0] NMI backtrace for cpu 0 [ 1317.086905][ C0] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:4 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1317.086925][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1317.086936][ C0] Workqueue: 0x0 (events) [ 1317.086959][ C0] RIP: 0010:lock_is_held_type+0x126/0x190 [ 1317.086983][ C0] Code: e8 7f 1a 00 00 b8 ff ff ff ff 65 0f c1 05 a2 9b 41 74 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <75> 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 48 [ 1317.086997][ C0] RSP: 0018:ffffc9000460fab8 EFLAGS: 00000046 [ 1317.087012][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1317.087022][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5edce0 [ 1317.087035][ C0] RBP: 0000000000000000 R08: ffff888030773c07 R09: 1ffff110060ee780 [ 1317.087047][ C0] R10: dffffc0000000000 R11: ffffed10060ee781 R12: 0000000000000046 [ 1317.087059][ C0] R13: ffff888030773c00 R14: 00000000ffffffff R15: ffff8880b863e758 [ 1317.087071][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1317.087086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1317.087098][ C0] CR2: 00007f26e9135440 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1317.087113][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1317.087123][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1317.087134][ C0] Call Trace: [ 1317.087141][ C0] [ 1317.087147][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1317.087165][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1317.087183][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1317.087201][ C0] ? nmi_handle+0x2a/0x5a0 [ 1317.087225][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1317.087244][ C0] ? nmi_handle+0x14f/0x5a0 [ 1317.087260][ C0] ? nmi_handle+0x2a/0x5a0 [ 1317.087300][ C0] ? lock_is_held_type+0x126/0x190 [ 1317.087318][ C0] ? default_do_nmi+0x63/0x160 [ 1317.087335][ C0] ? exc_nmi+0x123/0x1f0 [ 1317.087351][ C0] ? end_repeat_nmi+0xf/0x53 [ 1317.087371][ C0] ? lock_is_held_type+0x126/0x190 [ 1317.087390][ C0] ? lock_is_held_type+0x126/0x190 [ 1317.087410][ C0] ? lock_is_held_type+0x126/0x190 [ 1317.087429][ C0] [ 1317.087434][ C0] [ 1317.087443][ C0] psi_account_irqtime+0x11f/0x830 [ 1317.087463][ C0] ? __pick_next_task+0xdd/0x400 [ 1317.087484][ C0] __schedule+0x948/0x4be0 [ 1317.087513][ C0] ? __pfx___schedule+0x10/0x10 [ 1317.087533][ C0] ? __pfx_lock_release+0x10/0x10 [ 1317.087549][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1317.087567][ C0] ? schedule+0x90/0x320 [ 1317.087583][ C0] ? wq_worker_sleeping+0x66/0x240 [ 1317.087600][ C0] ? schedule+0x90/0x320 [ 1317.087616][ C0] schedule+0x14b/0x320 [ 1317.087635][ C0] worker_thread+0xa30/0xd30 [ 1317.087656][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1317.087674][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1317.087688][ C0] kthread+0x2f0/0x390 [ 1317.087705][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1317.087719][ C0] ? __pfx_kthread+0x10/0x10 [ 1317.087735][ C0] ret_from_fork+0x4b/0x80 [ 1317.087750][ C0] ? __pfx_kthread+0x10/0x10 [ 1317.087766][ C0] ret_from_fork_asm+0x1a/0x30 [ 1317.087792][ C0] [ 1317.093189][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1317.414657][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1317.425170][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1317.435227][ T30] Call Trace: [ 1317.438519][ T30] [ 1317.441447][ T30] dump_stack_lvl+0x241/0x360 [ 1317.446129][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1317.451325][ T30] ? __pfx__printk+0x10/0x10 [ 1317.455909][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1317.461893][ T30] ? vscnprintf+0x5d/0x90 [ 1317.466227][ T30] panic+0x349/0x880 [ 1317.470122][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1317.476266][ T30] ? __pfx_panic+0x10/0x10 [ 1317.480672][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1317.486042][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1317.491578][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1317.496957][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1317.503101][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1317.509257][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1317.515418][ T30] watchdog+0x1035/0x1040 [ 1317.519747][ T30] ? watchdog+0x1ea/0x1040 [ 1317.524178][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.528867][ T30] kthread+0x2f0/0x390 [ 1317.532941][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.537641][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.542244][ T30] ret_from_fork+0x4b/0x80 [ 1317.546658][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.551247][ T30] ret_from_fork_asm+0x1a/0x30 [ 1317.556031][ T30] [ 1317.559316][ T30] Kernel Offset: disabled [ 1317.563662][ T30] Rebooting in 86400 seconds..