last executing test programs: 11m40.672980268s ago: executing program 32 (id=3825): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca20000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 10m54.183201202s ago: executing program 3 (id=3994): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000810) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="03030000000000000000150000000c00018008000300"], 0x20}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) setitimer(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) 10m53.421486144s ago: executing program 3 (id=3996): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906", 0x90, 0x40040, 0x0, 0x0) 10m53.161846484s ago: executing program 3 (id=3998): unshare(0x62040200) syz_usbip_server_init(0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xc411a000) close(0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) 10m42.60940076s ago: executing program 3 (id=4019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r5, 0x80083313, 0x0) 10m38.708716745s ago: executing program 3 (id=4027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000280)="75dafa5a000097e35922d15983ce0fcaf5a860f5668a6c4cfb037f726c44907f31fbba599bdbb153d4f12ed83e65817ecfb0d7e2f48fdd85bb288bc7f8f29ef45487a3ce90dfd471855ee9a7a8d201a21a73bcdb2917a32699dd9846cc84ea5f7f973e52dc4724028694653907cc7e86b450ba26b5473f6b025eb0ed59e2a1adf18ce2920eeb714a17c10296f24adf75f328d89b971393b0c0a1a74e1e72d8ebecf5d146d344295fe1b985be4f07047184dc49d86dfd2bef4f761594083416ff436c31c76e2105de5bfdcfb68867da14aa66e74338f3e5023a707ce653e351f31f6f3cd16924f6cf71bc8a216f18d0a9c9c2c6327c2236a4c79f3b477a45376630f8b6b92e7209a04e31d0ca1ac2c88d5c4480df9a9d6962e449df07333dfef3b875aece469f81b7cef697257e1e6678a7237ae286bdb48c9f4f727a1b465e70f9a8f4e724ea8496b866117648cf03904815b7f5740f91fa0f4ac2d3bb9654088edcdf1aa436731fe9973fe06621c0a486bad3b16c219d3d8dbaa07e15cc211460b8", 0x182}, {&(0x7f0000000440)="60303e462af51f5ece382f13ff7360c17c22a4efa97e4a207e8d779386e15edec1f2f91831bac20275da6a8f68daec71a5edb4f50e374fd4c402ab77bf1473a0804ab69c6a", 0x45}, {&(0x7f0000000100)="c681b17bff7256c6dab2558f04796ef4727aed61666d57549db484d84b190c5ffe719252bbd49ee23ab91f792d2e36f69ea92d26", 0x34}, {0x0}], 0x4) 10m37.616212155s ago: executing program 3 (id=4030): unshare(0x62040200) syz_usbip_server_init(0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xc411a000) close(0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) 10m21.913221653s ago: executing program 33 (id=4030): unshare(0x62040200) syz_usbip_server_init(0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xc411a000) close(0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) 9m44.529554962s ago: executing program 4 (id=4164): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1e) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 9m43.479791064s ago: executing program 4 (id=4165): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x5000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 9m43.255403814s ago: executing program 4 (id=4167): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x3, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9m39.234711121s ago: executing program 4 (id=4179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000c80)={&(0x7f0000000400)=@hci={0x1f, 0x1, 0x7}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)="94aab90f385f3ee8486572f84d515d0cfd34ddfb4b11aa0cd8acdca6770f0e5ee3ba500daaaa91ee58d2f554399694dc2c14acd8558c346ffbf4604423ba69dcebebf93075ca8ecf8343bfee50ff39bdaf58853d95fc94e0083d00e071b9e1e15f494fc14b0311e03ff052d16858ddd2dc0af6c51d60ea74d8049e98942d367ae7ad09d95363054c85f23832b7748ec481e401f59ae9cd31c54b303236ff8ea5d454cebed36d98ceb31312876ee0f340778be7c391535bce32727394680902ce8b80661e730cfdf8ecd03d4121c288a313e3341e0eaf0d5fa0af463962eaf796fa5208c23b176c537206872796976b5b7fcd1730", 0xf4}, {&(0x7f0000000480)="54f90788e976c67debb7a62923187d4344f7b6a228bf2b58f1e3d79d19a4b63ffbb37255865404d566240e18216e0730b3b22422243dc52b927214d8d2d88e616c", 0x41}, {0x0}, {&(0x7f0000000a40)="713155f84479c331471616115dc8656581b36fe9bce780e5404b8d8b214359ef813e7e89a77d71e8adb474ddef0c8da8bed580bb04a86b5a2bac899868bf4ef69829dcc7b086ca8004", 0x49}, {&(0x7f0000000500)}, {0x0}], 0x6}, 0x0, 0x20040010, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9m37.816892062s ago: executing program 4 (id=4182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsopen(&(0x7f0000000000)='fuse\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="fdd4d4af46a33c29c6f6214cb8e6f4212c9b62e1d360070000008cfe51eb0e", 0x0, 0x1}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_open_pts(r3, 0x141601) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmmsg$unix(r6, &(0x7f0000002800), 0x4000000000001e7, 0x40010000, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 9m36.040490421s ago: executing program 4 (id=4186): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000810) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="03030000000000000000150000000c00018008000300"], 0x20}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) setitimer(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) 9m32.239503226s ago: executing program 6 (id=4194): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0xfffe, 0x0, @remote}}}, 0x48) mmap(&(0x7f00001ff000/0x2000)=nil, 0x2000, 0x200000f, 0x4010, r2, 0xc76bf000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m31.666359515s ago: executing program 6 (id=4200): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x7a, 0x0) 9m31.036128584s ago: executing program 6 (id=4202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r4 = add_key$user(0x0, &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="7ed15d12800e89734cc0783aec97064c0ec0500b5718dcf3c8dbe0d097a00b3024b4ec05acd59d0b7f31cfa2699fed6af02f41bee3856c9c91052617fd0f172a03234b210d8eff937daa97ab9041426c52f33452b20a5c85ed87c82f55e6b7fe37f754670f102c9fc04e45f9d0a5ce33e3a7ce98d629e8b7fcfaa15047c8075f630d5db5c52b1f8892c881e8b2c5a941c58d8cc14017b7ab5b210d53ce4aac1910", 0xa1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000d40)=""/4096, 0x1000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x50, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x20020000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000009180006"], 0xac}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) iopl(0x3) syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x203, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x400400c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 9m28.499515031s ago: executing program 6 (id=4210): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) poll(&(0x7f0000000000)=[{r0, 0x40a2}], 0x1, 0xfffffff8) 9m26.672208081s ago: executing program 6 (id=4215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2, @empty}, 0xffffff17) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x0, 0xa, 0x40, 0x64, 0x0, 0x7, 0x1, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp={0x44, 0x4, 0x60, 0x0, 0x1}, @end, @timestamp={0x44, 0x10, 0xdd, 0x0, 0x4, [0x1, 0x5, 0x3]}, @timestamp={0x44, 0xc, 0x26, 0x0, 0x5, [0x9, 0x1]}, @noop]}}, @info_reply={0x10, 0x0, 0x0, 0xb2, 0x2}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/79, 0x4f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 9m24.965493682s ago: executing program 6 (id=4221): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 9m19.647963484s ago: executing program 34 (id=4186): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000810) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="03030000000000000000150000000c00018008000300"], 0x20}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) setitimer(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) 9m9.921061597s ago: executing program 35 (id=4221): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6m56.816685449s ago: executing program 1 (id=4660): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(r1, &(0x7f00000001c0)='./bus\x00', 0x34) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m56.504379199s ago: executing program 1 (id=4664): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 6m56.188393024s ago: executing program 1 (id=4668): r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) 6m48.617143805s ago: executing program 1 (id=4695): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280), 0x0, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') io_setup(0x3, &(0x7f0000000180)=0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x40045109, &(0x7f0000001280)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x8) io_submit(r4, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/psched\x00') syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x16, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) 6m46.527537476s ago: executing program 1 (id=4703): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 6m44.558041605s ago: executing program 1 (id=4706): r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) 6m28.87755521s ago: executing program 36 (id=4706): r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) 1m40.690218436s ago: executing program 9 (id=5619): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "e925"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd25, 0x34ff}]}, 0x70}, 0x1, 0x7}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x4, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x300000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m40.133316439s ago: executing program 9 (id=5623): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/18], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) 1m37.52043244s ago: executing program 9 (id=5627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000080)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40505330, &(0x7f0000000940)={{0xee}}) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 1m36.107191368s ago: executing program 9 (id=5633): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000), 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x110000}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m31.316103255s ago: executing program 9 (id=5647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 1m29.032019801s ago: executing program 9 (id=5656): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000), 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x110000}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m13.973134474s ago: executing program 37 (id=5656): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000), 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x110000}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 10.960425701s ago: executing program 5 (id=5938): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.505187547s ago: executing program 5 (id=5953): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x7ff4}], 0x7}}], 0x44, 0x0) 7.504883789s ago: executing program 7 (id=5954): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, 0x0, 0x4000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 7.320105396s ago: executing program 5 (id=5956): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="701199d551c7a23efa6715b9ac18e0bfb23bcddd782f8a2f72dfb32e53aa5e90d00de2424c090a1feb4901c0d3eb1e78204d20882b54a4479caed1799ddf38d7632d9f968b49c26447240df7c1de6833167e238e3db76f849029c7113550b7302935144e22aeacce6724fcf8bd178b3c6133a1abe3a2ed39fea22e8d7d6ac94bd0125996623fc30509eca49ea5fd9e424e4a0e3fa7404b95de01f10e055074195a532b5fcec17b8476b8f77b18f6a186952170e19a61fefbe05e0600b23794035bbb92c0758f9a3843304e9e0829d441cee8b2e578e68d72c632042c86dbd49d0fcec1c09fc97df05a1b3371e4568b1a9fe4d57caa6a05b564c539de33e19dc9f54db1916fc151173cf60c93ff75135cc98e8aea07e5a76b1088d13139be7fb7416b4ccd5568a4bdf1739abfbab258f7983d1f86d215e40924a8cb6c02394737f138cc09b7b726f80058392b3c177a71f7e17a9f8ba3e982d5615cee4f6d6b378e3b3c1671c41eededcf2c6793185d39531248867d06fe251d4d1a817ecfd5452457587e7162a05014cec1a00654508df2472ecfef5c56063add2ff26de0a9adc53bbd8f6ae14e4a8ed4ac5a32a142aad10a30d954efc229157d51be3d2c60752f9ec02c4abfc9787c21223ed599f67f88e7b9ea804151d07a33856d86ce2e5b6a5ffe313cd5802f0bb61676cfe0574fb3a592e10bf97db01baf6212bc34faf2930d366f22f3cfab7d076e9c9bc0d410732f5cab978829f77c997a2d345f0c7cee6096d9a1cb62083383c4e5d96682a64305b329f2215bbf6ed57bec1cdd4b8181bf85030347b30b16b1814d3de1f8c29f682e9896ef272b61da1976569a42ea8391b7cc672de1e4e9eb1a09062f2d1e725c19b545fbf491cca1fd7f12f2a92e47365594908825ea6f1f0dee6c9c47f59245e084d215a93dffe6485f803e2cb4ba92deba19b1c19e2b47d4f0d1d514c02ce9c9fa46da66de7356e6e2aae9d16cdfe559538701bd294e12750fd6c968c1a9d049a3ce37f8c71baaafa0a89ee5c691e17e1c2943475bbd1ed22a6b24107ca5799ea571886b5e30fdc51cc643f9b1a3de0461a2877df468122b7b085ebb901404eed1d120efaf09830720d430c32fcc06efd13a32c16d27cb37835709a0da65a1460ec02f3d283a38b04bc1ad03917504c653f37011b6dba2466043a7f8ea65563b306e09fc18d04f8fb42fdbabed1051f99e5ae80663216d6d18eb6af60b780d7bbeb10e98f26cba1d54c886e66e8abf296e1eeab9e5046761b8326ae9416b66bc27aa75914a923a8b0f27b4d4382d5f4e973bf80da99538118476fab0249535326a5e033397ff8836245e3d0ca2fb68003bbe65c754ae9fbd7afb0823257e286cd6598626da766993f4dfab0e8d19024ebb066f880d96dd4bb5f5f92bd80ec0b16d797f4a8138ed113f0b14d2d6b763080987bfd2f933dd58f7bd08edcbbcd4b7595064b19371bad169a768d3ea2ed53139909a996bd12cc2ddbacaaf4b1786f06f138c033ba1ac39be5185640a3a64d282e4405e49df51af7f2b18fdb63608e5d24d70202d653db403953e9a8cf89cc65d233eb47a1f3eec2b7503ec1e1c6dfc912784df83fc9c9aa177f7e7e46c0ee71d891317cc7530a0f6ba4a2d2a743ee91c9079aa28ba80547d957dec6b00f16ac06f5d80a8fc1388c9f11f7674a05cf8e58763246f84aeae681fb9e434b54c01999840e71d831a923c538b5b7fff151e4536b2f794f5ac1fd06ca4366a5cd3bcfd5f7f7096fa8457ff9026a1a1d3f98620d0b0ac87f3de3ccbf421ade66aed7aca1e3a1e75c80ddde2151fd4fec0815d4fe4ed9e455019c003e18e74cdb015273f5a0d8e00a6e7caa73210297cbb7779ff708962b51580cd6a7b9f91412d95a219b25ae8c05973d7a4e362020a84d909430a4f9e8f47a56d75c225caa1953b698759cb64893f91b9bc6150ceae91e76e987e12edbefd275fc15b3932b8250c3f37c4e8f1074f341ff1ab17d24c85b21da74cc73c5105267b62a4bddca32e3a92dc8da22f85ca01e097258e6851c13c22d8c96b7551f88bc8b7a59c0c87c59afa52cd8ec645dcf1c69ad215c55d42310ab3a8303253d8a06e5ac33afae53e28843c30ef98fcfb5664513a56e5a2d018fb6672f0ca03d086947eb3655fcf012191c219de5a41c00563b3c5a545431b9d57d8cd52d11dfdff313c1f22c2d067c0bd1cb5ac414ce40d93bb0b04b4f3f51dec81c581e8056939dba953419e427e09327f6ff996f9926135c264a7789f01de021b99fddb21ad6ab3e2b8b539ba6d8de29002dc48d26d9f9d2a7db0f086754d94b9ec0b5fd64310fa6125343bfc83c220fe33187dbfeabf04198b0b854a3e157b52c4c72392b488f2707710220db0573401e8ab101ca2b4a5a77ba27413ab130cdf4cadcf94c37f0576d6bf1a60ee889945167de59590e4b73dbb91bb29f5c22b21d6ad11c2e177933e92b9fa316c2a4e94c7bffda883789728a5f0646e23284514b5da18537d4fd4facf26c1e6943ad86ac4f399c6165950859d2adaff2bf90619253d4ddef06e6d836caad9fb8f1d36ef18b46f54378f3b85c87ba1c1e68606f3cfac4037f903de005f426e10c7b21b4b013517e289c0396cd0f4e3713c052a032f1b808ad8ce2c29e3118de28c7ba92155b772a42f8b4dc9018db4f93ccbdcc77da12298eb2da27eb9f27da19b9d8ceec67b0b05bd0db82d714eb1f674fcc2918795cd933fb72a80b91c4cb2e0e12f2eadad887c068b2cd5d27a1aa6e6ba9b3f50873a58c1102968cd45440a4f159b66aab1360f257d3b66c6a46dab475c201858043ce3bcf0a51276ee49e03534faf00ac8b460f701693e55640680e38ad29b5b041002ceffdb3ce6829492a8b504d2b7e460e2545ee7f98837788323b613a2d63a459152df11f522aab29f9a264cd4a7ec832acfb709409931081c2c9ad0de204a0848f5a5eaffbfc261e0ea6ac237e367a83b8d5d55185745e53f29c3198d3ccb38e8691d3eecd12fc3e493cec844e1895d408f3b81f2ce2955a980e454777427d470a361c86debc45e1cbaf9e79173bfee06a67fe8ad826ee673bf881e5170af80753e98b70b6f10913000a77c318a1e8f5ff5757a8e2731bc4e91e2fdc82b88ce36e7ba6ee58b0c348833c94b9d1c9959a8f75f3ba718beccb957e3cf887109877a1f20de619b02a0f06e685b5430d6c327a3c00a311efb3888f6b187bfb82d5a69e8e971e04e7771b7d8188bba466c21b3b674a756df5a953fa6b5955180877923615ad4bdb8a397670cbdfc2a20bccfd575091ccc86ded3a762c6482381b8ae65a163f59bfa946374467b2f989d1df38cc18dce90f0243084082f7f7711fbba258b6258243f192c7979022ddd81d5914f41b9a3dc17ac2fefde99e7ee822e684eaffdbfee9da824e5c6b6d46c2ce47b0c00dfe690e88d8544a2c1edb63eb3f6e70a848048f0f17ead25dad31f8787910935770587ff5281ce362baaab4d0aa8672e219e5ea0b51448ca3a04537f9d2cfdc234836f72400670531090c93f3e3245d59addf49a965f6856e4d295037d0f4588d74e4fb04df915ed30f9e3e9fd6a03dfcd40c34e6bae186925df346c40aa60f414bf445a691e58727457dc4181c4e2c4e0dc749b2365e455421b4002b7969fa09dc09a61254edfc32dd5552f5c9f8bc61b1c93bbd0be09db5db652eb3519a6660aa14a00001446ff19178a9cae20c18b9cc9b41284b7d93a0d02365c71de0f83725be05bb89d4f308da40418c666e42e53afc686c94cc9162a6d8fda06583705b83d5820a5c451809795f4b7342c70b2eadfa652496d6faf65f8d11ee6ef8445609dd78dd530a7703e6710eabf6ffb277364d7b7c337159dfe6f8c35ab4b37a3b0146d87f55f942d1eb1787a540ed05e8aa26e34d15dc06a3ba103882d45d8c4be48606280091ef07535424583f24dde3fe3bd60427df9bc69618401795c5f78595c68f50aba3ffb66ed0abc3a77921a62f94a508ff15121bd1174759a2abc41ff88f53268dcbcc824cb8c4a8a31b6c07eff5c9d0216bc471f81052bf284424cd04d3b8ff358b5ba631c6e80469e018fd8ebf0c272b7ed5f8ad35ef7bd62d73533f2a80fa8c45e8ed05e82bed5954069582f1483f31fa90c2cb7c5c0e79cdced4a2035a45a71ae8f5e4eef47896bfa9bfa5337ec831a0bcdaf303312abc0edfd807acfca83ce769f2edd09ccd90c7ae69d84ddf1b94faaaa9e1ce9e57c0fb1b4cb507c83e6b316af85ecf1ba9ef9fa35629eb115acdb254b018bde5df5610eb0451a8afbb916ff8157f1dfb67e154f5d44063851e12e2ff8c494bccad68d27c5e3c7e310e211b3256615ae8faae08a8117b7fd1d0a53847a00b96da8e93839c69ed26c8b56004561b18651b2a7e0ff561ff3228b92d033a09bbacf0a59d0ba8e0eceafa9961804ed41026b0396f663108c949ba63d0cc1da999789af2aa693164e1c465ae1ca2a61b76615dfbca026b812a78dcc748d19a0aa106139547536de2af3913ad2d2e3d7e182e6225f7362f709dedb0663644d0c46b13924602fd2043c45543801ca1924e43acde2336c4c89c7348d53825d0983a165397babe990ec427de0968e087f374ea235b04c603d046391d646cfb0c9411c14c7f713d5feb372babf56dafe5bbde0f64312896613f98feb6dd46929c565792910c6a6025aaffb1c930e82899e6e60d47f7c3ad1b49b2aba7ea648f7aeb294f24a5adae2833b95843ef37c9f80a32b7933c2b6ba96c4690d063ee8176a8003b50f7ef780a4be9f7f56a395b0c0a8d6ddff53fca6aef971cb2ff12790d46d4ec604e460f56ebc6cf489a5607d0828c7a454c326bcc1f610996dd54c33ece7732bdbb00979e2254007daf5a91a553d6c365aeb6b0b35b5dd869094518f1a0358e7add9a6a2bf3245446dcf5e181eb029b4317fc362beaaf02d08c6f0ef29a4f843318b440aa27f7b70433518e0ebd9e123230f11eb53e81c5601d3b63815acee14621d4d284e8825993631b77e40288f0c5c50630e71f907aaa64271e6cb0aee1409eed3766393745eb6f0a2dfc8f34283f5e9d320e9f734d80d4d5d2c333d8b4ab9fc8beb8680eba63d65595ea6349f86ade853d517e5d94699ebcea2eb822e0ad62923c56adcdef309c054e899c272e36c8e9347dde9c4d7d138d1c4a9843d93a8d6e0246c91c154dc1102dbb53b82fd55aec4eb778574691294f9e4f709e1354d3dfc5f8360c97d24c4d691959e6ec4dd839009cf021962936cc6dcd1f0f83b41b3bb259a43848c3027ac557c5c05c4ea44d009b24cc6e0ebabdb20f2b847b2635c2657790dc73688e9911a50e10a0d23ee2b6bc2b427093cb7c2318195e9425d788547c97ddbad91d4a69910f62ed536c290af20586600a09995048a86d9c930bd7f3513ad3e5be2a70c8a0bb045bbf63c5b1f002bc701b2384dab626a587cffa1d3640d2b75146f9c56dd6382dfc0fa055dc9f0ea11c2ec0d1622a0c349667ec1be528889a0989d74e92960cc79721c5f8f36bef9c74cc772ea194d12eb82a91291edf6d90658e553c170330a59bd10e2a895c0964c40fb2408b18d4a2ecd57309048260c0ab35c8f347987238215f704f89323ec6dd0bb0cdc401298537d43d40334c76e817006281d8785a8cef78e3d5a6a1f0c0fb37d57b880c2cb220aa84a3a3ec61e4150864c28e448ba5d9b768a19e84d8aa6350cd41c7d02c40ce6bd2d670e9103bc01ffe5e8186fedcc432ec883bafca6046c42e264c19c68dedcafdc6450e2659dd4cffeb2b4b4b33b0b48f4203ee003db4622d396362e03f376463a47fe9e7c9b0b36ca193984448e7b8b108c264d298277e825d56b8a529642dd472eab52158448f4a38b564a2fcfa5b6e1cf2f4b8f3446db0e5ab5344ee08360efd6f2ca32587e3d6a52b30c8f96e16c7d327ae52bb213a54380f5adbe5412b99cce2e15ab3c8aa65583afe52cd1dcb5ab05a82dff53a39e2a311ffcb62d583e1ac9626f02e076900ff47503847bbf0cd71be11e8c4053a8d7edc70cc33c76cd6f62c6fce060ebc580326ebc44c878b86d35b1c43a8854e57f311fed2aefaad972e99d481607cbf9e266b11b7089ea694d363710aa664f6ec5c2ba0868290ef7eaed1dfe81333493ee37e01ea22dc01e7fe6179da945887fab1fa46cfb669f686f4b994ca739632fb3ede7173910166572a60ab3c685d7c3f9fc9acf6e86ebf3105856a328d7134b8ebee562b828cc046ef74e04b91624e289a816dd24f800633617e2dd89ea17eee89965657909d6c0bc0fd71d92330bb78a15b41d650b95833fe140a65b4021b0fc21e4778d7e4e181765bf19276e2997bc7823722f934f9d74fd8d32ce98f118885492eb762849b8cd51875c374ea8e97b284288ef0725d29dc512ba24e42ca76a4721d165804c587605225c48215c10cd31c0b9ea1220a849b55bbecfeee5e319f9b8426f3fe7aed1050d89b6e6c2d8d623784a6feecdbe6d82fea6921a6c788b4d4763d75fb84b51540c290d34b18c4c6ffaac41acd5135bbeac35defaccd4a78f685fc997dc2981589923f3dc45384c31efac241fce43cc80370d6fc784bdac116c889cb1b5b477cb55fda89519f6af505b4e4195d7a969bfdab4a18de523943d5cca183041f48375f7e6b9d00cea851ec86959ef501007baae53b99d6ad5d0c49af8abe197a610652e6928d228468668ab370ecf5c9646c3b8d59d6f62cd2312c25241d54a316da4481c66147300723d88e0cbf989398fc01bb9b4b58b123b2e35d11ed174a30517aa3e6d388a70275ff5df25783ae827a41acd99d3c7b1937c17ed8ac6c8cbadf2e35b11738d0f1439f56f6fc87e027733740f6a2c77d2cc4b26fdc52efaa4da4ea08aece5c2436552590a9f4d2d28ad1750ed8af9f931beba2b3f75b96542480c83e7be32e04b05c77d934f74704f121ea0b02bbed6279efd4c60360e891b7a0391e174be354a7f671ad4b1aaa89fa195c9d631dc29082d906efe7b09b6578f805c83fa2a0d914239aa5831b798b1401dc19f1f1d00c0d86d3601797055c2b7126d74d8916164d26b94087f96d5a8fe660957413c1eb7056bcb645fdad4cb8d95c771ebc152ec753aefe74b413880495082d2077d035b99d8a301eaa1b9454966deadedbf6c1627ef4b9bddb454b48445bd057e8ee887910bd7825e7490514ee6bd423cc36b8329b6ef4680d9643cc83b24b1f4038b1564a6256c98b9814b53ff90ac5e1215f2fa0ed31604eb00986aed09c46f198d2c8b8623be8beca6a32dcf74990ee709c7637f7315519561aff8a4ca52d5a315f944be09edd23722415520a85696ed96ac4b1747bb4e04ccf79e79aa23fce036c197c7caf1346af6faf3aebfd60be2687577273dafab511c11153bb63b7ec6ffb520ab9874ef0de11909da41b57c65554cf1c71a5a2148b32142ee20dc3b5d4e0d763ff331ba344b4c745364b1ed5b32ce0861b90cf937833d8a674a68ffd0e4e629d20508178d36bcf641363ba21468887a6141fcf13ab2c1fff7b9974b58953ddbc1e8f77c755a641ab3afe6d8a7d56eef3d42e552bb0ad71406bb5ab29f918e96ec09301bcb0bd2e111588bc66803fe53ec87f06521f3100c6fb84461ea24512130e0f2e8798e05af152b76fdfa89b48c80664936c5d4cd48479d0e6cd6989c447a6cfedc19610fa1db00dcc563b32a333a2e79b550399a75ca2f12830ec063f772140dea49a8a7453e049609bf239c13f1d26a3f6192a412449c49d005132730a267b2691094651e9823746e5e11047c9e3ee8e8605df437aa8a6c74528df44a3e275068ab642e25d3d0949b71a8ce749013a5dc62d3ede13d29958e16635f5f765f3515b08e13bee6eb44920c62271fd32b36c0af3e77d9b8e05659a3d540f6b063bb6c46fc69d36d6b9228acbc68a870ca678e511e58cb230af022f65fdadabaa1a2c02786986ddb77a61c048b07c986d45472544b542263e35f09c9c39cd6f6ed71921f673c77ea1da604ce004b416ccbbea73c2d134b6d1baa05e5811bc06303c4bdc71623b3058adad2d75ac15233c1edd74156294ac68df4df507817d158a6c632369c8d9905768e249901ba72cb8819f9ebe113954f0373b096ecaf2337b05d56e605bf7487ddab30d9cc76a6a4b8b847cbc08c0ae8ebf918845855c3868b111f0ba1b214e001215a0bffd80b91fa765435a202a7d0f7cc74d23240953f82470fd25dc79ba0143477f78cda879c260a8632c1a44e7422690a91c183d3b8481a44a1c948511a6d5dbcaeefc608100a840320683f58f349a7f077b933a79ba1849cd99e92ab30d5f74b54c4673c94c79bd944651000b744767701eab5d9ce8eebe1a9104295599f867471523efe18f3dfac45e06734318268ff9a0bdc0d2963483301a147c6fa53f352da5471580349567fc89f2b296f603c796366f0ae5c64ddb8e213373aa251535ce34ecb0358490be82647a8fc524ad77849ea22eb52be709287f19128c1c6006e394b78308980e7232bb34d0711964981c97511f113a295d1a8da62680bc5b05ccbae8b8ff2ff416159a5177c44f284301a6ef74a1f9fe5bffddde841ab67008b986f463168a9c2a9a2766f0b38eae4398b1ebc7dee4e8f1b1a98df3d72e990c71c963e2111a1307aa19501f2dc87e1b049a33a052f61732f674e8e132888e51998452ec3bb417de76fc680d0d5c5630eafb423dd9cc9dd4c685723f7ebfbd783d9290a8904044f9b2021eafa76aff82949b149ef61d36025a8aeb4d4a0c3ab15bb02b44cd891f199525a6c6bd1ea75e9b1b52e2cfaa50a7d06600c07a1b0ea46624b968117b0d7310437369b1e025a1d208025c2f1cadb2a4f62be931af84ea679952c8fb71165adbf9b3cfe436bcbe6ef540bdc334e3dae3a4e675392ec6821dc8bc844b3017ad628d22528f500a500d5e280e436b93278fee63f1cf2d2171e31d5e0c3d33998d0a1107237451f17977747927de2c6ffa8af62eaf6e9e41bbe0602c56136a7965adca7a3c8286b011420725ac4ad22c13b1c53aae1f3fde1ecaf22aeccffa6b5a8d269f65e0af4fcb74cd9db6d4603515044366220e50a3d5a9a8a3bbf04a7500f0d0ca69819540669455cfcc3d11f49f16468730568d36ba7190fb959fae6d6808ee806a81e47b423ceefa950ed5c2eca38e5069c40c936caae18f1c3f3957f4ee21660c44b188d7e2bba44fe056e92804247cc8f3aa476cb705f7e3db5d076200bb797ef1682f8e8b255a256f3ff45674e0761365237bea63b61ac0f258ace064d6577d6b4ce66cb88cc3924a990ba5dea5f0dc77a495d884fa0e6d92d41a158c0a7e39166ca4a600954c1338144cb20c2323933fd468d50e3f0781cfdc9e92a5cfd6afc8c3265e43317f4d903cb793f353f0fae8dd8c8cdc3ab024cc4ef841ae133d0eed3782dfc5ba76dce6be566b385baaba1c50b809526920a441708adf3c6b3429a0bc943c97956072a0e93c36aa8ed491881a91c2300837e0e64019aea87655b4f8c4983b54a5315e9ba6d163ecf1cfb2f3003614c68fdb265916b439d91b8b5db62a4d7e57ed1f68d8cd0e1e8a6060d4bc0229b67a8364449035509b3a12c41433f33cdbf7db94ee01015f61fcfbf8b37b3c198b3eb66a17ae8e49997c1ba723221c8206f5b6a8da6b42f07d4665a6c19ec320f6b36b743bbd580c2bf9420fa2bc9d4667e087563d8a3086cf1bb7e3afd8ab570c3f535e37844e6f18bbbfe317d9fc92c7da5eeccab6a3b772479c451fce9f554426ffc5ca7da7da2a1115a6705af33d99db0448f3805f66883002050c2c0eb975fd13c6a410704b607c4f8f2f0c0dca3f7ddb90fec0a17b15c55b1aa2b7e26884acb3fb83dd1a4ee9f114cb6718483be3c955a482b30253db73e31464f4d6e3633d8f920158f7016e8a8c67b06232dbbad25446af968e3bb87d4f3d99ae59fff716fba91fa35dce0eff54c9e26a0c78ce1c4a4f915694c466e1c1431a916abdae7cf371248c7e7968407d668aa7f67e466a295b78fd716afd27cc757b2fb5892cf874d2d813c347eeaeac71fb8317ab13b267ab6492a6800050661b035cf40a0d6dd87b218a9192978a8526e5080829e2219988bd6788a4d40921c3584b45d7068de52fef2363941c589f19b05ca4fc0dc0ea821053895da8c011f21e14e0cbb293e961dbd7aa74f282ae4b2b78c0a4ba0b3926feb85d324783afe2bf0364e2d86e855d50cb6f3420d59c0ae365ee40bbb61c018bb094be423de21fb444a4c5082e897a70d1ab53f1eeb0e1f1ac87a6a91da46c88bfaf5249ba253674111a3c2e23f3088810215d6823b168de464296979c877e49f8df84789dd3f6520d0bdea8c6442b25e170336cdd37764bef39a60253be421cdb5dd2566a1020598ade0b44d6455fa48fb1ab3408a32a3b957d33e11a07edbba511e1c24f1f813dfdbcde259716ac3ba9f331ba23147a4ef689dff1e8f2c68c32e9f38f938348a211218368988bb1373bb12210ffb044f574cd5cdcbd26cf9b3223e0da820f60a8838dabbf7945264f685fb546fadfb4aebb6b48ac49ea16fc0c6e6990ba665e23d6cfdce41d6970bb4d2775ee0776b7bcbb963cbd375b50140482d17bbd1aabc982bb2267ab8bd67f339abecf67d4626aa7723e900c778d0ad038238403f3bd0df055fda3ccd4487d090b0fde8939444281eb59ba09b4e1d9298b3712c34e5420c0bec7335b880b5b6447b9759d593b0e9a38ffa7fe6ad6ee38354bb74fe1ac7b12c29cd391f5bfab13ecbc6ce2c1d0829c6698ed992ce4f622bb6a1883363cc89595644adcb32781096320d12718f1fb3a667aea6fd6a802c06e5a137b763f1bb9a4385cf55a2742faac4243fcfa0de0988f77fd91e404bea896be49ed752b74bafdfa4541900ed35e7a129f86f3faf3c02e915e1724b9c8e5e86005ad05d311a2b568b674c50ba18daef5f415e15b663bf0a1fe7d9626e843e20b7f1fcadef2f2929ccaa2573a7377989f3a1ac6cb087e7ec8f3523d9c3a0891438ed159e2874b6334c2797e4354a5553ab6325f2f25dea51008ece3d300da3b42937e6bf857b764c3b84f5715bd386dbc1cbece21ca0f016a8d5f5d13cbe02289e767ad1d7fb35f412e3178eba8999c373a6831e358f2c97bba880e7e7f4a763676821935e1acd884ccd0a1a5051770239dc9fc14731b3c2cf0d25b0d10509ddbbeb51d6aff07190f313e8b0c997303db375ae1b21e456fb69c0b477702a0dd02ac542d5398cea3c44e32f188846043dac6ed07b0c0e1eeef045d3f5ba3f5404c51af1821f8a0a1042874c36053bc27a2932a1754c9ab82b741a93b413e8b712e99776e836c97cf693a8a2edd52996602fb2f54c043c04f6f59f161e26ca7587321398b7f4e861a2e4238888d0499bdd83e5e95f8ade2941f7eac907a4fc31ee5e52c8072f5e5bb993d625daf202850294a0a2628b3ede421fb039f7b1a3019e969376a97a4853179061935cc5756aee1e1bbda07b4f1e1ff5d95be73cbe0cd104b3e253fe3bee06d389ec07b777a4a44c", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) 7.13421242s ago: executing program 2 (id=5958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r4, 0x12}, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050003"], 0x7c}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x23d) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0xeeb, 0xc10800) 5.876282115s ago: executing program 5 (id=5960): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x0, 0x1, @tid=r0}, &(0x7f0000000980)=0x0) timer_gettime(r1, &(0x7f00000009c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x44, r6, 0x207, 0x0, 0x0, {0x4b}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x34a) 5.858641236s ago: executing program 2 (id=5961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002840)=@ipv6_newroute={0x2c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd}, [@RTA_MARK={0x8, 0x10, 0x5}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044081}, 0x20008051) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000240)=""/194, 0xc2}], 0x2}, 0x40002161) 5.812976517s ago: executing program 0 (id=5962): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004f0000/0xd000)=nil, 0xd000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000015c0)={0x28, 0x5, r1, r1, 0xa92, 0xfffffffeffffffff, 0x3fff}) 5.76045825s ago: executing program 8 (id=5963): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.713634667s ago: executing program 0 (id=5964): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r9, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000180)='./file1\x00', 0x2) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) unlink(0x0) 5.46159912s ago: executing program 2 (id=5965): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 5.458236825s ago: executing program 7 (id=5966): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x7ff4}], 0x7}}], 0x44, 0x0) 4.843996023s ago: executing program 7 (id=5967): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x44) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 4.764340201s ago: executing program 5 (id=5968): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) fstat(r3, &(0x7f0000000880)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000280)={@empty, 0x1, 0x0, 0x50, 0x0, [{}, {@multicast1}, {@private}, {@broadcast}, {@dev}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000300)={0x20, 0x23, 0x93, {0x93, 0x23, "2781c346c7dc228cdea8dd706940ac54c0d980a12f6f939534cd59831cf3b3cf0769444c68a0d9aff8c6b9e0593651b2658c998ea8f2349bca37d7218e4b998ddb7598595e13de1c131de9ea242c20bad683f91d0cb82439a7fbd77605ecd064c88df49bef3756197d96d75c5f99cbb25737defad8099fc2584a7f1ffc69eb064ee0d5c06754eee565667f788a9b25ea1b"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000000540)={0x34, &(0x7f0000000180)={0x40, 0x1, 0x17, "246d363b84b86663679bd4b4436533d0cdd8ab30065a9a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x9, {0x7, "0a87682c246c13"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0xf9}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) 4.132471828s ago: executing program 2 (id=5969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.132154185s ago: executing program 8 (id=5970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x5e40, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711935000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.555252715s ago: executing program 7 (id=5971): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x5, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) 3.488417367s ago: executing program 8 (id=5972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x354a, &(0x7f0000000480)) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) syz_emit_ethernet(0x16, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.453530097s ago: executing program 2 (id=5973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r3, 0x12}, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050003"], 0x7c}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x23d) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0xeeb, 0xc10800) 3.252471472s ago: executing program 0 (id=5974): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000015c0)={0x28, 0x5, r1, r1, 0xa92, 0xfffffffeffffffff, 0x3fff}) 3.183333765s ago: executing program 0 (id=5975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) close(0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2.640699059s ago: executing program 7 (id=5976): syz_usb_connect(0x0, 0x45, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x3a, 0x50, 0xee, 0x8, 0x20a6, 0x1105, 0xc2eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x4}]}]}}]}}]}}, 0x0) 2.583728835s ago: executing program 0 (id=5977): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x7ff4}], 0x7}}], 0x44, 0x0) 2.5831871s ago: executing program 8 (id=5978): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @remote}, {0xa, 0x0, 0x0, @remote, 0xffffffff}, r0}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r0}}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x10, 0x5, 0xfffffffffffffff7, 0x9, 0xdb, 0x1}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.418041453s ago: executing program 0 (id=5979): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x44040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000, 0xffffffff}) ioctl$KVM_NMI(r4, 0xae9a) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2242421, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000040)=ANY=[]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.504475889s ago: executing program 8 (id=5980): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000250001000000000000000000030100800c000000000000000000000014000100fe800000e0ff0000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0"], 0x114}, {&(0x7f0000000680)={0x2c0, 0x37, 0x200, 0x70bd29, 0x25dfdbfd, "", [@nested={0x245, 0x9e, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}, @generic="78e674f8736b9bea528c87c1dfbe9218f483b517cba24d4d65213b88907aef2e3cfd7307593cacec4aeaa5af296696ea8ae4ab955482b24b3142c58f9da301038edfdcbda5281007c72536a9a2d3919d79f3408f97888ec41bca7a8c608a3279ba6b7da524e9662ac8321b2fed724523966e700ef1849d38bed9f4f553e6b8cff01c9964d2aaae59b66c7811987745b25fb8835a9acff76a7122be4e36cba2fac8eba098eb5aa66b69e4138bd6466ab4e02b919c1dbac68e05b3fa467311d13fd7c06b3bac41b60123", @generic="78138397a8a81ff36b5c0fde0afb5b9e687986ae69e29250462502e67a31b320fa56dc78c84e68e5f2834bc7c8aea7ecac9de729f49832db6d08dc51715f42a77b88d8eb2130432d0fed76793861a35c4f9b7abb070831864cbc44ba243f8d79a929c39df40beeffa28f2b8a107c59bdbe4af9793874e0840e6aa4a6500b07d691e0e995c28d3a3ae2ea453c2a33712e683a285508123c3da63a6cc640439b682d5c5832baf872", @generic="e3c9b65fedd2646fcc997fea0cab1e849e8e8d35e66549f95044c47d4527721f3805012f7ef256049dd7b47af667e99f40f97437050f5dd32e6c1f287b582c5c03bb3a4232f92fe26cfb39967ac899a985ad345bdf3457ae9ef54b1c7c77ac4f893964a02fbbe8bc7725a8b910c533772bab04a06ed3d93d79914876d592fe01fdfda9a29b66d43ebf9871fe41d01740532b53fc76df9a506667ad844e6365829a37dada849b8be9f83a040bc3dcc2e680c9d0e423ddf9486929ac5ae52ae964f01077dbb6", @typed={0x4, 0x13d}]}, @typed={0x4, 0x54}, @typed={0x8, 0x17, 0x0, 0x0, @uid}, @generic="0e1638fa59577e2b7f612dd0cfcfd052c484094bfddf24a13bea4f8326ff2b37d820c5e8a116caf50a8df078635bc4eec4669a8f4de9d89dcda0419387cbed5571206b75050269aaa46c4d37e244872851321b107d8e12e4814e21"]}, 0x2c0}], 0x2}, 0x0) 1.176069504s ago: executing program 2 (id=5981): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x2a) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_clone(0x3a000000, &(0x7f0000000300)="eee1dd3434ba23f6dee98a5935399bb047cdf05738b084b00d03021a3a103d1d7061e7a92054743267be32b1c1b9de5afe182529d5f39dde7d8ecf981f62bcde81bf493ce0e8f85052f71e0d2ec951fd30a22b5ba780f11a1f628e8232c3ac2c73913101cf70cc297159e6e18fcac7d60b52cc26161202e6863fe3a4155c3301707cb2681e3b2c5c9787bcc2e79d57a77fad4a48588875bf78c78b92b0e33a19807067ba", 0xa4, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000400)="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") syz_open_procfs(r5, &(0x7f0000000180)='attr/sockcreate\x00') 556.071997ms ago: executing program 7 (id=5982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x5e40, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711935000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 131.865886ms ago: executing program 8 (id=5983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 5 (id=5984): unshare(0x22020600) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe336, 0x0, &(0x7f00000000c0)) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040), 0x0) getpriority(0x1, 0xe6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001100)={'\x00', 0xf47, 0x8001, 0x8f, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc000, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) lstat(0x0, &(0x7f0000000e00)) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) kernel console output (not intermixed with test programs): dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.397569][ T5945] DVB: Unable to find symbol lgdt330x_attach() [ 902.403929][ T5945] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 902.429277][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 902.436335][ T5945] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 902.495345][T19275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 902.514661][T19280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.547513][T19275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 902.558451][T19280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.577125][T19275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 902.696861][ T5931] usb 1-1: USB disconnect, device number 115 [ 902.723206][T19275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 902.726206][ T5931] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 903.973828][ T5857] Bluetooth: hci4: command tx timeout [ 904.042177][T19275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.058110][T19275] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.267617][T19275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 904.348200][T19275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 904.522604][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.529846][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.034797][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.041878][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.995201][ T5857] Bluetooth: hci4: command tx timeout [ 908.047311][T19275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.113702][ T5857] Bluetooth: hci4: command tx timeout [ 910.437334][T13094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 910.459013][T13094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 910.467226][T13094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.485250][T13094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 910.503588][T13094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 910.510826][T13094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 910.572453][T19275] veth0_vlan: entered promiscuous mode [ 910.883575][ T1204] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 911.132084][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.170588][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 911.181651][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.213273][ T1204] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 911.226853][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.277591][ T1204] usb 2-1: config 0 descriptor?? [ 911.294811][ T1204] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 911.316792][T19275] veth1_vlan: entered promiscuous mode [ 912.262260][ T1204] gspca_sunplus: reg_w_riv err -110 [ 912.267803][ T1204] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 912.440517][T19275] veth0_macvtap: entered promiscuous mode [ 912.458685][T19275] veth1_macvtap: entered promiscuous mode [ 912.616929][ T5857] Bluetooth: hci0: command tx timeout [ 912.871386][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.455207][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.712731][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.238135][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.282605][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.303551][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.325293][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.347951][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.369878][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.389917][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.407001][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.420283][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.438947][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.451203][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.486674][T19275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.540218][T19413] chnl_net:caif_netlink_parms(): no params data found [ 914.558692][ T1204] usb 2-1: USB disconnect, device number 110 [ 914.571699][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.633191][ T5857] Bluetooth: hci0: command tx timeout [ 914.666932][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.717219][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.730601][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.772228][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.812011][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.842777][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.399484][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.409559][T19275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.420161][T19275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.431389][T19275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.270934][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.302267][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.713220][ T5857] Bluetooth: hci0: command tx timeout [ 916.717661][T19275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.749393][T19275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.758475][T19275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.770312][T19275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.423570][T19413] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.430644][T19413] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.438769][T19413] bridge_slave_0: entered allmulticast mode [ 917.449331][T19413] bridge_slave_0: entered promiscuous mode [ 917.506848][T19413] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.524928][T19413] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.555934][T19413] bridge_slave_1: entered allmulticast mode [ 917.563823][T19413] bridge_slave_1: entered promiscuous mode [ 917.639090][ T1150] bridge_slave_1: left allmulticast mode [ 917.651983][ T1150] bridge_slave_1: left promiscuous mode [ 917.670514][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.718638][ T1150] bridge_slave_0: left allmulticast mode [ 917.735369][ T1150] bridge_slave_0: left promiscuous mode [ 917.759054][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.793774][ T1150] macvlan2: left allmulticast mode [ 917.810555][ T1150] macvlan2: left promiscuous mode [ 917.821602][ T1150] bridge1: port 1(macvlan2) entered disabled state [ 918.522198][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.546694][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.570766][ T1150] bond0 (unregistering): Released all slaves [ 918.621452][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.649914][T19413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.693842][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.740786][T19413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.790777][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.804284][ T5857] Bluetooth: hci0: command tx timeout [ 918.858109][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.532400][T19413] team0: Port device team_slave_0 added [ 919.589790][T19413] team0: Port device team_slave_1 added [ 919.809589][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4231'. [ 919.818768][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4231'. [ 919.828781][T19535] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4231'. [ 920.013918][ T5931] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 920.659716][ T5857] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 920.683588][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 920.690424][ T5931] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 920.700040][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.770508][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4280'. [ 921.374533][ T5931] usb 2-1: config 0 descriptor?? [ 921.374943][T19413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.476428][T19413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.502515][T19547] delete_channel: no stack [ 922.078255][ T5931] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 922.103334][T19413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.142585][T19413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.189839][T19413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.266628][T19413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.469113][ T1150] hsr_slave_0: left promiscuous mode [ 922.482656][ T1150] hsr_slave_1: left promiscuous mode [ 922.521887][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.561850][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.570629][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.585113][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.619627][ T1150] batadv0: left allmulticast mode [ 922.655753][ T1150] batadv0: left promiscuous mode [ 922.806265][ T5931] gspca_sunplus: reg_w_riv err -110 [ 922.811865][ T5931] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 922.939922][ T1150] veth1_macvtap: left promiscuous mode [ 922.982334][ T1150] veth0_macvtap: left promiscuous mode [ 922.990264][ T1150] veth1_vlan: left promiscuous mode [ 922.995707][ T1150] veth0_vlan: left promiscuous mode [ 923.919751][T19588] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 924.236318][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 924.327695][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 924.923451][ T5931] usb 2-1: USB disconnect, device number 111 [ 926.793955][T19633] Bluetooth: MGMT ver 1.23 [ 929.203339][ T8] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 929.376965][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 929.383452][ T25] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 929.410883][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 929.420276][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.441534][ T8] usb 1-1: config 0 descriptor?? [ 929.455314][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 929.713180][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 929.753185][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.759858][ T25] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 929.769128][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.779666][ T25] usb 2-1: config 0 descriptor?? [ 929.796121][ T25] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 929.804778][ T25] usb 2-1: selecting invalid altsetting 0 [ 929.810536][ T25] cxusb: set interface failed [ 929.815324][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 929.825223][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 929.846399][ T25] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 929.863330][ T25] usb 2-1: media controller created [ 929.891699][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 930.007146][T19651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.016023][ T25] DVB: Unable to find symbol lgdt330x_attach() [ 930.022212][ T25] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 930.033004][T19651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.049717][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 930.075919][ T25] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 930.129076][ T25] usb 2-1: USB disconnect, device number 112 [ 930.173507][ T8] gspca_sunplus: reg_w_riv err -110 [ 930.178807][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 930.189107][ T25] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 931.686970][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.693724][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.134405][ T5944] usb 1-1: USB disconnect, device number 116 [ 932.402375][ T5857] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 932.433644][T19413] hsr_slave_0: entered promiscuous mode [ 932.941450][T19413] hsr_slave_1: entered promiscuous mode [ 933.002497][T19413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.012517][T19413] Cannot create hsr debugfs directory [ 933.640684][ T1150] IPVS: stop unused estimator thread 0... [ 933.646799][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 933.823626][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 934.256957][ T5944] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 934.437616][ T5944] usb 6-1: config 0 has no interface number 0 [ 934.488846][T19413] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 934.505657][ T5944] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 934.514810][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.522839][ T5944] usb 6-1: Product: syz [ 934.527200][ T5944] usb 6-1: Manufacturer: syz [ 934.531804][ T5944] usb 6-1: SerialNumber: syz [ 934.537712][ T5944] usb 6-1: config 0 descriptor?? [ 934.546580][ T5944] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 935.074984][ T5944] gspca_spca1528: reg_w err -110 [ 935.093969][ T8] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 935.138098][ T5944] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 935.382358][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.395800][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 935.410104][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 935.422165][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.453711][T19413] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 935.467895][ T8] usb 2-1: config 0 descriptor?? [ 935.476703][T19413] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 935.477987][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 935.548431][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.598196][T19413] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 935.902517][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.500551][ T8] gspca_sunplus: reg_w_riv err -110 [ 936.506614][ T8] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 936.798517][T19413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.290541][ T5930] usb 6-1: USB disconnect, device number 4 [ 938.687747][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.122940][T19734] netlink: 208 bytes leftover after parsing attributes in process `syz.7.4324'. [ 939.388491][ T5945] usb 2-1: USB disconnect, device number 113 [ 939.431183][T19413] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.575384][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.582544][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.633848][T19761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4328'. [ 939.666082][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.673241][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.703715][ T29] audit: type=1326 audit(1730629557.824:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19757 comm="syz.5.4328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61f9d7e719 code=0x0 [ 939.992606][ T1150] bridge_slave_1: left allmulticast mode [ 939.998647][ T1150] bridge_slave_1: left promiscuous mode [ 940.043152][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.795136][ T1150] bridge_slave_0: left allmulticast mode [ 940.801026][ T1150] bridge_slave_0: left promiscuous mode [ 940.814707][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.901144][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 942.564704][ T5930] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 942.616015][ T5944] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 942.773559][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 942.836482][ T5944] usb 6-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 942.914732][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.100630][ T5944] usb 6-1: config 0 descriptor?? [ 943.186967][ T5944] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 943.463267][ T5930] usb 8-1: Using ep0 maxpacket: 8 [ 943.471338][ T5930] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 943.480659][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.488759][ T5930] usb 8-1: Product: syz [ 943.493027][ T5930] usb 8-1: Manufacturer: syz [ 943.503252][ T5930] usb 8-1: SerialNumber: syz [ 943.514861][ T5930] usb 8-1: config 0 descriptor?? [ 944.276736][ T5944] gspca_sunplus: reg_w_riv err -110 [ 944.282051][ T5944] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 944.287549][ T5930] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 945.034082][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.083966][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.125745][ T1150] bond0 (unregistering): Released all slaves [ 945.198548][ T8] usb 6-1: USB disconnect, device number 5 [ 946.124924][T19413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.282853][T19833] autofs: Unknown parameter '0x0000000000000000' [ 946.703981][ T1150] hsr_slave_0: left promiscuous mode [ 946.710358][ T1150] hsr_slave_1: left promiscuous mode [ 946.732924][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.833546][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.008788][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.022381][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.361805][ T5930] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 947.472554][ T1150] veth1_macvtap: left promiscuous mode [ 947.508259][T19848] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 947.564764][ T1150] veth0_macvtap: left promiscuous mode [ 947.570606][ T1150] veth1_vlan: left promiscuous mode [ 947.572364][ T5930] usb 8-1: USB disconnect, device number 2 [ 947.616788][ T1150] veth0_vlan: left promiscuous mode [ 948.155173][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 951.640800][ T80] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 951.819147][ T80] usb 6-1: Using ep0 maxpacket: 8 [ 951.849954][ T80] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 951.867482][ T80] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.876466][ T80] usb 6-1: Product: syz [ 951.880971][ T80] usb 6-1: Manufacturer: syz [ 951.901049][ T80] usb 6-1: SerialNumber: syz [ 951.914752][ T80] usb 6-1: config 0 descriptor?? [ 951.966484][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 952.070310][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4366'. [ 952.096854][ T29] audit: type=1326 audit(1730629570.234:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19903 comm="syz.0.4366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44c597e719 code=0x0 [ 952.100027][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 952.150037][ T80] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 953.229675][T19876] tipc: Started in network mode [ 953.236304][T19876] tipc: Node identity ac1414aa, cluster identity 4711 [ 953.245116][T19876] tipc: Enabled bearer , priority 10 [ 953.322262][T19413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.258136][ T5944] tipc: Node number set to 2886997162 [ 954.742220][T19413] veth0_vlan: entered promiscuous mode [ 954.772999][T19413] veth1_vlan: entered promiscuous mode [ 955.070812][T19413] veth0_macvtap: entered promiscuous mode [ 955.122484][T19413] veth1_macvtap: entered promiscuous mode [ 955.139038][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.149618][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.159764][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.170294][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.181231][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.191784][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.201805][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.214635][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.250730][T19413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.275494][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.512124][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.522121][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.538378][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.621982][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.766522][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.930828][T19413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.177600][T19413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.235887][T19413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.255741][ T80] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 956.280362][ T80] usb 6-1: USB disconnect, device number 6 [ 956.332815][T19413] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.363997][ T5857] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 956.364545][T19413] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.381063][T19413] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.390373][T19413] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.535397][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.563307][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.889595][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.916295][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.828843][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 960.970269][ T5857] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 961.043754][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 961.078045][ T25] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 961.103530][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.336004][ T25] usb 8-1: Product: syz [ 961.433335][ T25] usb 8-1: Manufacturer: syz [ 961.516441][ T25] usb 8-1: SerialNumber: syz [ 961.677436][ T25] usb 8-1: config 0 descriptor?? [ 962.586638][ T25] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 963.007048][T20063] autofs: Unknown parameter '0x0000000000000000' [ 965.336172][ T25] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 966.459364][ T25] usb 8-1: USB disconnect, device number 3 [ 967.372355][T20107] binfmt_misc: register: failed to install interpreter file ./file2 [ 967.933215][ T5931] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 968.093554][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 968.120719][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.122217][T20116] autofs: Unknown parameter '0x0000000000000000' [ 968.149541][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.203229][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 968.243555][ T5931] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 968.263195][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.314523][ T5931] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 968.333543][ T5931] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 968.341604][ T5931] usb 1-1: Manufacturer: syz [ 968.447209][ T5931] usb 1-1: config 0 descriptor?? [ 968.822144][T20135] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4414'. [ 968.935342][ T29] audit: type=1326 audit(1730629587.034:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20133 comm="syz.8.4414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fab37e719 code=0x0 [ 968.957511][ T5931] rc_core: IR keymap rc-hauppauge not found [ 969.007913][ T5931] Registered IR keymap rc-empty [ 969.023803][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 969.729217][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 969.784592][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 970.217510][T20161] netlink: 208 bytes leftover after parsing attributes in process `syz.8.4417'. [ 970.812354][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input41 [ 970.964056][T20168] geneve2: entered promiscuous mode [ 970.969333][T20168] geneve2: entered allmulticast mode [ 971.392171][ T5857] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 972.128408][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.199461][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.243318][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.265105][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.334910][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.370557][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.394745][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.414780][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.444035][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.465175][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 972.516218][T20191] autofs: Unknown parameter 'fd0x0000000000000000' [ 972.639822][ T5931] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 972.662105][ T5931] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 972.730671][ T5931] usb 1-1: USB disconnect, device number 117 [ 972.963234][ T5930] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 973.113804][ T8] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 973.459940][T20220] netlink: 208 bytes leftover after parsing attributes in process `syz.8.4432'. [ 974.231943][ T5930] usb 8-1: Using ep0 maxpacket: 8 [ 975.090557][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 975.495437][ T5930] usb 8-1: config 0 interface 0 has no altsetting 0 [ 975.679987][ T5930] usb 8-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 975.700835][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.753722][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.765165][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 975.776218][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 975.786185][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 975.796531][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 975.811266][ T5930] usb 8-1: config 0 descriptor?? [ 975.846569][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 975.855987][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 975.866693][ T8] usb 2-1: Manufacturer: syz [ 975.880969][ T8] usb 2-1: config 0 descriptor?? [ 975.907504][ T5930] usb 8-1: can't set config #0, error -71 [ 975.920234][ T5930] usb 8-1: USB disconnect, device number 4 [ 975.973735][ T8] usb 2-1: can't set config #0, error -71 [ 975.993428][ T8] usb 2-1: USB disconnect, device number 114 [ 976.102878][T20248] autofs: Unknown parameter 'fd0x0000000000000000' [ 977.090163][T13094] Bluetooth: hci5: Unable to find connection with handle 0x00c9 [ 978.652332][T20269] netlink: 208 bytes leftover after parsing attributes in process `syz.8.4443'. [ 979.853570][ T80] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 980.076696][ T80] usb 6-1: unable to get BOS descriptor or descriptor too short [ 980.423342][ T5931] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 980.942999][ T80] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 980.951793][ T80] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 981.020948][ T80] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.043405][ T80] usb 6-1: string descriptor 0 read error: -71 [ 981.049693][ T80] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.058817][ T80] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.029409][ T80] usb 6-1: can't set config #1, error -71 [ 982.042663][ T80] usb 6-1: USB disconnect, device number 7 [ 982.555647][ T5931] usb 9-1: Using ep0 maxpacket: 8 [ 982.567155][ T5931] usb 9-1: config 0 interface 0 has no altsetting 0 [ 982.585925][ T5931] usb 9-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 982.596343][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.605339][T13431] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 982.616982][ T5931] usb 9-1: config 0 descriptor?? [ 982.638443][ T5931] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 982.646633][ T5931] usb 9-1: selecting invalid altsetting 0 [ 982.652377][ T5931] cxusb: set interface failed [ 982.657186][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 982.672743][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 982.693293][ T5931] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 982.702563][ T5931] usb 9-1: media controller created [ 982.719495][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 982.811910][ T5931] DVB: Unable to find symbol lgdt330x_attach() [ 982.818307][ T5931] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 982.836417][T20299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.863550][T20299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.907506][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 982.914490][ T5931] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 982.934430][T13431] usb 1-1: Using ep0 maxpacket: 16 [ 982.945916][ T5931] usb 9-1: USB disconnect, device number 2 [ 982.962530][T13431] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.986358][T13431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.012151][T13431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.030730][ T5931] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 983.090635][T13431] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.120935][T13431] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.165026][T13431] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 983.276137][T13431] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 983.979624][T13431] usb 1-1: Manufacturer: syz [ 984.028264][T13431] usb 1-1: config 0 descriptor?? [ 984.899057][T13431] rc_core: IR keymap rc-hauppauge not found [ 984.905421][T13431] Registered IR keymap rc-empty [ 984.910388][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.933224][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 984.965731][T13431] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 985.674631][T20344] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4455'. [ 985.760667][T13431] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 985.777966][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.787324][ T29] audit: type=1326 audit(1730629603.914:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20331 comm="syz.7.4455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8a257e719 code=0x0 [ 985.803353][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.883784][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.941307][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.989215][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.444478][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.464682][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.545066][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.798534][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.824222][T13431] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.851652][T13431] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 987.872325][T13431] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 988.210726][T13431] usb 1-1: USB disconnect, device number 118 [ 989.181374][T20392] netlink: 'syz.5.4466': attribute type 2 has an invalid length. [ 989.206509][T20394] netlink: 208 bytes leftover after parsing attributes in process `syz.8.4467'. [ 990.008020][T13094] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 993.321705][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.328255][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.491951][ T29] audit: type=1326 audit(1730629612.624:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.7.4479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8a257e719 code=0x0 [ 995.706661][T20466] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4484'. [ 995.832065][T20467] netlink: 'syz.1.4482': attribute type 2 has an invalid length. [ 996.613270][ T5930] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 997.043169][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 997.049498][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 997.056289][ T5930] usb 6-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 997.066947][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.125135][ T5930] usb 6-1: config 0 descriptor?? [ 997.163013][ T5930] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 997.378541][ T5930] usb 6-1: selecting invalid altsetting 0 [ 997.384703][ T5930] cxusb: set interface failed [ 997.389406][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 997.397039][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 997.891320][ T5930] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 997.900052][ T5930] usb 6-1: media controller created [ 997.911258][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.921883][T20459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.979731][T20459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.025305][T20478] sctp: [Deprecated]: syz.1.4487 (pid 20478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 998.025305][T20478] Use struct sctp_sack_info instead [ 998.061812][ T5930] DVB: Unable to find symbol lgdt330x_attach() [ 998.075388][ T5930] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 998.121468][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 998.131154][ T5930] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 998.242926][ T5930] usb 6-1: USB disconnect, device number 8 [ 998.354079][ T5930] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 998.923500][ T25] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 999.743284][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 999.750308][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.761234][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.778632][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.788752][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1000.055960][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.070515][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1000.079845][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1000.088031][ T25] usb 1-1: Manufacturer: syz [ 1000.095594][ T25] usb 1-1: config 0 descriptor?? [ 1001.083249][ T25] rc_core: IR keymap rc-hauppauge not found [ 1001.090817][ T25] Registered IR keymap rc-empty [ 1001.098977][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.273172][T13431] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1001.321699][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.346793][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1001.383350][T20539] binder: 20531:20539 ioctl c0306201 200003c0 returned -22 [ 1001.402914][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43 [ 1001.423326][T13431] usb 2-1: Using ep0 maxpacket: 8 [ 1001.433280][T13431] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1001.445714][T13431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.450550][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.475856][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.478182][T13431] usb 2-1: config 0 descriptor?? [ 1001.523277][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.534319][T13431] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1001.535721][T20543] syzkaller1: entered promiscuous mode [ 1001.547654][T20543] syzkaller1: entered allmulticast mode [ 1001.574090][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.608237][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.677663][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.733943][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.785528][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.845791][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.885545][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1002.012748][ T25] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1002.022014][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1002.042350][ T25] usb 1-1: USB disconnect, device number 119 [ 1002.048539][T13431] gspca_spca501: reg write: error -71 [ 1002.048557][T13431] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1002.048611][T13431] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 1002.055615][T13431] usb 2-1: USB disconnect, device number 115 [ 1003.524187][T13094] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1003.783191][ T5944] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1004.131648][ T5944] usb 9-1: Using ep0 maxpacket: 16 [ 1004.138684][ T5944] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.149091][ T5944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1004.160172][ T5944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1004.170307][ T5944] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1004.180285][ T5944] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1004.282445][ T5944] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1004.291746][ T5944] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1004.301223][ T5944] usb 9-1: Manufacturer: syz [ 1004.384728][ T5944] usb 9-1: config 0 descriptor?? [ 1004.913276][ T5944] rc_core: IR keymap rc-hauppauge not found [ 1004.919336][ T5944] Registered IR keymap rc-empty [ 1004.933332][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1004.953604][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1004.984064][ T5944] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1005.024602][ T5944] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input44 [ 1005.085163][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1005.133372][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1005.184441][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1005.204563][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1005.253737][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1005.958067][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1005.977005][T20642] netlink: 'syz.0.4522': attribute type 32 has an invalid length. [ 1005.985032][T20642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4522'. [ 1005.994315][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1006.013200][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1006.033545][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1006.053618][ T5944] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1006.084591][ T5944] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1006.135795][ T5944] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1006.201595][ T5944] usb 9-1: USB disconnect, device number 3 [ 1006.556587][ T5857] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 1008.133946][T20670] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4528'. [ 1009.495804][ T80] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1009.696645][T20722] netlink: 'syz.7.4538': attribute type 2 has an invalid length. [ 1010.339184][ T80] usb 1-1: Using ep0 maxpacket: 16 [ 1010.378195][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4540'. [ 1010.400194][ T80] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.432043][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1010.443637][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1010.455269][ T80] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1010.465301][ T80] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.497139][ T80] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1010.506656][ T80] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1010.514916][ T80] usb 1-1: Manufacturer: syz [ 1010.527187][ T80] usb 1-1: config 0 descriptor?? [ 1010.742369][ T5857] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 1011.624676][ T80] rc_core: IR keymap rc-hauppauge not found [ 1011.635382][ T80] Registered IR keymap rc-empty [ 1011.640323][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1012.451486][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1012.476008][T20734] netlink: 'syz.7.4541': attribute type 32 has an invalid length. [ 1012.484018][T20734] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1012.550910][ T80] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1012.563847][ T80] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input45 [ 1013.057539][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.083219][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.116496][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.173178][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.193203][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.233197][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.260540][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.325713][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.347492][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.376288][ T80] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.507461][ T80] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1013.540330][ T80] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1013.623593][ T80] usb 1-1: USB disconnect, device number 120 [ 1016.659287][T20823] overlayfs: failed to resolve './file0': -2 [ 1017.924011][T20842] netlink: 'syz.8.4565': attribute type 32 has an invalid length. [ 1017.932151][T20842] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4565'. [ 1020.735604][T20890] overlayfs: failed to resolve './file0': -2 [ 1020.753657][ T5945] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1021.379254][ T5945] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1021.433920][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.503911][ T5945] usb 6-1: Product: syz [ 1021.508150][ T5945] usb 6-1: Manufacturer: syz [ 1021.512777][ T5945] usb 6-1: SerialNumber: syz [ 1021.550850][ T5945] usb 6-1: config 0 descriptor?? [ 1022.884909][ T5945] usb 6-1: Firmware version (0.0) predates our first public release. [ 1022.893172][ T5945] usb 6-1: Please update to version 0.2 or newer [ 1022.901875][T20910] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1023.197198][ T5945] usb 6-1: USB disconnect, device number 9 [ 1024.168213][T20945] overlayfs: failed to resolve './file0': -2 [ 1025.753609][T20965] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4594'. [ 1025.972121][T20970] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1025.993431][T13094] Bluetooth: hci4: command 0x0406 tx timeout [ 1026.659959][T20975] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4594'. [ 1026.879488][T20971] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1027.423592][ T80] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1027.639201][ T80] usb 9-1: device descriptor read/64, error -71 [ 1027.947640][ T80] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1028.007080][ T5857] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1028.127869][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4606'. [ 1028.137102][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4606'. [ 1028.461062][ T80] usb 9-1: device descriptor read/64, error -71 [ 1028.635449][ T80] usb usb9-port1: attempt power cycle [ 1029.483539][ T80] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1029.506357][ T80] usb 9-1: device descriptor read/8, error -71 [ 1029.901675][ T80] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1030.072167][ T80] usb 9-1: device descriptor read/8, error -71 [ 1030.221091][ T80] usb usb9-port1: unable to enumerate USB device [ 1031.430525][ T5857] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1031.559389][T21058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1032.413439][ T25] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1033.389514][T21096] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1033.483554][ T25] usb 1-1: device descriptor read/64, error -71 [ 1034.415131][ T25] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1034.553280][ T25] usb 1-1: device descriptor read/64, error -71 [ 1034.665217][ T25] usb usb1-port1: attempt power cycle [ 1034.774438][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'. [ 1034.785384][T21131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.803021][T21131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.818514][T21131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1034.826284][ T1204] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1034.834120][T21131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.983331][ T1204] usb 8-1: Using ep0 maxpacket: 32 [ 1035.018655][ T1204] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.033865][ T25] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1035.042661][ T1204] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.062787][ T1204] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1035.072406][ T1204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.073206][T19948] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1035.090133][ T25] usb 1-1: device descriptor read/8, error -71 [ 1035.090721][ T1204] usb 8-1: config 0 descriptor?? [ 1035.110098][ T1204] hub 8-1:0.0: USB hub found [ 1035.311596][ T1204] hub 8-1:0.0: 1 port detected [ 1035.346241][T19948] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.390444][T19948] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.423136][T19948] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1035.452660][T19948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.486367][T19948] usb 9-1: config 0 descriptor?? [ 1035.694713][T21161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1036.572733][T21164] usb 8-1: USB disconnect, device number 5 [ 1036.784801][T19948] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1036.792079][T19948] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1036.922246][T21175] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1037.010507][T19948] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1037.018012][T19948] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1037.025353][T19948] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1037.036787][T19948] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1037.044098][T19948] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1037.290006][T21177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.308977][T19948] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1037.638124][T19948] cp2112 0003:10C4:EA90.0028: Part Number: 0x00 Device Version: 0x00 [ 1037.859216][T19948] cp2112 0003:10C4:EA90.0028: error requesting SMBus config [ 1037.867420][T21166] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1037.895593][T19948] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -71 [ 1037.914957][T19948] usb 9-1: USB disconnect, device number 8 [ 1038.053317][T21166] usb 8-1: Using ep0 maxpacket: 8 [ 1038.170118][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 1038.286702][T21208] netlink: 'syz.1.4649': attribute type 2 has an invalid length. [ 1038.928865][T21166] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1038.939053][T21166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.959954][T21166] usb 8-1: Product: syz [ 1038.964491][T21166] usb 8-1: Manufacturer: syz [ 1038.969123][T21166] usb 8-1: SerialNumber: syz [ 1038.987537][T21166] usb 8-1: config 0 descriptor?? [ 1039.139567][ T5930] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1039.210670][T21166] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1039.283326][ T5930] usb 1-1: device descriptor read/64, error -71 [ 1040.113183][ T5930] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1040.253322][ T5930] usb 1-1: device descriptor read/64, error -71 [ 1040.368939][ T5930] usb usb1-port1: attempt power cycle [ 1040.643433][T21243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.172935][T21260] No control pipe specified [ 1041.176443][ T5930] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1041.205968][ T5930] usb 1-1: device descriptor read/8, error -71 [ 1041.239539][T21262] fuse: Unknown parameter 'group_id00000000000000000000' [ 1041.463436][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1041.728639][ T5930] usb 1-1: device not accepting address 2, error -71 [ 1041.760256][ T5930] usb usb1-port1: unable to enumerate USB device [ 1041.789422][T21281] overlayfs: failed to resolve './file1': -2 [ 1041.877444][T21287] netlink: 'syz.5.4663': attribute type 2 has an invalid length. [ 1042.623994][T21297] fuse: Bad value for 'user_id' [ 1042.628940][T21297] fuse: Bad value for 'user_id' [ 1042.768576][T21295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.828752][T21166] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1042.901754][T21166] usb 8-1: USB disconnect, device number 6 [ 1042.939923][T21306] No control pipe specified [ 1043.671129][T21318] geneve2: entered promiscuous mode [ 1043.676859][T21318] geneve2: entered allmulticast mode [ 1043.746971][T21320] random: crng reseeded on system resumption [ 1046.710960][T21360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.034472][T21367] fuse: Bad value for 'user_id' [ 1047.039554][T21367] fuse: Bad value for 'user_id' [ 1047.076934][T21369] No control pipe specified [ 1049.095395][T21394] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4693'. [ 1050.131875][T21409] random: crng reseeded on system resumption [ 1050.465842][T21406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.148266][T21419] fuse: Bad value for 'user_id' [ 1051.159004][T21419] fuse: Bad value for 'user_id' [ 1051.360285][T21426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4702'. [ 1054.557619][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.564689][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.005342][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4710'. [ 1056.893643][T21485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.542266][T21506] input: syz0 as /devices/virtual/input/input46 [ 1059.684623][T21515] random: crng reseeded on system resumption [ 1062.909374][T21550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.507617][T21571] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1065.299193][T21594] random: crng reseeded on system resumption [ 1067.612890][T21632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.041649][T21645] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4745'. [ 1068.124752][T21647] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1070.866888][T13094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1070.879262][T13094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1070.889724][T13094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1070.899811][T13094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1070.907466][T13094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1070.916422][T13094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.705905][T21709] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4760'. [ 1073.152841][T13094] Bluetooth: hci2: command tx timeout [ 1073.554898][T21740] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4766'. [ 1074.286049][T21691] chnl_net:caif_netlink_parms(): no params data found [ 1075.243319][T13094] Bluetooth: hci2: command tx timeout [ 1075.328683][T21691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.336260][T21691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.343924][T21691] bridge_slave_0: entered allmulticast mode [ 1075.358817][T21691] bridge_slave_0: entered promiscuous mode [ 1075.405899][T21691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.413206][T21691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.420518][T21691] bridge_slave_1: entered allmulticast mode [ 1075.441836][T21691] bridge_slave_1: entered promiscuous mode [ 1075.679531][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.713301][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.736109][T21778] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4775'. [ 1075.766822][ T29] audit: type=1326 audit(1730629693.894:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21777 comm="syz.7.4775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8a257e719 code=0x0 [ 1075.831078][T21691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.852984][T21691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.101116][T21793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.139196][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.249148][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.375188][T13094] Bluetooth: hci2: command tx timeout [ 1077.457191][T21691] team0: Port device team_slave_0 added [ 1077.465148][T21691] team0: Port device team_slave_1 added [ 1078.520309][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.273420][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.442821][T13094] Bluetooth: hci2: command tx timeout [ 1079.601083][T13094] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1079.614987][T21691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.647947][T21691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.872954][T21691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.895547][T21691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.912370][T21691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.979365][T21691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.128659][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.180022][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.324028][T21854] overlayfs: missing 'lowerdir' [ 1081.342919][T21691] hsr_slave_0: entered promiscuous mode [ 1081.393461][T21691] hsr_slave_1: entered promiscuous mode [ 1081.639696][T21691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.805810][T21691] Cannot create hsr debugfs directory [ 1082.954993][ T35] bridge_slave_1: left allmulticast mode [ 1082.960702][ T35] bridge_slave_1: left promiscuous mode [ 1082.985673][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.060169][ T35] bridge_slave_0: left allmulticast mode [ 1083.066154][ T35] bridge_slave_0: left promiscuous mode [ 1083.086659][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.413217][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.436537][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.454669][ T35] bond0 (unregistering): Released all slaves [ 1085.607006][T21874] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4799'. [ 1086.442244][ T35] tipc: Disabling bearer [ 1086.500333][ T35] tipc: Left network mode [ 1086.674895][T21691] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1087.219865][T21691] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1087.851118][T13094] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1089.033566][T21691] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1089.180526][T21691] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1089.923948][ T35] hsr_slave_0: left promiscuous mode [ 1090.722863][ T35] hsr_slave_1: left promiscuous mode [ 1090.791027][ T35] veth1_macvtap: left promiscuous mode [ 1090.807130][ T35] veth0_macvtap: left promiscuous mode [ 1090.822704][ T35] veth1_vlan: left promiscuous mode [ 1090.841657][ T35] veth0_vlan: left promiscuous mode [ 1092.313606][T13094] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1093.880656][T21983] syz.8.4823 (21983): drop_caches: 2 [ 1093.892508][T21983] syz.8.4823 (21983): drop_caches: 2 [ 1096.680765][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1097.513768][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1098.077165][T22025] kAFS: unparsable volume name [ 1098.842339][T13094] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1100.903243][T13431] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1101.270740][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.335312][T13431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.428678][T13431] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1101.697259][T13431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.707774][T13431] usb 9-1: config 0 descriptor?? [ 1102.562513][T13431] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1102.569802][T13431] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1102.576918][T13431] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1102.584138][T13431] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1102.591279][T13431] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1102.598468][T13431] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1102.605736][T13431] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 1102.649052][T21691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.664744][T21691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.695057][T21691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1102.705565][T21691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1102.718169][T13431] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1102.745655][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.752748][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.761265][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.768417][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.279670][T13431] cp2112 0003:10C4:EA90.0029: Part Number: 0x00 Device Version: 0x00 [ 1104.253298][T21164] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1104.416161][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1104.468890][T13431] cp2112 0003:10C4:EA90.0029: error reading lock byte: -71 [ 1104.488773][T13431] usb 9-1: USB disconnect, device number 9 [ 1104.666026][T21164] usb 6-1: device descriptor read/64, error -32 [ 1104.711179][ T35] IPVS: stop unused estimator thread 0... [ 1104.807061][T22090] fuse: Bad value for 'fd' [ 1104.913406][T21164] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1105.063722][T21164] usb 6-1: device descriptor read/64, error -71 [ 1105.191992][T21164] usb usb6-port1: attempt power cycle [ 1105.193713][T21691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.684997][T21164] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1105.808946][T21164] usb 6-1: device descriptor read/8, error -71 [ 1106.720327][T21164] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1106.995394][T21164] usb 6-1: device descriptor read/8, error -71 [ 1107.091965][T21691] veth0_vlan: entered promiscuous mode [ 1107.106408][T21691] veth1_vlan: entered promiscuous mode [ 1107.127566][T21691] veth0_macvtap: entered promiscuous mode [ 1107.136471][T21691] veth1_macvtap: entered promiscuous mode [ 1107.152569][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.163160][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.172983][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.183667][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.193788][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.204498][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.214413][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.224934][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.236039][T21691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.247162][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.257675][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.267626][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.278267][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.288727][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.300745][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.310645][T21691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.321182][T21691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.332200][T21691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.342254][T21691] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.361145][T21691] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.369943][T21691] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.378802][T21691] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.530472][T21164] usb usb6-port1: unable to enumerate USB device [ 1108.993946][T22137] netlink: 'syz.7.4851': attribute type 2 has an invalid length. [ 1109.270714][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.280506][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.058494][T22162] fuse: Bad value for 'fd' [ 1110.075410][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.084362][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.818033][T22212] program syz.8.4866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1115.442457][ T5900] IPVS: starting estimator thread 0... [ 1115.593346][T22233] IPVS: using max 33 ests per chain, 79200 per kthread [ 1115.998198][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.004792][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.986919][T22284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1121.275159][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1123.174370][T22368] netlink: 'syz.9.4906': attribute type 9 has an invalid length. [ 1127.236449][T22431] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4920'. [ 1128.067221][T22448] 9pnet_fd: Insufficient options for proto=fd [ 1130.414423][T13094] Bluetooth: hci5: Unable to find connection with handle 0x00c9 [ 1131.425728][T22515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4939'. [ 1134.323263][T13094] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 1134.433413][ T5902] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1134.611581][T22568] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4952'. [ 1135.823245][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 1135.849946][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.882300][ T5902] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1136.135292][ T5902] usb 6-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1136.147181][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.157661][ T5902] usb 6-1: config 0 descriptor?? [ 1137.009365][T22556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.023335][T22556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.032542][T22572] usb 6-1: USB disconnect, device number 14 [ 1137.269038][T22590] CIFS: iocharset name too long [ 1138.621258][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4963'. [ 1138.685092][T22611] nbd: socks must be embedded in a SOCK_ITEM attr [ 1138.729392][T22610] tipc: Started in network mode [ 1138.743538][T22610] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1138.761223][T22610] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1138.770708][T22610] tipc: Enabled bearer , priority 10 [ 1138.984741][T22622] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4964'. [ 1139.883221][T17180] tipc: Node number set to 1 [ 1140.528191][T13094] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 1141.761442][T22653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4973'. [ 1143.265707][T17180] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1143.725519][T17180] usb 1-1: Using ep0 maxpacket: 8 [ 1143.860593][T17180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.887641][T17180] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1144.095178][T17180] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1144.104818][T17180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.121424][T17180] usb 1-1: config 0 descriptor?? [ 1144.464628][T22663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.648202][T22663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.773326][T21166] usb 1-1: USB disconnect, device number 3 [ 1146.463981][T22715] random: crng reseeded on system resumption [ 1149.412169][T22736] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4992'. [ 1149.693665][T13094] Bluetooth: hci5: Unable to find connection with handle 0x00c9 [ 1153.183315][T22785] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5004'. [ 1153.593140][T21164] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1153.753490][T21164] usb 1-1: Using ep0 maxpacket: 8 [ 1153.763429][T21164] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1153.784131][T21164] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1153.823289][T21164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.874047][T21164] usb 1-1: config 0 descriptor?? [ 1154.012549][T13094] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 1154.107927][T22777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.137636][T22777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.174977][T13431] usb 1-1: USB disconnect, device number 4 [ 1155.958281][T22831] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5016'. [ 1157.691133][T21164] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1158.290466][T21164] usb 1-1: Using ep0 maxpacket: 8 [ 1159.173956][T22877] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5029'. [ 1159.455179][T21164] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1159.464355][T21164] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1159.473956][T21164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.501128][T21164] usb 1-1: config 0 descriptor?? [ 1159.718218][T22863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.727004][T22863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.744976][T21164] usb 1-1: USB disconnect, device number 5 [ 1160.433359][T22891] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1161.793449][T22920] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5040'. [ 1163.103209][ T5945] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1163.643118][ T5945] usb 1-1: Using ep0 maxpacket: 8 [ 1163.671397][ T5945] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1163.683191][ T5945] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1163.692335][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.732897][ T5945] usb 1-1: config 0 descriptor?? [ 1164.063890][T22945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.072502][T22945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.108196][ T5900] usb 1-1: USB disconnect, device number 6 [ 1164.344718][ T5900] IPVS: starting estimator thread 0... [ 1164.823554][T22972] IPVS: using max 16 ests per chain, 38400 per kthread [ 1166.272732][T22977] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1168.138484][T23026] overlayfs: failed to resolve './bus': -2 [ 1170.949954][T23062] netlink: 'syz.9.5064': attribute type 1 has an invalid length. [ 1170.958325][T23062] netlink: 5300 bytes leftover after parsing attributes in process `syz.9.5064'. [ 1170.991889][T23065] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5067'. [ 1171.628143][T23065] vlan0: entered promiscuous mode [ 1171.731358][T23065] team0: Port device vlan0 added [ 1171.948018][T23070] team0: Port device vlan0 removed [ 1174.829570][T23092] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1177.523752][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.530095][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.723274][ T5902] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1178.916872][ T5902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.951275][ T5902] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 1024 [ 1179.960539][ T5902] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1180.298250][ T5902] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1180.331071][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.340857][ T5902] usb 6-1: Product: syz [ 1180.359182][ T5902] usb 6-1: Manufacturer: syz [ 1180.402296][ T5902] usb 6-1: SerialNumber: syz [ 1180.601434][T23178] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1180.732657][ T5902] cdc_ncm 6-1:1.0: bind() failure [ 1180.745143][ T5902] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1180.752053][ T5902] cdc_ncm 6-1:1.1: bind() failure [ 1180.805757][ T5902] usb 6-1: USB disconnect, device number 15 [ 1182.352593][T23198] sg_write: data in/out 1119128492/51 bytes for SCSI command 0x51-- guessing data in; [ 1182.352593][T23198] program syz.8.5101 not setting count and/or reply_len properly [ 1182.374289][T23198] random: crng reseeded on system resumption [ 1186.734197][T23238] netlink: 'syz.9.5105': attribute type 2 has an invalid length. [ 1186.853158][ T5902] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1187.003242][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 1187.010366][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1187.021491][ T5902] usb 6-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1187.051139][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.104603][ T5902] usb 6-1: config 0 descriptor?? [ 1187.126801][ T5902] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1187.204517][ T5902] usb 6-1: selecting invalid altsetting 0 [ 1187.297687][ T5902] cxusb: set interface failed [ 1187.324353][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 1187.375610][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1187.575427][ T5902] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1187.617861][ T5902] usb 6-1: media controller created [ 1187.685675][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1187.810808][T23255] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1187.856928][ T5902] DVB: Unable to find symbol lgdt330x_attach() [ 1187.899696][ T5902] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1187.944363][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 1187.958928][ T5902] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1187.997244][T23251] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1188.033423][ T5902] usb 6-1: USB disconnect, device number 16 [ 1188.117159][ T5902] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1190.533202][ T5900] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1190.683118][ T5900] usb 10-1: Using ep0 maxpacket: 8 [ 1190.779909][ T5900] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1190.798473][ T5900] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1190.848937][ T5900] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.061035][ T5900] usb 10-1: config 0 descriptor?? [ 1191.179021][ T5900] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1191.241708][ T5900] usb 10-1: selecting invalid altsetting 0 [ 1191.313736][ T5900] cxusb: set interface failed [ 1191.326958][T23293] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1191.427992][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1191.488192][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1191.543308][ T5900] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1191.564897][ T5900] usb 10-1: media controller created [ 1191.587954][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1191.682185][ T5900] DVB: Unable to find symbol lgdt330x_attach() [ 1191.697831][ T5900] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1192.569752][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1192.579771][ T5900] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1192.597728][ T5900] usb 10-1: USB disconnect, device number 2 [ 1192.675050][ T5900] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1192.778813][T23318] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5137'. [ 1192.995652][T23323] batadv0: entered promiscuous mode [ 1193.001087][T23323] vlan2: entered promiscuous mode [ 1193.006367][T23323] vlan2: entered allmulticast mode [ 1193.011506][T23323] batadv0: entered allmulticast mode [ 1193.205862][T23323] batadv0: left allmulticast mode [ 1193.211327][T23323] batadv0: left promiscuous mode [ 1194.576918][T23344] input: syz0 as /devices/virtual/input/input47 [ 1194.905243][T23337] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1195.404011][T23321] Bluetooth: hci2: command 0x0406 tx timeout [ 1195.973182][T13431] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1196.066013][T23365] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5152'. [ 1196.123064][T13431] usb 10-1: Using ep0 maxpacket: 8 [ 1196.140642][T13431] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1196.151689][T13431] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1196.181431][T13431] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.234271][T13431] usb 10-1: config 0 descriptor?? [ 1196.418592][T13431] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1196.538419][T13431] usb 10-1: selecting invalid altsetting 0 [ 1196.544448][T13431] cxusb: set interface failed [ 1196.549305][T13431] dvb-usb: bulk message failed: -22 (1/0) [ 1197.013146][T13431] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1197.024106][T13431] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1197.036497][T13431] usb 10-1: media controller created [ 1197.054878][T13431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1198.463243][T13431] DVB: Unable to find symbol lgdt330x_attach() [ 1198.469467][T13431] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1198.503193][T13431] dvb-usb: bulk message failed: -22 (1/0) [ 1198.509086][T13431] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1198.533312][T13431] usb 10-1: USB disconnect, device number 3 [ 1198.540746][T23386] input: syz0 as /devices/virtual/input/input48 [ 1198.702973][T13431] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1200.009339][T23403] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1200.202463][T23423] input: syz0 as /devices/virtual/input/input49 [ 1202.375003][T23451] binder: 23445:23451 ioctl c0306201 200003c0 returned -22 [ 1204.424714][T23471] input: syz0 as /devices/virtual/input/input50 [ 1207.165307][T23497] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5195'. [ 1207.175973][T23498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5193'. [ 1207.244370][ T29] audit: type=1326 audit(1730629825.384:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23486 comm="syz.0.5193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44c597e719 code=0x0 [ 1209.944361][T23539] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1210.088490][T23541] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5209'. [ 1210.099644][ T29] audit: type=1326 audit(1730629828.234:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23540 comm="syz.8.5209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fab37e719 code=0x0 [ 1213.288425][T23574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5220'. [ 1214.106910][T23591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5222'. [ 1215.402301][T23321] Bluetooth: hci3: command 0x1003 tx timeout [ 1215.467315][T13094] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1239.573544][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.579869][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.021748][T13094] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 1240.323191][T13431] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1240.473340][T13431] usb 10-1: Using ep0 maxpacket: 8 [ 1240.491966][T13431] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1240.501948][T13431] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.192701][T13431] usb 10-1: Product: syz [ 1241.197178][T13431] usb 10-1: Manufacturer: syz [ 1241.201889][T13431] usb 10-1: SerialNumber: syz [ 1241.228498][T13431] usb 10-1: config 0 descriptor?? [ 1241.448812][T13431] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1241.761328][T23668] syzkaller1: entered promiscuous mode [ 1241.777711][T23668] syzkaller1: entered allmulticast mode [ 1244.867248][T13094] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 1245.459088][T13431] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1245.502070][T13431] usb 10-1: USB disconnect, device number 4 [ 1250.414043][ T5902] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1250.636338][T13094] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 1250.713238][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 1250.761857][ T5902] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1250.829794][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.068498][ T5902] usb 6-1: Product: syz [ 1251.072708][ T5902] usb 6-1: Manufacturer: syz [ 1251.078757][ T5902] usb 6-1: SerialNumber: syz [ 1251.635526][ T5902] usb 6-1: config 0 descriptor?? [ 1252.200700][ T5902] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1254.893243][ T5902] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1255.063807][ T5902] usb 6-1: USB disconnect, device number 17 [ 1256.666139][T13094] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 1258.053699][T22572] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1258.106917][ T5902] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1258.294702][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 1258.314283][T22572] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1258.341930][ T5902] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1258.365842][T22572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.540511][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.600007][T22572] usb 9-1: Product: syz [ 1258.618386][ T5902] usb 1-1: Product: syz [ 1258.622603][ T5902] usb 1-1: Manufacturer: syz [ 1258.627622][T22572] usb 9-1: Manufacturer: syz [ 1258.632307][T22572] usb 9-1: SerialNumber: syz [ 1258.641663][ T5902] usb 1-1: SerialNumber: syz [ 1258.647463][T22572] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1258.654148][T22572] r8152-cfgselector 9-1: config 0 descriptor?? [ 1259.414010][ T5902] usb 1-1: config 0 descriptor?? [ 1259.630736][ T5945] r8152-cfgselector 9-1: USB disconnect, device number 10 [ 1259.639278][T23857] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1259.645832][T23857] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1259.677144][T23857] vhci_hcd vhci_hcd.0: Device attached [ 1259.684093][T23862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1259.716761][ T5902] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1259.752476][T23857] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1259.762383][T23857] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1259.787627][T23854] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5296'. [ 1259.814560][T23857] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1259.836332][T23857] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1259.853235][ T8] vhci_hcd: vhci_device speed not set [ 1259.860342][T23857] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1259.876176][ T29] audit: type=1326 audit(1730629877.974:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23851 comm="syz.9.5296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4d737e719 code=0x0 [ 1259.914332][ T8] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1259.933952][T23862] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(20) [ 1259.940611][T23862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1259.949345][T23862] vhci_hcd vhci_hcd.0: Device attached [ 1259.993970][T23857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.006834][T23857] batadv_slave_0: entered promiscuous mode [ 1260.032362][T23866] vhci_hcd: connection closed [ 1260.032846][T18570] vhci_hcd: stop threads [ 1260.052684][T23858] vhci_hcd: connection reset by peer [ 1260.053072][T18570] vhci_hcd: release socket [ 1260.062641][T18570] vhci_hcd: disconnect device [ 1260.068040][T18570] vhci_hcd: stop threads [ 1260.072340][T18570] vhci_hcd: release socket [ 1260.077420][T18570] vhci_hcd: disconnect device [ 1260.652407][T13094] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 1263.152278][ T5902] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1263.176410][ T5902] usb 1-1: USB disconnect, device number 7 [ 1264.349305][T13094] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 1265.386700][ T8] vhci_hcd: vhci_device speed not set [ 1268.926071][T13094] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 1274.183601][ T5857] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 1275.285211][T22572] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1275.444313][T22572] usb 10-1: Using ep0 maxpacket: 8 [ 1275.467799][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1276.004330][T22572] usb 10-1: no configurations [ 1276.009061][T22572] usb 10-1: can't read configurations, error -22 [ 1276.260688][T24060] netlink: 'syz.7.5361': attribute type 1 has an invalid length. [ 1276.269787][T24060] netlink: 'syz.7.5361': attribute type 3 has an invalid length. [ 1276.278036][T24060] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5361'. [ 1276.794599][T22572] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1277.153316][T22572] usb 10-1: Using ep0 maxpacket: 8 [ 1277.185834][T22572] usb 10-1: no configurations [ 1277.217976][T13094] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 1277.233534][T22572] usb 10-1: can't read configurations, error -22 [ 1277.255715][T22572] usb usb10-port1: attempt power cycle [ 1278.964452][T24087] afs: Bad value for 'source' [ 1279.112665][T24090] usb usb8: usbfs: process 24090 (syz.5.5371) did not claim interface 0 before use [ 1281.482897][T24098] afs: Unexpected value for 'dyn' [ 1282.868581][T13094] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 1284.051788][T13094] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1285.725750][T24157] input: syz1 as /devices/virtual/input/input53 [ 1289.815151][T13094] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1294.242201][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5406'. [ 1294.547811][T24223] xt_TCPMSS: Only works on TCP SYN packets [ 1294.912215][ T5902] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1295.073143][ T5902] usb 9-1: Using ep0 maxpacket: 8 [ 1295.909641][ T5902] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1295.919286][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.001109][ T5902] usb 9-1: Product: syz [ 1296.023283][ T5902] usb 9-1: Manufacturer: syz [ 1296.048168][ T5902] usb 9-1: SerialNumber: syz [ 1296.763909][ T5902] usb 9-1: config 0 descriptor?? [ 1297.950375][ T5902] dvb_usb_rtl28xxu 9-1:0.0: chip type detection failed -71 [ 1297.957784][ T5902] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1297.982460][ T5902] usb 9-1: USB disconnect, device number 11 [ 1298.223984][T24284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5426'. [ 1299.993458][ T5900] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1300.435373][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.442425][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.989770][ T5900] usb 10-1: config 4 has an invalid interface number: 39 but max is 1 [ 1301.080719][ T5900] usb 10-1: config 4 has an invalid interface number: 49 but max is 1 [ 1301.096953][ T5900] usb 10-1: config 4 has no interface number 0 [ 1301.103334][ T5900] usb 10-1: config 4 has no interface number 1 [ 1301.109538][ T5900] usb 10-1: config 4 interface 39 has no altsetting 0 [ 1301.116609][ T5900] usb 10-1: config 4 interface 49 has no altsetting 0 [ 1301.149197][ T5900] usb 10-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 1301.202443][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.236908][ T5900] usb 10-1: Product: syz [ 1301.254184][ T5900] usb 10-1: Manufacturer: syz [ 1301.268019][ T5900] usb 10-1: SerialNumber: syz [ 1302.785632][ C1] sd 0:0:1:0: [sda] tag#3664 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1302.796132][ C1] sd 0:0:1:0: [sda] tag#3664 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 1303.015015][ T5900] usb 10-1: USB disconnect, device number 8 [ 1305.662556][T24352] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5447'. [ 1307.425136][T24361] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.668265][T24361] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.776214][T24361] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.927980][T24361] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.082773][T24361] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.111014][T24361] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.142583][T24361] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.169476][T24361] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.661731][T24415] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1311.958299][T24427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5470'. [ 1312.075616][T24431] netlink: 'syz.8.5471': attribute type 2 has an invalid length. [ 1312.102818][T24428] No control pipe specified [ 1314.717758][ T29] audit: type=1326 audit(1730629932.844:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24432 comm="syz.8.5475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fab37e719 code=0x0 [ 1316.776173][T24473] netlink: 'syz.9.5485': attribute type 2 has an invalid length. [ 1316.963621][ T80] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1317.175383][ T80] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.245570][ T80] usb 9-1: New USB device found, idVendor=d6ff, idProduct=00cf, bcdDevice=d8.b0 [ 1317.338193][ T80] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.404585][ T80] usb 9-1: config 0 descriptor?? [ 1317.432599][ T80] usb 9-1: bad CDC descriptors [ 1318.858406][T22572] usb 9-1: USB disconnect, device number 12 [ 1319.712876][T24500] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1319.712876][T24500] program syz.9.5494 not setting count and/or reply_len properly [ 1320.885692][T24515] netlink: 'syz.8.5498': attribute type 2 has an invalid length. [ 1323.866488][T24550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5507'. [ 1323.875812][T24550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.883720][T24550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.630428][T24550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.637947][T24550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.451616][T24558] configfs: Unknown parameter 'smackfshat' [ 1328.056030][T24591] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5519'. [ 1328.106931][T24591] syz_tun: entered promiscuous mode [ 1328.115293][T24591] macsec1: entered promiscuous mode [ 1328.138756][T24591] batman_adv: batadv0: Adding interface: macsec1 [ 1328.145835][T24591] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.310040][T24591] batman_adv: batadv0: Interface activated: macsec1 [ 1333.871108][T24651] configfs: Unknown parameter 'smackfshat' [ 1333.962476][T24657] afs: Bad value for 'source' [ 1342.925868][T24758] autofs: Unknown parameter 'fd0x0000000000000000' [ 1346.356446][T24784] overlayfs: missing 'lowerdir' [ 1346.376843][T24784] configfs: Unknown parameter 'smackfshat' [ 1348.844783][T24817] No control pipe specified [ 1349.540193][T24831] random: crng reseeded on system resumption [ 1352.898220][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1352.910406][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1352.918506][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1352.926635][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1352.934613][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1352.943316][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1353.128602][T14386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.167838][T14386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.279008][T14386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.291195][T14386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.560380][T14386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.612595][T14386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.820711][T14386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.851505][T14386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.010998][T24911] random: crng reseeded on system resumption [ 1355.000408][T24885] chnl_net:caif_netlink_parms(): no params data found [ 1355.034079][T13094] Bluetooth: hci3: command tx timeout [ 1355.126616][T14386] bridge_slave_1: left allmulticast mode [ 1355.163020][T14386] bridge_slave_1: left promiscuous mode [ 1355.168818][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.204286][T14386] bridge_slave_0: left allmulticast mode [ 1355.209982][T14386] bridge_slave_0: left promiscuous mode [ 1355.233254][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.757625][T14386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.776691][T14386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.808233][T14386] bond0 (unregistering): Released all slaves [ 1357.039172][T14386] tipc: Disabling bearer [ 1357.054784][T14386] tipc: Left network mode [ 1357.054958][T24885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.081107][T24885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.093074][T24885] bridge_slave_0: entered allmulticast mode [ 1357.111310][T24885] bridge_slave_0: entered promiscuous mode [ 1357.117186][T13094] Bluetooth: hci3: command tx timeout [ 1357.134872][T24885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.141990][T24885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.149490][T24885] bridge_slave_1: entered allmulticast mode [ 1357.156791][T24885] bridge_slave_1: entered promiscuous mode [ 1357.350296][T24885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.374748][T24885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.834596][T24885] team0: Port device team_slave_0 added [ 1357.881934][T24885] team0: Port device team_slave_1 added [ 1357.985626][T24885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.002841][T24885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.074862][T24885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.149801][T24885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.157329][T24885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.208449][T24885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.439699][T24989] random: crng reseeded on system resumption [ 1359.494232][T13094] Bluetooth: hci3: command tx timeout [ 1359.757035][T24885] hsr_slave_0: entered promiscuous mode [ 1359.799841][T24885] hsr_slave_1: entered promiscuous mode [ 1359.826347][T24885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.843364][T24885] Cannot create hsr debugfs directory [ 1359.899626][T14386] hsr_slave_0: left promiscuous mode [ 1359.918240][T14386] hsr_slave_1: left promiscuous mode [ 1359.938356][T14386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.957151][T14386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.980356][T14386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.996853][T14386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.052131][T14386] veth1_macvtap: left promiscuous mode [ 1360.068322][T14386] veth0_macvtap: left promiscuous mode [ 1360.078511][T14386] veth1_vlan: left promiscuous mode [ 1360.093420][T14386] veth0_vlan: left promiscuous mode [ 1361.022994][T25001] overlay: Unknown parameter '/' [ 1361.078780][T25002] configfs: Unknown parameter 'smackfshat' [ 1361.573206][T13094] Bluetooth: hci3: command tx timeout [ 1361.629183][T14386] team0 (unregistering): Port device team_slave_1 removed [ 1362.148501][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.155039][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.450529][T14386] team0 (unregistering): Port device team_slave_0 removed [ 1364.547473][T14386] IPVS: stop unused estimator thread 0... [ 1365.091818][T24885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1365.236415][T24885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1365.248221][T24885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1365.263541][T24885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1365.697660][T24885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.791485][T24885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.920559][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.927764][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.011133][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.018372][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.276539][T24885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1366.398889][T25074] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5646'. [ 1366.455667][ T29] audit: type=1326 audit(1730629984.594:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25073 comm="syz.8.5646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fab37e719 code=0x0 [ 1366.741740][T24885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.833990][T24885] veth0_vlan: entered promiscuous mode [ 1366.854835][T24885] veth1_vlan: entered promiscuous mode [ 1366.935182][T24885] veth0_macvtap: entered promiscuous mode [ 1366.976972][T24885] veth1_macvtap: entered promiscuous mode [ 1367.022692][T24885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.048467][T24885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.079917][T24885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.110875][T24885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.158662][T24885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.430180][T24885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.708242][T24885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.772996][T24885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.805684][T24885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.835541][T24885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.870969][T24885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.894196][T24885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.020748][T24885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.058705][T24885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.085476][T24885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.142217][T25113] autofs: Unknown parameter '0x0000000000000000' [ 1368.225170][T24885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.599546][T18570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.608753][T18570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.705429][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.726992][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.679668][T25163] netlink: 'syz.5.5661': attribute type 2 has an invalid length. [ 1384.217309][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1384.230261][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1384.241984][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1384.256099][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1384.488926][ T5857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1384.499166][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1385.227568][T21691] batman_adv: batadv0: Interface deactivated: macsec1 [ 1386.374627][T21691] batman_adv: batadv0: Removing interface: macsec1 [ 1386.868617][T13094] Bluetooth: hci5: command tx timeout [ 1389.033218][T13094] Bluetooth: hci5: command tx timeout [ 1389.357556][ T60] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.124241][ T60] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.262168][T25423] afs: Bad value for 'source' [ 1390.564206][T25346] chnl_net:caif_netlink_parms(): no params data found [ 1391.386899][T13094] Bluetooth: hci5: command tx timeout [ 1391.836449][ T60] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.085469][ T60] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.467388][T13094] Bluetooth: hci5: command tx timeout [ 1393.720935][T25346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.732002][T25346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.739706][T25346] bridge_slave_0: entered allmulticast mode [ 1393.746944][T25346] bridge_slave_0: entered promiscuous mode [ 1393.931625][T25468] autofs: Unknown parameter 'fd0x0000000000000000' [ 1393.965495][T25346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.972707][T25346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.981375][T25346] bridge_slave_1: entered allmulticast mode [ 1393.990242][T25346] bridge_slave_1: entered promiscuous mode [ 1394.036105][ T60] bridge_slave_1: left allmulticast mode [ 1394.041803][ T60] bridge_slave_1: left promiscuous mode [ 1394.073238][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.220623][ T60] bridge_slave_0: left allmulticast mode [ 1394.227841][ T60] bridge_slave_0: left promiscuous mode [ 1394.314909][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.704485][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.716846][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.727958][ T60] bond0 (unregistering): Released all slaves [ 1397.744625][T25346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.899409][T25346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.232783][T25346] team0: Port device team_slave_0 added [ 1398.243102][T25346] team0: Port device team_slave_1 added [ 1398.761423][T25346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.792501][T25346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.830523][T25346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.843781][T25346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.850847][T25346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.906234][T25346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.313658][ T60] hsr_slave_0: left promiscuous mode [ 1399.360002][ T60] hsr_slave_1: left promiscuous mode [ 1399.376287][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.406406][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.482335][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.491230][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.631395][ T60] veth1_macvtap: left promiscuous mode [ 1399.660645][ T60] veth0_macvtap: left promiscuous mode [ 1399.892958][ T60] veth1_vlan: left promiscuous mode [ 1399.926644][ T60] veth0_vlan: left promiscuous mode [ 1401.609595][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1401.690801][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1403.414184][T25346] hsr_slave_0: entered promiscuous mode [ 1403.441484][T25346] hsr_slave_1: entered promiscuous mode [ 1403.485955][T25346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1403.511056][T25346] Cannot create hsr debugfs directory [ 1403.929120][T25602] afs: Bad value for 'source' [ 1408.305716][T25663] afs: Bad value for 'source' [ 1408.511012][ T29] audit: type=1326 audit(1730630026.634:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25667 comm="syz.5.5781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61f9d7e719 code=0x0 [ 1412.261360][T25720] afs: Bad value for 'source' [ 1413.408634][T25346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1413.437566][T25729] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5792'. [ 1413.507476][T25346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1413.516480][T25733] No control pipe specified [ 1413.580568][T25346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1413.657884][T25346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1414.495522][T25346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.561133][T25346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.869336][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.876579][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.174571][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.181740][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.439500][T25346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1416.465854][T25346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1417.112409][T25792] netlink: 'syz.8.5804': attribute type 2 has an invalid length. [ 1417.232673][ T29] audit: type=1326 audit(1730630035.364:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25793 comm="syz.0.5806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c91b7e719 code=0x0 [ 1417.357006][T25346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.498520][T25346] veth0_vlan: entered promiscuous mode [ 1417.537205][T25346] veth1_vlan: entered promiscuous mode [ 1417.602786][T25346] veth0_macvtap: entered promiscuous mode [ 1417.645481][T25346] veth1_macvtap: entered promiscuous mode [ 1417.687184][T25346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.075372][T25346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.229269][T25346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.380168][T25346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.399598][T25346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.513013][T25346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.533038][T25346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.580183][T25346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.593339][T25346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.611146][T25346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.525102][T25346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.561671][T25346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.715630][T25346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.736342][T25346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.765455][T25346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.899276][T25346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.953597][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.979216][T25860] No control pipe specified [ 1421.025393][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.049010][T13095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.067283][T13095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.933102][ T8] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1423.216239][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.222571][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.914950][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1423.952664][ T8] usb 3-1: config 0 has no interfaces? [ 1424.010276][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1424.019748][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.674339][ T8] usb 3-1: config 0 descriptor?? [ 1424.757643][T25921] netlink: 'syz.0.5832': attribute type 2 has an invalid length. [ 1424.970165][ T8] usb 3-1: USB disconnect, device number 124 [ 1425.834645][T25967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5843'. [ 1428.325722][T26018] ipip0: entered promiscuous mode [ 1428.949672][T26031] afs: Bad value for 'source' [ 1428.996183][T26032] netlink: 'syz.5.5855': attribute type 2 has an invalid length. [ 1433.465324][ T29] audit: type=1326 audit(1730630051.604:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.2.5869" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc87d7e719 code=0x0 [ 1434.743433][ T25] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1435.048845][T26123] netlink: 'syz.5.5879': attribute type 2 has an invalid length. [ 1435.971913][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1436.506817][ T25] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1436.515311][ T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1436.542956][ T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1436.655378][ T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1436.663655][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1436.673568][ T25] usb 3-1: config 0 has no interface number 0 [ 1436.679694][ T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1436.690795][ T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1436.700688][ T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1437.021358][ T25] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1437.034566][ T25] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1437.041325][ T25] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1437.087472][ T25] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1437.096640][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.109086][ T25] usb 3-1: Product: syz [ 1437.128871][ T25] usb 3-1: Manufacturer: syz [ 1437.139706][ T25] usb 3-1: SerialNumber: syz [ 1437.167100][ T25] usb 3-1: config 0 descriptor?? [ 1437.196096][ T25] usb 3-1: selecting invalid altsetting 2 [ 1437.693084][ T29] audit: type=1326 audit(1730630055.804:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.5.5889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61f9d7e719 code=0x0 [ 1438.529951][ T25] usb 3-1: USB disconnect, device number 125 [ 1438.860842][T26190] netlink: 'syz.7.5892': attribute type 2 has an invalid length. [ 1441.702017][T26247] netlink: 'syz.2.5904': attribute type 2 has an invalid length. [ 1445.042937][ C0] hrtimer: interrupt took 57945 ns [ 1446.894134][T13094] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 1448.788294][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5946'. [ 1449.620994][T26437] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.652698][T26437] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.686278][T26437] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.741556][T26437] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1449.774714][T26437] geneve2: entered promiscuous mode [ 1449.779934][T26437] geneve2: entered allmulticast mode [ 1450.431703][T26437] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1450.443071][T26437] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1450.464643][T26437] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1450.530179][T26437] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1454.078107][T26509] overlayfs: missing 'workdir' [ 1454.263614][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1454.594907][ T25] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1454.606674][ T25] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1454.633358][ T25] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1454.693628][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1454.702731][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.765139][T26499] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1455.670613][ T5931] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1455.859430][ T5931] usb 8-1: Using ep0 maxpacket: 8 [ 1455.932679][ T5931] usb 8-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 1455.959706][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.134392][ T5931] usb 8-1: Product: syz [ 1456.207836][ T5931] usb 8-1: Manufacturer: syz [ 1456.234106][ T5931] usb 8-1: SerialNumber: syz [ 1456.266692][ T25] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1456.275094][ T25] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input54 [ 1456.275997][ T5931] usb 8-1: config 0 descriptor?? [ 1456.604926][ T5931] usb 8-1: bad CDC descriptors [ 1456.610701][ T5931] option 8-1:0.0: GSM modem (1-port) converter detected [ 1456.666761][ T5931] usb 8-1: USB disconnect, device number 7 [ 1456.675285][ T5931] option 8-1:0.0: device disconnected [ 1456.708546][ T8] usb 6-1: USB disconnect, device number 18 [ 1456.708546][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1457.976542][T26580] [ 1457.978897][T26580] ====================================================== [ 1457.985900][T26580] WARNING: possible circular locking dependency detected [ 1457.992918][T26580] 6.12.0-rc5-next-20241101-syzkaller #0 Not tainted [ 1457.999495][T26580] ------------------------------------------------------ [ 1458.006515][T26580] syz.5.5984/26580 is trying to acquire lock: [ 1458.012566][T26580] ffff88803575bde0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 1458.021449][T26580] [ 1458.021449][T26580] but task is already holding lock: [ 1458.028822][T26580] ffff888143bf0900 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 1458.038143][T26580] [ 1458.038143][T26580] which lock already depends on the new lock. [ 1458.038143][T26580] [ 1458.048528][T26580] [ 1458.048528][T26580] the existing dependency chain (in reverse order) is: [ 1458.057543][T26580] [ 1458.057543][T26580] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1458.065347][T26580] lock_acquire+0x1ed/0x550 [ 1458.070468][T26580] __mutex_lock+0x1ac/0xee0 [ 1458.075482][T26580] blk_mq_init_sched+0x3fa/0x830 [ 1458.079808][T26582] overlayfs: failed to resolve './file1': -2 [ 1458.080947][T26580] elevator_init_mq+0x1d8/0x2d0 [ 1458.080973][T26580] add_disk_fwnode+0x10d/0xf80 [ 1458.097591][T26580] sd_probe+0xba6/0x1100 [ 1458.102347][T26580] really_probe+0x2b8/0xad0 [ 1458.107369][T26580] __driver_probe_device+0x1a2/0x390 [ 1458.113183][T26580] driver_probe_device+0x50/0x430 [ 1458.118719][T26580] __device_attach_driver+0x2d6/0x530 [ 1458.124603][T26580] bus_for_each_drv+0x24e/0x2e0 [ 1458.129971][T26580] __device_attach_async_helper+0x22d/0x300 [ 1458.136403][T26580] async_run_entry_fn+0xa8/0x420 [ 1458.141853][T26580] process_scheduled_works+0xa63/0x1850 [ 1458.147920][T26580] worker_thread+0x870/0xd30 [ 1458.153035][T26580] kthread+0x2f0/0x390 [ 1458.157609][T26580] ret_from_fork+0x4b/0x80 [ 1458.162538][T26580] ret_from_fork_asm+0x1a/0x30 [ 1458.167827][T26580] [ 1458.167827][T26580] -> #1 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 1458.176424][T26580] lock_acquire+0x1ed/0x550 [ 1458.181451][T26580] blk_mq_submit_bio+0x1510/0x2490 [ 1458.187083][T26580] __submit_bio+0x2c2/0x560 [ 1458.192092][T26580] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1458.198249][T26580] __swap_writepage+0x5fc/0x1400 [ 1458.203695][T26580] swap_writepage+0x8f4/0xf70 [ 1458.208883][T26580] shrink_folio_list+0x3c0e/0x8cc0 [ 1458.214505][T26580] reclaim_folio_list+0x13c/0x600 [ 1458.220037][T26580] reclaim_pages+0x5b8/0x700 [ 1458.225147][T26580] madvise_cold_or_pageout_pte_range+0x295a/0x32a0 [ 1458.232164][T26580] walk_pgd_range+0xc3d/0x17e0 [ 1458.237432][T26580] __walk_page_range+0x15f/0x700 [ 1458.242879][T26580] walk_page_range_mm+0x58f/0x7c0 [ 1458.248434][T26580] do_madvise+0x392b/0x4d80 [ 1458.253444][T26580] __x64_sys_madvise+0xa6/0xc0 [ 1458.258712][T26580] do_syscall_64+0xf3/0x230 [ 1458.263721][T26580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.270127][T26580] [ 1458.270127][T26580] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 1458.277674][T26580] validate_chain+0x18ef/0x5920 [ 1458.283036][T26580] __lock_acquire+0x1397/0x2100 [ 1458.288391][T26580] lock_acquire+0x1ed/0x550 [ 1458.293398][T26580] __might_fault+0xc6/0x120 [ 1458.298406][T26580] _copy_from_user+0x2a/0xc0 [ 1458.303505][T26580] blk_trace_ioctl+0x1ad/0x9a0 [ 1458.308803][T26580] blkdev_ioctl+0x40c/0x6a0 [ 1458.313817][T26580] __se_sys_ioctl+0xf9/0x170 [ 1458.318914][T26580] do_syscall_64+0xf3/0x230 [ 1458.323950][T26580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.330359][T26580] [ 1458.330359][T26580] other info that might help us debug this: [ 1458.330359][T26580] [ 1458.340572][T26580] Chain exists of: [ 1458.340572][T26580] &mm->mmap_lock --> &q->q_usage_counter(io)#66 --> &q->debugfs_mutex [ 1458.340572][T26580] [ 1458.354656][T26580] Possible unsafe locking scenario: [ 1458.354656][T26580] [ 1458.362094][T26580] CPU0 CPU1 [ 1458.367458][T26580] ---- ---- [ 1458.372806][T26580] lock(&q->debugfs_mutex); [ 1458.377410][T26580] lock(&q->q_usage_counter(io)#66); [ 1458.385311][T26580] lock(&q->debugfs_mutex); [ 1458.392404][T26580] rlock(&mm->mmap_lock); [ 1458.396808][T26580] [ 1458.396808][T26580] *** DEADLOCK *** [ 1458.396808][T26580] [ 1458.404933][T26580] 1 lock held by syz.5.5984/26580: [ 1458.410023][T26580] #0: ffff888143bf0900 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 1458.419757][T26580] [ 1458.419757][T26580] stack backtrace: [ 1458.425643][T26580] CPU: 0 UID: 0 PID: 26580 Comm: syz.5.5984 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 1458.435897][T26580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1458.445935][T26580] Call Trace: [ 1458.449215][T26580] [ 1458.452147][T26580] dump_stack_lvl+0x241/0x360 [ 1458.456825][T26580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1458.462018][T26580] ? __pfx__printk+0x10/0x10 [ 1458.466610][T26580] print_circular_bug+0x13a/0x1b0 [ 1458.471623][T26580] check_noncircular+0x36a/0x4a0 [ 1458.476551][T26580] ? __pfx_check_noncircular+0x10/0x10 [ 1458.482022][T26580] ? lockdep_lock+0x123/0x2b0 [ 1458.486701][T26580] validate_chain+0x18ef/0x5920 [ 1458.491543][T26580] ? is_bpf_text_address+0x26/0x2a0 [ 1458.496727][T26580] ? 0xffffffffa0001ad4 [ 1458.500877][T26580] ? 0xffffffffa0001ad4 [ 1458.505014][T26580] ? __pfx_validate_chain+0x10/0x10 [ 1458.510194][T26580] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1458.516333][T26580] ? kernel_text_address+0xa7/0xe0 [ 1458.521430][T26580] ? mark_lock+0x9a/0x360 [ 1458.525765][T26580] ? __lock_acquire+0x1397/0x2100 [ 1458.530775][T26580] ? string+0x26a/0x2b0 [ 1458.534915][T26580] ? widen_string+0x3a/0x310 [ 1458.539507][T26580] ? string+0x26a/0x2b0 [ 1458.543663][T26580] ? bdev_name+0x2b1/0x3c0 [ 1458.548073][T26580] ? mark_lock+0x9a/0x360 [ 1458.552405][T26580] __lock_acquire+0x1397/0x2100 [ 1458.557241][T26580] lock_acquire+0x1ed/0x550 [ 1458.561738][T26580] ? __might_fault+0xaa/0x120 [ 1458.566416][T26580] ? __pfx_lock_acquire+0x10/0x10 [ 1458.571428][T26580] ? __pfx___might_resched+0x10/0x10 [ 1458.576705][T26580] ? snprintf+0xda/0x120 [ 1458.580962][T26580] ? __pfx___mutex_lock+0x10/0x10 [ 1458.585987][T26580] ? blk_trace_ioctl+0xec/0x9a0 [ 1458.590838][T26580] ? __pfx_snprintf+0x10/0x10 [ 1458.595509][T26580] ? __might_fault+0xaa/0x120 [ 1458.600173][T26580] __might_fault+0xc6/0x120 [ 1458.604667][T26580] ? __might_fault+0xaa/0x120 [ 1458.609359][T26580] _copy_from_user+0x2a/0xc0 [ 1458.613941][T26580] blk_trace_ioctl+0x1ad/0x9a0 [ 1458.618702][T26580] ? tomoyo_path_number_perm+0x6f9/0x860 [ 1458.624325][T26580] ? tomoyo_path_number_perm+0x206/0x860 [ 1458.629957][T26580] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1458.635250][T26580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1458.641229][T26580] ? do_sys_openat2+0x17a/0x1d0 [ 1458.646084][T26580] ? file_to_blk_mode+0xcc/0x140 [ 1458.651010][T26580] blkdev_ioctl+0x40c/0x6a0 [ 1458.655503][T26580] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1458.660515][T26580] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1458.666836][T26580] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1458.671846][T26580] __se_sys_ioctl+0xf9/0x170 [ 1458.676428][T26580] do_syscall_64+0xf3/0x230 [ 1458.680929][T26580] ? clear_bhb_loop+0x35/0x90 [ 1458.685615][T26580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.691496][T26580] RIP: 0033:0x7f61f9d7e719 [ 1458.695897][T26580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1458.715503][T26580] RSP: 002b:00007f61f81f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.723900][T26580] RAX: ffffffffffffffda RBX: 00007f61f9f35f80 RCX: 00007f61f9d7e719 [ 1458.731853][T26580] RDX: 0000000020001100 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1458.739846][T26580] RBP: 00007f61f9df132e R08: 0000000000000000 R09: 0000000000000000 [ 1458.747803][T26580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.755755][T26580] R13: 0000000000000000 R14: 00007f61f9f35f80 R15: 00007ffd20dab478 [ 1458.763712][T26580]