last executing test programs: 4m27.199140119s ago: executing program 4 (id=1885): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b47350"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000001400)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r2 = dup2(r1, r0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x4}}, 0x53db, 0x2, 0x0, 0x9, 0x68, 0x5}, &(0x7f0000000680)=0x9c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000004000)=""/4099, 0x1003) 4m17.945148908s ago: executing program 4 (id=1914): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f57584"], 0x0}, 0x0) 4m12.615475759s ago: executing program 4 (id=1921): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000000a0a010200000000000000000a000009080007400019000808000a4000000001"], 0x24}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffffffff, 0x8, 0x3eb2, 0x5, 0x0, [{0x77, 0x0, 0x8, '\x00', 0xc}, {0x8, 0x0, 0x7, '\x00', 0x9}, {0x7, 0x1, 0xc, '\x00', 0xd4}, {0x95, 0x6, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0x7, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfc, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x4, 0x8, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x19}, {0x4, 0xfa, 0x1, '\x00', 0x6}, {0x5, 0x0, 0x4, '\x00', 0x9}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x3, 0x9, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x0, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) unshare(0x6a040000) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 4m10.429394228s ago: executing program 4 (id=1928): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000100000001000880000000ffff00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r2}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 4m9.03328954s ago: executing program 4 (id=1933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r9, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) 4m8.59686942s ago: executing program 4 (id=1936): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000001400)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r2 = dup2(r1, r0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x4}}, 0x53db, 0x2, 0x0, 0x9, 0x68, 0x5}, &(0x7f0000000680)=0x9c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000004000)=""/4099, 0x1003) 3m53.472325543s ago: executing program 32 (id=1936): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000001400)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r2 = dup2(r1, r0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x4}}, 0x53db, 0x2, 0x0, 0x9, 0x68, 0x5}, &(0x7f0000000680)=0x9c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000004000)=""/4099, 0x1003) 2m51.76538648s ago: executing program 0 (id=2132): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) 2m51.151179924s ago: executing program 0 (id=2135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 2m51.034414557s ago: executing program 0 (id=2136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r9, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) 2m50.834078561s ago: executing program 0 (id=2139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24316d136cbb44f9cecd1bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecfda34c9d3f849c3ae87765e62ab65118874d4b926b44"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2m50.317986643s ago: executing program 0 (id=2141): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x1, 0x400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000180)={0x8, {"42a3ceeba5506251652dfb10c35fd451", "7fc3100651303bfcf8c5cec5549b7496", "131247e2b670c48fc2b5c5a943dffb40"}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x76798000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="635a0b42002c060000000000000000000000000000000001ff0100000000000000000000000000010000000000000000000000000000000000004e2200004e240000000000000002000000010000000400000001af6e0dc9897225c3153ac69fcc96928fc3204526115712c9a80a31ddc0a4cb1a225085437d73894d3514a74a950ef65005a876d1c1d9ee011ec75041818f0a214476432318f76e68b6b679575d901d12933c8262b1712e04ef91354f718ff0b9"], 0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x6000, 0x0, r4, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x2d, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r5, 0x401070cd, &(0x7f0000000040)) 2m44.793005998s ago: executing program 0 (id=2149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x2000000, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0xc6, 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x364, 0x0, 0x11, 0x148, 0x1d4, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 'hsr0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x46}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xcc, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m29.167333542s ago: executing program 33 (id=2149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x2000000, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/184, 0xb8}], 0x1, 0xc6, 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x364, 0x0, 0x11, 0x148, 0x1d4, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 'hsr0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x46}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xcc, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m56.58401059s ago: executing program 3 (id=2313): ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xa3, 0x0, 0x0}) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000440)=""/33, &(0x7f0000000480)=0x21) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000004c0)=0x2, 0x4) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0xee00, &(0x7f0000000500)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x9835, @mcast2, 0x1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000580)="5687", 0x2, 0x24048081, &(0x7f00000005c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000bc0)={&(0x7f0000000b00)=[{&(0x7f0000000600)="c6455a75347b3a6142018b982bb1b83d1753b3d9", 0x14}, {&(0x7f0000000640)="5957e0e7284a4fd4e574675e9cfd7bd437a555836fcd2d9d8f0b7a2ca9cee201451ee9e2c8b82f318c330f53633146ba9013c9aee059013bc72f8f68648c12693fc53651b7eebddee7", 0x49}, {&(0x7f00000006c0)="e1b0b70af162649f1723ae81aa3d093c2649aa32c060e8f1f73d157a987491cdc5c5327e6897e78e58d954830f3d0350a22f45d960ebfccf04716892f6d37a6cfe4401b774adde78b8ee5107887ffec6e31e1299b28a217417de56a435aeb9d5c85e0322e98e29509af7bcdb0c3f00bf257f432bd2d2816e1cdef1b4bb80083ed4e15f848524553163773958d86080df2225d810e2d2df77f79f527c58394494335b5468c22bdf633a3591ae01d3f40a7567bcb0e5fdc4e6be7abfadafde7377b4fe114e5330146e38", 0xc9}, {&(0x7f00000007c0)="13d91e6c1cc5dd2089bd0c7ac6869574f41b3acb5e1f42c7caf4f5270f7dc69b19b5e3fbd3f2569609eb02aec65cc5eb6b6cbdbeb3908bf272268254b993123b7a0658e1ab9b877055089bdb6ab8d13d4a61d67e56cd2bdbf77eea819a6f6d16f594b29e1584637b8a0d305f9e7dd4373e19ce3a1dcb7b8b3f61b69a40507337d01356845f8a149786ef2a7bc982c39c8697891f8ae98babe087a1de5b41ba18beb0c085e9f33da834ede87eeef652758e2b69baf1f9d75eed20da91ad6c8c53823524ba8d674f8e35ffe134812b58df1192522384189a", 0xd7}, {&(0x7f00000008c0)="89d4f3363f2de6d13b9b1b7e1cf8ca79d7a2066e1ac72ea8e9ec07c2ae0da4487b0ca5a3e692b80481c25ae87f5827266059a8364fea06be7bbc367e07981a6103b8495a29b69e155d2e58c6d8f37e593de24411eada625f1058304e2cb7d90a779bd978140302be1f97f292d9e54a530eab9e0968f7b0e265f4de266fbf15aa8c0ba997556049c58e804d38ce71f9e161b23ac9a1f94a04e716cf5b3ff38f53bb10b8a0b89c66ce8232c73034ba5175b26d88fd2f5a89b7dc3834179405f9", 0xbf}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="1c4c0bc878991c71bb538c507d854a1b71a6401c7c4158437961b2917b0ce936d33849e9f0df0316fe8226fda222fe8f1ec33b13", 0x34}, {&(0x7f0000000a40)="d333e05e0f59354196b24d3ac237a0b249db74dc9fa703fa1fa10586f4c97199c24a26", 0x23}], 0x8, 0xfffffffffffffff5, 0x0, 0x3ff, 0x0, 0x3, 0x5, 0x10000}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) sendmsg$kcm(r3, &(0x7f00000013c0)={&(0x7f0000000c80)=@nfc={0x27, r4, 0x1, 0x7}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000d00)="64c1129a0084302f764ecf967c8201ac1326a4b3668f411de66fb977e82fe31fcc4192d4dca192e26d619a259d2490f737c7d6f36f73b868ec37d95270ea590843a9dba1bab7640377e9dad7377bd1bdf348a1045eb1d9ef29c19fbb9caa22b67cc030acf4cdcb3197c9bc53", 0x6c}, {&(0x7f0000000e00)="e98cc5d777ae437b9d939aa16f9150d0ff135d305b624a0608f52ca884dbaa83d1b6cf55beee4aa1264f6f8234ba77cae186feb393ca0c1e13884d6d0c2d5fd0d78773b4b71841181f8f43a82db9215548494b9799183c194d5b4d75bd039ec1eeeaa3236eac69de08f26fb0cbfbe14dea6acd7cd38fdb7bf3c59199bb7b02fa10d8795a7a60dcb784b57cf8d5ac230a20af", 0x92}, {0x0}, {&(0x7f0000000fc0)="543751ee15f349c1c932c9d2908c5a7b068d86806bea44bd15bc1bdd8208def8f2b8fbfb9fd7937677ee77a63144808b26b0ab879f9c6096d086bd0aaa150856aef1651191958076cb0d170b75761bde77d192ca1f36368429b20dab0e5e18fca0e955c058b329", 0x67}, {&(0x7f0000001140)="7a15af6591d567ef388f8eb47a0e4d2c92b2d4a7757892dbe68a6c58d6222f3bf2ce0827e4efd0953e538817809c2f0b304cbd2e5a233004b509b450b23c48a914b8d77a9c8d4184b22a8e69ca050078", 0x50}, {&(0x7f00000011c0)="654e9ac610b2c5a5f272b589ab0696dddd9e1c801bf3e383b735cafe0d74bed72eabf89caff6d8fe45b2caf3cf311e2e8ad6038e6f24e15a0fbf842db16f61fbea270439cb069adb5416286328a00db797d996fa1514a6de6d276d25c0b285bc9f09713f22ca9f08e8fe78b08a746d8ebaf128cd", 0x74}, {&(0x7f0000001240)="41a22845afc4b07d8dfe5bbe02e07d050b3f2106f1eb558b82985e34fd96b11f15574bc91ccffd5631345b7affca853573cd5b66ec3610e6a7", 0x39}, {&(0x7f0000001280)="42b3a63880b68bfc4cca97056558936a0b960b7bf51f2ee899bc26094c9e13acdfe6133778824b20e3f86dbba099b43e6ad723c5d4f401c45a45c74c2a3f36391c22bdb104532746b2bf988b5f09be1c1968355eb12e062b9cd0ffb4401f7a", 0x5f}], 0x8}, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000001400), 0x88003, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001440), 0x400, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000001640)=0x2) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000001680)=""/105, &(0x7f0000001700)=0x69) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x17) sendmsg$kcm(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001880)="b8759cc0d6349398c74b90cb48b8240e0ecf508a5765d14786568c3e2e323aa1845beabc18ccede34014d6107e38cf726f6277f3460f77f1bcce3caf9cd9c35af9c4acfb73fd1e699ff39a6340cb9ebee7fd27e0875c4aa1c49046ff1d68b77c3e1967459de2e30ed1b3247815a2a65f0f3724459bc5655c98aa5ff5902701967264ddd61eb846a49afa16577a8dff03da32c92a9615f7cb8e8433f503d7ca6a3f6e5e75e7", 0xa5}, {&(0x7f0000001980)="704dc844b658924028fe0cf2862d3f3fbf0c4b8cb8b9de40196b0a51bfda6f6b31819f47f3e78b8e519ed2696ac0e70a210ee4f0726cc92517e0685e72f9ab2208983f4c22acd21bd1a68846564ba8c62879784cf5c70d50c694006a9c33ce980ffd7d15329095a772995f1acbe2b297036aa0b4b468993dd9a1d9893bb1ab67d668450fd00c", 0x86}, {&(0x7f0000001a40)="ef15ab1a3d69030d342a6be0197cefcbbeae54311756a5e1372773d46659a85b6525b83d61f50f4b240b53fbe9fe5cf71c6afc45093514b54fd87d18526d87d896b31621945675e4b87295ccf83ec30e98fc7470e4b2425fce09104d7657c6b91cd6e2a7c706f4a56a8f8078aec6a380d6cfba8153df2d024bcb25a3db32a3be608207deb57a854ea007d2dad3a7001515fad551fbc3e8a914751cf6615c6acc8700e4ff5bf54a071323a078a8e238a17c4b819aba55b0239c3db8dd868e02bba71743fffb374c55740a781c868384543cb6658ef5a91a7169b71975ad0253a54c13cebef0b160a58738541bb3f053d24590e050e5ecb9", 0xf7}, {&(0x7f0000001b40)="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", 0x1000}], 0x4, &(0x7f0000002bc0)=[{0xb0, 0x84, 0xfffff3b7, "88e5f6a687ba406cd50c01d510bcb1734eb1b95a0bd9194840fe672056e9b7b4eb18a82408427accd53e8befaa33b83a896806cf43acb1046d2f80be2e1b7bc5958805d2b109363b430e47c4eab08ba9ae1dc4f04a8672dc68084314e9a0d40712e7c46603c21907d21c6e2c0979e086af26cbeab3c75cff0948521e1729f8bd470ce7ca01a043b874de41e0878794181eb8681cd0665e7831a73e"}, {0x40, 0x29, 0x8, "ea9a12fa16faddfb07da306f1d11e66ef8147a3e9466ce091bd239a397c5d76975b3b916b001b2f1c8aa3351a7c6"}, {0x78, 0x84, 0x9, "0cec28e0aa457cc5c282451e78dcf92067ecb29112834b9bff6d9d5424cc3e613efd76851dca80218582bef8fd9f9e14c74472fe58f7064fcf018289d1c60126dd100e38effb7b00f0ef6a714a41f0b05d2599d1bc02bf2ddead48d7e5269fba5c60e1"}, {0x38, 0x119, 0x8, "45923171e80b5c085e643234ddf17324c3ae90e76961e5a2fa515b52c223067e29a8261f"}], 0x1a0}, 0x20040800) 1m56.381880344s ago: executing program 3 (id=2314): io_setup(0x81, &(0x7f0000000400)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b63481fd1b303f8eab92824c3c8f14ea288fea8e2fc55deae3a12b0748e4407a128633ed8f51eb6ae3bf0299220988b602", 0xc1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000000)={[{@stats}]}) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0xce, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m55.197300021s ago: executing program 3 (id=2315): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x1e, 0x5, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @local}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x2, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) poll(&(0x7f0000000240)=[{r2, 0x310}], 0x1, 0x6) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) r3 = memfd_create(&(0x7f0000000040)='\x00\x00@Z\x82\x1f\xd7\xdc\xe8\x01\x17\xf4\xd6z\xfeJ\xd4k\x01\x00\x00\x00\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec\xb4ZB\x9elG\xfa+q\xa2w\x8d\x991\xc7\xef\x91\xcbZ\xd4\x0f\"U\xbc\x02k\xf4m\x9fXr\x1a\xb9\xc3\xfdaf\xec\xa7\xc2W]\xd8\x1d\xdel\x94\xfd\xd7\xde\x84\xf1n\xc5G\x89\x0e\xa1$6\x06*\x16\xc7\xf6i\xd6r\xcb\xe7Z\xdc\x82\x97\x89\xd3\x80i\xc00\x90\xee\xd6\xc4%,\xaa\f\xf0ra\x98\xca\xc6\x87\xb3\x85\xcc\xe3\x06\xc9\xcc\xe7do\xd8 8\x04\xe1\xa9R\xa0\xe1M\x10\xaa4!\x8f\xcez\x81F\x81\xcd\xdd\x1b\xa7\x85\b\xad)3s\x9f\x90\x85\x82\x1d\xc7\x80h\x87\xa2N\x80\xbf\xf5\xfe\xb9\'QC\xe7d\xc1\x16$\xb1\xd6\x85\xb9[\x16!\xf7{r\x01\x00\x00\x00\x00\x00\x00\x00\xb9#\xe0\xe0\r\x84\xa5\xb5\xe3U\xb3B\x84-\xce\x18!z\xe7\xcd\x93\x9e\xb9#\x8d\x8d\r\x1bD\x05#\xf3$A\xd1\xf5i\x87\x05\xedCo\x92\x84\xfe\x11$p\xab\xbb\n\x19\xe4\xf5t-x\xf3\a\x05n\x13\xe3X\x03\xe2\x04Y9/br\xb0\\\xdcDY\xd9\r\n\xe3Y}\x97,G\xf2\tC\xf3*\x9e\x8c]\x03\x9bt\x85{v3\xdd\x9f\xbc\a\x9eo5\xa2\xe3%\xcd\x19C\xbd*\xdb\xd8\xfe\x9f\xf2%~\xafH\v\x7fh\x88P?\xb8\x94\x8f\x9a\x87\x1c\xfb\x10\x032\xec\x0e\"\xc9\x89\xbd*\xf7\xfd\x17\xbb!\xebN\xe5\x17\xc4\xc7$\x11\xf0\x00G4\n\f\x95\x04\xae}\x81\xc5d\x17\xe4)\xd8\x12\xe6; ,\x0e7\xc1\x81lx', 0x1) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [{0x20, ']@,!,/[%^{{@$-/'}, {0x20, '#! '}, {0x20, '!('}, {0x20, '#! \x7f\\\x17\xb2L\x12\xea%VZ\x16=\xa0\x1f\xb6i\xdc'}]}, 0x37) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m53.45883863s ago: executing program 3 (id=2318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc14", 0x7, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m52.951437552s ago: executing program 3 (id=2321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1m52.693997168s ago: executing program 3 (id=2322): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000000a0a010200000000000000000a000009080007400019000808000a4000000001"], 0x24}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffffffff, 0x8, 0x3eb2, 0x5, 0x0, [{0x77, 0x0, 0x8, '\x00', 0xc}, {0x8, 0x0, 0x7, '\x00', 0x9}, {0x7, 0x1, 0xc, '\x00', 0xd4}, {0x95, 0x6, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0x7, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfc, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x4, 0x8, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x19}, {0x4, 0xfa, 0x1, '\x00', 0x6}, {0x5, 0x0, 0x4, '\x00', 0x9}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x3, 0x9, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x0, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) unshare(0x6a040000) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 1m37.349836245s ago: executing program 34 (id=2322): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SET_GS(0x1e, r0, 0x0, 0x1001) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000000a0a010200000000000000000a000009080007400019000808000a4000000001"], 0x24}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xffffffff, 0x8, 0x3eb2, 0x5, 0x0, [{0x77, 0x0, 0x8, '\x00', 0xc}, {0x8, 0x0, 0x7, '\x00', 0x9}, {0x7, 0x1, 0xc, '\x00', 0xd4}, {0x95, 0x6, 0x3, '\x00', 0xff}, {0xc4, 0xa, 0x1, '\x00', 0x4}, {0x4f, 0x4, 0x1, '\x00', 0x8}, {0xfb, 0x7, 0x75, '\x00', 0x2}, {0x7, 0x10, 0xfc, '\x00', 0x2}, {0x12, 0x4, 0xf, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x9}, {0x9, 0xd, 0x5, '\x00', 0x6}, {0x4, 0x8, 0x4, '\x00', 0x2}, {0xa, 0x53, 0x5, '\x00', 0x19}, {0x4, 0xfa, 0x1, '\x00', 0x6}, {0x5, 0x0, 0x4, '\x00', 0x9}, {0x3b, 0xc, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0x7}, {0x3, 0x9, 0x28, '\x00', 0x1}, {0x7c, 0x5, 0x3d, '\x00', 0x5}, {0x0, 0x6, 0xfd, '\x00', 0x9}, {0x8f, 0x8, 0x7, '\x00', 0x9}, {0xa9, 0x10, 0xe, '\x00', 0x4}, {0x46, 0x4, 0x1, '\x00', 0x8}]}}) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b4, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x4}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x104, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x4, 0xf, 0x3}}, @common=@frag={{0x30}, {[0x4, 0xb99], 0x5, 0x1, 0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x610) unshare(0x6a040000) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 14.047351821s ago: executing program 1 (id=2614): ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xa3, 0x0, 0x0}) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000440)=""/33, &(0x7f0000000480)=0x21) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000004c0)=0x2, 0x4) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0xee00, &(0x7f0000000500)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x9835, @mcast2, 0x1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000580)="5687", 0x2, 0x24048081, &(0x7f00000005c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000bc0)={&(0x7f0000000b00)=[{&(0x7f0000000600)="c6455a75347b3a6142018b982bb1b83d1753b3d9", 0x14}, {&(0x7f0000000640)="5957e0e7284a4fd4e574675e9cfd7bd437a555836fcd2d9d8f0b7a2ca9cee201451ee9e2c8b82f318c330f53633146ba9013c9aee059013bc72f8f68648c12693fc53651b7eebddee7", 0x49}, {&(0x7f00000006c0)="e1b0b70af162649f1723ae81aa3d093c2649aa32c060e8f1f73d157a987491cdc5c5327e6897e78e58d954830f3d0350a22f45d960ebfccf04716892f6d37a6cfe4401b774adde78b8ee5107887ffec6e31e1299b28a217417de56a435aeb9d5c85e0322e98e29509af7bcdb0c3f00bf257f432bd2d2816e1cdef1b4bb80083ed4e15f848524553163773958d86080df2225d810e2d2df77f79f527c58394494335b5468c22bdf633a3591ae01d3f40a7567bcb0e5fdc4e6be7abfadafde7377b4fe114e5330146e38", 0xc9}, {&(0x7f00000007c0)="13d91e6c1cc5dd2089bd0c7ac6869574f41b3acb5e1f42c7caf4f5270f7dc69b19b5e3fbd3f2569609eb02aec65cc5eb6b6cbdbeb3908bf272268254b993123b7a0658e1ab9b877055089bdb6ab8d13d4a61d67e56cd2bdbf77eea819a6f6d16f594b29e1584637b8a0d305f9e7dd4373e19ce3a1dcb7b8b3f61b69a40507337d01356845f8a149786ef2a7bc982c39c8697891f8ae98babe087a1de5b41ba18beb0c085e9f33da834ede87eeef652758e2b69baf1f9d75eed20da91ad6c8c53823524ba8d674f8e35ffe134812b58df11", 0xd1}, {&(0x7f00000008c0)="89d4f3363f2de6d13b9b1b7e1cf8ca79d7a2066e1ac72ea8e9ec07c2ae0da4487b0ca5a3e692b80481c25ae87f5827266059a8364fea06be7bbc367e07981a6103b8495a29b69e155d2e58c6d8f37e593de24411eada625f1058304e2cb7d90a779bd978140302be1f97f292d9e54a530eab9e0968f7b0e265f4de266fbf15aa8c0ba997556049c58e804d38ce71f9e161b23ac9a1f94a04e716cf5b3ff38f53bb10b8a0b89c66ce8232c73034ba5175b26d88fd2f5a89b7dc3834179405f9ea8f42", 0xc2}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="1c4c0bc878991c71bb538c507d854a1b71a6401c7c4158437961b2917b0ce936d33849e9f0df0316fe8226fda222fe8f1ec33b13", 0x34}, {&(0x7f0000000a40)="d333e05e0f59354196b24d3ac237a0b249db74dc9fa703fa1fa10586f4c97199c24a26", 0x23}], 0x8, 0xfffffffffffffff5, 0x0, 0x3ff, 0x0, 0x3, 0x5, 0x10000}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) sendmsg$kcm(r3, &(0x7f00000013c0)={&(0x7f0000000c80)=@nfc={0x27, r4, 0x1, 0x7}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000d00)="64c1129a0084302f764ecf967c8201ac1326a4b3668f411de66fb977e82fe31fcc4192d4dca192e26d619a259d2490f737c7d6f36f73b868ec37d95270ea590843a9dba1bab7640377e9dad7377bd1bdf348a1045eb1d9ef29c19fbb9caa22b67cc030acf4cdcb3197c9bc53", 0x6c}, {&(0x7f0000000e00)="e98cc5d777ae437b9d939aa16f9150d0ff135d305b624a0608f52ca884dbaa83d1b6cf55beee4aa1264f6f8234ba77cae186feb393ca0c1e13884d6d0c2d5fd0d78773b4b71841181f8f43a82db9215548494b9799183c194d5b4d75bd039ec1eeeaa3236eac69de08f26fb0cbfbe14dea6acd7cd38fdb7bf3c59199bb7b02fa10d8795a7a60dcb784b57cf8d5ac230a20af", 0x92}, {0x0}, {&(0x7f0000000fc0)="543751ee15f349c1c932c9d2908c5a7b068d86806bea44bd15bc1bdd8208def8f2b8fbfb9fd7937677ee77a63144808b26b0ab879f9c6096d086bd0aaa150856aef1651191958076cb0d170b75761bde77d192ca1f36368429b20dab0e5e18fca0e955c058b329", 0x67}, {&(0x7f0000001140)="7a15af6591d567ef388f8eb47a0e4d2c92b2d4a7757892dbe68a6c58d6222f3bf2ce0827e4efd0953e538817809c2f0b304cbd2e5a233004b509b450b23c48a914b8d77a9c8d4184b22a8e69ca050078", 0x50}, {&(0x7f00000011c0)="654e9ac610b2c5a5f272b589ab0696dddd9e1c801bf3e383b735cafe0d74bed72eabf89caff6d8fe45b2caf3cf311e2e8ad6038e6f24e15a0fbf842db16f61fbea270439cb069adb5416286328a00db797d996fa1514a6de6d276d25c0b285bc9f09713f22ca9f08e8fe78b08a746d8ebaf128cd", 0x74}, {&(0x7f0000001240)="41a22845afc4b07d8dfe5bbe02e07d050b3f2106f1eb558b82985e34fd96b11f15574bc91ccffd5631345b7affca853573cd5b66ec3610e6a7", 0x39}, {&(0x7f0000001280)="42b3a63880b68bfc4cca97056558936a0b960b7bf51f2ee899bc26094c9e13acdfe6133778824b20e3f86dbba099b43e6ad723c5d4f401c45a45c74c2a3f36391c22bdb104532746b2bf988b5f09be1c1968355eb12e062b9cd0ffb4401f7a", 0x5f}], 0x8}, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000001400), 0x88003, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001440), 0x400, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000001640)=0x2) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000001680)=""/105, &(0x7f0000001700)=0x69) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x17) sendmsg$kcm(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001880)="b8759cc0d6349398c74b90cb48b8240e0ecf508a5765d14786568c3e2e323aa1845beabc18ccede34014d6107e38cf726f6277f3460f77f1bcce3caf9cd9c35af9c4acfb73fd1e699ff39a6340cb9ebee7fd27e0875c4aa1c49046ff1d68b77c3e1967459de2e30ed1b3247815a2a65f0f3724459bc5655c98aa5ff5902701967264ddd61eb846a49afa16577a8dff03da32c92a9615f7cb8e8433f503d7ca6a3f6e5e75e7", 0xa5}, {&(0x7f0000001980)="704dc844b658924028fe0cf2862d3f3fbf0c4b8cb8b9de40196b0a51bfda6f6b31819f47f3e78b8e519ed2696ac0e70a210ee4f0726cc92517e0685e72f9ab2208983f4c22acd21bd1a68846564ba8c62879784cf5c70d50c694006a9c33ce980ffd7d15329095a772995f1acbe2b297036aa0b4b468993dd9a1d9893bb1ab67d668450fd00c", 0x86}, {&(0x7f0000001a40)="ef15ab1a3d69030d342a6be0197cefcbbeae54311756a5e1372773d46659a85b6525b83d61f50f4b240b53fbe9fe5cf71c6afc45093514b54fd87d18526d87d896b31621945675e4b87295ccf83ec30e98fc7470e4b2425fce09104d7657c6b91cd6e2a7c706f4a56a8f8078aec6a380d6cfba8153df2d024bcb25a3db32a3be608207deb57a854ea007d2dad3a7001515fad551fbc3e8a914751cf6615c6acc8700e4ff5bf54a071323a078a8e238a17c4b819aba55b0239c3db8dd868e02bba71743fffb374c55740a781c868384543cb6658ef5a91a7169b71975ad0253a54c13cebef0b160a58738541bb3f053d24590e050e5ecb9", 0xf7}, {&(0x7f0000001b40)="811ddaeb58df3d6a02ba99739220d7e3b93924b2ef3494b0ebe0add5304f9dff732404288abe1b4906b9035eddfc6e7656a60f07dd0445223d852a4535232135898bcb5c6dbf6f10b10bbcfaf1e2f2fe7457dcac664b8491271440fef5687e1cb3616ab625c0357883d0bb8676d3a5ce277805f295df216273c58bd6d7a7cae2a5231f0dd6daa51c6a7fe7b078d861405c4da471a4079c37a1c02559157f64f88160dad68233df3f90eb49c6516cdc0979f3c0cc9bd92bfde7206c78b7c39a2591d23af5e86eae70784f0f8800a43fe0d4ccd5620f5290edcb12f882a89a1db8c1d1afc7ab82612e3c93ce346927bcf56fd254ed1bbfaf9ed3a92d5ce3e244ce2c3ca74242f2a5affaa137f00dc82c06f2ede6000339489cddfb65bc7b2b602306650b3f8395bcda06378973fdaac7eaf43b3155ef1fbf86e639889c6eda7984a8e63bb67977635fed1f38c248a0c4d5e9f22508350f98f84c62b724d15a2701cf818e9aa4566130ac647d430b2993eafccddd5a82e46f89aa9b276067aefb19a28dd2ae4dfb04d9a0d4ba9a22fcb21dde8f217c05f244a16174b5fb66c7b0df59afba2b493bbbb25835169a3dcdf2f9c47a9e9de51a3054b0759e8b262076ec57ef4b8785b8af0ea5af26601e21521b9e3f99de75be3e69f1cc2e3d8a4c706584afff79216fd597cc808d7dd049a1f0939478b0dcc17c36803856b6de7d9cd8ecd02ebebaa3bf949e2e9e7864f605e546d41fdfe3bf3d2649b5f6e813aa05e4e3797ce8bbab518c9cd932b111f036d9408ce98f94c04c2169fce1a4e56761e05fa13d85fa3b338d44d6ebe842f512ce9f5cd78f88bf0743afd30bf10a5e2145f3c4dd7ee872799ab2e5d64944a83ee13bf3347dcf39064c105a39ad93a928060e00f667199e2d7543adfa045cd62551c0b195b0b2921d415fcb19f0be44323ca9a9eb8e3b7403f6ad1e6fa7dd58c62537355b2177cecde2c699330b03bce9a65a2f31c35e1b92b3256bfb145eccee9e655ce2e166a61b22d33086fe08e804f83ebe4d6fb81adaa8e8d97ca615ec8dcdb22821a481bda67657f1daa2fd354123506d6bfae4bc000d22c9fea823ba8716ccad9dca97e5a1a7b40aa7553bfe1c96b881c9074e912fb675593ef78c538ad9b1b9db8b3b4b981d9e945bdb4b2fa9f7abf0539512f5ef89b438314acba15cd0b3b38f5844aad906377133cecb87c43f0a469e1a812d6f02e5e7c319ba36651333d9c4e1b8310e579617a15275a5cc44464732b7128b140d839ace37575a941d414056e586d82413afcc4969dfd65bcd37fc680e2715f20a61988d629082191b2eceb1209dd46d4f5864424001055a95a7c5d00077d8fe7a4744dd3f3496a6e5743889b3a7cda53c4f4ccb63c359e5902c370a2fdc6a80bbf68dcba8fabb05e287603a5262fdbc3c1d9ed4e36ec6cce67c6c546bdf3d70ffab6d8c176fef2f069dee0b51151411b182c15425c89aa7de061834238247f34657da6ac5778e1abbd6515f3fc58cfa2182a496c843fdb80f89b033fcfa10e3649d2b122c24ed203c8c24a130568f2c6fc10bee0fc7687a49a1e17249fc033e7735d5ea97c5d06c0a13292681d9be54b8b7dbcfd7c3bf1b488dafc27f8c09bdaa31c9c9b342ab7e0dd02fd7c6785ead7e0a653eb39eb83bf3bf7ec55121b96668ea9ab58c5ff1a4fa2a0f8bf0ce2f59a2de6d8a98c1b1c80de00c4c9a92176e1f342fae87e83fe69689db429f397d240fd481f170e95d9db5e66aa0a252d443e8ea4a512839e8aaa642c1e8bdc2f9ace086107e89ec2cf7af8b72ee75c765f3695a8c45b23c34ec031bd88ecb39ad203798df798fd359968a36cfb2696ca7c8361c7dd6b3f1b7380c3be8f99aca9e69c777ddd973ad7c86597923c1185aa035e3faff4aacb5d0cb6a37aa55b4baa1863b5677cd0f61651071a9f71f85ed579c4e39bfb412ca4f7e47f63eac0a2f9dabf382dd2a2596e167258cdd3075120975c912f5d25c2a4e99cd02693bfecb25265b3e8ca415e2eba22afd24c5e9bb67e762b63baf0955fb89eea74ed709fbfac09dda1d6980132330af41c8290d1e3e313e89a28744cf26c5fce6a4ed05cca16f0537d681232cb5842dddbc93552b4e8ba8a9a3b849cb7d7bdef53d4f277a76e8f2b534b330fe94b6e2a3abd00fd3b4040e7814730f0c0648267e3d938c4934b44cce9ccc47b897ca94c9ebd905a33827677b751fae257a3f0ac2bf825a3711e41783e7e0990dd74864444617d5054a5960554285d32eb35f0db9b376231516dc5282cee2b97281b647d78b1535f12aa032a9e28f3dff906cad60b4483499fe081f108ee47dac712d845f2b622f5123e402ceeda2a2b4b09c3e77eb1cf6010d2af76ea9be1659e25d227d3566360eaf8ac48751b9c80202282f4e9e541b78e8d6a86ea44b7671cf452ad01a97d40d3a72f672c5b42e51802e44d9684903cc72f6e91a59794a03ea6f53aca9247a0e894ca0ce0189c4cfabc2545db4820bb3d8cc950de757570206713a5dba8e70e1e1dfd28d6ac01222a38fe0f12e9b9f3f2d56e27b02ac34c1d5132833cbd825a4b854e87b7c23b5879f2d536f0b8b1383c847fbe86de5090bc22f26746262d52f7aface62d40f1a82b87d8b252d03d9ceb22be071d3cc71002662ea80a8293d88098037dec7801eed5f85d22065574ee21162381222716396951aa27c121eb4db6234249ce641d634e57e696d58c62ccdbbea5bdfa760501e3a0a16623803779637f124f6b85574e6244d95cdd3e920d795eae03c54601a2e1274d2276d2441731536106822b715c6f0173c697c24c772b82ef4d39cea4a10b9a5ba2109dd5c0c413c08dfedb5a3999db771bce7a7f09f35e48b2d72166bb072d5c079229d3e729b3a82d0bdf0ac538bf4198835c38a6ba17ebaeff6ebd3355352d1a81b3bb9dd706be08402477b5a86d1facd20d0a4c713bd8cbffda0506a0bcc0a100361b6610e71f19fa1b6b08786a12463c489dd4b176daf0215050eaf389a2036f63cd78ed3c0a4f5e4e2d878484ce128133573723d564ed3ab0f38b5b8f34ebdf96bfb860979ddad32d097ded59fdd62ff6d55c6c079b80c7d7f4fad7c4ac3b0842dcc77271b3f9d657b8e037d48c3cad85b198e738973f3d971c8f69d6c2421e208db4b77c893c2cc915fab9ac0d48770a1be407b34479e4d9f6487f4747667cbac75ea56bbfce2763f9ffbadf71ca53e00de6a3638aab19e030f85f6c035a6221db69f29f96cdce63a186ed8a1235fcd3e16264944a9271c33627c98b5c533200ad0c5de98f07fa4253c5363972b39f21f082cd35a8639fe4d4a66c9da7da3f19bde2d13b48c8d48c16ffb2d6029bf930f148e2da47fd8f6f9b9b6f8c1ffdff2346abe2be9fb1ac22727b13f198c4fd1957b04e5b53ca7a118a3ad8b7180ac0139d92cc726d2cbf76097d7e30c635a480ceec4ce05614a933bdc590dfc143fc4d49cd0c08edc8c1c9801072b0770f0b45efc7ea2088c1369d77bb56668c86cf316e4220faa683b73f75f277b6f8d8a7831eaecadb0dbb5342f28f5c63c3de7a5257d2075a0d12de023d44a065de1ce2ef77930d4b29aa442c65dd905c35955a8b596165b5b2f630712ea34d38b8d089043f54c890a36c03c01682be2aac891830fb12b5d5aaccbde31fa5293d41f4257e77c88f3d36b8d6aef36f6f91db835164e2b4968dc3a73eea1e6e81d3b96654be23a14129ee1fea3b471e1d1eed94c5dd181b0c9af753cc9a34c44ab124a34a27ca00c3ce5d8f205965d7a0310c2a88b8b72ec70c53a3fee1d732a7e853fa07ca600edea53e5cf6b47cba2a4ed1c66bbfe6dfd36bfa4030143c263fb325fd8c9a220b43d6f90f1912a473aa14b3d662d8bedcf3f47fd71f6424fc4014791dca1678921795d7e134aacad171bca2d86f674b8f4668b5e0d86cb0dfe95a39e3c54fbeb3d9a2dad4eac2fd15194c90e66fcfa6ea14c144f001fd1cadb22c98d32b1c2440a9fce4e08d5d00887a0f7ac6f116b8f6d151dcc02529cad03ecb631383242502d5fa4f8fa6b43b9eec7093ceaeecdd2d343efb5e1cc09eae4ed16c3f735f5b86281128ed876fd27dda853e1b9830181640d7f7ac839bc224a82f54da78a73f8cbf472d691702b1fe5fa71456a3e72417ea42d647d1842e9c1122f4ab4c793b74547f6fe388c39833d05fc28313c5bd414a176e02d91da43f903ceadaf76d08d9ba1b5989bfcbafabb24fa11510d34604b9d39895319b9db86532e9b0ffba98fd2857bee9f8a9aefda3681f492157a9350474b287674e18490237f257693e43886f9c7d5f14963251bfaa9e26311f1cbabcc76bac9e6ae36fc5904bac2c5f97911a9d927b9d79a863043eb35814995e553b4070ac20035f884f72d8225a1fc583c1df0d301327a917340299ed75db062c5ce30d2d81e408dbf4ba8d86ae167fea685de93f7a82ae3f0a8476b6cadcc0c14bdb17696eb6131fa69355c72fd784e0b6e443fb7caa2e805f44a86d1b73c9f5626a13eb5c36a7db2b919b39d52bbfb345210bace6c4e38e2dfcb646102f2dc20228269ecda7321a1799c617413766fe7b2837583e103bb14e7dc1a0a81f880574a16f2613e49ffa6ce6e2fb3cead409d30762b8fe97634df9715d6269b6d96ff97c0baddbcfec56e607522703916687ea32c1b94bd3f84297e40e6e17401e26e459ecbd7350cc6204e5a81ac0531a5091a5c674cf42ee8d848976be74db2c9b858a74a1dfb265e8778d5c7d7e9d2b75eb1321b546fae4c134f24b4789959f0bec77bfe59cc40792716de65f2d248edfcf37b7f7e08ef912189590fd56550094abbd4deb3c8720505ba35791c2ef1d6abe20cb94b66f4e9d2f216a56ddd8ce563283b47925377a5d4bc2683b9130869fefb1e9baaf87c5945bcf504a16a248e3f2407f287d8563226f9a2c29957bb545e32b15be0ea0151c9f45b56e47695db7d662d4bae40044d3d093584a57e7ac375ca21a7638d5d2ef91814d96e260f2ce5ca95f343d1d337460ee2c99dba53b3ddf595f94716403bca6a89a65fcc0d2a0af5845aad6e013987f72bef5cb1029c8324dd39c79230c8eb1a5fab8ee0667d4242a4b08105d0b43c06e3a66691dd844f344746d4b7ea0195096c68dc517d22feaadaa88f36f33e7092749a485dd2dfea869d6c47bcf15b73d0f94277e39ef3b973ad45652d3eebea26441cd5cfde61b223e28db64d4ea349f0f0b7c3b213458ab3edceba805e79e000753b466935c90254fb3c790de5ebe5fd5afee06976cd382fcef7baea853ca4ee9460e50968cb131eb8ff9ab1bb47da6d640e6f6563cf120fa94746411cfcbaff50cd535dc4a049c1a5e516512809428890073ce11dd1e91708d66bce0b10e713cbb12c2922447ef585645f9109b616127343cc909773d65f5f82d3bb37e1b566ccfdb9d53bf4dd8d6a083bb02916206412367054325ae79a173f781091d7965a4a13793c2004adb96d339af739af4c51dd0a42d427dc1c0fee2403d27d59610a2cdda1f2bafbc62bc56e66cfbb1cbdb178550f4a404125885175a2548312aacd51a548a988a70e16dbf9399315173382922c69879896ba5a6e0089dcacd61b1fb8c7a1956972f6bdcf413d68cd72c805b5edd59f5af3917e525509ba860c01c4634cd1295773c0b3ae4cffa97ca7c5fefd6ac53512b387e7fd6bc80db7c10110e7803d613b0fb21ec9f4ad3b2aefeed0a5beabe04228c9850838398df6fcc6690b491a444b1bcd08b3b2cee72750ccdd176d", 0x1000}], 0x4, &(0x7f0000002bc0)=[{0xb0, 0x84, 0xfffff3b7, "88e5f6a687ba406cd50c01d510bcb1734eb1b95a0bd9194840fe672056e9b7b4eb18a82408427accd53e8befaa33b83a896806cf43acb1046d2f80be2e1b7bc5958805d2b109363b430e47c4eab08ba9ae1dc4f04a8672dc68084314e9a0d40712e7c46603c21907d21c6e2c0979e086af26cbeab3c75cff0948521e1729f8bd470ce7ca01a043b874de41e0878794181eb8681cd0665e7831a73e"}, {0x40, 0x29, 0x8, "ea9a12fa16faddfb07da306f1d11e66ef8147a3e9466ce091bd239a397c5d76975b3b916b001b2f1c8aa3351a7c6"}, {0x78, 0x84, 0x9, "0cec28e0aa457cc5c282451e78dcf92067ecb29112834b9bff6d9d5424cc3e613efd76851dca80218582bef8fd9f9e14c74472fe58f7064fcf018289d1c60126dd100e38effb7b00f0ef6a714a41f0b05d2599d1bc02bf2ddead48d7e5269fba5c60e1"}, {0x38, 0x119, 0x8, "45923171e80b5c085e643234ddf17324c3ae90e76961e5a2fa515b52c223067e29a8261f"}], 0x1a0}, 0x20040800) 13.67925215s ago: executing program 1 (id=2615): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000100000001000880000000ffff00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 12.770287431s ago: executing program 1 (id=2616): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r7, &(0x7f0000002880)=[{&(0x7f0000000340)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r8, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r9, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/215], 0x119) syz_open_dev$hidraw(0x0, 0x0, 0x81) 11.605280617s ago: executing program 1 (id=2619): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 10.968666121s ago: executing program 6 (id=2623): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x2, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) poll(&(0x7f0000000240)=[{r1, 0x310}], 0x1, 0x6) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) r2 = memfd_create(&(0x7f0000000040)='\x00\x00@Z\x82\x1f\xd7\xdc\xe8\x01\x17\xf4\xd6z\xfeJ\xd4k\x01\x00\x00\x00\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec\xb4ZB\x9elG\xfa+q\xa2w\x8d\x991\xc7\xef\x91\xcbZ\xd4\x0f\"U\xbc\x02k\xf4m\x9fXr\x1a\xb9\xc3\xfdaf\xec\xa7\xc2W]\xd8\x1d\xdel\x94\xfd\xd7\xde\x84\xf1n\xc5G\x89\x0e\xa1$6\x06*\x16\xc7\xf6i\xd6r\xcb\xe7Z\xdc\x82\x97\x89\xd3\x80i\xc00\x90\xee\xd6\xc4%,\xaa\f\xf0ra\x98\xca\xc6\x87\xb3\x85\xcc\xe3\x06\xc9\xcc\xe7do\xd8 8\x04\xe1\xa9R\xa0\xe1M\x10\xaa4!\x8f\xcez\x81F\x81\xcd\xdd\x1b\xa7\x85\b\xad)3s\x9f\x90\x85\x82\x1d\xc7\x80h\x87\xa2N\x80\xbf\xf5\xfe\xb9\'QC\xe7d\xc1\x16$\xb1\xd6\x85\xb9[\x16!\xf7{r\x01\x00\x00\x00\x00\x00\x00\x00\xb9#\xe0\xe0\r\x84\xa5\xb5\xe3U\xb3B\x84-\xce\x18!z\xe7\xcd\x93\x9e\xb9#\x8d\x8d\r\x1bD\x05#\xf3$A\xd1\xf5i\x87\x05\xedCo\x92\x84\xfe\x11$p\xab\xbb\n\x19\xe4\xf5t-x\xf3\a\x05n\x13\xe3X\x03\xe2\x04Y9/br\xb0\\\xdcDY\xd9\r\n\xe3Y}\x97,G\xf2\tC\xf3*\x9e\x8c]\x03\x9bt\x85{v3\xdd\x9f\xbc\a\x9eo5\xa2\xe3%\xcd\x19C\xbd*\xdb\xd8\xfe\x9f\xf2%~\xafH\v\x7fh\x88P?\xb8\x94\x8f\x9a\x87\x1c\xfb\x10\x032\xec\x0e\"\xc9\x89\xbd*\xf7\xfd\x17\xbb!\xebN\xe5\x17\xc4\xc7$\x11\xf0\x00G4\n\f\x95\x04\xae}\x81\xc5d\x17\xe4)\xd8\x12\xe6; ,\x0e7\xc1\x81lx', 0x1) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{0x20, ']@,!,/[%^{{@$-/'}, {0x20, '#! '}, {0x20, '!('}, {0x20, '#! \x7f\\\x17\xb2L\x12\xea%VZ\x16=\xa0\x1f\xb6i\xdc'}]}, 0x37) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10.669068718s ago: executing program 6 (id=2626): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) 9.477391065s ago: executing program 6 (id=2631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0x1}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x6, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x4800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 9.359822788s ago: executing program 7 (id=2632): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x3, {[0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x6e63ee4e]}}, 0x5c) 9.065572374s ago: executing program 7 (id=2633): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000005c0)=@usbdevfs_driver={0x0, 0xfffffffc, 0x0}) 9.008677746s ago: executing program 6 (id=2634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa3, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24316d136cbb44f9cecd1bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecfda34c9d3f849c3ae87765e62ab65118874d4b926b"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 8.81356624s ago: executing program 6 (id=2635): openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) close(r3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 8.737472482s ago: executing program 7 (id=2636): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000480)={'comedi_bond\x00', [0x2, 0xb, 0x10, 0x20008, 0x5, 0xe4a, 0x8, 0x9, 0x6, 0x8, 0xc, 0x1, 0x2, 0x80000001, 0x1, 0x14, 0x0, 0x4de, 0x5, 0xfffffffe, 0x0, 0x3, 0xbffb7e5, 0xfffffff8, 0xd625, 0x3ff, 0x7fffffff, 0x2, 0x7, 0x7fffffff, 0xa3]}) 8.589459325s ago: executing program 7 (id=2637): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0x0, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r3, 0x0, 0x317e, 0x4) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 8.394715689s ago: executing program 2 (id=2638): ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xa3, 0x0, 0x0}) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000440)=""/33, &(0x7f0000000480)=0x21) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000004c0)=0x2, 0x4) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0xee00, &(0x7f0000000500)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x9835, @mcast2, 0x1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000580)="5687", 0x2, 0x24048081, &(0x7f00000005c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000bc0)={&(0x7f0000000b00)=[{&(0x7f0000000600)="c6455a75347b3a6142018b982bb1b83d1753b3d9", 0x14}, {&(0x7f0000000640)="5957e0e7284a4fd4e574675e9cfd7bd437a555836fcd2d9d8f0b7a2ca9cee201451ee9e2c8b82f318c330f53633146ba9013c9aee059013bc72f8f68648c12693fc53651b7eebddee7", 0x49}, {&(0x7f00000006c0)="e1b0b70af162649f1723ae81aa3d093c2649aa32c060e8f1f73d157a987491cdc5c5327e6897e78e58d954830f3d0350a22f45d960ebfccf04716892f6d37a6cfe4401b774adde78b8ee5107887ffec6e31e1299b28a217417de56a435aeb9d5c85e0322e98e29509af7bcdb0c3f00bf257f432bd2d2816e1cdef1b4bb80083ed4e15f848524553163773958d86080df2225d810e2d2df77f79f527c58394494335b5468c22bdf633a3591ae01d3f40a7567bcb0e5fdc4e6be7abfadafde7377b4fe114e5330146e38", 0xc9}, {&(0x7f00000007c0)="13d91e6c1cc5dd2089bd0c7ac6869574f41b3acb5e1f42c7caf4f5270f7dc69b19b5e3fbd3f2569609eb02aec65cc5eb6b6cbdbeb3908bf272268254b993123b7a0658e1ab9b877055089bdb6ab8d13d4a61d67e56cd2bdbf77eea819a6f6d16f594b29e1584637b8a0d305f9e7dd4373e19ce3a1dcb7b8b3f61b69a40507337d01356845f8a149786ef2a7bc982c39c8697891f8ae98babe087a1de5b41ba18beb0c085e9f33da834ede87eeef652758e2b69baf1f9d75eed20da91ad6c8c53823524ba8d674f8e35ffe134812b58df11925223", 0xd4}, {&(0x7f00000008c0)="89d4f3363f2de6d13b9b1b7e1cf8ca79d7a2066e1ac72ea8e9ec07c2ae0da4487b0ca5a3e692b80481c25ae87f5827266059a8364fea06be7bbc367e07981a6103b8495a29b69e155d2e58c6d8f37e593de24411eada625f1058304e2cb7d90a779bd978140302be1f97f292d9e54a530eab9e0968f7b0e265f4de266fbf15aa8c0ba997556049c58e804d38ce71f9e161b23ac9a1f94a04e716cf5b3ff38f53bb10b8a0b89c66ce8232c73034ba5175b26d88fd2f5a89b7dc3834179405f9ea8f42", 0xc2}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="1c4c0bc878991c71bb538c507d854a1b71a6401c7c4158437961b2917b0ce936d33849e9f0df0316fe8226fda222fe8f1ec33b13", 0x34}, {&(0x7f0000000a40)="d333e05e0f59354196b24d3ac237a0b249db74dc9fa703fa1fa10586f4c97199c24a26", 0x23}], 0x8, 0xfffffffffffffff5, 0x0, 0x3ff, 0x0, 0x3, 0x5, 0x10000}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) sendmsg$kcm(r3, &(0x7f00000013c0)={&(0x7f0000000c80)=@nfc={0x27, r4, 0x1, 0x7}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000d00)="64c1129a0084302f764ecf967c8201ac1326a4b3668f411de66fb977e82fe31fcc4192d4dca192e26d619a259d2490f737c7d6f36f73b868ec37d95270ea590843a9dba1bab7640377e9dad7377bd1bdf348a1045eb1d9ef29c19fbb9caa22b67cc030acf4cdcb3197c9bc53", 0x6c}, {&(0x7f0000000e00)="e98cc5d777ae437b9d939aa16f9150d0ff135d305b624a0608f52ca884dbaa83d1b6cf55beee4aa1264f6f8234ba77cae186feb393ca0c1e13884d6d0c2d5fd0d78773b4b71841181f8f43a82db9215548494b9799183c194d5b4d75bd039ec1eeeaa3236eac69de08f26fb0cbfbe14dea6acd7cd38fdb7bf3c59199bb7b02fa10d8795a7a60dcb784b57cf8d5ac230a20af", 0x92}, {0x0}, {&(0x7f0000000fc0)="543751ee15f349c1c932c9d2908c5a7b068d86806bea44bd15bc1bdd8208def8f2b8fbfb9fd7937677ee77a63144808b26b0ab879f9c6096d086bd0aaa150856aef1651191958076cb0d170b75761bde77d192ca1f36368429b20dab0e5e18fca0e955c058b329", 0x67}, {&(0x7f0000001140)="7a15af6591d567ef388f8eb47a0e4d2c92b2d4a7757892dbe68a6c58d6222f3bf2ce0827e4efd0953e538817809c2f0b304cbd2e5a233004b509b450b23c48a914b8d77a9c8d4184b22a8e69ca050078", 0x50}, {&(0x7f00000011c0)="654e9ac610b2c5a5f272b589ab0696dddd9e1c801bf3e383b735cafe0d74bed72eabf89caff6d8fe45b2caf3cf311e2e8ad6038e6f24e15a0fbf842db16f61fbea270439cb069adb5416286328a00db797d996fa1514a6de6d276d25c0b285bc9f09713f22ca9f08e8fe78b08a746d8ebaf128cd", 0x74}, {&(0x7f0000001240)="41a22845afc4b07d8dfe5bbe02e07d050b3f2106f1eb558b82985e34fd96b11f15574bc91ccffd5631345b7affca853573cd5b66ec3610e6a7", 0x39}, {&(0x7f0000001280)="42b3a63880b68bfc4cca97056558936a0b960b7bf51f2ee899bc26094c9e13acdfe6133778824b20e3f86dbba099b43e6ad723c5d4f401c45a45c74c2a3f36391c22bdb104532746b2bf988b5f09be1c1968355eb12e062b9cd0ffb4401f7a", 0x5f}], 0x8}, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000001400), 0x88003, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001440), 0x400, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000001640)=0x2) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000001680)=""/105, &(0x7f0000001700)=0x69) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x17) sendmsg$kcm(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001880)="b8759cc0d6349398c74b90cb48b8240e0ecf508a5765d14786568c3e2e323aa1845beabc18ccede34014d6107e38cf726f6277f3460f77f1bcce3caf9cd9c35af9c4acfb73fd1e699ff39a6340cb9ebee7fd27e0875c4aa1c49046ff1d68b77c3e1967459de2e30ed1b3247815a2a65f0f3724459bc5655c98aa5ff5902701967264ddd61eb846a49afa16577a8dff03da32c92a9615f7cb8e8433f503d7ca6a3f6e5e75e7", 0xa5}, {&(0x7f0000001980)="704dc844b658924028fe0cf2862d3f3fbf0c4b8cb8b9de40196b0a51bfda6f6b31819f47f3e78b8e519ed2696ac0e70a210ee4f0726cc92517e0685e72f9ab2208983f4c22acd21bd1a68846564ba8c62879784cf5c70d50c694006a9c33ce980ffd7d15329095a772995f1acbe2b297036aa0b4b468993dd9a1d9893bb1ab67d668450fd00c", 0x86}, {&(0x7f0000001a40)="ef15ab1a3d69030d342a6be0197cefcbbeae54311756a5e1372773d46659a85b6525b83d61f50f4b240b53fbe9fe5cf71c6afc45093514b54fd87d18526d87d896b31621945675e4b87295ccf83ec30e98fc7470e4b2425fce09104d7657c6b91cd6e2a7c706f4a56a8f8078aec6a380d6cfba8153df2d024bcb25a3db32a3be608207deb57a854ea007d2dad3a7001515fad551fbc3e8a914751cf6615c6acc8700e4ff5bf54a071323a078a8e238a17c4b819aba55b0239c3db8dd868e02bba71743fffb374c55740a781c868384543cb6658ef5a91a7169b71975ad0253a54c13cebef0b160a58738541bb3f053d24590e050e5ecb9", 0xf7}, {&(0x7f0000001b40)="811ddaeb58df3d6a02ba99739220d7e3b93924b2ef3494b0ebe0add5304f9dff732404288abe1b4906b9035eddfc6e7656a60f07dd0445223d852a4535232135898bcb5c6dbf6f10b10bbcfaf1e2f2fe7457dcac664b8491271440fef5687e1cb3616ab625c0357883d0bb8676d3a5ce277805f295df216273c58bd6d7a7cae2a5231f0dd6daa51c6a7fe7b078d861405c4da471a4079c37a1c02559157f64f88160dad68233df3f90eb49c6516cdc0979f3c0cc9bd92bfde7206c78b7c39a2591d23af5e86eae70784f0f8800a43fe0d4ccd5620f5290edcb12f882a89a1db8c1d1afc7ab82612e3c93ce346927bcf56fd254ed1bbfaf9ed3a92d5ce3e244ce2c3ca74242f2a5affaa137f00dc82c06f2ede6000339489cddfb65bc7b2b602306650b3f8395bcda06378973fdaac7eaf43b3155ef1fbf86e639889c6eda7984a8e63bb67977635fed1f38c248a0c4d5e9f22508350f98f84c62b724d15a2701cf818e9aa4566130ac647d430b2993eafccddd5a82e46f89aa9b276067aefb19a28dd2ae4dfb04d9a0d4ba9a22fcb21dde8f217c05f244a16174b5fb66c7b0df59afba2b493bbbb25835169a3dcdf2f9c47a9e9de51a3054b0759e8b262076ec57ef4b8785b8af0ea5af26601e21521b9e3f99de75be3e69f1cc2e3d8a4c706584afff79216fd597cc808d7dd049a1f0939478b0dcc17c36803856b6de7d9cd8ecd02ebebaa3bf949e2e9e7864f605e546d41fdfe3bf3d2649b5f6e813aa05e4e3797ce8bbab518c9cd932b111f036d9408ce98f94c04c2169fce1a4e56761e05fa13d85fa3b338d44d6ebe842f512ce9f5cd78f88bf0743afd30bf10a5e2145f3c4dd7ee872799ab2e5d64944a83ee13bf3347dcf39064c105a39ad93a928060e00f667199e2d7543adfa045cd62551c0b195b0b2921d415fcb19f0be44323ca9a9eb8e3b7403f6ad1e6fa7dd58c62537355b2177cecde2c699330b03bce9a65a2f31c35e1b92b3256bfb145eccee9e655ce2e166a61b22d33086fe08e804f83ebe4d6fb81adaa8e8d97ca615ec8dcdb22821a481bda67657f1daa2fd354123506d6bfae4bc000d22c9fea823ba8716ccad9dca97e5a1a7b40aa7553bfe1c96b881c9074e912fb675593ef78c538ad9b1b9db8b3b4b981d9e945bdb4b2fa9f7abf0539512f5ef89b438314acba15cd0b3b38f5844aad906377133cecb87c43f0a469e1a812d6f02e5e7c319ba36651333d9c4e1b8310e579617a15275a5cc44464732b7128b140d839ace37575a941d414056e586d82413afcc4969dfd65bcd37fc680e2715f20a61988d629082191b2eceb1209dd46d4f5864424001055a95a7c5d00077d8fe7a4744dd3f3496a6e5743889b3a7cda53c4f4ccb63c359e5902c370a2fdc6a80bbf68dcba8fabb05e287603a5262fdbc3c1d9ed4e36ec6cce67c6c546bdf3d70ffab6d8c176fef2f069dee0b51151411b182c15425c89aa7de061834238247f34657da6ac5778e1abbd6515f3fc58cfa2182a496c843fdb80f89b033fcfa10e3649d2b122c24ed203c8c24a130568f2c6fc10bee0fc7687a49a1e17249fc033e7735d5ea97c5d06c0a13292681d9be54b8b7dbcfd7c3bf1b488dafc27f8c09bdaa31c9c9b342ab7e0dd02fd7c6785ead7e0a653eb39eb83bf3bf7ec55121b96668ea9ab58c5ff1a4fa2a0f8bf0ce2f59a2de6d8a98c1b1c80de00c4c9a92176e1f342fae87e83fe69689db429f397d240fd481f170e95d9db5e66aa0a252d443e8ea4a512839e8aaa642c1e8bdc2f9ace086107e89ec2cf7af8b72ee75c765f3695a8c45b23c34ec031bd88ecb39ad203798df798fd359968a36cfb2696ca7c8361c7dd6b3f1b7380c3be8f99aca9e69c777ddd973ad7c86597923c1185aa035e3faff4aacb5d0cb6a37aa55b4baa1863b5677cd0f61651071a9f71f85ed579c4e39bfb412ca4f7e47f63eac0a2f9dabf382dd2a2596e167258cdd3075120975c912f5d25c2a4e99cd02693bfecb25265b3e8ca415e2eba22afd24c5e9bb67e762b63baf0955fb89eea74ed709fbfac09dda1d6980132330af41c8290d1e3e313e89a28744cf26c5fce6a4ed05cca16f0537d681232cb5842dddbc93552b4e8ba8a9a3b849cb7d7bdef53d4f277a76e8f2b534b330fe94b6e2a3abd00fd3b4040e7814730f0c0648267e3d938c4934b44cce9ccc47b897ca94c9ebd905a33827677b751fae257a3f0ac2bf825a3711e41783e7e0990dd74864444617d5054a5960554285d32eb35f0db9b376231516dc5282cee2b97281b647d78b1535f12aa032a9e28f3dff906cad60b4483499fe081f108ee47dac712d845f2b622f5123e402ceeda2a2b4b09c3e77eb1cf6010d2af76ea9be1659e25d227d3566360eaf8ac48751b9c80202282f4e9e541b78e8d6a86ea44b7671cf452ad01a97d40d3a72f672c5b42e51802e44d9684903cc72f6e91a59794a03ea6f53aca9247a0e894ca0ce0189c4cfabc2545db4820bb3d8cc950de757570206713a5dba8e70e1e1dfd28d6ac01222a38fe0f12e9b9f3f2d56e27b02ac34c1d5132833cbd825a4b854e87b7c23b5879f2d536f0b8b1383c847fbe86de5090bc22f26746262d52f7aface62d40f1a82b87d8b252d03d9ceb22be071d3cc71002662ea80a8293d88098037dec7801eed5f85d22065574ee21162381222716396951aa27c121eb4db6234249ce641d634e57e696d58c62ccdbbea5bdfa760501e3a0a16623803779637f124f6b85574e6244d95cdd3e920d795eae03c54601a2e1274d2276d2441731536106822b715c6f0173c697c24c772b82ef4d39cea4a10b9a5ba2109dd5c0c413c08dfedb5a3999db771bce7a7f09f35e48b2d72166bb072d5c079229d3e729b3a82d0bdf0ac538bf4198835c38a6ba17ebaeff6ebd3355352d1a81b3bb9dd706be08402477b5a86d1facd20d0a4c713bd8cbffda0506a0bcc0a100361b6610e71f19fa1b6b08786a12463c489dd4b176daf0215050eaf389a2036f63cd78ed3c0a4f5e4e2d878484ce128133573723d564ed3ab0f38b5b8f34ebdf96bfb860979ddad32d097ded59fdd62ff6d55c6c079b80c7d7f4fad7c4ac3b0842dcc77271b3f9d657b8e037d48c3cad85b198e738973f3d971c8f69d6c2421e208db4b77c893c2cc915fab9ac0d48770a1be407b34479e4d9f6487f4747667cbac75ea56bbfce2763f9ffbadf71ca53e00de6a3638aab19e030f85f6c035a6221db69f29f96cdce63a186ed8a1235fcd3e16264944a9271c33627c98b5c533200ad0c5de98f07fa4253c5363972b39f21f082cd35a8639fe4d4a66c9da7da3f19bde2d13b48c8d48c16ffb2d6029bf930f148e2da47fd8f6f9b9b6f8c1ffdff2346abe2be9fb1ac22727b13f198c4fd1957b04e5b53ca7a118a3ad8b7180ac0139d92cc726d2cbf76097d7e30c635a480ceec4ce05614a933bdc590dfc143fc4d49cd0c08edc8c1c9801072b0770f0b45efc7ea2088c1369d77bb56668c86cf316e4220faa683b73f75f277b6f8d8a7831eaecadb0dbb5342f28f5c63c3de7a5257d2075a0d12de023d44a065de1ce2ef77930d4b29aa442c65dd905c35955a8b596165b5b2f630712ea34d38b8d089043f54c890a36c03c01682be2aac891830fb12b5d5aaccbde31fa5293d41f4257e77c88f3d36b8d6aef36f6f91db835164e2b4968dc3a73eea1e6e81d3b96654be23a14129ee1fea3b471e1d1eed94c5dd181b0c9af753cc9a34c44ab124a34a27ca00c3ce5d8f205965d7a0310c2a88b8b72ec70c53a3fee1d732a7e853fa07ca600edea53e5cf6b47cba2a4ed1c66bbfe6dfd36bfa4030143c263fb325fd8c9a220b43d6f90f1912a473aa14b3d662d8bedcf3f47fd71f6424fc4014791dca1678921795d7e134aacad171bca2d86f674b8f4668b5e0d86cb0dfe95a39e3c54fbeb3d9a2dad4eac2fd15194c90e66fcfa6ea14c144f001fd1cadb22c98d32b1c2440a9fce4e08d5d00887a0f7ac6f116b8f6d151dcc02529cad03ecb631383242502d5fa4f8fa6b43b9eec7093ceaeecdd2d343efb5e1cc09eae4ed16c3f735f5b86281128ed876fd27dda853e1b9830181640d7f7ac839bc224a82f54da78a73f8cbf472d691702b1fe5fa71456a3e72417ea42d647d1842e9c1122f4ab4c793b74547f6fe388c39833d05fc28313c5bd414a176e02d91da43f903ceadaf76d08d9ba1b5989bfcbafabb24fa11510d34604b9d39895319b9db86532e9b0ffba98fd2857bee9f8a9aefda3681f492157a9350474b287674e18490237f257693e43886f9c7d5f14963251bfaa9e26311f1cbabcc76bac9e6ae36fc5904bac2c5f97911a9d927b9d79a863043eb35814995e553b4070ac20035f884f72d8225a1fc583c1df0d301327a917340299ed75db062c5ce30d2d81e408dbf4ba8d86ae167fea685de93f7a82ae3f0a8476b6cadcc0c14bdb17696eb6131fa69355c72fd784e0b6e443fb7caa2e805f44a86d1b73c9f5626a13eb5c36a7db2b919b39d52bbfb345210bace6c4e38e2dfcb646102f2dc20228269ecda7321a1799c617413766fe7b2837583e103bb14e7dc1a0a81f880574a16f2613e49ffa6ce6e2fb3cead409d30762b8fe97634df9715d6269b6d96ff97c0baddbcfec56e607522703916687ea32c1b94bd3f84297e40e6e17401e26e459ecbd7350cc6204e5a81ac0531a5091a5c674cf42ee8d848976be74db2c9b858a74a1dfb265e8778d5c7d7e9d2b75eb1321b546fae4c134f24b4789959f0bec77bfe59cc40792716de65f2d248edfcf37b7f7e08ef912189590fd56550094abbd4deb3c8720505ba35791c2ef1d6abe20cb94b66f4e9d2f216a56ddd8ce563283b47925377a5d4bc2683b9130869fefb1e9baaf87c5945bcf504a16a248e3f2407f287d8563226f9a2c29957bb545e32b15be0ea0151c9f45b56e47695db7d662d4bae40044d3d093584a57e7ac375ca21a7638d5d2ef91814d96e260f2ce5ca95f343d1d337460ee2c99dba53b3ddf595f94716403bca6a89a65fcc0d2a0af5845aad6e013987f72bef5cb1029c8324dd39c79230c8eb1a5fab8ee0667d4242a4b08105d0b43c06e3a66691dd844f344746d4b7ea0195096c68dc517d22feaadaa88f36f33e7092749a485dd2dfea869d6c47bcf15b73d0f94277e39ef3b973ad45652d3eebea26441cd5cfde61b223e28db64d4ea349f0f0b7c3b213458ab3edceba805e79e000753b466935c90254fb3c790de5ebe5fd5afee06976cd382fcef7baea853ca4ee9460e50968cb131eb8ff9ab1bb47da6d640e6f6563cf120fa94746411cfcbaff50cd535dc4a049c1a5e516512809428890073ce11dd1e91708d66bce0b10e713cbb12c2922447ef585645f9109b616127343cc909773d65f5f82d3bb37e1b566ccfdb9d53bf4dd8d6a083bb02916206412367054325ae79a173f781091d7965a4a13793c2004adb96d339af739af4c51dd0a42d427dc1c0fee2403d27d59610a2cdda1f2bafbc62bc56e66cfbb1cbdb178550f4a404125885175a2548312aacd51a548a988a70e16dbf9399315173382922c69879896ba5a6e0089dcacd61b1fb8c7a1956972f6bdcf413d68cd72c805b5edd59f5af3917e525509ba860c01c4634cd1295773c0b3ae4cffa97ca7c5fefd6ac53512b387e7fd6bc80db7c10110e7803d613b0fb21ec9f4ad3b2aefeed0a5beabe04228c9850838398df6fcc6690b491a444b1bcd08b3b2cee72750ccdd176d", 0x1000}], 0x4, &(0x7f0000002bc0)=[{0xb0, 0x84, 0xfffff3b7, "88e5f6a687ba406cd50c01d510bcb1734eb1b95a0bd9194840fe672056e9b7b4eb18a82408427accd53e8befaa33b83a896806cf43acb1046d2f80be2e1b7bc5958805d2b109363b430e47c4eab08ba9ae1dc4f04a8672dc68084314e9a0d40712e7c46603c21907d21c6e2c0979e086af26cbeab3c75cff0948521e1729f8bd470ce7ca01a043b874de41e0878794181eb8681cd0665e7831a73e"}, {0x40, 0x29, 0x8, "ea9a12fa16faddfb07da306f1d11e66ef8147a3e9466ce091bd239a397c5d76975b3b916b001b2f1c8aa3351a7c6"}, {0x78, 0x84, 0x9, "0cec28e0aa457cc5c282451e78dcf92067ecb29112834b9bff6d9d5424cc3e613efd76851dca80218582bef8fd9f9e14c74472fe58f7064fcf018289d1c60126dd100e38effb7b00f0ef6a714a41f0b05d2599d1bc02bf2ddead48d7e5269fba5c60e1"}, {0x38, 0x119, 0x8, "45923171e80b5c085e643234ddf17324c3ae90e76961e5a2fa515b52c223067e29a8261f"}], 0x1a0}, 0x20040800) 8.091512727s ago: executing program 5 (id=2639): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r2}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 7.92951988s ago: executing program 2 (id=2640): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000100000001000880000000ffff00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.408262924s ago: executing program 5 (id=2641): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x4e}, 0x28) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50004"], 0x11) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.534531579s ago: executing program 5 (id=2642): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.53406541s ago: executing program 2 (id=2643): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0xfffd, 0xb, "3eccd25569e20900"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) 3.07523305s ago: executing program 2 (id=2644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0x1}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x6, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x4800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 3.07449348s ago: executing program 1 (id=2645): socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000880)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rY\xac\x05\x00\x00\x00\x00\x00\x00\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\xcb\xde\x0e\x1aa\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x19\a\x00\x00\x00K\x95\xcd\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\xf3I\x00X\xab`N/ LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJD\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\x06\x80\xa0;\xff\x00@f]J\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\r_h\x05\xcd\f!\xf5\x9d\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\x00\x00\x00\x00\x00\x00\x00\xca\x80\x96!\xde\xb1\x16\xf6Kq/\xecOA\x88\xa6l\x9b\x8e[7\xb4h\xd7\x11\xa4\xd5\xe7\xf9q\b\x82\xa5\xa9\x8e\xf6\xf0\xf7\xf5VGc\x9e\'\x9a\xfd\xcakd/[~\r|\xa2\x13h\x98\x7f\xaf99c\'<\x9d_{\xa1\xaf\xcf\f\r\xc5}1\xa7\x84[(\x92:\x92NR\xa6.\xd6\xfa\xb6\x12\xea`\xf3\x92\xbbP>\xa4\x10\x7fp\xd0-\\\xde):h\xd5\b\x91m\x93\xe4\x9a\xd2\xa0`\xc9\xdc\xde} \xf7\x8a\x84\xe5\x04\x1c\xb2\v\xee\xfee\x9a\xce|\xda\x9c/2\xa1m\xb2]e\x15\x06Qc\xd1x\xd3\x06\xbb0ik\xeb.\xcc@\x85mX\xee\xbd\xb6\xd8&\xa2\xafS*\x80:\xf4R\xa8}:\xccL\x97\x8c\xec\xf6\x81\xf1\xff\xff*\x1f\xedW\xb3\xa7#\t\x9b!>\x88m\xc7=\x9a\xe6o\x93\x1f\xbbQ\x06u\xd8\xbbu\xec\xf1#lgu\x8f\xb5\f%\x06\x00\x7fU&\xe2\xae\xda6U\x7f(f\xb9\xb4hi\x1dS\xcc2wb\x98\xa1G\x87\x17\x15\xc8\fy.f\xbf\xf1;\xbdH.\xb1c\xed\xcc\xeeT@\x00\x00\x00', 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x392fc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.562388901s ago: executing program 6 (id=2646): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xbda8ee4cc7852c63, 0x204031, 0xffffffffffffffff, 0x42791000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.562193772s ago: executing program 5 (id=2647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d506330080"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.227800129s ago: executing program 5 (id=2648): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x7, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x7, 0x4, 0x10, 0x4], 0x3, [0x2, 0x5, 0x7fff, 0x56, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x3, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x2}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x4000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x108, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0x1, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.227247069s ago: executing program 2 (id=2649): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') write$cgroup_pid(r0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001e000103020000200000000001000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a23958000000000000", 0xe}], 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000340)=0x8d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000001380)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311a31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80c085c7562804230489274831b2c17dccccc523ada66a46aac1ca8dfe14e8f7ad8a907a92741729bd7494e9b47303c140ad", 0xae}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c", 0xa0}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xe09}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.385368658s ago: executing program 5 (id=2650): ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xa3, 0x0, 0x0}) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000440)=""/33, &(0x7f0000000480)=0x21) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000004c0)=0x2, 0x4) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0xee00, &(0x7f0000000500)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x9835, @mcast2, 0x1}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000580)="5687", 0x2, 0x24048081, &(0x7f00000005c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000bc0)={&(0x7f0000000b00)=[{&(0x7f0000000600)="c6455a75347b3a6142018b982bb1b83d1753b3d9", 0x14}, {&(0x7f0000000640)="5957e0e7284a4fd4e574675e9cfd7bd437a555836fcd2d9d8f0b7a2ca9cee201451ee9e2c8b82f318c330f53633146ba9013c9aee059013bc72f8f68648c12693fc53651b7eebddee7", 0x49}, {&(0x7f00000006c0)="e1b0b70af162649f1723ae81aa3d093c2649aa32c060e8f1f73d157a987491cdc5c5327e6897e78e58d954830f3d0350a22f45d960ebfccf04716892f6d37a6cfe4401b774adde78b8ee5107887ffec6e31e1299b28a217417de56a435aeb9d5c85e0322e98e29509af7bcdb0c3f00bf257f432bd2d2816e1cdef1b4bb80083ed4e15f848524553163773958d86080df2225d810e2d2df77f79f527c58394494335b5468c22bdf633a3591ae01d3f40a7567bcb0e5fdc4e6be7abfadafde7377b4fe114e5330146e38", 0xc9}, {&(0x7f00000007c0)="13d91e6c1cc5dd2089bd0c7ac6869574f41b3acb5e1f42c7caf4f5270f7dc69b19b5e3fbd3f2569609eb02aec65cc5eb6b6cbdbeb3908bf272268254b993123b7a0658e1ab9b877055089bdb6ab8d13d4a61d67e56cd2bdbf77eea819a6f6d16f594b29e1584637b8a0d305f9e7dd4373e19ce3a1dcb7b8b3f61b69a40507337d01356845f8a149786ef2a7bc982c39c8697891f8ae98babe087a1de5b41ba18beb0c085e9f33da834ede87eeef652758e2b69baf1f9d75eed20da91ad6c8c53823524ba8d674f8e35ffe134812b58df11925223", 0xd4}, {&(0x7f00000008c0)="89d4f3363f2de6d13b9b1b7e1cf8ca79d7a2066e1ac72ea8e9ec07c2ae0da4487b0ca5a3e692b80481c25ae87f5827266059a8364fea06be7bbc367e07981a6103b8495a29b69e155d2e58c6d8f37e593de24411eada625f1058304e2cb7d90a779bd978140302be1f97f292d9e54a530eab9e0968f7b0e265f4de266fbf15aa8c0ba997556049c58e804d38ce71f9e161b23ac9a1f94a04e716cf5b3ff38f53bb10b8a0b89c66ce8232c73034ba5175b26d88fd2f5a89b7dc3834179405f9ea8f42", 0xc2}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="1c4c0bc878991c71bb538c507d854a1b71a6401c7c4158437961b2917b0ce936d33849e9f0df0316fe8226fda222fe8f1ec33b13", 0x34}, {&(0x7f0000000a40)="d333e05e0f59354196b24d3ac237a0b249db74dc9fa703fa1fa10586f4c97199c24a26", 0x23}], 0x8, 0xfffffffffffffff5, 0x0, 0x3ff, 0x0, 0x3, 0x5, 0x10000}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) sendmsg$kcm(r3, &(0x7f00000013c0)={&(0x7f0000000c80)=@nfc={0x27, r4, 0x1, 0x7}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000d00)="64c1129a0084302f764ecf967c8201ac1326a4b3668f411de66fb977e82fe31fcc4192d4dca192e26d619a259d2490f737c7d6f36f73b868ec37d95270ea590843a9dba1bab7640377e9dad7377bd1bdf348a1045eb1d9ef29c19fbb9caa22b67cc030acf4cdcb3197c9bc53", 0x6c}, {&(0x7f0000000e00)="e98cc5d777ae437b9d939aa16f9150d0ff135d305b624a0608f52ca884dbaa83d1b6cf55beee4aa1264f6f8234ba77cae186feb393ca0c1e13884d6d0c2d5fd0d78773b4b71841181f8f43a82db9215548494b9799183c194d5b4d75bd039ec1eeeaa3236eac69de08f26fb0cbfbe14dea6acd7cd38fdb7bf3c59199bb7b02fa10d8795a7a60dcb784b57cf8d5ac230a20af", 0x92}, {0x0}, {&(0x7f0000000fc0)="543751ee15f349c1c932c9d2908c5a7b068d86806bea44bd15bc1bdd8208def8f2b8fbfb9fd7937677ee77a63144808b26b0ab879f9c6096d086bd0aaa150856aef1651191958076cb0d170b75761bde77d192ca1f36368429b20dab0e5e18fca0e955c058b329", 0x67}, {&(0x7f0000001140)="7a15af6591d567ef388f8eb47a0e4d2c92b2d4a7757892dbe68a6c58d6222f3bf2ce0827e4efd0953e538817809c2f0b304cbd2e5a233004b509b450b23c48a914b8d77a9c8d4184b22a8e69ca050078", 0x50}, {&(0x7f00000011c0)="654e9ac610b2c5a5f272b589ab0696dddd9e1c801bf3e383b735cafe0d74bed72eabf89caff6d8fe45b2caf3cf311e2e8ad6038e6f24e15a0fbf842db16f61fbea270439cb069adb5416286328a00db797d996fa1514a6de6d276d25c0b285bc9f09713f22ca9f08e8fe78b08a746d8ebaf128cd", 0x74}, {&(0x7f0000001240)="41a22845afc4b07d8dfe5bbe02e07d050b3f2106f1eb558b82985e34fd96b11f15574bc91ccffd5631345b7affca853573cd5b66ec3610e6a7", 0x39}, {&(0x7f0000001280)="42b3a63880b68bfc4cca97056558936a0b960b7bf51f2ee899bc26094c9e13acdfe6133778824b20e3f86dbba099b43e6ad723c5d4f401c45a45c74c2a3f36391c22bdb104532746b2bf988b5f09be1c1968355eb12e062b9cd0ffb4401f7a", 0x5f}], 0x8}, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000001400), 0x88003, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001440), 0x400, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000001640)=0x2) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000001680)=""/105, &(0x7f0000001700)=0x69) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x17) sendmsg$kcm(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001880)="b8759cc0d6349398c74b90cb48b8240e0ecf508a5765d14786568c3e2e323aa1845beabc18ccede34014d6107e38cf726f6277f3460f77f1bcce3caf9cd9c35af9c4acfb73fd1e699ff39a6340cb9ebee7fd27e0875c4aa1c49046ff1d68b77c3e1967459de2e30ed1b3247815a2a65f0f3724459bc5655c98aa5ff5902701967264ddd61eb846a49afa16577a8dff03da32c92a9615f7cb8e8433f503d7ca6a3f6e5e75e7", 0xa5}, {&(0x7f0000001980)="704dc844b658924028fe0cf2862d3f3fbf0c4b8cb8b9de40196b0a51bfda6f6b31819f47f3e78b8e519ed2696ac0e70a210ee4f0726cc92517e0685e72f9ab2208983f4c22acd21bd1a68846564ba8c62879784cf5c70d50c694006a9c33ce980ffd7d15329095a772995f1acbe2b297036aa0b4b468993dd9a1d9893bb1ab67d668450fd00c", 0x86}, {&(0x7f0000001a40)="ef15ab1a3d69030d342a6be0197cefcbbeae54311756a5e1372773d46659a85b6525b83d61f50f4b240b53fbe9fe5cf71c6afc45093514b54fd87d18526d87d896b31621945675e4b87295ccf83ec30e98fc7470e4b2425fce09104d7657c6b91cd6e2a7c706f4a56a8f8078aec6a380d6cfba8153df2d024bcb25a3db32a3be608207deb57a854ea007d2dad3a7001515fad551fbc3e8a914751cf6615c6acc8700e4ff5bf54a071323a078a8e238a17c4b819aba55b0239c3db8dd868e02bba71743fffb374c55740a781c868384543cb6658ef5a91a7169b71975ad0253a54c13cebef0b160a58738541bb3f053d24590e050e5ecb9", 0xf7}, {&(0x7f0000001b40)="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", 0x1000}], 0x4, &(0x7f0000002bc0)=[{0xb0, 0x84, 0xfffff3b7, "88e5f6a687ba406cd50c01d510bcb1734eb1b95a0bd9194840fe672056e9b7b4eb18a82408427accd53e8befaa33b83a896806cf43acb1046d2f80be2e1b7bc5958805d2b109363b430e47c4eab08ba9ae1dc4f04a8672dc68084314e9a0d40712e7c46603c21907d21c6e2c0979e086af26cbeab3c75cff0948521e1729f8bd470ce7ca01a043b874de41e0878794181eb8681cd0665e7831a73e"}, {0x40, 0x29, 0x8, "ea9a12fa16faddfb07da306f1d11e66ef8147a3e9466ce091bd239a397c5d76975b3b916b001b2f1c8aa3351a7c6"}, {0x78, 0x84, 0x9, "0cec28e0aa457cc5c282451e78dcf92067ecb29112834b9bff6d9d5424cc3e613efd76851dca80218582bef8fd9f9e14c74472fe58f7064fcf018289d1c60126dd100e38effb7b00f0ef6a714a41f0b05d2599d1bc02bf2ddead48d7e5269fba5c60e1"}, {0x38, 0x119, 0x8, "45923171e80b5c085e643234ddf17324c3ae90e76961e5a2fa515b52c223067e29a8261f"}], 0x1a0}, 0x20040800) 1.266847741s ago: executing program 7 (id=2651): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r2}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 130.423676ms ago: executing program 7 (id=2652): io_setup(0x81, &(0x7f0000000400)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b63481fd1b303f8eab92824c3c8f14ea288fea8e2fc55deae3a12b0748e4407a128633ed8f51eb6ae3bf0299220988b602", 0xc1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000000)={[{@stats}]}) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0xce, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 81.349068ms ago: executing program 1 (id=2653): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1000000, 0x5, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x4, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fe800, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x8, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x2, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x4, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xa, 0x2}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a5, 0x3, 0x6, 0x7, 0x5b8, 0x2, 0x6, 0x3, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0xfffffff9, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x1e, 0xe, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x8004, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2d, 0x0, 0x2, 0x81, 0xffff, 0x6, 0x10000, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x50000, 0xfffffffd, 0x3, 0x2, 0x89a, 0x100, 0xd3, 0x2, 0x1, 0x3, 0xfffffffb, 0xe253, 0x6, 0x20000007, 0x918, 0x4, 0x0, 0x8ea, 0x5, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5e5f, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x41, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x0, 0x1fb, 0xb, 0x400, 0x7f, 0xbc, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0xa, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x28, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0x101, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000000)=""/41, 0x29}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000440)=""/82, 0x52}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 0s ago: executing program 2 (id=2654): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000100000001000880000000ffff00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kernel console output (not intermixed with test programs): [ 686.989483][ T4175] usb 2-1: config 0 descriptor?? [ 687.008289][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.032590][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.067218][T11852] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.095482][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 687.120696][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 687.149538][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.156686][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.201363][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 687.213778][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 687.225217][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 687.239780][ T4268] usb 6-1: Using ep0 maxpacket: 16 [ 687.252169][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.259341][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.309192][ T1109] usb 2-1: USB disconnect, device number 40 [ 687.312761][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 687.343467][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 687.370988][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 687.385970][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 687.394259][ T4268] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 687.405476][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 687.413978][ T4268] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 687.415127][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 687.441358][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 687.452716][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 687.466411][T11852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.481466][T11852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 687.494882][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 687.506323][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 687.524643][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 687.560959][ T808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.602256][ T4268] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 687.621032][ T4268] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 687.635693][ T4268] usb 6-1: Product: syz [ 687.650446][ T4268] usb 6-1: Manufacturer: syz [ 687.655241][ T4268] usb 6-1: SerialNumber: syz [ 687.680845][ T808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.721394][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2234'. [ 687.758815][ T808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.776402][ T26] audit: type=1326 audit(1783584585.082:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec13841e59 code=0x7ffc0000 [ 687.800640][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.831094][ T26] audit: type=1326 audit(1783584585.132:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec1380268e code=0x7ffc0000 [ 687.855301][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.862014][ T26] audit: type=1326 audit(1783584585.132:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 687.886090][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.919431][T11918] loop2: detected capacity change from 0 to 7 [ 687.921271][ T808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.951209][ T4179] loop2: [ 687.954236][ T4179] loop2: partition table partially beyond EOD, truncated [ 687.954837][ T26] audit: type=1326 audit(1783584585.132:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 687.985516][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.015030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.022888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.034701][T11918] loop2: [ 688.038323][T11918] loop2: partition table partially beyond EOD, truncated [ 688.042695][T11934] device syzkaller0 entered promiscuous mode [ 688.047064][ T26] audit: type=1326 audit(1783584585.132:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 688.078734][T11936] overlayfs: failed to resolve './bus': -2 [ 688.084895][ T4268] usb 6-1: USB disconnect, device number 10 [ 688.091376][ T26] audit: type=1326 audit(1783584585.132:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 688.115504][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.125366][ T4201] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 688.135672][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.168278][ T26] audit: type=1326 audit(1783584585.482:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 688.219512][ T26] audit: type=1326 audit(1783584585.512:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 688.445184][ T808] tipc: Disabling bearer [ 688.452452][ T808] tipc: Left network mode [ 688.469842][ T26] audit: type=1326 audit(1783584585.772:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 688.495285][ T26] audit: type=1326 audit(1783584585.782:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.2225" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec13841aeb code=0x7ffc0000 [ 688.537238][T11051] Bluetooth: hci2: command 0x040f tx timeout [ 688.756766][ T4201] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 688.987053][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 689.057075][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.151534][T11961] IPVS: length: 105 != 24 [ 689.565529][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 689.633764][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.801231][ T4201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.815854][ T4201] usb 4-1: Product: syz [ 689.820172][ T4201] usb 4-1: Manufacturer: syz [ 689.824792][ T4201] usb 4-1: SerialNumber: syz [ 689.825609][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.867540][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 689.876726][T11852] device veth0_vlan entered promiscuous mode [ 689.918585][T11852] device veth1_vlan entered promiscuous mode [ 690.055347][T11968] device syzkaller0 entered promiscuous mode [ 690.069910][T11852] device veth0_macvtap entered promiscuous mode [ 690.090934][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.111970][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.189376][T11852] device veth1_macvtap entered promiscuous mode [ 690.209805][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 690.235328][ T5493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.336332][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.348278][ T4201] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 690.389719][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.432813][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.451477][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.467847][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.478814][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.489207][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.516176][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.528206][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.539534][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.560342][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.571346][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 690.588307][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 690.616969][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 690.646307][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'. [ 690.673224][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.693244][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.733725][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.766539][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.851172][T11990] rdma_rxe: rxe_register_device failed with error -23 [ 690.859640][T11990] rdma_rxe: failed to add bond0 [ 690.871813][T11990] dlm: dev_write: no op 0 74000000000000 [ 691.499497][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.512245][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.522484][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.533192][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.543643][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.554850][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.569075][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.576360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 691.636430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.669955][T11852] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.711672][T11852] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.753412][T11852] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.787651][T11852] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.854602][T11993] device syzkaller0 entered promiscuous mode [ 692.144399][ T5265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.146740][T12002] device syzkaller0 entered promiscuous mode [ 692.169347][ T5265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.287937][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 692.288210][ T4268] usb 4-1: USB disconnect, device number 66 [ 692.349130][ T4268] usblp0: removed [ 692.411096][ T5265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.435166][ T808] device hsr_slave_0 left promiscuous mode [ 692.435484][ T5265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.465961][ T808] device hsr_slave_1 left promiscuous mode [ 692.491522][ T808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.529350][ T808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.570083][ T808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.603789][T12010] overlayfs: failed to resolve './bus': -2 [ 692.621057][ T808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.649454][ T808] device bridge_slave_1 left promiscuous mode [ 692.664615][ T808] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.683122][ T808] device bridge_slave_0 left promiscuous mode [ 692.707762][ T808] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.761139][ T808] device veth1_macvtap left promiscuous mode [ 692.778811][ T808] device veth0_macvtap left promiscuous mode [ 692.784969][ T808] device veth1_vlan left promiscuous mode [ 692.795828][ T808] device veth0_vlan left promiscuous mode [ 693.035009][ T808] team0 (unregistering): Port device vlan0 removed [ 693.046720][ T5004] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 693.081509][ T808] team0 (unregistering): Port device team_slave_1 removed [ 693.098565][ T808] team0 (unregistering): Port device team_slave_0 removed [ 693.112326][ T808] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.125716][ T808] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.184299][ T808] .` (unregistering): Released all slaves [ 693.236628][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 693.286600][ T5004] usb 3-1: Using ep0 maxpacket: 16 [ 693.303972][T12021] IPVS: length: 105 != 24 [ 693.406937][ T5004] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 693.849651][T12030] fuse: Bad value for 'rootmode' [ 694.056724][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 694.440854][T12032] vivid-002: kernel_thread() failed [ 694.466929][ T21] usb 7-1: config 0 has no interfaces? [ 694.472746][ T21] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 694.584836][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.723553][ T21] usb 7-1: config 0 descriptor?? [ 695.823310][ T5004] usb 3-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 696.367415][ T5004] usb 3-1: string descriptor 0 read error: -71 [ 696.373673][ T5004] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 696.426719][ T5004] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 696.493227][T12049] rdma_rxe: rxe_register_device failed with error -23 [ 696.501061][T12049] rdma_rxe: failed to add bond0 [ 696.510246][T12049] dlm: dev_write: no op 0 74000000000000 [ 697.313979][ T4268] usb 7-1: USB disconnect, device number 2 [ 697.385128][T12057] device syzkaller0 entered promiscuous mode [ 697.391464][ T5004] usb 3-1: can't set config #254, error -71 [ 697.417332][ T5004] usb 3-1: USB disconnect, device number 62 [ 697.461207][T12061] overlayfs: failed to resolve './bus': -2 [ 697.799003][T12070] device syzkaller0 entered promiscuous mode [ 698.014437][T12078] binder: Binderfs stats mode cannot be changed during a remount [ 698.144109][ T4230] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 698.254579][T12081] IPVS: length: 105 != 24 [ 698.536979][ T4230] usb 6-1: config 0 has no interfaces? [ 698.542516][ T4230] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 698.577916][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.623045][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 698.634097][ T4230] usb 6-1: config 0 descriptor?? [ 698.696728][ T13] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 698.906558][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 698.967407][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 698.972713][ T4230] usb 6-1: USB disconnect, device number 11 [ 699.066767][ T21] usb 7-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 699.083576][ T21] usb 7-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 699.097596][ T13] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 699.125370][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.181925][ T13] usb 2-1: config 0 has no interface number 0 [ 699.205674][ T13] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.249933][ T21] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 699.274201][ T21] usb 7-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 699.446687][ T13] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 700.934501][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.943032][ T13] usb 2-1: Product: syz [ 700.953080][ T13] usb 2-1: Manufacturer: syz [ 700.957960][ T13] usb 2-1: SerialNumber: syz [ 700.974578][ T13] usb 2-1: config 0 descriptor?? [ 700.979709][ T21] usb 7-1: Product: syz [ 701.018315][ T13] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 701.028240][ T13] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 701.051068][ T21] usb 7-1: Manufacturer: syz [ 701.052424][T12107] fuse: Bad value for 'rootmode' [ 701.055793][ T21] usb 7-1: SerialNumber: syz [ 701.226689][ T13] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 701.266768][ T13] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 701.292886][T12112] device syzkaller0 entered promiscuous mode [ 701.321594][ T4230] usb 7-1: USB disconnect, device number 3 [ 701.411326][T12115] rdma_rxe: rxe_register_device failed with error -23 [ 701.419424][T12115] rdma_rxe: failed to add bond0 [ 701.429182][T12115] dlm: dev_write: no op 0 74000000000000 [ 702.132146][ T13] usb 2-1: USB disconnect, device number 41 [ 702.506591][ T13] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 702.562087][T12117] device syzkaller0 entered promiscuous mode [ 702.588416][T12128] device syzkaller0 entered promiscuous mode [ 702.592380][T12131] binder: BINDER_SET_CONTEXT_MGR already set [ 702.638404][T12134] IPVS: length: 105 != 24 [ 702.643792][T12131] binder: 12130:12131 ioctl 4018620d 200000004a80 returned -16 [ 702.776060][T12139] binder: BINDER_SET_CONTEXT_MGR already set [ 702.857759][T12139] binder: 12138:12139 ioctl 4018620d 200000004a80 returned -16 [ 702.981323][T12149] fuse: Bad value for 'rootmode' [ 703.211790][T12156] ±ÿ speed is unknown, defaulting to 1000 [ 703.366690][ T4201] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 703.636733][ T5004] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 703.756828][ T4201] usb 6-1: config 0 has no interfaces? [ 703.762358][ T4201] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 703.886563][ T5004] usb 4-1: Using ep0 maxpacket: 16 [ 704.240536][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2275'. [ 705.126679][ T5004] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 705.232669][ T5004] usb 4-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 705.298767][ T4201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.377625][ T4201] usb 6-1: config 0 descriptor?? [ 705.396685][ T5004] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 705.406726][ T5004] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 705.415080][ T5004] usb 4-1: Product: syz [ 705.419697][ T5004] usb 4-1: Manufacturer: syz [ 705.425567][ T5004] usb 4-1: SerialNumber: syz [ 705.726948][ T5004] usb 6-1: USB disconnect, device number 12 [ 705.740731][T12159] loop2: detected capacity change from 0 to 7 [ 705.780691][ T4179] loop2: [ 705.783804][ T4179] loop2: partition table partially beyond EOD, truncated [ 705.813179][T12159] loop2: [ 705.822753][T12159] loop2: partition table partially beyond EOD, truncated [ 705.840139][ T13] usb 4-1: USB disconnect, device number 67 [ 706.382719][T12193] rdma_rxe: already configured on bond0 [ 706.392970][T12193] dlm: dev_write: no op 0 74000000000000 [ 707.166229][T12196] IPVS: length: 105 != 24 [ 707.358105][T12199] device syzkaller0 entered promiscuous mode [ 707.516675][ T4201] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 707.677900][T12207] device syzkaller0 entered promiscuous mode [ 707.786728][ T4201] usb 6-1: Using ep0 maxpacket: 32 [ 707.906902][ T4201] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 707.936590][ T4201] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.995564][ T4201] usb 6-1: config 0 has no interface number 0 [ 708.015472][ T4201] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.043648][T12216] fuse: Bad value for 'rootmode' [ 708.227551][ T4201] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 708.248824][ T4201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.263454][T12223] binder: BINDER_SET_CONTEXT_MGR already set [ 708.279800][ T4201] usb 6-1: Product: syz [ 708.289948][T12223] binder: 12220:12223 ioctl 4018620d 200000004a80 returned -16 [ 708.297909][ T4201] usb 6-1: Manufacturer: syz [ 708.314096][ T4201] usb 6-1: SerialNumber: syz [ 708.343981][ T4201] usb 6-1: config 0 descriptor?? [ 708.376918][T12226] binder: 12220:12226 ioctl c0306201 0 returned -14 [ 708.432193][ T4201] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 708.502957][ T4201] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 708.696905][ T4201] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 708.750666][ T4201] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 708.941634][ T4201] usb 6-1: USB disconnect, device number 13 [ 709.292807][T12229] device syzkaller0 entered promiscuous mode [ 709.566521][ T4201] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 709.615678][T12240] IPVS: length: 105 != 24 [ 709.736708][ T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 709.769112][T12245] device syzkaller0 entered promiscuous mode [ 709.856623][ T4201] usb 6-1: Using ep0 maxpacket: 32 [ 709.898056][ T21] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 709.916258][T12250] device syzkaller0 entered promiscuous mode [ 709.926312][ T4201] usb 6-1: device descriptor read/all, error -71 [ 710.096745][ T13] usb 7-1: config 0 has no interfaces? [ 710.103300][ T13] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 710.126042][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.156750][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 710.188770][ T13] usb 7-1: config 0 descriptor?? [ 710.276825][ T21] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.311878][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 710.335599][ T21] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 710.349147][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.374852][ T21] usb 2-1: config 0 descriptor?? [ 710.381711][T12262] fuse: Bad value for 'rootmode' [ 710.491318][ T13] usb 7-1: USB disconnect, device number 4 [ 710.882951][ T21] mcp2221 0003:04D8:00DD.002B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 711.083296][T12242] udc-core: couldn't find an available UDC or it's busy [ 711.090662][T12242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.416603][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.591541][ T13] usb 2-1: USB disconnect, device number 43 [ 711.925375][T12292] binder: 12291:12292 ioctl c0306201 0 returned -14 [ 712.056662][ T5004] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 712.390599][T12301] device syzkaller0 entered promiscuous mode [ 712.416621][ T5004] usb 6-1: config 0 has no interfaces? [ 712.422154][ T5004] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 712.804068][T12305] IPVS: length: 105 != 24 [ 713.010731][ T5004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.027562][ T5004] usb 6-1: config 0 descriptor?? [ 713.218629][T12315] device syzkaller0 entered promiscuous mode [ 713.302945][ T4201] usb 6-1: USB disconnect, device number 16 [ 713.352332][T12318] device syzkaller0 entered promiscuous mode [ 713.436732][ T5004] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 713.676634][ T5004] usb 7-1: Using ep0 maxpacket: 32 [ 713.796662][ T5004] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 713.810284][ T5004] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.832059][ T5004] usb 7-1: config 0 has no interface number 0 [ 713.848741][ T5004] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.930231][T12333] binder: 12332:12333 ioctl c0306201 0 returned -14 [ 714.026594][ T4268] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 714.036628][ T5004] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 714.051808][ T5004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.060435][ T5004] usb 7-1: Product: syz [ 714.064681][ T5004] usb 7-1: Manufacturer: syz [ 714.076127][ T5004] usb 7-1: SerialNumber: syz [ 714.090252][ T5004] usb 7-1: config 0 descriptor?? [ 714.139488][ T5004] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 714.156573][ T5004] radio-si470x: probe of 7-1:0.35 failed with error -5 [ 714.286586][ T4201] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 714.356690][ T5004] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 714.369238][ T5004] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 714.406772][ T4268] usb 2-1: config 0 has no interfaces? [ 714.415603][ T4268] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 714.439837][ T5004] usb 7-1: USB disconnect, device number 5 [ 714.449184][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.466809][ T4268] usb 2-1: config 0 descriptor?? [ 714.481487][T12341] IPVS: length: 105 != 24 [ 714.566652][ T4201] usb 3-1: Using ep0 maxpacket: 16 [ 714.766728][ T4201] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.512900][ T4201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 715.520707][ T4201] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 715.536803][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.560289][ T4201] usb 3-1: config 0 descriptor?? [ 715.577258][ T21] usb 2-1: USB disconnect, device number 44 [ 715.656963][ T5004] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 716.250522][ T4201] mcp2221 0003:04D8:00DD.002C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 716.862781][T12335] udc-core: couldn't find an available UDC or it's busy [ 717.181902][T12335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 717.563855][T12359] device syzkaller0 entered promiscuous mode [ 717.626350][T12362] device syzkaller0 entered promiscuous mode [ 717.821993][T12370] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2319'. [ 717.886221][ T13] usb 3-1: USB disconnect, device number 63 [ 718.924637][T12390] IPVS: length: 105 != 24 [ 719.246590][ T5004] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 719.660775][T12393] ±ÿ speed is unknown, defaulting to 1000 [ 719.696571][ T5004] usb 2-1: Using ep0 maxpacket: 32 [ 719.846731][ T5004] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 719.865252][ T5004] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.884574][ T5004] usb 2-1: config 0 has no interface number 0 [ 719.906652][ T5004] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 720.126845][ T5004] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 720.143661][ T5004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.158550][ T5004] usb 2-1: Product: syz [ 720.172404][ T5004] usb 2-1: Manufacturer: syz [ 720.188766][ T5004] usb 2-1: SerialNumber: syz [ 720.239672][ T5004] usb 2-1: config 0 descriptor?? [ 720.276615][ T4175] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 720.278529][ T5004] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 720.340404][ T5004] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 720.342962][T12420] device syzkaller0 entered promiscuous mode [ 720.486696][ T5004] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 720.494305][ T5004] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 720.508522][ T5004] usb 2-1: USB disconnect, device number 45 [ 720.537681][ T4175] usb 6-1: Using ep0 maxpacket: 16 [ 720.606980][T12428] device syzkaller0 entered promiscuous mode [ 720.656778][ T4175] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 720.667736][ T4175] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 720.846737][ T4175] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 720.865328][ T4175] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 720.881609][ T4175] usb 6-1: Product: syz [ 720.896826][ T4175] usb 6-1: Manufacturer: syz [ 720.901469][ T4175] usb 6-1: SerialNumber: syz [ 721.066584][ T5004] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 721.066654][ T4201] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 721.116249][T12440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2335'. [ 721.212926][T12409] loop2: detected capacity change from 0 to 7 [ 721.282870][ T4179] loop2: [ 721.286036][ T4179] loop2: partition table partially beyond EOD, truncated [ 721.416707][ T4201] usb 7-1: Using ep0 maxpacket: 16 [ 721.455128][T12409] loop2: [ 721.458642][T12409] loop2: partition table partially beyond EOD, truncated [ 721.489322][ T13] usb 6-1: USB disconnect, device number 17 [ 721.562833][ T4201] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.577242][ T4201] usb 7-1: config 0 interface 0 has no altsetting 0 [ 721.583886][ T4201] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 721.633333][ T4201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.726998][ T5004] usb 2-1: Using ep0 maxpacket: 32 [ 721.747974][ T4201] usb 7-1: config 0 descriptor?? [ 721.846795][ T5004] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 721.855151][ T5004] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.865487][ T5004] usb 2-1: config 0 has no interface number 0 [ 721.872289][ T5004] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.950711][T12445] IPVS: length: 105 != 24 [ 722.056713][ T5004] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 722.107257][ T5004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.115415][ T5004] usb 2-1: Product: syz [ 722.130175][ T5004] usb 2-1: config 0 descriptor?? [ 722.146621][ T5004] usb 2-1: can't set config #0, error -71 [ 722.426980][ T4201] mcp2221 0003:04D8:00DD.002D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 722.427453][ T5004] usb 2-1: USB disconnect, device number 46 [ 722.469192][T12432] udc-core: couldn't find an available UDC or it's busy [ 722.546987][T12432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.084075][ T4175] usb 7-1: USB disconnect, device number 7 [ 723.292838][T12483] device syzkaller0 entered promiscuous mode [ 723.736902][ T4201] Bluetooth: hci5: command 0x0406 tx timeout [ 723.802754][T12492] device syzkaller0 entered promiscuous mode [ 724.296544][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2346'. [ 724.577060][T12498] IPVS: length: 105 != 24 [ 724.813095][T12507] device syzkaller0 entered promiscuous mode [ 724.966575][ T4230] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 727.226586][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 727.362427][T12520] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2351'. [ 727.456608][ T4230] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 727.466669][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.486049][ T4230] usb 3-1: config 0 has no interface number 0 [ 727.492583][ T4230] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.579919][T12525] device syzkaller0 entered promiscuous mode [ 727.736878][ T4230] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 727.758764][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.780869][T12536] device syzkaller0 entered promiscuous mode [ 727.799870][ T4230] usb 3-1: config 0 descriptor?? [ 727.836751][ T4230] usb 3-1: can't set config #0, error -71 [ 727.850567][ T4230] usb 3-1: USB disconnect, device number 64 [ 727.987433][ T4201] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 728.084484][T12547] IPVS: length: 105 != 24 [ 728.206431][T12553] device syzkaller0 entered promiscuous mode [ 728.256664][ T4201] usb 7-1: Using ep0 maxpacket: 16 [ 728.400959][ T4201] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.625357][ T4201] usb 7-1: config 0 interface 0 has no altsetting 0 [ 728.655256][ T4201] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 728.689202][ T4201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.749539][ T4201] usb 7-1: config 0 descriptor?? [ 729.273640][ T4201] mcp2221 0003:04D8:00DD.002E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 729.457266][T12534] udc-core: couldn't find an available UDC or it's busy [ 729.464290][T12534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.479929][T12569] rdma_rxe: rxe_register_device failed with error -23 [ 729.487727][T12569] rdma_rxe: failed to add bond0 [ 729.498478][T12569] dlm: dev_write: no op 0 74000000000000 [ 729.856713][ T4268] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 730.116586][ T4268] usb 2-1: Using ep0 maxpacket: 32 [ 730.236762][ T4268] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 730.365651][ T4268] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.448229][ T4268] usb 2-1: config 0 has no interface number 0 [ 730.607703][T12581] overlayfs: failed to resolve './bus': -2 [ 731.366731][ T4268] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.386598][ T13] usb 7-1: USB disconnect, device number 8 [ 731.536690][ T4268] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 731.552657][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.575443][ T4268] usb 2-1: Product: syz [ 731.581115][ T4268] usb 2-1: Manufacturer: syz [ 731.588707][ T4268] usb 2-1: SerialNumber: syz [ 731.608769][ T4268] usb 2-1: config 0 descriptor?? [ 731.673195][ T4268] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 731.707738][ T4268] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 731.876608][ T4268] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 731.891038][ T4268] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 731.916644][T12595] device syzkaller0 entered promiscuous mode [ 731.946325][ T4268] usb 2-1: USB disconnect, device number 47 [ 731.965577][T12594] device syzkaller0 entered promiscuous mode [ 732.183727][T12603] IPVS: length: 105 != 24 [ 732.329424][T12609] device syzkaller0 entered promiscuous mode [ 732.436648][ T4268] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 732.681680][ T4268] usb 2-1: Using ep0 maxpacket: 32 [ 732.761318][T12624] overlayfs: failed to resolve './bus': -2 [ 732.986802][ T4230] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 733.017090][ T4201] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 733.266641][ T4230] usb 7-1: Using ep0 maxpacket: 16 [ 733.326662][ T4201] usb 6-1: Using ep0 maxpacket: 8 [ 733.387253][ T4230] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.445624][ T4230] usb 7-1: config 0 interface 0 has no altsetting 0 [ 733.466889][ T4201] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 733.496292][ T4201] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.556742][ T4230] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 733.565833][ T4230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.596648][ T4268] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 733.604285][ T4268] usb 2-1: can't read configurations, error -71 [ 733.626507][ T4201] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.676507][ T4201] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.707236][ T4230] usb 7-1: config 0 descriptor?? [ 733.732556][ T4201] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.801119][ T4201] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 733.837929][ T4201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.935561][T12637] ±ÿ speed is unknown, defaulting to 1000 [ 734.041718][T12643] device syzkaller0 entered promiscuous mode [ 734.139563][ T4201] usb 6-1: usb_control_msg returned -71 [ 734.145338][ T4201] usbtmc 6-1:16.0: can't read capabilities [ 734.187558][ T4201] usb 6-1: USB disconnect, device number 18 [ 734.231320][ T4230] mcp2221 0003:04D8:00DD.002F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 734.433533][T12620] udc-core: couldn't find an available UDC or it's busy [ 734.474021][T12637] chnl_net:caif_netlink_parms(): no params data found [ 734.480294][T12620] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.486499][T12652] IPVS: length: 105 != 24 [ 734.534820][T12654] device syzkaller0 entered promiscuous mode [ 734.843506][T12637] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.882453][T12637] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.910896][T12637] device bridge_slave_0 entered promiscuous mode [ 734.933685][ T4201] usb 7-1: USB disconnect, device number 9 [ 734.961557][T12637] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.034644][T12637] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.050518][T12637] device bridge_slave_1 entered promiscuous mode [ 735.118327][T12637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.154043][T12637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.254127][T12685] overlayfs: failed to resolve './bus': -2 [ 735.386827][T11307] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 735.686713][T11307] usb 6-1: Using ep0 maxpacket: 32 [ 735.816832][T11307] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 735.880726][T11307] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.918398][T12637] team0: Port device team_slave_0 added [ 736.009255][T12687] binder: BINDER_SET_CONTEXT_MGR already set [ 736.015284][T12687] binder: 12686:12687 ioctl 4018620d 200000004a80 returned -16 [ 736.016622][T12637] team0: Port device team_slave_1 added [ 736.074233][T11307] usb 6-1: config 0 has no interface number 0 [ 736.080779][T12637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.098220][T11307] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.126581][T12637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.194548][ T4230] Bluetooth: hci4: command 0x0409 tx timeout [ 736.251708][T12637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.310570][T12637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.331864][T12637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.347092][T11307] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 736.360701][T12637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.412603][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.449353][T11307] usb 6-1: Product: syz [ 736.463620][T11307] usb 6-1: Manufacturer: syz [ 736.485016][T11307] usb 6-1: SerialNumber: syz [ 736.533981][T11307] usb 6-1: config 0 descriptor?? [ 736.537187][T12637] device hsr_slave_0 entered promiscuous mode [ 736.568438][T12637] device hsr_slave_1 entered promiscuous mode [ 736.589861][T11307] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 736.620370][T11307] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 736.655004][T12711] IPVS: length: 105 != 24 [ 736.796702][T11307] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 736.803995][T11307] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 736.855464][T11307] usb 6-1: USB disconnect, device number 19 [ 736.984431][T12717] device syzkaller0 entered promiscuous mode [ 737.156715][ T4230] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 737.171478][T12637] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 737.186317][T12637] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 737.243186][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.306858][T12637] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 737.346613][T11307] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 737.445263][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.471169][T12637] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 737.476595][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 737.534318][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.596757][ T4230] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 737.625596][ T4230] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.651867][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.706598][T11307] usb 6-1: Using ep0 maxpacket: 32 [ 737.712017][ T4230] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.757020][ T4230] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.758399][T12637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.809893][ T4230] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.821525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 737.837510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 737.840087][T11307] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 737.854938][T12637] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.904222][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 737.912435][T11307] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.932705][T11307] usb 6-1: config 0 has no interface number 0 [ 737.948831][ T4230] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 737.958689][T11307] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 737.977158][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 738.016656][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.030807][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.037904][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.116594][T11307] usb 6-1: string descriptor 0 read error: -71 [ 738.136445][T11307] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 738.188414][T11307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.189096][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 738.226208][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 738.234614][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 738.258877][T11307] usb 6-1: config 0 descriptor?? [ 738.274907][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 738.289815][T11307] usb 6-1: can't set config #0, error -71 [ 738.326638][ T4230] usb 3-1: usb_control_msg returned -71 [ 738.334211][ T4230] usbtmc 3-1:16.0: can't read capabilities [ 738.341884][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.344980][T11307] usb 6-1: USB disconnect, device number 20 [ 738.349073][ T808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.419511][ T4230] usb 3-1: USB disconnect, device number 65 [ 738.507071][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 738.546389][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 738.578873][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 738.609576][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 738.637979][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 738.673481][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 738.709221][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 738.737331][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 738.814078][T12750] overlayfs: failed to resolve './bus': -2 [ 738.843956][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 738.960955][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 739.110379][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 739.176923][ T4234] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 739.275311][ T144] tipc: Left network mode [ 739.288729][T12637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 739.456613][ T4234] usb 7-1: Using ep0 maxpacket: 16 [ 739.617030][ T4234] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.710889][ T4234] usb 7-1: config 0 interface 0 has no altsetting 0 [ 739.752436][ T4234] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 739.857920][T12767] IPVS: length: 105 != 24 [ 742.678567][ T4234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.711956][ T4234] usb 7-1: config 0 descriptor?? [ 742.739065][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 742.758022][ T4234] usb 7-1: can't set config #0, error -71 [ 742.893482][ T4234] usb 7-1: USB disconnect, device number 10 [ 743.529197][ T4231] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 743.735464][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 743.745956][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 743.761278][T12637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.780270][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2410'. [ 743.786884][ T4234] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 743.789375][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 743.936825][ T4231] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 743.954185][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.997899][ T4231] usb 6-1: config 0 has no interface number 0 [ 744.022338][ T4231] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 744.076727][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 744.236733][ T4234] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 744.246767][ T4231] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 744.267572][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.301767][ T4234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.322215][ T4231] usb 6-1: Product: syz [ 744.326416][ T4231] usb 6-1: Manufacturer: syz [ 744.337145][ T4234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 744.394019][ T4234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 744.427257][T12816] overlayfs: failed to resolve './bus': -2 [ 744.515186][ T4234] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.689767][ T4234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 744.809562][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.919868][ T1109] Bluetooth: hci4: command 0x0419 tx timeout [ 745.154854][ T4231] usb 6-1: SerialNumber: syz [ 745.192414][ T4231] usb 6-1: config 0 descriptor?? [ 745.236743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 745.251615][ T4231] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 745.263317][ T4231] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 745.298023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 745.307389][ T4234] usb 3-1: GET_CAPABILITIES returned 0 [ 745.323455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 745.334359][ T4234] usbtmc 3-1:16.0: can't read capabilities [ 745.379703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 745.446591][ T4231] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 745.470972][ T144] device hsr_slave_0 left promiscuous mode [ 745.492932][ T4231] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 745.510329][ T13] usb 3-1: USB disconnect, device number 66 [ 745.543663][ T4231] usb 6-1: USB disconnect, device number 21 [ 745.550204][ T144] device hsr_slave_1 left promiscuous mode [ 745.598326][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.617896][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.674686][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.716776][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.754310][ T144] batman_adv: batadv0: Interface deactivated: geneve2 [ 745.784870][ T144] batman_adv: batadv0: Removing interface: geneve2 [ 745.822081][ T144] device bridge_slave_1 left promiscuous mode [ 745.847929][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.892012][ T144] device bridge_slave_0 left promiscuous mode [ 745.916879][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.956154][ T144] device veth1_macvtap left promiscuous mode [ 745.984828][ T144] device veth0_macvtap left promiscuous mode [ 746.014149][ T144] device veth1_vlan left promiscuous mode [ 746.042955][ T144] device veth0_vlan left promiscuous mode [ 746.048804][ T4231] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 746.316695][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 746.426638][T12753] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 746.436716][ T4231] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 746.460914][ T144] bond2 (unregistering): Released all slaves [ 746.466340][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.494557][ T4231] usb 6-1: config 0 has no interface number 0 [ 746.501707][ T144] bond1 (unregistering): (slave veth3): Releasing active interface [ 746.522116][ T4231] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 746.545857][ T144] bond1 (unregistering): Released all slaves [ 746.706657][T12753] usb 3-1: Using ep0 maxpacket: 16 [ 746.846763][T12753] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 746.890123][T12753] usb 3-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 746.986587][ T4231] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 746.999967][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.019047][ T4231] usb 6-1: config 0 descriptor?? [ 747.046594][ T4231] usb 6-1: can't set config #0, error -71 [ 747.150982][T12753] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 747.259008][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.265374][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.483509][ T4231] usb 6-1: USB disconnect, device number 22 [ 747.501467][T12753] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 747.580713][T12753] usb 3-1: Product: syz [ 747.603459][T12753] usb 3-1: Manufacturer: syz [ 747.633233][T12846] fuse: Bad value for 'rootmode' [ 747.640620][T12753] usb 3-1: SerialNumber: syz [ 747.681250][ T144] team0 (unregistering): Port device team_slave_1 removed [ 747.734544][ T144] team0 (unregistering): Port device team_slave_0 removed [ 747.764233][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.793772][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.918873][T12833] loop2: detected capacity change from 0 to 7 [ 747.946702][T12833] Dev loop2: unable to read RDB block 7 [ 747.953690][T12833] loop2: unable to read partition table [ 747.955878][ T144] bond0 (unregistering): Released all slaves [ 747.959852][T12833] loop2: partition table beyond EOD, truncated [ 747.972566][T12833] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 748.016661][ T3558] Dev loop2: unable to read RDB block 7 [ 748.022269][ T3558] loop2: unable to read partition table [ 748.028535][ T3558] loop2: partition table beyond EOD, truncated [ 748.035435][ T4231] usb 3-1: USB disconnect, device number 67 [ 748.102393][T12637] device veth0_vlan entered promiscuous mode [ 748.110679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.119498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.144396][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2418'. [ 748.153982][T12842] netlink: 'syz.5.2418': attribute type 4 has an invalid length. [ 748.174119][T12842] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2418'. [ 748.204758][T12842] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 748.269090][T12637] device veth1_vlan entered promiscuous mode [ 748.380550][T12637] device veth0_macvtap entered promiscuous mode [ 748.410256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 748.432883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 748.445474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 748.464458][T12637] device veth1_macvtap entered promiscuous mode [ 748.553954][T12866] rdma_rxe: rxe_register_device failed with error -23 [ 748.561710][T12866] rdma_rxe: failed to add bond0 [ 748.577076][T12866] dlm: dev_write: no op 0 74000000000000 [ 749.273937][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 749.320096][T12867] overlayfs: failed to resolve './bus': -2 [ 749.327367][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.389072][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.430101][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.471057][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.556663][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.596531][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.606387][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.663992][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.755428][T12637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.796962][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 749.821591][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 749.863592][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.910084][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.962353][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.043308][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.074311][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.093878][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.096533][ T4230] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 750.115074][T12637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.131644][T12637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.156726][T11307] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 750.179005][T12637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.189482][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 750.207019][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 750.239708][T12637] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.254279][T12637] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.278097][T12637] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.301078][T12637] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.377106][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 750.526698][T11307] usb 7-1: config 0 has no interfaces? [ 750.659725][T11307] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 750.767255][T11307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.778299][ T4230] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 750.793913][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.825816][T11307] usb 7-1: config 0 descriptor?? [ 750.831031][ T4230] usb 2-1: config 0 has no interface number 0 [ 750.847122][ T4230] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.183664][ T1109] usb 7-1: USB disconnect, device number 11 [ 751.306772][ T4230] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 751.347036][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.355180][ T4230] usb 2-1: Product: syz [ 751.369870][ T4230] usb 2-1: Manufacturer: syz [ 751.374506][ T4230] usb 2-1: SerialNumber: syz [ 751.431458][ T4230] usb 2-1: config 0 descriptor?? [ 751.473377][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2430'. [ 751.496427][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.508071][ T4230] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 751.530468][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.544910][ T4230] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 751.586626][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 751.700025][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.737548][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.765878][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 751.796679][ T4230] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 751.804105][ T4230] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 751.846699][ T4230] usb 2-1: USB disconnect, device number 50 [ 751.871434][T12913] device syzkaller0 entered promiscuous mode [ 752.436539][ T4230] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 752.465430][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 752.476332][T12930] netlink: 'syz.6.2433': attribute type 4 has an invalid length. [ 752.484180][T12930] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2433'. [ 752.496595][T12930] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 752.756599][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 752.877224][ T4230] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 752.897849][T12939] overlayfs: failed to resolve './bus': -2 [ 752.956773][ T21] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 753.801577][T12942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2437'. [ 753.807170][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.968705][ T4230] usb 2-1: config 0 has no interface number 0 [ 753.989301][ T4230] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.058181][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 754.086843][ T4230] usb 2-1: string descriptor 0 read error: -71 [ 754.093136][ T4230] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 754.196629][ T21] usb 7-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 754.214531][T12947] rdma_rxe: already configured on bond0 [ 754.224513][T12947] dlm: dev_write: no op 0 74000000000000 [ 754.957339][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.972568][ T21] usb 7-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 754.990144][ T4230] usb 2-1: config 0 descriptor?? [ 755.006608][ T4230] usb 2-1: can't set config #0, error -71 [ 755.016832][ T4230] usb 2-1: USB disconnect, device number 51 [ 755.138799][ T21] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 755.148274][ T21] usb 7-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 755.166562][ T21] usb 7-1: Product: syz [ 755.170909][ T21] usb 7-1: Manufacturer: syz [ 755.176143][ T21] usb 7-1: SerialNumber: syz [ 755.616268][T12936] loop2: detected capacity change from 0 to 7 [ 755.731781][T12936] Dev loop2: unable to read RDB block 7 [ 755.760634][T12936] loop2: unable to read partition table [ 755.786675][T12936] loop2: partition table beyond EOD, truncated [ 755.823635][T12936] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 755.848160][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2440'. [ 755.871127][ T3558] Dev loop2: unable to read RDB block 7 [ 755.878276][ T3558] loop2: unable to read partition table [ 755.884140][ T3558] loop2: partition table beyond EOD, truncated [ 755.894112][ T26] kauditd_printk_skb: 339 callbacks suppressed [ 755.894127][ T26] audit: type=1326 audit(1783584653.202:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc50a01e59 code=0x7ffc0000 [ 755.931840][ T21] usb 7-1: USB disconnect, device number 12 [ 755.975872][ T26] audit: type=1326 audit(1783584653.242:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc509c268e code=0x7ffc0000 [ 756.036653][ T13] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 756.125901][ T26] audit: type=1326 audit(1783584653.242:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 756.236629][ T1109] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 756.393699][ T26] audit: type=1326 audit(1783584653.242:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 756.446628][ T13] usb 8-1: config 0 has no interfaces? [ 756.447636][T12972] device syzkaller0 entered promiscuous mode [ 756.460849][ T13] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 756.470219][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.480550][ T13] usb 8-1: config 0 descriptor?? [ 756.489969][ T26] audit: type=1326 audit(1783584653.242:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 756.519474][ T26] audit: type=1326 audit(1783584653.242:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 756.651332][ T26] audit: type=1326 audit(1783584653.792:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 756.675440][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.749403][ T13] usb 8-1: USB disconnect, device number 2 [ 756.826796][ T26] audit: type=1326 audit(1783584653.822:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 756.956581][ T26] audit: type=1326 audit(1783584654.082:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 757.078169][ T26] audit: type=1326 audit(1783584654.112:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.1.2442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc50a01aeb code=0x7ffc0000 [ 757.112189][ T1109] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 757.123849][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'. [ 757.133251][T12995] netlink: 'syz.5.2446': attribute type 4 has an invalid length. [ 757.141011][T12995] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2446'. [ 757.150064][T12995] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 757.286581][T12998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2448'. [ 757.298568][T12998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2448'. [ 757.577601][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.585654][ T1109] usb 2-1: Product: syz [ 757.694303][T13005] overlayfs: failed to resolve './bus': -2 [ 757.746194][ T1109] usb 2-1: Manufacturer: syz [ 757.834279][ T1109] usb 2-1: SerialNumber: syz [ 758.486700][ T5004] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 758.709266][T13012] rdma_rxe: rxe_register_device failed with error -23 [ 758.718932][T13012] rdma_rxe: failed to add bond0 [ 758.729146][T13012] dlm: dev_write: no op 0 74000000000000 [ 758.826688][ T5004] usb 6-1: Using ep0 maxpacket: 32 [ 758.886390][ T1109] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 758.986968][ T5004] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 759.023168][ T5004] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.174802][ T5004] usb 6-1: config 0 has no interface number 0 [ 759.286817][ T5004] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.667046][ T5004] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 759.693847][ T5004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.746241][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2453'. [ 759.757713][ T5004] usb 6-1: Product: syz [ 759.777382][ T5004] usb 6-1: Manufacturer: syz [ 759.803575][ T5004] usb 6-1: SerialNumber: syz [ 759.852730][ T5004] usb 6-1: config 0 descriptor?? [ 759.918995][ T5004] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 759.922336][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 759.935400][ T5004] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 760.126611][ T5004] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 760.139607][ T5004] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 760.190729][ T5004] usb 6-1: USB disconnect, device number 23 [ 760.387249][ T1109] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 760.409004][T11051] usb 2-1: USB disconnect, device number 52 [ 760.439803][T11051] usblp0: removed [ 760.608233][T13038] device syzkaller0 entered promiscuous mode [ 760.656605][ T1109] usb 7-1: Using ep0 maxpacket: 16 [ 760.736733][ T5004] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 760.796857][ T1109] usb 7-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 760.902588][ T1109] usb 7-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 760.997142][ T5004] usb 6-1: Using ep0 maxpacket: 32 [ 761.116732][ T1109] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 761.146664][ T5004] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 761.154794][ T5004] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.175380][ T1109] usb 7-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 761.196748][ T1109] usb 7-1: Product: syz [ 761.200978][ T1109] usb 7-1: Manufacturer: syz [ 761.218899][ T5004] usb 6-1: config 0 has no interface number 0 [ 761.225044][ T5004] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.308871][T13061] overlayfs: failed to resolve './bus': -2 [ 761.506810][ T21] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 761.897066][ T21] usb 8-1: config 0 has no interfaces? [ 761.903172][ T21] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 762.044769][ T1109] usb 7-1: SerialNumber: syz [ 762.080151][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.106882][ T5004] usb 6-1: string descriptor 0 read error: -71 [ 762.120310][ T5004] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 762.154410][T13069] rdma_rxe: already configured on bond0 [ 762.164143][T13069] dlm: dev_write: no op 0 74000000000000 [ 762.980465][ T21] usb 8-1: config 0 descriptor?? [ 763.000443][T13031] loop2: detected capacity change from 0 to 7 [ 763.007429][ T5004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.086409][ T5004] usb 6-1: config 0 descriptor?? [ 763.114591][T13031] Dev loop2: unable to read RDB block 7 [ 763.126547][T13031] loop2: unable to read partition table [ 763.152736][ T5004] usb 6-1: can't set config #0, error -71 [ 763.163323][T13066] device syzkaller0 entered promiscuous mode [ 763.169624][T13031] loop2: partition table beyond EOD, truncated [ 763.201517][ T5004] usb 6-1: USB disconnect, device number 24 [ 763.219000][T13031] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 763.221238][ T21] usb 8-1: USB disconnect, device number 3 [ 763.233710][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2465'. [ 763.368658][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'. [ 763.418264][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2466'. [ 763.418425][ T1109] usb 7-1: USB disconnect, device number 13 [ 763.456534][T13084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2466'. [ 763.549137][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 764.433819][T13106] binder: BINDER_SET_CONTEXT_MGR already set [ 764.509075][T13106] binder: 13105:13106 ioctl 4018620d 200000004a80 returned -16 [ 764.946587][T12753] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 765.216608][T12753] usb 2-1: Using ep0 maxpacket: 32 [ 765.292706][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 765.302068][T13125] netlink: 'syz.2.2474': attribute type 4 has an invalid length. [ 765.309875][T13125] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2474'. [ 765.319172][T13125] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 765.386665][T12753] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 766.264059][T12753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.429038][T12753] usb 2-1: config 0 has no interface number 0 [ 766.472156][T12753] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 766.521605][T13133] rdma_rxe: rxe_register_device failed with error -23 [ 766.529174][T13133] rdma_rxe: failed to add bond0 [ 766.538399][T13133] dlm: dev_write: no op 0 74000000000000 [ 767.300193][T13137] device syzkaller0 entered promiscuous mode [ 767.506720][T12753] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 768.728839][T12753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.737265][T12753] usb 2-1: Product: syz [ 768.741449][T12753] usb 2-1: Manufacturer: syz [ 768.746056][T12753] usb 2-1: SerialNumber: syz [ 768.753987][T12753] usb 2-1: config 0 descriptor?? [ 768.856610][T12753] usb 2-1: can't set config #0, error -71 [ 768.864150][T12753] usb 2-1: USB disconnect, device number 53 [ 768.871418][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2477'. [ 769.087457][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2483'. [ 769.117408][T13157] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2483'. [ 769.126416][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2483'. [ 769.206916][ T21] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 769.231876][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2484'. [ 769.466609][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 769.587152][ T21] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 769.615446][ T21] usb 3-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 769.711167][T13176] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2486'. [ 769.724684][T13176] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2486'. [ 770.036577][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 770.045665][ T21] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 770.054265][ T21] usb 3-1: Product: syz [ 770.061603][ T21] usb 3-1: Manufacturer: syz [ 770.066204][ T21] usb 3-1: SerialNumber: syz [ 770.486807][T13181] binder: Binderfs stats mode cannot be changed during a remount [ 770.496201][T13150] loop2: detected capacity change from 0 to 7 [ 770.516326][ T4179] Dev loop2: unable to read RDB block 7 [ 770.526705][ T4179] loop2: unable to read partition table [ 770.532511][ T4179] loop2: partition table beyond EOD, truncated [ 770.614353][T13150] Dev loop2: unable to read RDB block 7 [ 770.650046][T13150] loop2: unable to read partition table [ 770.703080][T13150] loop2: partition table beyond EOD, truncated [ 771.242008][T13150] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.559270][ T3558] Dev loop2: unable to read RDB block 7 [ 771.593760][ T3558] loop2: unable to read partition table [ 771.646708][ T3558] loop2: partition table beyond EOD, truncated [ 771.668044][ T1109] usb 3-1: USB disconnect, device number 68 [ 771.813735][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 771.813751][ T26] audit: type=1326 audit(1783584669.122:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700d895e59 code=0x7ffc0000 [ 772.001400][ T26] audit: type=1326 audit(1783584669.162:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700d895e59 code=0x7ffc0000 [ 772.102454][ T26] audit: type=1326 audit(1783584669.212:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f700d85668e code=0x7ffc0000 [ 772.206820][ T26] audit: type=1326 audit(1783584669.212:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700d895aeb code=0x7ffc0000 [ 772.209528][ T5004] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 772.230924][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.316690][ T13] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 772.344541][T13204] rdma_rxe: rxe_register_device failed with error -23 [ 772.352111][T13204] rdma_rxe: failed to add bond0 [ 772.361232][T13204] dlm: dev_write: no op 0 74000000000000 [ 773.238522][ T26] audit: type=1326 audit(1783584669.212:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700d895aeb code=0x7ffc0000 [ 773.384594][ T26] audit: type=1326 audit(1783584669.212:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700d895aeb code=0x7ffc0000 [ 773.444890][ T26] audit: type=1326 audit(1783584669.212:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700d895aeb code=0x7ffc0000 [ 773.476786][ T13] usb 8-1: Using ep0 maxpacket: 32 [ 773.527086][ T26] audit: type=1326 audit(1783584670.512:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700d895aeb code=0x7ffc0000 [ 773.558567][T13211] device syzkaller0 entered promiscuous mode [ 773.574871][ T26] audit: type=1326 audit(1783584670.532:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700d895aeb code=0x7ffc0000 [ 773.637373][ T13] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 773.658368][ T13] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.676590][ T26] audit: type=1326 audit(1783584670.812:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.6.2490" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f700d895aeb code=0x7ffc0000 [ 773.707400][ T13] usb 8-1: config 0 has no interface number 0 [ 773.723510][ T13] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.817025][ T5004] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 773.826165][ T5004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.871122][ T5004] usb 7-1: Product: syz [ 773.882027][ T5004] usb 7-1: Manufacturer: syz [ 773.897877][ T5004] usb 7-1: SerialNumber: syz [ 773.911643][ T13] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 773.951245][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.986710][ T13] usb 8-1: Product: syz [ 774.000776][ T13] usb 8-1: Manufacturer: syz [ 774.014522][ T13] usb 8-1: SerialNumber: syz [ 774.053800][ T13] usb 8-1: config 0 descriptor?? [ 774.094192][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2494'. [ 774.105832][ T13] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 774.126597][ T13] radio-si470x: probe of 8-1:0.35 failed with error -5 [ 774.307772][ T13] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 774.323572][ T13] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 774.365361][ T13] usb 8-1: USB disconnect, device number 4 [ 774.424543][ T5004] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 774.916612][ T13] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 775.876543][ T13] usb 8-1: Using ep0 maxpacket: 32 [ 775.946742][ T13] usb 8-1: device descriptor read/all, error -71 [ 775.975078][ T1109] usb 7-1: USB disconnect, device number 14 [ 776.115213][T13243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2500'. [ 776.781694][ T1109] usblp0: removed [ 776.823129][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2501'. [ 776.963401][T13250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2502'. [ 776.975831][T13250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2502'. [ 777.021818][T13239] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2501'. [ 777.178726][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2501'. [ 777.559931][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2506'. [ 777.569419][T13266] netlink: 'syz.5.2506': attribute type 4 has an invalid length. [ 777.577245][T13266] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2506'. [ 777.586293][T13266] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 777.725313][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2505'. [ 778.386649][T13178] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 779.296547][T13178] usb 3-1: Using ep0 maxpacket: 32 [ 779.439325][T13178] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 779.454420][T13302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2514'. [ 780.173444][T13178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.347898][T13178] usb 3-1: config 0 has no interface number 0 [ 780.393487][T13178] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.492687][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 780.492703][ T26] audit: type=1800 audit(1783584677.802:704): pid=13280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2510" name="bus" dev="ramfs" ino=74968 res=0 errno=0 [ 780.636747][T13178] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 780.645984][T13178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.666703][ T13] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 780.687376][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2516'. [ 780.699220][T13312] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2516'. [ 780.936696][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 781.039334][T13178] usb 3-1: Product: syz [ 781.043732][T13178] usb 3-1: Manufacturer: syz [ 781.056716][ T13] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 781.070088][T13178] usb 3-1: SerialNumber: syz [ 781.079613][T13178] usb 3-1: config 0 descriptor?? [ 781.106319][T13178] usb 3-1: can't set config #0, error -71 [ 781.126274][T13178] usb 3-1: USB disconnect, device number 69 [ 781.163587][ T13] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 781.273055][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.358465][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 781.433694][ T13] usb 2-1: config 1 has no interface number 0 [ 781.456627][ T13] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 781.517256][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.649510][ T13] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 781.690544][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2518'. [ 781.700420][T13319] netlink: 'syz.5.2518': attribute type 4 has an invalid length. [ 781.708192][T13319] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2518'. [ 781.717281][T13319] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 781.863643][T13321] binder: Binderfs stats mode cannot be changed during a remount [ 781.916797][ T13] snd_usb_pod 2-1:1.1: set_interface failed [ 781.926622][ T13] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 781.960815][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2520'. [ 781.974601][ T13] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 781.976137][T13325] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2520'. [ 781.993407][T13325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2520'. [ 782.027260][ T13] usb 2-1: USB disconnect, device number 54 [ 782.336812][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2522'. [ 784.594095][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2526'. [ 784.826604][T11051] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 785.076600][T11051] usb 2-1: Using ep0 maxpacket: 32 [ 785.104393][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2529'. [ 785.146293][T13361] netlink: 'syz.7.2529': attribute type 4 has an invalid length. [ 785.176902][T13361] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2529'. [ 785.196708][T11051] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 785.212115][T13361] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 785.227859][T11051] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.269871][T11051] usb 2-1: config 0 has no interface number 0 [ 785.295728][T11051] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.506764][T11051] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 785.531044][T11051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.564226][T11051] usb 2-1: Product: syz [ 785.584333][T11051] usb 2-1: Manufacturer: syz [ 785.605618][T11051] usb 2-1: SerialNumber: syz [ 785.638814][T11051] usb 2-1: config 0 descriptor?? [ 785.677123][ T26] audit: type=1800 audit(1783584682.992:705): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2528" name="bus" dev="ramfs" ino=75971 res=0 errno=0 [ 785.702949][T11051] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 785.734209][T11051] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 785.956621][T11051] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 785.964041][T11051] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 786.045680][T11051] usb 2-1: USB disconnect, device number 55 [ 786.510237][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2531'. [ 786.523017][T13387] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2531'. [ 786.586519][T11051] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 786.826552][T11051] usb 2-1: Using ep0 maxpacket: 32 [ 786.946829][T11051] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 786.983220][T11051] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.033325][T11051] usb 2-1: config 0 has no interface number 0 [ 787.086927][T11051] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 787.316586][T11307] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 787.487216][T11051] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 787.545000][T11051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.762753][T11051] usb 2-1: Product: syz [ 787.906814][T11051] usb 2-1: Manufacturer: syz [ 787.911470][T11051] usb 2-1: SerialNumber: syz [ 788.036682][T11051] usb 2-1: config 0 descriptor?? [ 788.106536][T11307] usb 7-1: Using ep0 maxpacket: 32 [ 788.906696][T11051] usb 2-1: can't set config #0, error -71 [ 788.936699][T11307] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 788.953023][T11307] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 788.962219][T11307] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.977634][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2539'. [ 789.013050][T11307] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 789.016894][T11051] usb 2-1: USB disconnect, device number 56 [ 789.056531][T11307] usb 7-1: config 1 has no interface number 0 [ 789.077355][T13424] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2539'. [ 789.087851][T11307] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 789.106569][T13424] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2539'. [ 789.161085][T11307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.269151][T11307] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 789.486584][T11307] snd_usb_pod 7-1:1.1: set_interface failed [ 789.506503][T11307] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 789.513844][T11307] snd_usb_pod: probe of 7-1:1.1 failed with error -71 [ 789.621729][T11307] usb 7-1: USB disconnect, device number 15 [ 789.772402][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 789.859963][T13442] netlink: 'syz.2.2542': attribute type 4 has an invalid length. [ 789.909831][T13442] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2542'. [ 789.919281][T13442] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 790.448222][T13458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2545'. [ 790.460239][T13458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2545'. [ 790.773700][ T26] audit: type=1800 audit(1783584688.082:706): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2540" name="bus" dev="ramfs" ino=76053 res=0 errno=0 [ 791.083543][T13467] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2547'. [ 792.827832][T13490] binder: Binderfs stats mode cannot be changed during a remount [ 792.886689][ T4268] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 793.126618][ T4268] usb 2-1: Using ep0 maxpacket: 32 [ 793.246654][ T4268] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 793.254764][ T4268] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.286617][ T5004] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 793.306226][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2551'. [ 793.372184][ T4268] usb 2-1: config 0 has no interface number 0 [ 793.392590][ T4268] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 793.526819][ T5004] usb 3-1: device descriptor read/64, error -71 [ 793.590354][ T26] audit: type=1326 audit(1783584690.902:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd281fe59 code=0x7ffc0000 [ 793.626717][ T4268] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 793.656259][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.686509][ T4268] usb 2-1: Product: syz [ 793.706558][ T4268] usb 2-1: Manufacturer: syz [ 793.711383][ T26] audit: type=1326 audit(1783584690.982:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd281fe59 code=0x7ffc0000 [ 793.756139][ T4268] usb 2-1: SerialNumber: syz [ 793.774067][ T4268] usb 2-1: config 0 descriptor?? [ 793.796514][ T5004] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 793.839281][ T4268] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 793.864741][ T4268] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 793.996610][ T5004] usb 3-1: device descriptor read/64, error -71 [ 794.066573][T13178] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 794.116754][ T5004] usb usb3-port1: attempt power cycle [ 794.126755][ T4268] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 794.145369][ T4268] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 794.186619][ T4268] usb 2-1: USB disconnect, device number 57 [ 794.362391][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 794.407067][T13517] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2554'. [ 794.455826][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2554'. [ 794.526596][ T5004] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 794.626767][ T5004] usb 3-1: device descriptor read/8, error -71 [ 794.700014][T13178] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 794.726598][ T4268] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 794.729580][T13178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.793155][T13178] usb 6-1: Product: syz [ 794.813373][T13178] usb 6-1: Manufacturer: syz [ 794.833587][T13178] usb 6-1: SerialNumber: syz [ 794.906516][ T5004] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 794.966680][ T4268] usb 2-1: Using ep0 maxpacket: 32 [ 795.006854][ T5004] usb 3-1: device descriptor read/8, error -71 [ 795.086728][ T4268] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 795.105145][ T4268] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.126755][ T5004] usb usb3-port1: unable to enumerate USB device [ 795.182721][ T4268] usb 2-1: config 0 has no interface number 0 [ 795.199368][ T4268] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 795.370179][T13178] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 795.416873][ T4268] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 795.446494][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.454549][ T4268] usb 2-1: Product: syz [ 795.515536][ T4268] usb 2-1: Manufacturer: syz [ 795.546501][ T4268] usb 2-1: SerialNumber: syz [ 795.587634][ T4268] usb 2-1: config 0 descriptor?? [ 795.626602][ T4268] usb 2-1: can't set config #0, error -71 [ 795.683250][ T4268] usb 2-1: USB disconnect, device number 58 [ 795.715124][ T26] audit: type=1326 audit(1783584693.022:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bd27e068e code=0x7ffc0000 [ 795.739358][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.754694][T13535] rdma_rxe: already configured on bond0 [ 795.764064][T13535] dlm: dev_write: no op 0 74000000000000 [ 796.391889][ T26] audit: type=1326 audit(1783584693.062:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd281fe59 code=0x7ffc0000 [ 796.483306][ T26] audit: type=1326 audit(1783584693.062:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd281fe59 code=0x7ffc0000 [ 796.563046][ T26] audit: type=1326 audit(1783584693.872:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3bd281fe59 code=0x7ffc0000 [ 796.587122][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.726551][ T26] audit: type=1326 audit(1783584693.952:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bd2819bd7 code=0x7ffc0000 [ 796.826559][ T4268] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 796.862127][ T26] audit: type=1326 audit(1783584693.952:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd27c11d9 code=0x7ffc0000 [ 797.028717][T13553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2559'. [ 797.066508][ T4268] usb 8-1: Using ep0 maxpacket: 32 [ 797.189473][ T4268] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 797.310997][ T4268] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 797.538727][ T26] audit: type=1326 audit(1783584693.952:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bd2819bd7 code=0x7ffc0000 [ 797.592741][ T4268] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.742510][ T26] audit: type=1326 audit(1783584693.952:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd27c11d9 code=0x7ffc0000 [ 797.766771][ T26] audit: type=1326 audit(1783584693.952:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bd2819bd7 code=0x7ffc0000 [ 797.791780][ T26] audit: type=1326 audit(1783584693.952:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd27c11d9 code=0x7ffc0000 [ 797.794372][ T4268] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 797.816651][ T26] audit: type=1326 audit(1783584693.952:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.5.2552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bd2819bd7 code=0x7ffc0000 [ 798.126515][ T4268] usb 8-1: config 1 has no interface number 0 [ 798.132817][ T4268] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 798.142531][ T4268] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.181874][T13565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2560'. [ 798.199347][ T4268] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 798.406574][ T4268] snd_usb_pod 8-1:1.1: set_interface failed [ 798.412664][ T4268] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 798.430575][T13178] usb 6-1: USB disconnect, device number 25 [ 798.478738][T13178] usblp0: removed [ 798.483312][ T4268] snd_usb_pod: probe of 8-1:1.1 failed with error -71 [ 798.520170][ T4268] usb 8-1: USB disconnect, device number 7 [ 798.764413][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2563'. [ 799.374405][T13595] rdma_rxe: rxe_register_device failed with error -23 [ 799.381925][T13595] rdma_rxe: failed to add bond0 [ 799.390988][T13595] dlm: dev_write: no op 0 74000000000000 [ 799.636857][ T4232] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 800.213490][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2568'. [ 800.265220][T13600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2568'. [ 800.366651][ T4232] usb 8-1: Using ep0 maxpacket: 32 [ 800.385967][T13600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2568'. [ 800.506741][ T4232] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 800.506773][ T4232] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.506793][ T4232] usb 8-1: config 0 has no interface number 0 [ 800.506823][ T4232] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 800.678069][ T4232] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 800.678092][ T4232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.678104][ T4232] usb 8-1: Product: syz [ 800.678113][ T4232] usb 8-1: Manufacturer: syz [ 800.678122][ T4232] usb 8-1: SerialNumber: syz [ 800.682488][ T4232] usb 8-1: config 0 descriptor?? [ 800.718926][ T4232] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 800.718977][ T4232] radio-si470x: probe of 8-1:0.35 failed with error -5 [ 800.936812][ T4232] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 800.937064][ T4232] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 800.947959][ T4232] usb 8-1: USB disconnect, device number 8 [ 801.346961][T13621] binder: Binderfs stats mode cannot be changed during a remount [ 801.502735][T13178] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 801.656646][ T4232] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 801.686533][T13178] usb 2-1: device descriptor read/64, error -71 [ 801.936546][ T4232] usb 8-1: Using ep0 maxpacket: 32 [ 801.976802][T13178] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 802.056667][ T4232] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 802.056697][ T4232] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.056717][ T4232] usb 8-1: config 0 has no interface number 0 [ 802.056745][ T4232] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.171122][T13178] usb 2-1: device descriptor read/64, error -71 [ 802.277117][ T4232] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 802.277152][ T4232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.277174][ T4232] usb 8-1: Product: syz [ 802.286708][T13178] usb usb2-port1: attempt power cycle [ 802.314286][T13635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2572'. [ 802.456292][ T4232] usb 8-1: config 0 descriptor?? [ 802.621230][ T4232] usb 8-1: can't set config #0, error -71 [ 802.716526][T13178] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 802.776408][ T4232] usb 8-1: USB disconnect, device number 9 [ 802.806616][T13178] usb 2-1: device descriptor read/8, error -71 [ 803.076509][T13178] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 803.166670][T13178] usb 2-1: device descriptor read/8, error -71 [ 803.286705][T13178] usb usb2-port1: unable to enumerate USB device [ 803.345551][T13642] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2573'. [ 803.347594][T13642] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2573'. [ 804.293255][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 804.293272][ T26] audit: type=1326 audit(1783584701.602:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064f1fe59 code=0x7ffc0000 [ 804.465760][ T26] audit: type=1326 audit(1783584701.602:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064f1fe59 code=0x7ffc0000 [ 804.556554][ T4234] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 804.776555][T13178] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 804.987935][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2577'. [ 805.016794][T13178] usb 2-1: Using ep0 maxpacket: 32 [ 805.030054][T13666] IPVS: length: 105 != 24 [ 805.136843][T13178] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 805.162564][T13178] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 805.196672][ T4234] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 805.205878][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.256688][T13178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.376562][T13178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 805.408019][T13676] binder: BINDER_SET_CONTEXT_MGR already set [ 805.437368][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2581'. [ 805.468548][ T4234] usb 3-1: Product: syz [ 805.472820][ T4234] usb 3-1: Manufacturer: syz [ 805.474429][T13178] usb 2-1: config 1 has no interface number 0 [ 805.477537][ T4234] usb 3-1: SerialNumber: syz [ 805.491521][T13676] binder: 13673:13676 ioctl 4018620d 200000004a80 returned -16 [ 805.506502][T13178] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 805.554610][T13677] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2581'. [ 805.576531][T13178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.703442][T13677] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2581'. [ 805.719443][T13178] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 805.729229][ T26] audit: type=1326 audit(1783584703.042:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc064f1faeb code=0x7ffc0000 [ 805.876130][ T26] audit: type=1326 audit(1783584703.042:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc064f1faeb code=0x7ffc0000 [ 806.011065][ T4234] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 806.024249][ T5004] Bluetooth: hci2: command 0x0406 tx timeout [ 806.034988][ T26] audit: type=1326 audit(1783584703.072:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc064ee068e code=0x7ffc0000 [ 806.059355][ T26] audit: type=1326 audit(1783584703.272:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064f1fe59 code=0x7ffc0000 [ 806.076579][T13178] snd_usb_pod 2-1:1.1: set_interface failed [ 806.084971][ T26] audit: type=1326 audit(1783584703.272:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc064f1faeb code=0x7ffc0000 [ 806.113678][ T26] audit: type=1326 audit(1783584703.272:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc064f1faeb code=0x7ffc0000 [ 806.146735][ T26] audit: type=1326 audit(1783584703.272:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc064f1fe59 code=0x7ffc0000 [ 806.151815][T13178] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 806.212622][ T26] audit: type=1326 audit(1783584703.272:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13644 comm="syz.2.2574" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc064f1faeb code=0x7ffc0000 [ 806.337001][T13178] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 806.413716][T13178] usb 2-1: USB disconnect, device number 63 [ 806.607692][ T4232] usb 3-1: USB disconnect, device number 74 [ 806.621746][ T4232] usblp0: removed [ 806.732210][T13692] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2584'. [ 807.432060][T13693] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2585'. [ 807.456557][ T1109] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 807.716533][ T1109] usb 6-1: Using ep0 maxpacket: 32 [ 807.876699][ T1109] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 807.906581][ T1109] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.976474][ T1109] usb 6-1: config 0 has no interface number 0 [ 807.986731][ T1109] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.196792][ T5004] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 808.217044][ T1109] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 808.264890][ T1109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.296897][ T1109] usb 6-1: Product: syz [ 808.301161][ T1109] usb 6-1: Manufacturer: syz [ 808.321736][ T1109] usb 6-1: SerialNumber: syz [ 808.396725][ T5004] usb 2-1: device descriptor read/64, error -71 [ 808.405193][ T1109] usb 6-1: config 0 descriptor?? [ 808.554291][ T1109] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 808.668159][ T1109] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 808.712036][ T5004] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 808.720264][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.731211][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.956628][ T5004] usb 2-1: device descriptor read/64, error -71 [ 809.087081][ T5004] usb usb2-port1: attempt power cycle [ 809.347344][ T1109] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 809.372468][ T1109] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 809.516672][ T5004] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 809.526660][ T1109] usb 6-1: USB disconnect, device number 26 [ 809.676645][ T5004] usb 2-1: device descriptor read/8, error -71 [ 809.871242][T13715] IPVS: length: 105 != 24 [ 809.957080][ T5004] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 809.987242][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2591'. [ 810.036604][ T1109] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 810.076799][ T5004] usb 2-1: device descriptor read/8, error -71 [ 810.206675][ T5004] usb usb2-port1: unable to enumerate USB device [ 810.326528][ T1109] usb 6-1: Using ep0 maxpacket: 32 [ 810.456659][ T1109] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 810.464783][ T1109] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.510962][ T1109] usb 6-1: config 0 has no interface number 0 [ 810.540523][ T1109] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 810.666577][ T1109] usb 6-1: string descriptor 0 read error: -71 [ 810.668033][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2594'. [ 810.672992][ T1109] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 810.720808][T13729] binder: BINDER_SET_CONTEXT_MGR already set [ 810.766554][T13729] binder: 13728:13729 ioctl 4018620d 200000004a80 returned -16 [ 810.774285][ T1109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.799391][T13727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2594'. [ 810.818383][ T1109] usb 6-1: config 0 descriptor?? [ 810.866798][ T1109] usb 6-1: can't set config #0, error -71 [ 810.890681][ T1109] usb 6-1: USB disconnect, device number 27 [ 810.916714][T13727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2594'. [ 811.106620][ T21] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 811.280686][T13741] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2597'. [ 811.366561][ T21] usb 8-1: Using ep0 maxpacket: 32 [ 812.029719][ T21] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 812.090832][ T21] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 812.101041][T13748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2598'. [ 812.229028][ T21] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.276997][ T21] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 812.287724][T13748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2598'. [ 813.523781][ T21] usb 8-1: config 1 has no interface number 0 [ 813.553090][ T21] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 813.587724][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.719324][ T21] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 813.796593][ T21] snd_usb_pod 8-1:1.1: set_interface failed [ 813.802627][ T21] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 813.877807][ T21] snd_usb_pod: probe of 8-1:1.1 failed with error -71 [ 813.961210][ T21] usb 8-1: USB disconnect, device number 10 [ 814.055352][T13765] IPVS: length: 105 != 24 [ 814.776737][ T4232] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 815.466562][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'. [ 815.687095][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 815.806865][ T4232] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 815.941688][T13789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2610'. [ 816.410762][ T4232] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 816.896819][ T4232] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 816.916121][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 816.950991][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 816.966597][ T4232] usb 6-1: Product: syz [ 816.970798][ T4232] usb 6-1: Manufacturer: syz [ 817.002826][T13796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2613'. [ 817.005810][ T4232] usb 6-1: SerialNumber: syz [ 817.046613][T13712] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 817.100059][T13796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2613'. [ 817.147603][T13799] IPVS: length: 105 != 24 [ 817.316532][ T21] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 817.326536][T13712] usb 8-1: Using ep0 maxpacket: 8 [ 817.381321][T13776] loop2: detected capacity change from 0 to 7 [ 817.400660][T13804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2615'. [ 817.451237][ T4179] Dev loop2: unable to read RDB block 7 [ 817.457250][ T4179] loop2: AHDI p1 p2 p3 [ 817.461724][T13804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2615'. [ 817.476798][T13712] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 817.490352][T13712] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 817.506550][ T4179] loop2: partition table partially beyond EOD, truncated [ 817.556555][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 817.565652][ T4179] loop2: p1 start 1601398130 is beyond EOD, truncated [ 817.582195][T13712] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 817.604286][ T4179] loop2: p2 start 1702059890 is beyond EOD, truncated [ 817.644181][T13712] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 817.676668][ T21] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 817.697319][ T21] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 817.741560][T13712] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.755862][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.802015][T13712] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 817.817014][ T21] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 817.825993][ T21] usb 7-1: config 1 has no interface number 0 [ 817.854889][T13712] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.893652][ T21] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 817.914666][T13776] Dev loop2: unable to read RDB block 7 [ 817.932138][T13776] loop2: AHDI p1 p2 p3 [ 817.961821][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.971426][T13776] loop2: partition table partially beyond EOD, truncated [ 818.017650][T13776] loop2: p1 start 1601398130 is beyond EOD, truncated [ 818.024987][T13776] loop2: p2 start 1702059890 is beyond EOD, truncated [ 818.039481][ T21] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 818.156594][T13712] usb 8-1: usb_control_msg returned -32 [ 818.162475][T13712] usbtmc 8-1:16.0: can't read capabilities [ 818.211762][ T4232] usb 6-1: USB disconnect, device number 28 [ 818.776756][ T21] snd_usb_pod 7-1:1.1: set_interface failed [ 818.782898][ T21] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 819.104501][ T21] snd_usb_pod: probe of 7-1:1.1 failed with error -71 [ 819.115537][ T21] usb 7-1: USB disconnect, device number 16 [ 819.170671][T13816] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 819.371889][T13712] usb 8-1: USB disconnect, device number 11 [ 819.785974][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2620'. [ 820.260124][T13839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2624'. [ 820.375914][T13844] IPVS: length: 105 != 24 [ 820.567541][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2627'. [ 820.698249][T13854] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2628'. [ 820.698633][T13854] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2628'. [ 820.790932][T13849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2627'. [ 820.790983][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2627'. [ 821.096598][ T4232] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 821.343254][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 821.488158][ T4232] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 821.488190][ T4232] usb 3-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 821.698496][ T4232] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 821.698531][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 821.698554][ T4232] usb 3-1: Product: syz [ 821.698570][ T4232] usb 3-1: Manufacturer: syz [ 821.698587][ T4232] usb 3-1: SerialNumber: syz [ 821.953192][T13857] loop2: detected capacity change from 0 to 7 [ 821.993509][T13857] Dev loop2: unable to read RDB block 7 [ 821.993546][T13857] loop2: AHDI p1 p2 p3 [ 821.993567][T13857] loop2: partition table partially beyond EOD, truncated [ 821.993736][T13857] loop2: p1 start 1601398130 is beyond EOD, truncated [ 821.993758][T13857] loop2: p2 start 1702059890 is beyond EOD, truncated [ 821.995216][ T23] usb 3-1: USB disconnect, device number 75 [ 822.792075][T13879] IPVS: length: 105 != 24 [ 823.290441][T13888] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2639'. [ 824.025845][T13885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2640'. [ 824.074895][T13885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2640'. [ 824.140814][T13892] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 827.406952][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 827.406971][ T26] audit: type=1800 audit(1783584724.722:882): pid=13896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2635" name="bus" dev="ramfs" ino=77104 res=0 errno=0 [ 827.784467][ T26] audit: type=1326 audit(1783584725.092:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.5.2642" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bd281fe59 code=0x0 [ 828.783801][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 828.892661][T13919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2649'. [ 828.913015][T13712] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 828.916540][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 828.986595][T13712] Bluetooth: hci5: Injecting HCI hardware error event [ 828.995429][T10781] Bluetooth: hci5: hardware error 0x00 [ 829.914957][T13936] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2651'. [ 830.762056][T13930] IPVS: length: 105 != 24 [ 830.949281][T13939] input: syz0 as /devices/virtual/input/input46 [ 831.025232][ T4232] [ 831.027603][ T4232] ====================================================== [ 831.034631][ T4232] WARNING: possible circular locking dependency detected [ 831.041655][ T4232] syzkaller #0 Not tainted [ 831.046165][ T4232] ------------------------------------------------------ [ 831.053178][ T4232] kworker/1:7/4232 is trying to acquire lock: [ 831.059228][ T4232] ffff88807c235028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 831.070315][ T4232] [ 831.070315][ T4232] but task is already holding lock: [ 831.077694][ T4232] ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 831.086812][ T4232] [ 831.086812][ T4232] which lock already depends on the new lock. [ 831.086812][ T4232] [ 831.097214][ T4232] [ 831.097214][ T4232] the existing dependency chain (in reverse order) is: [ 831.106211][ T4232] [ 831.106211][ T4232] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 831.114183][ T4232] __mutex_lock_common+0x1e5/0x2400 [ 831.119936][ T4232] mutex_lock_nested+0x17/0x20 [ 831.125204][ T4232] rfkill_register+0x2f/0x970 [ 831.130399][ T4232] hci_register_dev+0x459/0x980 [ 831.135829][ T4232] vhci_create_device+0x32e/0x5c0 [ 831.141431][ T4232] vhci_write+0x389/0x440 [ 831.146295][ T4232] vfs_write+0x748/0xd70 [ 831.151104][ T4232] ksys_write+0x153/0x260 [ 831.155961][ T4232] do_syscall_64+0x4c/0xa0 [ 831.160894][ T4232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 831.167295][ T4232] [ 831.167295][ T4232] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 831.175096][ T4232] __mutex_lock_common+0x1e5/0x2400 [ 831.180816][ T4232] mutex_lock_nested+0x17/0x20 [ 831.186099][ T4232] vhci_send_frame+0x88/0x100 [ 831.191280][ T4232] hci_send_frame+0x1a9/0x2e0 [ 831.196465][ T4232] hci_tx_work+0x9b5/0x16d0 [ 831.201472][ T4232] process_one_work+0x867/0xff0 [ 831.206829][ T4232] worker_thread+0xad7/0x12a0 [ 831.212014][ T4232] kthread+0x42e/0x520 [ 831.216623][ T4232] ret_from_fork+0x1f/0x30 [ 831.221559][ T4232] [ 831.221559][ T4232] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 831.230815][ T4232] __flush_work+0x116/0x210 [ 831.235850][ T4232] hci_dev_do_close+0x201/0x1020 [ 831.241324][ T4232] hci_unregister_dev+0x2eb/0x590 [ 831.246996][ T4232] vhci_release+0x73/0xc0 [ 831.251842][ T4232] __fput+0x212/0x8c0 [ 831.256341][ T4232] task_work_run+0x125/0x1a0 [ 831.261455][ T4232] do_exit+0x635/0x2110 [ 831.266162][ T4232] do_group_exit+0x12c/0x2f0 [ 831.271277][ T4232] get_signal+0x7eb/0x12e0 [ 831.276221][ T4232] arch_do_signal_or_restart+0xe6/0x12a0 [ 831.282383][ T4232] exit_to_user_mode_loop+0x9e/0x130 [ 831.288208][ T4232] exit_to_user_mode_prepare+0xee/0x180 [ 831.294269][ T4232] syscall_exit_to_user_mode+0x16/0x40 [ 831.300259][ T4232] do_syscall_64+0x58/0xa0 [ 831.305179][ T4232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 831.311577][ T4232] [ 831.311577][ T4232] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 831.319200][ T4232] __mutex_lock_common+0x1e5/0x2400 [ 831.324916][ T4232] mutex_lock_nested+0x17/0x20 [ 831.330187][ T4232] bg_scan_update+0x44/0x3b0 [ 831.335305][ T4232] process_one_work+0x867/0xff0 [ 831.340681][ T4232] worker_thread+0xad7/0x12a0 [ 831.345864][ T4232] kthread+0x42e/0x520 [ 831.350455][ T4232] ret_from_fork+0x1f/0x30 [ 831.355379][ T4232] [ 831.355379][ T4232] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 831.365191][ T4232] __lock_acquire+0x2c66/0x7b50 [ 831.370591][ T4232] lock_acquire+0x19e/0x400 [ 831.375602][ T4232] __flush_work+0x116/0x210 [ 831.380614][ T4232] __cancel_work_timer+0x3f4/0x560 [ 831.386243][ T4232] hci_request_cancel_all+0xcc/0x300 [ 831.392037][ T4232] hci_dev_do_close+0x4e/0x1020 [ 831.397394][ T4232] hci_rfkill_set_block+0x101/0x180 [ 831.403110][ T4232] rfkill_set_block+0x1c1/0x3c0 [ 831.408466][ T4232] rfkill_epo+0x75/0x170 [ 831.413225][ T4232] rfkill_op_handler+0x76/0x220 [ 831.418579][ T4232] process_one_work+0x867/0xff0 [ 831.423936][ T4232] worker_thread+0xad7/0x12a0 [ 831.429119][ T4232] kthread+0x42e/0x520 [ 831.433696][ T4232] ret_from_fork+0x1f/0x30 [ 831.438625][ T4232] [ 831.438625][ T4232] other info that might help us debug this: [ 831.438625][ T4232] [ 831.448833][ T4232] Chain exists of: [ 831.448833][ T4232] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 831.448833][ T4232] [ 831.464539][ T4232] Possible unsafe locking scenario: [ 831.464539][ T4232] [ 831.471973][ T4232] CPU0 CPU1 [ 831.477319][ T4232] ---- ---- [ 831.482669][ T4232] lock(rfkill_global_mutex); [ 831.487421][ T4232] lock(&data->open_mutex); [ 831.494513][ T4232] lock(rfkill_global_mutex); [ 831.501777][ T4232] lock((work_completion)(&hdev->bg_scan_update)); [ 831.508344][ T4232] [ 831.508344][ T4232] *** DEADLOCK *** [ 831.508344][ T4232] [ 831.516472][ T4232] 3 locks held by kworker/1:7/4232: [ 831.521651][ T4232] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 831.531893][ T4232] #1: ffffc9000356fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 831.542131][ T4232] #2: ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 831.551605][ T4232] [ 831.551605][ T4232] stack backtrace: [ 831.557476][ T4232] CPU: 1 PID: 4232 Comm: kworker/1:7 Not tainted syzkaller #0 [ 831.564925][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.574965][ T4232] Workqueue: events rfkill_op_handler [ 831.580324][ T4232] Call Trace: [ 831.583628][ T4232] [ 831.586577][ T4232] dump_stack_lvl+0x188/0x250 [ 831.591266][ T4232] ? load_image+0x410/0x410 [ 831.595781][ T4232] ? show_regs_print_info+0x20/0x20 [ 831.600968][ T4232] ? print_circular_bug+0x12b/0x1a0 [ 831.606154][ T4232] check_noncircular+0x296/0x330 [ 831.611078][ T4232] ? look_up_lock_class+0x71/0x110 [ 831.616177][ T4232] ? add_chain_block+0x9b0/0x9b0 [ 831.621096][ T4232] ? lockdep_lock+0xf1/0x1f0 [ 831.625739][ T4232] ? __lock_acquire+0x1305/0x7b50 [ 831.630768][ T4232] ? mark_lock+0x94/0x320 [ 831.635097][ T4232] ? _find_first_zero_bit+0xd1/0xf0 [ 831.640297][ T4232] __lock_acquire+0x2c66/0x7b50 [ 831.645142][ T4232] ? verify_lock_unused+0x140/0x140 [ 831.650330][ T4232] ? verify_lock_unused+0x140/0x140 [ 831.655522][ T4232] lock_acquire+0x19e/0x400 [ 831.660012][ T4232] ? __flush_work+0xfa/0x210 [ 831.664588][ T4232] ? __lock_acquire+0x7b50/0x7b50 [ 831.669619][ T4232] ? read_lock_is_recursive+0x10/0x10 [ 831.674995][ T4232] ? start_flush_work+0x784/0x830 [ 831.680019][ T4232] ? __lock_acquire+0x13dc/0x7b50 [ 831.685035][ T4232] __flush_work+0x116/0x210 [ 831.689531][ T4232] ? __flush_work+0xfa/0x210 [ 831.694145][ T4232] ? flush_work+0x20/0x20 [ 831.698460][ T4232] ? try_to_grab_pending+0xfb/0x820 [ 831.703647][ T4232] ? mark_lock+0x94/0x320 [ 831.707978][ T4232] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 831.713946][ T4232] ? lock_chain_count+0x20/0x20 [ 831.718784][ T4232] ? mark_lock+0x94/0x320 [ 831.723111][ T4232] ? __cancel_work_timer+0x36a/0x560 [ 831.728385][ T4232] __cancel_work_timer+0x3f4/0x560 [ 831.733484][ T4232] ? cancel_work_sync+0x20/0x20 [ 831.738321][ T4232] ? __cancel_work+0x1f9/0x2e0 [ 831.743071][ T4232] ? lockdep_hardirqs_on+0x94/0x140 [ 831.748255][ T4232] ? __cancel_work+0x27b/0x2e0 [ 831.753007][ T4232] ? cancel_work+0x20/0x20 [ 831.757410][ T4232] ? __rwlock_init+0x140/0x140 [ 831.762158][ T4232] hci_request_cancel_all+0xcc/0x300 [ 831.767431][ T4232] hci_dev_do_close+0x4e/0x1020 [ 831.772268][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 831.778149][ T4232] ? _raw_spin_unlock+0x40/0x40 [ 831.782996][ T4232] hci_rfkill_set_block+0x101/0x180 [ 831.788184][ T4232] ? rcu_lock_release+0x20/0x20 [ 831.793019][ T4232] rfkill_set_block+0x1c1/0x3c0 [ 831.797854][ T4232] rfkill_epo+0x75/0x170 [ 831.802080][ T4232] rfkill_op_handler+0x76/0x220 [ 831.806918][ T4232] process_one_work+0x867/0xff0 [ 831.811757][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 831.817374][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 831.822646][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 831.827663][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 831.833195][ T4232] ? wq_worker_running+0x97/0x170 [ 831.838235][ T4232] worker_thread+0xad7/0x12a0 [ 831.842908][ T4232] kthread+0x42e/0x520 [ 831.846962][ T4232] ? rcu_lock_release+0x20/0x20 [ 831.851799][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 831.856384][ T4232] ret_from_fork+0x1f/0x30 [ 831.860794][ T4232] [ 831.870744][T13943] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[13946] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13943] [ 832.511070][T13953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2654'. [ 832.600596][T13953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2654'. [ 833.199409][T13959] binder: Binderfs stats mode cannot be changed during a remount [ 834.668244][ T26] audit: type=1800 audit(1783584731.982:884): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2656" name="bus" dev="ramfs" ino=77204 res=0 errno=0