last executing test programs: 29m2.325018773s ago: executing program 32 (id=1909): bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca940a455e7a0deceb768f70a5c0125f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c1000000000950467cc00863a27a54882a63348611196d4439d2c4b0cc8f288f5597a3ae540dec784f43b02fd", 0x87}], 0x1) socket$inet(0xa, 0x801, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 24m35.193752647s ago: executing program 33 (id=2415): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) 23m38.598422567s ago: executing program 2 (id=2519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) sched_getparam(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040800) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 23m35.094906275s ago: executing program 2 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f730344e69fb1c51b19392d516b12ec8030697212e9ace1ce81ae2c", 0xad, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000380)='./file0\x00', 0x89) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001080)='./file0\x00', 0x0, 0x1001, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000001c00), 0x10, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) 23m31.179427154s ago: executing program 2 (id=2533): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffcd1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 23m29.359286989s ago: executing program 2 (id=2535): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) 23m27.705340426s ago: executing program 2 (id=2538): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x2000c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0) 23m26.646463848s ago: executing program 2 (id=2540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f000001d740)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200e92, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x0, 0x7}, {0x6, 0x8, 0x2, 0x7ffffdbd}]}) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m9.625928664s ago: executing program 34 (id=2540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f000001d740)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200e92, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x0, 0x7}, {0x6, 0x8, 0x2, 0x7ffffdbd}]}) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m0.018372849s ago: executing program 5 (id=3000): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) pipe2(&(0x7f00000004c0), 0x84000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, 0x0) 18m58.855720347s ago: executing program 6 (id=3003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000000568887c0b0ba4487ffffffff2a00907800000000"], 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r5, 0x4020744f, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r9, &(0x7f0000001600)=""/4103, 0x1007, 0x8) 18m57.53066896s ago: executing program 6 (id=3005): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close(r5) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() 18m56.294055837s ago: executing program 5 (id=3008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x0, 0x0) unshare(0x400) signalfd4(r6, &(0x7f0000000140), 0x8, 0x0) ptrace$peeksig(0x4209, r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000096d94316fa740fd4dc7341fbd2376e0cebd4e74de6db070730aee303309351dc6f13bded94ff735ff68c4674261ba7c1db5bde83b90a7eeaeb2b4b2a264be995cc4fd9046e4c4bfaac09c425fbcd9957c72b815664d620137a8d8408315f8b77d7f3a9c39888580f8cb58d3ee930731845ec5286e1f84b3f5723c74ca7009c277ab9d4c4185f24502e517cd22e100000000000006cd3146008cd581956264dd2b979f4"], 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000001c0)={r8, 0x0, 0x0}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[], 0x48}}, 0x4) 18m53.756629948s ago: executing program 6 (id=3011): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7ffffffe}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@jmp={0x5, 0x1, 0x8, 0x7, 0x8, 0x40, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = dup(r0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000040)=0x8000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000008a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512da90b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d53319d0ad229e5752548300000000dbc2777df1509516f06f1330cf8c3a8b1ff72e6127b0dd488318b5790bee7ebd4745b7cdd77b85b941092314fd085f028f4e09d63781987af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede3faedc51d29a47fc813ce3d32cfc7a504c271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d04ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b57479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0ef94234db1f00000000000000c20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b35f421c3552772ca7f3e2c25a65f75ca13fb7c8bbd6ff43cb78b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41aad8bda74d66f47cc17d8ba3eec0fd80f82c5f573c6d294d366505000000da0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da323947004cacadcaff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4aa3cfbe948dfb4cc4a389485ee7af1f0387c93559653f50a471c69608241730459f012b060e7d23fd39206000000000000eb55d00162325ba141bd587cc9dad46de56ef907b059b99a79ae5498f6589880ed6eea7b9c670012f80cd6a1397953ba5870786554df26236ebced9390cb6941b8365d936a7d2120eca291963eb2d537d87cbb54e588ee5d6944ee4de5c183c960119451c31539b22809e1d7f0c7a06a9fa87d64cb77872a0aa9a104e16b3b8c6e64836ac3f32f53c9a2bae513464ca03aff14b9aa4bd9539f5096412b92012e095b84c202060098df3314f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c363000000000223201780200c6ed7966130b547dbf8b497af0a77f52f2cd39000000200000e81c23cf14156951210001c800000000001500000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921e0128dfd70b438af60b060000000000000056642b49b745f3bf2c01808b6d7d748308eea09f0161b4735efbf3411738d6ee7aebf9ef40662d7836d252c566e1ee938a9a6804ed3a1079b0282a12043408cd60b9e53978c81839be0000000000456f7d2a42cb13da2022f23eaec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea394cd8ffd3d628293e591dc6f71c2710a7ea8a4fdc214e1cc275b26adfa892e6de9200000000e50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e014df20fa209bcbb5c252b11a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633c26d3927ae1beb065f5ac33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2b2bdc0af7c4c61241750d50515a59a3ad09e8802e8f4f535447dc0fc9d5f99a145dfcedad69da9cd4b75c624600e78f4458542b14f29611f95d4a318384eb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d583f436137a3c5dc714c9402c21d181aae59efb28d4f91652f6750b9195599d60c534ee8e8ff0755b09004c25edb85bcff24c757aa80900000000b6638c420eb4304f66e3a37aaf000000c42a570f0e9d76fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284df80e4636c25b96174326d82761c26e329555f9290af40000000000000100000fd3763655500344bae34347f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419a5c16e2055b8505809ed2ee9647c5d3b0000bc00edf5e9020c09ab004321610b857e8717974b633b21cb32f0e03280e09758bd445ab91d201782d656ab09f508bbbaca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92b32af00f191b66b6a6f732a91f0a2e9120be61e58c79d497247d278888901d44bf77e8246605a644e9e3d769db497c3960df05caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f3101985602688888ccb85c87b4f8ffffff7f000000002c331fca28541b7ca211115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000000102000000000000000000000027c9585c0cead5d619d18475ccde2857279a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77a23b0000e49666c464d35ca9b50f3ed3b3da8c17a23692759ccf5a205311b7d122532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769da52b3d42c68a3102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e8918a0d6e2949affcacb5ba0a56aa063b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d395832f1e2aad3e519f1634e8fbd8d31330d89069f9448a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4cfb0b9c8c80158b44ecae9420654f7016b0aac117087406d343e27b372d6027ab2aec8f2bcad7fe6bb932bc5751d2974e95455a277fa3b472bc7bbdd2ac5a1ea608e8137ace03361607cc1a84be659355629ab13ad49008c3fcfa2423439a3607961d5b59da48a0155e8e42cc13c702cc40c99cf86c2021d72f9f4ab1b00de555a5a39593c93871ff7eb5ecadb64837a2d88723ef65aa5152e3d55e5c66585e2112f5ec64b639a9864e57581b61f2b0960600000000000000265f091e7bce17d20604c5ab751773a5cf8a719a7ada06ed03832bf274707c7c970edc20f4a1eaa3b61045a20097208d03f7a146a6901913618738679d4e0af53eae997eecfa0dc3dcec19d3d9205450765d659200c92701ee75c8710470d9eb6f62c5c721883f1544ba66271c8dab05a933746c16b6e93294b561c6715a32a394ed1e6c01670c931bfa76c58c6f34d64e758a7a7f7d33c49336d4cba2cbb170ad7539a45774dfcc55257215c8ae719dc1c232fc6699ef01005887d04a543030b4328ab48744ac23ff56fd2da52eb9fb2eefcdd2d92d73ac1b111ea895e1fec36a3579879acfe366d393f1fa9cbe08d9ba57a443643e9cd251dc88e91a5e458e66ea1e822d55d4dd919a95eb4c25a08cb6e1070000003a0fd07a4ad9df240e00006aaa2db0dfe416146840d88bd08365e547c970e2983200703864a3b9c4682cb479dad6d34d211b05267eb1355520e9ec0c5014b0832f7fb35782fdbfcbf5e23a7f5d51ea480371748d18d8e10608ab8261fe058d1732f28814a9981d84a04a2bb36c89bdd245e3293a14df1ac567301a79514f103abd387d6ef2d9d94508ac0f6135c8921279573eefd5d4e33b9ef585980789a94d9848906f545559d30000b5040f0776703363249ca984cbb09752f099efbb9e7362e4999594c1086d8958e9469db01d85fb0b9b3148663e9ea2e755d96c70e540b4200e4cf82986712dd733b26d00e947d03c42215118426d548cb2077b43b89e4163d260faea1db53e2cf3427c90aefa2662a1c2b28b0e020e872bda1d39da508de5dbc37d03ee056b2579a1d16799589a2600000000aa00006c94bcaf115fbbcb216e3cb7fd9afe16d1fff2d047e508aa5f6de0ea4e9ec1b3a4ab1f8b5f312fc50000000000000000000000000042709db6de7e969ac0ce18b47280fb1b1b1531648122fed3e25edecb5200f5000000000000166f7d36b2966c19af7ffa6afa69e50821c9aa3ae60fbc196cf8ad2f7f86d79db1bb0ecbf9c3d0d3d407574def838e4def26ed9c7e6c69858f7813be8ffc565583663bebfe7485660b67e1436cbc6d4d3c48ab7b033d7d1195173edb16643f69cb779802839d490a4df94e5ea89c192af2ae83876edd59c9a7140e12ba591f073ec604f7e8f1e100cd414e9237ecfc052d9a73a868cd0e4b06da0435af72fb0d25657e8f5464b19fa83f977e6900000000367871fa37420e7a232ef9b440bb0639994c655d144c5786939d6a187b81f9ddd2bec36cd28371b1754cb6c53697fb23576ee0d3fd0a5803c9be9fe364803184f1a7a9a8eb64d17d238fa3238a001aa8ed040a69e9ec0a627e3b3ca64d4680d819c14c71684581000000000000000000000000000000000000c6a6587715865fe14558960bc936bc838bd1f2a00b17a407457681d0760000000000000040000000000000000000004faeabea6de40ae30291662594c993099ef041c264a64d77d69e0cdfa620a191704cef91e269044acf844de65a099200265e13c2a8f9b717886dea8e79407e34bc268a17965033ca1dfeeaf9b49bc68f1546595642f9fc008875ddb7aebda7a16b1d20dd8b65bcdac8cdc75a173fd2e57a9c37bf5a52ea001ec981dd7ad4e5944575ced39233ada8f3c1b856644812828bb79536a5188d14fe537250dc107121534cbbc7598f48aa2335616ae8eb72acf6982048e568e37f1f58e9714343587734c7ec0fa5c44d13165d6384bf9500757b4b0275950d6e7c451eef3fd353d47c54c4c2cf7318e6c24583ba0966225284d1abac80786519c563ddf0e6c023d537ca6e0d6d4e072c98f45415d13f0dcea174f162ebd00b42264f6fa3dccd09f4101dd254e54423b30e06713eccfacb6ffb38afff920980af938a4d78f4b9a6b5c7424e91121cda789104ee490d25843f1622bba93257cc23e45cd7ed42abdb991d51804e674e507dfd53b5ab6944df33f4f494b926f2ceb329550b46e82a939ad82b385e66809d7d4d3630b6f22c2f41fdaa0fadeea09fa4f7005813643c2d6307d55689faf6f656327ac5872a3bd4c11363909a8b9f30e5401993a0f6e1a9b42287542647d1e86b02b7e36319414629ac1f35e1457f922da0c2de76c9e97944efad0a3ad78cda81c5b82709d696e85bbf4595ef9664a6aff8cf96446cb6c26595f4eb659d26c846471f6551dbb24fc6c03a01e33efcd5939472b687d31be9bd9bd1bcda45bd2236f06c000000007d348ebcb9d810d4dc3d55bbe4055ce9c45267daeec7a7d8b498f507e933cc02fb53c2c28fa09ce5ada5de1415309761f6378c794f8ce23c1f7add4f65280ab446ea2d130000000000000000000000d1a0313ff63bc4e4463688db1d6ac7f4595a02c89349a973f118d936f33ea18e69d7739f4532e1b8580ef125b47cf5b402b6f2beffed6cc9afe2b548c4dbc78363118818d9473f29d52444685c41620eeaeb1f8786e87aeaf287fb9b63b30e6761507503dcd47b64f0b6157999c82bd151bee0c67f3e664225bd917b38aeae1da5524eefef1772d759df9ec9b4197383f9a66217e180e434e650dd560aa3ed42acddd44d6f45807a3c63e15929cfbebc7eef1a319d3147a6c06bd974168ac689392fa851ebdf524ca2331148ff7e855cccc106074ca92153734d5c5e3f9efc6592b08e0c07c7b5d42ec71484bb2a4c0f4293138369f39f9fa4a9cc607b42ba6102f918ce4e76d66fba450e940ed6a6a301a0b761a9cd849962fae5059bda419fd2a170ea387c10a4ada5893f38486069ef1bfdbb432ab322c887d7a94fa967135833157bafbed3b48bb267fc3aa56d1e5b66417a673b40884fc91ec9558eab6a08222dfe37767095b2d94cda881290d6017137595cdd53972353f485adfde8015cac0e1acd64ca97d67023f75a54b1ebe55053652ad16292a15e79dc58ba080f795f1a548da6f669e5c34afc272e5a32e85d5f44979431eab3fcd8d33d54000000000000000000ff1f3f6f4b33adcbee66736b4b35b5b909bc7ddd03f17f5f6436156a56c7e77e0808703b370f0cb4f00074200ae3e4ea0611d548f34582848903e4459d0a18ab9b113ebc614fafe4bd03cb1a8843e592f1b102b1bb87f13c50a1dc5df223e5bbcd06c55393f9c0e08ab6509bbed0dfedbf37309c99bf1e1fc7512afb7bd334653356419f8aa57f1224a54a85a3041657fb5037dda5b0f2e6a9673cc0d51b28954ef8c0ca82e69d198729b2c984a04b0f6ef9486767f5928461df5b8f84e0b790fa7d9088fdb7b7e6f020d4eae420155f1739307421fc3e9d4ffaffff2434f3d167d24bead3c6cedb2dd480d5c8b21c0edb06893c1fb18e9e716525f115055a84daca135d8972280324a9ffd4e636c87225c2512eb3e0fe65972c84361536e52a6ea677ffcb4bf8fac2009f24c01b7c86c203ce9093dd53b154110f033a25034752dc8561ed7bb7343e069ba1ad6f1d7437b584d2c292088d3d80e8834ae8760cc0211cb03f3ed168131eba4c8a0000000000000000000000000019c2dbe83523a58f68e66fa9fdf1d2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18m52.446224823s ago: executing program 6 (id=3012): r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c00d46748fe5b3584e6f344a2f1dd649b2dbe34080e4d12e38ce67a2af1e4947c"]) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000001700)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './cgroup.cpu/cgroup.procs\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$video(&(0x7f0000000540), 0x0, 0xe0901) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000016c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1638, 0x1408, 0x1408, 0x12d0, 0x12d0, 0x12d0, 0x1568, 0x1568, 0x1568, 0x1568, 0x1568, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x3, 0x1, 0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1698) 18m52.346901951s ago: executing program 5 (id=3013): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="c30f0c442b27e3ad28e0d033d8137a0cca3d347c9bdfcd183de11e56c830db1ebecce3d8de842648425483fbf199c8bd8775248304af52f32743b1b740b21456cac52fe79fd48b95da5b2ef4ee107375e1241dd3e5bd23a0c13b0b7712", 0x5d}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x20180) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r8, 0x89a3, &(0x7f0000000200)='bridge0\x00') 18m49.843054155s ago: executing program 6 (id=3019): r0 = memfd_secret(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000001080)={0x1, 0x0, 0x20, 0x20, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') 18m46.598090032s ago: executing program 6 (id=3023): chmod(0x0, 0x23f) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x4001) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000780)='contention_end\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010002", 0x7) r6 = epoll_create1(0x0) r7 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0x81) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0xffffffffffffffff) keyctl$describe(0x6, r10, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r10, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f0000000240), 0x0, 0x100) 18m45.866140289s ago: executing program 5 (id=3026): r0 = socket$kcm(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, 0x0, 0xb, 0x1, &(0x7f0000000400)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f0000002040)={0x2020}, 0x2020) sendto$inet6(r5, &(0x7f00000003c0), 0x0, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) dup2(r5, r7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x0) 18m44.72113643s ago: executing program 5 (id=3029): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000877000/0x3000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000000)=""/53) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, r2, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x883f, 0x0) 18m41.60624708s ago: executing program 5 (id=3035): syz_open_dev$vim2m(&(0x7f0000000180), 0xecb, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180900007b000000000000000000000017f30000", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000000c0000f9c90000000000000095e6c19d9e03848d64bac3539ff28f1c404f93dc1e814802523cd0457ac5ffb6e7ebe822db46ccc38e0864317a2c081279a4a8d6dff182de32e9d4ca395cc284f4b71ffd6cabeecf9693ab82c983ebcce4c8aeb7ac9a321c94eb7a2dbaddc0bad0e3a1"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) write$UHID_CREATE2(r2, &(0x7f0000000a00)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xaf, 0x0, 0x400, 0x3277, 0x8000, 0x1, "af8691711bd68f84df1c426e106091727ebf90fd1622b86f7b229e898ac7f162cde2bdafda7c3d39698ed3f9a730476ed6f8d86f0996f06b4025dec0eaf08c389a6b970eb42111657339ebc7cdd9bb2e870dcc0ac59c258ed06516edf333b1a881f06ce4fe7f544cfc5235b48f1574b8b7efce94c7f5809d1c32d4fb3451f32efc7004ea3fd963372f567d04ad292789b528ba3a154267ee56518275a276b069041ea1a28bc0a4b414c68020d9a955"}}, 0x1c7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000200)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6}) 18m28.562472399s ago: executing program 35 (id=3023): chmod(0x0, 0x23f) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000002c0), 0x6, 0x4001) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000780)='contention_end\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010002", 0x7) r6 = epoll_create1(0x0) r7 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, 0xffffffffffffffff, 0x81) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0xffffffffffffffff) keyctl$describe(0x6, r10, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r10, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f0000000240), 0x0, 0x100) 18m24.861156403s ago: executing program 36 (id=3035): syz_open_dev$vim2m(&(0x7f0000000180), 0xecb, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180900007b000000000000000000000017f30000", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000000c0000f9c90000000000000095e6c19d9e03848d64bac3539ff28f1c404f93dc1e814802523cd0457ac5ffb6e7ebe822db46ccc38e0864317a2c081279a4a8d6dff182de32e9d4ca395cc284f4b71ffd6cabeecf9693ab82c983ebcce4c8aeb7ac9a321c94eb7a2dbaddc0bad0e3a1"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) write$UHID_CREATE2(r2, &(0x7f0000000a00)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xaf, 0x0, 0x400, 0x3277, 0x8000, 0x1, "af8691711bd68f84df1c426e106091727ebf90fd1622b86f7b229e898ac7f162cde2bdafda7c3d39698ed3f9a730476ed6f8d86f0996f06b4025dec0eaf08c389a6b970eb42111657339ebc7cdd9bb2e870dcc0ac59c258ed06516edf333b1a881f06ce4fe7f544cfc5235b48f1574b8b7efce94c7f5809d1c32d4fb3451f32efc7004ea3fd963372f567d04ad292789b528ba3a154267ee56518275a276b069041ea1a28bc0a4b414c68020d9a955"}}, 0x1c7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000200)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6}) 9m8.249776715s ago: executing program 1 (id=3997): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "1721d03759be36"}, 0x19) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020}, 0xfffffffa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 9m6.033185851s ago: executing program 1 (id=4003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x20, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000380)={0xd07, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x2) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="e00000027f000001000000000000000002005b3f213491681dc2957b2b61142aec0ba433132775f43d5ae86e0b944d83e1e7b4a0ae1f955e91b596c24e71a83ef35b8cbf766965bcd851569c091e3f5a665afdb7e45875ab7ac9f070ed231d1e7b1202a53ff1e11f17aed2fe2f98aa6ce24abdefb2f3e53b60d9196a4f2bf24a3b395e"], 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000f500000a2c000000060a090400000000000000000200000009000173797a30000800000000020073797a320000000038000000080a05000000000000000000020000000c00034000000000000000420900020073797a32000000000900010073797a3000000000140000000800010000000000000000000a00000ab9043c3bb25adca05468150250583a7b5756d83775fed17e877e2ff6a49d4d8c9402779cd89d21cbc0ac3a2fa7ca6808df3a003876c673929138f8529447ab1ea11300"], 0x8c}}, 0x0) r4 = syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0x1, 0x80}, &(0x7f00000003c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0) mlockall(0x7) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth1_vlan\x00', 0x20}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x4010}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r6, &(0x7f0000000a00)=ANY=[@ANYRES8=r4], 0xffdd) 8m59.959222581s ago: executing program 1 (id=4012): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0xe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) sendmmsg(r7, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [0x0, 0x0, 0x0, 0xff000000], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x4, 0x1, 0x5, 'snmp\x00', 'syz1\x00', {0x3d8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 8m48.645704816s ago: executing program 1 (id=4030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102376, 0x18fe8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_io_uring_setup(0x3a66, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x0, 0x28b}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000063112400000000000010000002000000850000000500000095000022000000009500a50500000000e68755eca929fd2d7dfbda213ef90000dfc00cf081ad59d4127b27ef784e522336d11f7df8570396b92710756a"], &(0x7f0000000300)='GPL\x00', 0x5, 0xf5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000000)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000040)=0xfffff001, 0x4) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2000, @fd_index=0x9, 0x1, &(0x7f0000000940)=[{&(0x7f0000000500)}, {&(0x7f0000000200)="2bce28417ea1199f7e6a5abf9bf2a323730cfa135800edf3d2ea9a559f73fd5cfcd578471318eab4c01043f3a93c7275716d9d6fb48064f1c3be033a2e72c1f860fa4f60aa50aa2d8f4b051f7e5f5a617b761975dd52c2608e947c3c", 0x5c}, {&(0x7f0000000640)="4756a4a2ee23c63bb4880dcdf4938388f145a8a690d1c6142683fc638b960969f55d70c66d4a181685f9ea3c10a4bbb2073ed4dff0271c39a39d04b5aefec3f5bdc47e0b789ed24ffe1ad2e84045ac48b1fa15cbc06383b06d01b94665c45f0bb72590e509861e3a167b34d141005a5bdfe2b334a9d8bc998ab281d2bb5c2b39a3327dc81b721415f2c3786a0462b5611c806d1252df55f300e14da39f81182be73c376d", 0xa4}, {&(0x7f0000000700)="a7d5542ce84a223d4f8991c3e914e468181323d972b5c9565f0da13e866726078fffc111fd7a3c89920a0536184e4956c0b5834430e87efba7aedb8beff239d3aa7c36cc47b2cf8cc071b4ad8a409bb6c3212e274eb5dd2e81b8d302bb3dea1bff3cf6b49270883e7bec20a6ff1aae611c2009d31e3234e0c8cef093dfff0a7a", 0x80}, {&(0x7f0000000780)="266abecb1d87884e006d1157381a11ce05cb727b833e3248a7766499df49ca585bdea3965aa7652fda6c6c2455004a697a1290c7cf19e91df39e9d19000dfae5dc9b8f89bd2bbe3f9d60d774084718d358dbac2d5806a314e42c6bb2ec", 0x5d}, {&(0x7f00000008c0)="c31181457d47b488e9a459913b28a138dfc506bfb3a7cbd40f9a5c41f1340a8e61d67113f0132711c1349046bb0cf11d745cfa546180a1afd198a80e6550a66ca5975e32fcd7d1812c3744e7dd88da66b24b4beaa942ab1c16ed29fbec12bc2382197fdb8a34", 0x66}], 0x6, 0x1a, 0x0, {0x3}}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x0, 0x1500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x2, @void, @value, @void, @value}, 0x50) 8m44.410230288s ago: executing program 1 (id=4036): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/12, 0xc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_create(0x3) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000580)=""/96) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 8m42.313878089s ago: executing program 1 (id=4038): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x7f, 0x1f, 0x0, 0x7f}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x43) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x42) mount$bind(0x0, 0x0, 0x0, 0x901891, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000100)="bd", 0x0}, 0x20) mount$bind(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x12802c, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x9, 0x1}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) 8m25.805437419s ago: executing program 37 (id=4038): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x7f, 0x1f, 0x0, 0x7f}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x43) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x42) mount$bind(0x0, 0x0, 0x0, 0x901891, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000100)="bd", 0x0}, 0x20) mount$bind(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x12802c, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x9, 0x1}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) 7m19.991125787s ago: executing program 8 (id=4170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}, {{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)="7a6711def2c830f0f39a82607ded3f52df046fcdd9fb9832f155535cbad8fa03e331d9f9afb51ccc1078536e42a2d3080d3e522e2185e597975a927c", 0x3c}], 0x1, 0x0, 0x0, 0x10}}], 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a310000000014000780080012400000"], 0x64}}, 0x0) 7m18.875563037s ago: executing program 8 (id=4173): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r5, 0x4b30, 0x8000000000000001) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) r6 = socket(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000023c0), 0x6, 0x14480) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 7m17.166876124s ago: executing program 8 (id=4176): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xff}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="744e7b5b748d15a758f915f4c24c4e7ff3f8e6bc0fcc1a3b288180a5ff10feaa5b0efff36b6a304a", 0x28) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x4, 0x60, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0x10) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ftruncate(r7, 0x8001) socket$isdn_base(0x22, 0x3, 0x0) 7m15.622491252s ago: executing program 8 (id=4179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)}}, {{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)="7a6711def2c830f0f39a82607ded3f52df046fcdd9fb9832f155535cbad8fa03e331d9f9afb51ccc1078536e42a2d3080d3e522e2185e597975a927c", 0x3c}], 0x1, 0x0, 0x0, 0x10}}], 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a310000000014000780080012400000000008000840000000160500040003000000050005000200000034000300686173683a6e6574"], 0x64}}, 0x0) 7m3.992968296s ago: executing program 8 (id=4198): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x4000001) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) write$UHID_INPUT(r1, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7m1.136220402s ago: executing program 8 (id=4202): socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="fd09239d7a72"}]}, 0x40}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/10, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x48001051, r4, 0x0) execveat(r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000007c0)={[&(0x7f00000005c0)='dummy0\x00', &(0x7f0000000600)='lowpan\x00', &(0x7f0000000640)='-{&-+^+}\x00', &(0x7f00000006c0)='vcan0\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='vcan0\x00', &(0x7f0000000780)='\x00']}, &(0x7f00000008c0)={[0x0, &(0x7f0000000840)='(,\x00', &(0x7f0000000880)='vcan0\x00']}, 0x100) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0xb, &(0x7f0000000280), &(0x7f0000000440)=0x4) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 6m44.007084874s ago: executing program 38 (id=4202): socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="fd09239d7a72"}]}, 0x40}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/10, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x48001051, r4, 0x0) execveat(r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000007c0)={[&(0x7f00000005c0)='dummy0\x00', &(0x7f0000000600)='lowpan\x00', &(0x7f0000000640)='-{&-+^+}\x00', &(0x7f00000006c0)='vcan0\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='vcan0\x00', &(0x7f0000000780)='\x00']}, &(0x7f00000008c0)={[0x0, &(0x7f0000000840)='(,\x00', &(0x7f0000000880)='vcan0\x00']}, 0x100) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0xb, &(0x7f0000000280), &(0x7f0000000440)=0x4) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 8.721858812s ago: executing program 3 (id=5579): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.458270549s ago: executing program 4 (id=5581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xfe, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x183}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 6.938228827s ago: executing program 4 (id=5585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x0, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000080)=0xc, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB="febfffffffff69d8c8b8ca6f", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',dfltuid=', @ANYRES16=r5, @ANYBLOB=',k']) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000100)=@ethtool_cmd={0x7, 0x800, 0x1ff, 0x6, 0xfa, 0x3, 0x8, 0x0, 0x4, 0x10, 0xd, 0x3, 0x200, 0x3, 0x5, 0x7fffffff, [0x80000001, 0x3]}}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 6.865908445s ago: executing program 9 (id=5586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x34, r1, 0xb97534d5fe9700cf, 0x4, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) 6.130552424s ago: executing program 9 (id=5588): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[], 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r3, 0x20000005) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) write$binfmt_script(r6, &(0x7f0000000600)={'#! ', './file1/file0', [{0x20, '\x89,Qhm\xcd\xc7\xeb\xaf\xcd]y\x9c\x93\xacz\xd2c.\xc9}\xafm\t\x91\xcf\xcc\\N\xeb\x17\xc0\x90\\\x9d\x18\xb2\xbd\x17\x12\x8c{\xa5X\x92\x9b\xed?\xfd\xcb\xa5\xd0\xeduI\xc81w\xa9\x83\x89\xb1h\xe11=\x85\x82\xa2OI\xee\x02[\xf5:[\xb7\xa4l\xa6\xc5~\x8d\t\x00b\xf1\xe8I\x94\x82!\xedW\xb7t+\x02\xfb\xb9\x82\x89\x00\x00\x00\x00\x00'}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xd1\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xc3\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\xff\\\x9c\xf0\xaa=\xb7\x83\x80\x01.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ef) ioctl$BLKRRPART(r6, 0x125f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.557725167s ago: executing program 7 (id=5589): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x4, 0x0, 0x101}, 0x14) 5.324419896s ago: executing program 3 (id=5591): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0xc, &(0x7f0000000100)={0x40, 0x7, 0x2, {0x2, 0xb}}, 0x0}, &(0x7f0000000540)={0x24, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 5.307892955s ago: executing program 4 (id=5592): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="4174593c8f5eb7456ef19bf528c0c896e7dadb9824b4a14035e2d15f215468", 0x1f}, {&(0x7f0000000100)="c0cc9472fed91c8287e9474b02cbe457688be6a6572fe55b4e0fdb5e916eec", 0x1f}, {&(0x7f00000001c0)="88886e8048", 0x5}], 0x3}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f00000002c0)="f658", 0x2, 0x0, 0x0, 0x0) 5.093011161s ago: executing program 7 (id=5593): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x58}}, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00), 0x56, 0x4040000) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) 4.748977418s ago: executing program 4 (id=5595): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.110639698s ago: executing program 0 (id=5596): syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 3.9075625s ago: executing program 7 (id=5597): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x100}, 0x20000000) 3.879943251s ago: executing program 9 (id=5598): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[], 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r3, 0x20000005) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xd8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc4, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xd8}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) write$binfmt_script(r6, &(0x7f0000000600)={'#! ', './file1/file0', [{0x20, '\x89,Qhm\xcd\xc7\xeb\xaf\xcd]y\x9c\x93\xacz\xd2c.\xc9}\xafm\t\x91\xcf\xcc\\N\xeb\x17\xc0\x90\\\x9d\x18\xb2\xbd\x17\x12\x8c{\xa5X\x92\x9b\xed?\xfd\xcb\xa5\xd0\xeduI\xc81w\xa9\x83\x89\xb1h\xe11=\x85\x82\xa2OI\xee\x02[\xf5:[\xb7\xa4l\xa6\xc5~\x8d\t\x00b\xf1\xe8I\x94\x82!\xedW\xb7t+\x02\xfb\xb9\x82\x89\x00\x00\x00\x00\x00'}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xd1\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xc3\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\xff\\\x9c\xf0\xaa=\xb7\x83\x80\x01.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ef) ioctl$BLKRRPART(r6, 0x125f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.227330769s ago: executing program 7 (id=5599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @generic={0x0, 0x7, "d58838068b"}]}}}}}}, 0x42) 3.147470012s ago: executing program 0 (id=5600): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2], 0x50) 3.040197189s ago: executing program 9 (id=5601): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write(r0, &(0x7f0000000400)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x80) 3.024949829s ago: executing program 7 (id=5602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x0, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000080)=0xc, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB="febfffffffff69d8c8b8ca6f", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',dfltuid=', @ANYRES16=r5, @ANYBLOB=',k']) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000100)=@ethtool_cmd={0x7, 0x800, 0x1ff, 0x6, 0xfa, 0x3, 0x8, 0x0, 0x4, 0x10, 0xd, 0x3, 0x200, 0x3, 0x5, 0x7fffffff, [0x80000001, 0x3]}}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.007025331s ago: executing program 0 (id=5603): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/12, 0xc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_create(0x3) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000580)=""/96) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.683464175s ago: executing program 9 (id=5604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@local, 0x8, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x8, 0x0, 0x9, 0x7ca, 0x10000000000000}, {0x0, 0xfffffffffffffffc, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x42}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.948606377s ago: executing program 9 (id=5605): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x90, 0xd9, [{{0x9, 0x4, 0x0, 0xeb, 0x1, 0x7, 0x1, 0x2, 0xdd, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xfb, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.935332036s ago: executing program 3 (id=5606): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 1.826160507s ago: executing program 3 (id=5607): syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x58, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x58}}, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r9, &(0x7f0000005c00), 0x56, 0x4040000) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000100), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) 1.816198003s ago: executing program 4 (id=5608): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[], 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r3, 0x20000005) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) write$binfmt_script(r6, &(0x7f0000000600)={'#! ', './file1/file0', [{0x20, '\x89,Qhm\xcd\xc7\xeb\xaf\xcd]y\x9c\x93\xacz\xd2c.\xc9}\xafm\t\x91\xcf\xcc\\N\xeb\x17\xc0\x90\\\x9d\x18\xb2\xbd\x17\x12\x8c{\xa5X\x92\x9b\xed?\xfd\xcb\xa5\xd0\xeduI\xc81w\xa9\x83\x89\xb1h\xe11=\x85\x82\xa2OI\xee\x02[\xf5:[\xb7\xa4l\xa6\xc5~\x8d\t\x00b\xf1\xe8I\x94\x82!\xedW\xb7t+\x02\xfb\xb9\x82\x89\x00\x00\x00\x00\x00'}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xd1\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xc3\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\xff\\\x9c\xf0\xaa=\xb7\x83\x80\x01.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ef) ioctl$BLKRRPART(r6, 0x125f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.766752874s ago: executing program 0 (id=5609): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x6e20, 0x2, @mcast1={0xff, 0x5}, 0x100}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 701.29298ms ago: executing program 3 (id=5610): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @remote, 0x3, 0x5, 0x25, 0x400, 0xb7, 0xce0020, r2}) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 587.174904ms ago: executing program 7 (id=5611): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x970b) 365.459067ms ago: executing program 0 (id=5612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[], 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r3, 0x20000005) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xd8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc4, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xd8}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) write$binfmt_script(r6, &(0x7f0000000600)={'#! ', './file1/file0', [{0x20, '\x89,Qhm\xcd\xc7\xeb\xaf\xcd]y\x9c\x93\xacz\xd2c.\xc9}\xafm\t\x91\xcf\xcc\\N\xeb\x17\xc0\x90\\\x9d\x18\xb2\xbd\x17\x12\x8c{\xa5X\x92\x9b\xed?\xfd\xcb\xa5\xd0\xeduI\xc81w\xa9\x83\x89\xb1h\xe11=\x85\x82\xa2OI\xee\x02[\xf5:[\xb7\xa4l\xa6\xc5~\x8d\t\x00b\xf1\xe8I\x94\x82!\xedW\xb7t+\x02\xfb\xb9\x82\x89\x00\x00\x00\x00\x00'}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xd1\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xc3\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\xff\\\x9c\xf0\xaa=\xb7\x83\x80\x01.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x1ef) ioctl$BLKRRPART(r6, 0x125f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 69.364427ms ago: executing program 4 (id=5613): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in=@dev, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 11.334943ms ago: executing program 0 (id=5614): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=5615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) kernel console output (not intermixed with test programs): 23830] netlink: 'syz.3.4358': attribute type 1 has an invalid length. [ 2414.105914][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 2415.017235][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 2415.221870][T23848] netlink: 'syz.7.4362': attribute type 1 has an invalid length. [ 2416.440833][T23852] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2416.450733][T23852] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2417.587802][T23870] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 2418.183491][T23864] veth1_macvtap: left promiscuous mode [ 2418.801652][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 2418.844065][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 2418.853249][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2418.861125][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 2418.869008][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 2418.876897][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 2418.885756][T23870] could not allocate digest TFM handle blake2s-160-generic [ 2418.898735][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2418.908013][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2418.939965][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2418.949134][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 2418.957094][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2418.967068][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 2418.982312][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2418.991581][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 2419.004079][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.013321][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2419.021211][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.030445][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 2419.038306][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.047587][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2420.100810][ T5993] IPVS: stop unused estimator thread 0... [ 2420.697672][T23914] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2422.842845][T23895] block nbd7: shutting down sockets [ 2422.854180][T23927] af_packet: tpacket_rcv: packet too big, clamped from 548 to 4294967272. macoff=96 [ 2423.927352][T23941] netlink: 'syz.9.4379': attribute type 10 has an invalid length. [ 2424.348583][T23941] : (slave batadv0): Error -22 calling dev_set_mtu [ 2424.399523][ T30] audit: type=1326 audit(1744983581.443:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2424.436372][T23939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2424.469853][ T30] audit: type=1326 audit(1744983581.443:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2424.515243][T23948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4383'. [ 2424.520869][T23937] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 2424.615371][ T30] audit: type=1326 audit(1744983581.471:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2424.637304][ C0] vkms_vblank_simulate: vblank timer overrun [ 2425.744939][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2425.757816][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2425.764686][ T30] audit: type=1326 audit(1744983581.471:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2425.903174][ T30] audit: type=1326 audit(1744983581.471:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2425.925218][ T30] audit: type=1326 audit(1744983581.471:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2426.326480][ T30] audit: type=1326 audit(1744983581.471:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2426.379202][T23948] : (slave bond_slave_0): Releasing backup interface [ 2426.565760][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4386'. [ 2426.582055][ T30] audit: type=1326 audit(1744983581.471:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2427.250714][ T30] audit: type=1800 audit(1744983582.238:718): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.4378" name="/nullb0" dev="devtmpfs" ino=696 res=0 errno=0 [ 2427.272363][ T30] audit: type=1326 audit(1744983582.238:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23928 comm="syz.3.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f698e169 code=0x7ffc0000 [ 2427.293955][ C0] vkms_vblank_simulate: vblank timer overrun [ 2427.312006][T23967] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2427.409826][T23959] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2427.431398][T23959] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2427.456986][T23963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4385'. [ 2427.466015][T23963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4385'. [ 2427.474991][T23963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4385'. [ 2427.484032][T23963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4385'. [ 2428.051962][T23979] overlayfs: failed to clone upperpath [ 2428.378780][T23981] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 2428.517396][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4388'. [ 2430.513888][T23998] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 2433.164809][T24015] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2434.150798][T24030] SET target dimension over the limit! [ 2435.317786][T24035] netlink: 'syz.4.4401': attribute type 21 has an invalid length. [ 2435.326263][T24035] netlink: 'syz.4.4401': attribute type 6 has an invalid length. [ 2435.334116][T24035] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4401'. [ 2435.365220][T24035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4401'. [ 2436.389637][T24026] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4402'. [ 2436.525694][T24026] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4402'. [ 2437.985592][T24056] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2438.886027][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2438.886064][ T30] audit: type=1326 audit(1744983594.988:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24048 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600398e169 code=0x7ffc0000 [ 2439.305151][T24060] ceph: No mds server is up or the cluster is laggy [ 2439.313924][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 2439.339717][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 2439.607295][ T30] audit: type=1326 audit(1744983594.988:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24048 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600398e169 code=0x7ffc0000 [ 2439.727121][T24074] tap0: tun_chr_ioctl cmd 1074025677 [ 2439.733121][T24074] tap0: linktype set to 778 [ 2440.364859][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4410'. [ 2445.626379][T24121] input: syz1 as /devices/virtual/input/input26 [ 2448.243302][T15243] Bluetooth: hci1: command 0x0c1a tx timeout [ 2452.918476][T24168] program syz.7.4429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2453.979898][T24169] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4428'. [ 2453.989998][T24169] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4428'. [ 2454.021760][T24169] netlink: 'syz.4.4428': attribute type 7 has an invalid length. [ 2454.031747][T24169] netlink: 'syz.4.4428': attribute type 5 has an invalid length. [ 2454.040459][T24169] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4428'. [ 2461.657628][T24196] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 2461.664944][T24196] PKCS7: Only support pkcs7_signedData type [ 2461.752916][T24197] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2461.759415][T24197] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2464.320483][T24204] delete_channel: no stack [ 2464.397134][T24209] netlink: 'syz.0.4438': attribute type 9 has an invalid length. [ 2464.429345][T24202] delete_channel: no stack [ 2466.799652][T24225] lo speed is unknown, defaulting to 1000 [ 2467.079031][ T5841] IPVS: starting estimator thread 0... [ 2467.339380][T24230] netlink: 'syz.9.4443': attribute type 1 has an invalid length. [ 2467.377689][T24224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4445'. [ 2467.464906][T24227] IPVS: using max 47 ests per chain, 112800 per kthread [ 2468.509258][T24246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4448'. [ 2468.518371][T24246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4448'. [ 2469.222454][T24244] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2474.679720][T24291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2475.477383][T24293] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2475.493559][T24293] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2477.175561][T24302] netlink: 'syz.3.4460': attribute type 1 has an invalid length. [ 2479.033660][T24317] netlink: 'syz.0.4465': attribute type 1 has an invalid length. [ 2479.105441][T24311] loop7: detected capacity change from 0 to 16384 [ 2479.491346][T24321] tmpfs: Bad value for 'mpol' [ 2479.899155][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4462'. [ 2479.930699][T24320] bridge0: port 3(netdevsim2) entered blocking state [ 2479.938557][T24320] bridge0: port 3(netdevsim2) entered disabled state [ 2479.948309][T24320] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 2479.974423][T24320] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 2479.987477][T24321] nfs: Unknown parameter '' [ 2480.024375][T24320] bridge0: port 3(netdevsim2) entered blocking state [ 2480.031573][T24320] bridge0: port 3(netdevsim2) entered forwarding state [ 2480.315333][T24330] netlink: 'syz.3.4469': attribute type 11 has an invalid length. [ 2480.315444][T11808] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 2480.323259][T24330] netlink: 'syz.3.4469': attribute type 11 has an invalid length. [ 2480.339202][T24330] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4469'. [ 2480.825560][T11808] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2480.951654][T11808] usb 5-1: config 0 has no interface number 0 [ 2481.008442][T11808] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2481.129800][T11808] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2481.198247][T11808] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2481.208294][T11808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.219761][T11808] usb 5-1: config 0 descriptor?? [ 2481.230298][T11808] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2482.568753][T24351] netlink: 'syz.9.4474': attribute type 1 has an invalid length. [ 2482.740709][ T5878] usb 5-1: USB disconnect, device number 14 [ 2483.864268][T24351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2483.915294][ T30] audit: type=1326 audit(1744983637.090:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24342 comm="syz.3.4473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8f698e169 code=0x0 [ 2485.504448][ T52] kernel write not supported for file /cpu/0/msr (pid: 52 comm: kworker/1:1) [ 2485.618838][T24366] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2485.690675][T24366] netlink: 'syz.7.4478': attribute type 1 has an invalid length. [ 2485.913075][T24365] netlink: 'syz.7.4478': attribute type 1 has an invalid length. [ 2487.264887][T24384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4482'. [ 2487.691604][T24379] netlink: 'syz.7.4481': attribute type 1 has an invalid length. [ 2487.731518][T24379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2488.074314][T24392] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2488.091867][T24392] batman_adv: batadv0: Adding interface: gretap1 [ 2488.098300][T24392] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2488.123603][ C1] vkms_vblank_simulate: vblank timer overrun [ 2488.129757][T24392] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 2488.797285][T24380] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4482'. [ 2488.967106][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4482'. [ 2488.978521][T24380] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2488.991869][T24380] Error validating options; rc = [-22] [ 2489.471156][ T5841] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2490.447321][T24407] sctp: [Deprecated]: syz.9.4488 (pid 24407) Use of int in max_burst socket option. [ 2490.447321][T24407] Use struct sctp_assoc_value instead [ 2490.502560][T24407] netlink: 'syz.9.4488': attribute type 10 has an invalid length. [ 2490.692663][T24407] veth0_vlan: left promiscuous mode [ 2490.771828][T24407] veth0_vlan: entered promiscuous mode [ 2490.857587][T24407] team0: Device veth0_vlan failed to register rx_handler [ 2491.464385][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2491.474763][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2492.035143][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2492.043857][ T5841] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2492.621731][ T5841] usb 4-1: can't read configurations, error -71 [ 2492.899924][T24422] netlink: 'syz.4.4490': attribute type 2 has an invalid length. [ 2493.875239][T24432] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2493.930224][T24435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2494.215528][T24443] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4495'. [ 2494.764723][T24447] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2494.771426][T24447] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2495.084640][T24449] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2495.638510][T24452] xt_socket: unknown flags 0x8 [ 2496.314102][T24465] syz.4.4499: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2496.329197][T24465] CPU: 0 UID: 0 PID: 24465 Comm: syz.4.4499 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 2496.329228][T24465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2496.329242][T24465] Call Trace: [ 2496.329252][T24465] [ 2496.329261][T24465] dump_stack_lvl+0x241/0x360 [ 2496.329300][T24465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2496.329330][T24465] ? __pfx__printk+0x10/0x10 [ 2496.329358][T24465] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2496.329397][T24465] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2496.329441][T24465] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 2496.329480][T24465] warn_alloc+0x27c/0x410 [ 2496.329517][T24465] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 2496.329555][T24465] ? __pfx_warn_alloc+0x10/0x10 [ 2496.329589][T24465] ? kasan_save_track+0x3f/0x80 [ 2496.329609][T24465] ? __kasan_kmalloc+0x9d/0xb0 [ 2496.329632][T24465] ? xsk_setsockopt+0x449/0x840 [ 2496.329662][T24465] ? do_sock_setsockopt+0x3b1/0x710 [ 2496.329691][T24465] ? __x64_sys_setsockopt+0x187/0x210 [ 2496.329721][T24465] ? do_syscall_64+0xf3/0x210 [ 2496.329742][T24465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2496.329775][T24465] __vmalloc_node_range_noprof+0x128/0x1390 [ 2496.329842][T24465] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2496.329880][T24465] ? __kasan_kmalloc+0x9d/0xb0 [ 2496.329910][T24465] vmalloc_user_noprof+0x74/0x80 [ 2496.329942][T24465] ? xskq_create+0xb6/0x170 [ 2496.329973][T24465] xskq_create+0xb6/0x170 [ 2496.330009][T24465] xsk_init_queue+0xa1/0x100 [ 2496.330045][T24465] xsk_setsockopt+0x449/0x840 [ 2496.330080][T24465] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2496.330115][T24465] ? __lock_acquire+0xad5/0xd80 [ 2496.330155][T24465] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2496.330185][T24465] do_sock_setsockopt+0x3b1/0x710 [ 2496.330224][T24465] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2496.330254][T24465] ? __fget_files+0x2a/0x420 [ 2496.330282][T24465] ? __fget_files+0x39d/0x420 [ 2496.330307][T24465] ? __fget_files+0x2a/0x420 [ 2496.330351][T24465] __x64_sys_setsockopt+0x187/0x210 [ 2496.330392][T24465] do_syscall_64+0xf3/0x210 [ 2496.330423][T24465] ? clear_bhb_loop+0x45/0xa0 [ 2496.330450][T24465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2496.330471][T24465] RIP: 0033:0x7f600398e169 [ 2496.330491][T24465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2496.330510][T24465] RSP: 002b:00007f60017d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2496.330534][T24465] RAX: ffffffffffffffda RBX: 00007f6003bb6160 RCX: 00007f600398e169 [ 2496.330550][T24465] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 2496.330563][T24465] RBP: 00007f6003a10a68 R08: 0000000000000052 R09: 0000000000000000 [ 2496.330576][T24465] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2496.330591][T24465] R13: 0000000000000000 R14: 00007f6003bb6160 R15: 00007ffcfc1abb98 [ 2496.330625][T24465] [ 2496.619878][ C0] vkms_vblank_simulate: vblank timer overrun [ 2496.629592][T24465] Mem-Info: [ 2496.632911][T24465] active_anon:23374 inactive_anon:13078 isolated_anon:0 [ 2496.632911][T24465] active_file:25982 inactive_file:34346 isolated_file:0 [ 2496.632911][T24465] unevictable:1038 dirty:422 writeback:0 [ 2496.632911][T24465] slab_reclaimable:6968 slab_unreclaimable:108366 [ 2496.632911][T24465] mapped:38677 shmem:33626 pagetables:1087 [ 2496.632911][T24465] sec_pagetables:0 bounce:0 [ 2496.632911][T24465] kernel_misc_reclaimable:0 [ 2496.632911][T24465] free:1268491 free_pcp:4325 free_cma:0 [ 2496.678793][ C0] vkms_vblank_simulate: vblank timer overrun [ 2496.686631][T24465] Node 0 active_anon:93496kB inactive_anon:52312kB active_file:103664kB inactive_file:137384kB unevictable:2616kB isolated(anon):0kB isolated(file):0kB mapped:154564kB dirty:1688kB writeback:0kB shmem:132968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12220kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2496.720695][ C0] vkms_vblank_simulate: vblank timer overrun [ 2496.729793][T24465] Node 1 active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2496.761259][ C0] vkms_vblank_simulate: vblank timer overrun [ 2496.767746][T24465] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2496.794834][ C0] vkms_vblank_simulate: vblank timer overrun [ 2496.801045][T24465] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 2496.808391][T24465] Node 0 DMA32 free:1146292kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:93492kB inactive_anon:52308kB active_file:103572kB inactive_file:137372kB unevictable:2616kB writepending:1688kB present:3129332kB managed:2547768kB mlocked:0kB bounce:0kB free_pcp:17300kB local_pcp:32kB free_cma:0kB [ 2496.839301][ C0] vkms_vblank_simulate: vblank timer overrun [ 2496.846898][T24465] lowmem_reserve[]: 0 0 0 0 0 [ 2496.851874][T24465] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2497.093217][T24465] lowmem_reserve[]: 0 0 0 0 0 [ 2497.098280][T24465] Node 1 Normal free:3912312kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2497.127979][T24465] lowmem_reserve[]: 0 0 0 0 0 [ 2497.134346][T24465] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2497.147654][T24465] Node 0 DMA32: 2*4kB (ME) 162*8kB (UME) 421*16kB (UME) 688*32kB (UME) 671*64kB (UME) 271*128kB (UME) 104*256kB (UME) 67*512kB (UME) 16*1024kB (UM) 5*2048kB (ME) 232*4096kB (UM) = 1145512kB [ 2497.169622][T24465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2497.189471][T24465] Node 1 Normal: 258*4kB (UE) 64*8kB (UME) 45*16kB (UME) 229*32kB (UME) 94*64kB (UME) 31*128kB (UME) 14*256kB (UM) 12*512kB (UME) 6*1024kB (UME) 7*2048kB (UME) 943*4096kB (M) = 3912312kB [ 2497.208318][T24465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2497.218045][T24465] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2497.227389][T24465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2497.237062][T24465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2497.247400][T24465] 94009 total pagecache pages [ 2497.259206][T24465] 0 pages in swap cache [ 2497.263438][T24465] Free swap = 124996kB [ 2497.268038][T24465] Total swap = 124996kB [ 2497.272279][T24465] 2097051 pages RAM [ 2497.276128][T24465] 0 pages HighMem/MovableOnly [ 2497.280818][T24465] 428450 pages reserved [ 2497.285138][T24465] 0 pages cma reserved [ 2497.842799][ T5841] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2498.279167][ T5841] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2498.312231][ T5841] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2498.366252][ T5841] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2498.409379][ T5841] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2498.428293][T24471] sp0: Synchronizing with TNC [ 2498.465293][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.485675][ T5841] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2498.580242][T24480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4504'. [ 2498.596076][T24480] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4504'. [ 2498.606953][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4504'. [ 2498.626614][T24480] bridge0: port 3(gretap0) entered blocking state [ 2498.637552][T24480] bridge0: port 3(gretap0) entered disabled state [ 2498.646891][T24480] gretap0: entered allmulticast mode [ 2498.662303][T24480] gretap0: entered promiscuous mode [ 2498.668903][T24480] bridge0: port 3(gretap0) entered blocking state [ 2498.675478][T24480] bridge0: port 3(gretap0) entered forwarding state [ 2498.734208][T21754] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 2498.934214][ T5841] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2500.174419][ T5878] usb 5-1: USB disconnect, device number 15 [ 2500.739677][T24498] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2503.020215][T24508] cgroup: No subsys list or none specified [ 2504.810132][T24528] veth1_macvtap: left promiscuous mode [ 2508.464467][T24551] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 2508.477223][T24551] can0: slcan on ttyS3. [ 2509.301545][T24549] can0 (unregistered): slcan off ttyS3. [ 2509.705768][T24563] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 2510.830914][T24577] ceph: No mds server is up or the cluster is laggy [ 2510.853658][ T8409] libceph: connect (1)[c::]:6789 error -101 [ 2511.363088][ T8409] libceph: mon0 (1)[c::]:6789 connect error [ 2511.668981][T24584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2514.040313][T24594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4529'. [ 2514.331879][T24594] bridge0: entered promiscuous mode [ 2514.340560][T24594] macvlan2: entered promiscuous mode [ 2515.926906][T24610] SET target dimension over the limit! [ 2519.798714][T24629] tipc: Trying to set illegal importance in message [ 2521.253929][T24642] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2522.309104][T24652] xt_CT: No such helper "pptp" [ 2524.210364][ T5841] Process accounting resumed [ 2526.071663][T24682] netlink: 'syz.4.4553': attribute type 1 has an invalid length. [ 2526.493730][T24690] Cannot find map_set index 0 as target [ 2527.617022][T24698] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 2528.397434][T24708] loop7: detected capacity change from 0 to 16384 [ 2528.490734][T24708] blk_print_req_error: 121 callbacks suppressed [ 2528.490753][T24708] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 2528.528459][T24708] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2528.548480][T24708] buffer_io_error: 126 callbacks suppressed [ 2528.548500][T24708] Buffer I/O error on dev loop7, logical block 160, async page read [ 2528.563536][T24708] I/O error, dev loop7, sector 1288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2528.573391][T24708] Buffer I/O error on dev loop7, logical block 161, async page read [ 2528.582301][T24708] I/O error, dev loop7, sector 1296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2528.609094][T24711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4559'. [ 2528.620955][T24708] Buffer I/O error on dev loop7, logical block 162, async page read [ 2528.633242][T24713] sctp: [Deprecated]: syz.9.4555 (pid 24713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2528.633242][T24713] Use struct sctp_sack_info instead [ 2528.657054][T24708] I/O error, dev loop7, sector 1304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2528.807369][T24708] Buffer I/O error on dev loop7, logical block 163, async page read [ 2529.577196][T24711] : (slave bond_slave_0): Releasing backup interface [ 2529.578253][T24699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2530.584689][T24739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4564'. [ 2531.641643][T24750] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2531.669179][T24750] delete_channel: no stack [ 2532.426060][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4565'. [ 2532.452245][T24748] netlink: 'syz.4.4568': attribute type 1 has an invalid length. [ 2532.965351][T24737] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4565'. [ 2532.975376][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4565'. [ 2532.991706][T24737] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2533.005238][T24737] Error validating options; rc = [-22] [ 2534.360283][T24754] netlink: 'syz.3.4569': attribute type 1 has an invalid length. [ 2534.461475][T24770] netlink: 'syz.4.4572': attribute type 21 has an invalid length. [ 2534.469669][T24770] netlink: 'syz.4.4572': attribute type 6 has an invalid length. [ 2534.477560][T24770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4572'. [ 2534.506096][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4572'. [ 2535.255007][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4574'. [ 2535.533318][T24780] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2536.161603][T24775] bond0: (slave bond_slave_0): Releasing backup interface [ 2536.953619][T24803] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4579'. [ 2537.636582][T21754] Bluetooth: hci4: command 0x0405 tx timeout [ 2537.722095][T24805] tmpfs: Unknown parameter 'usrquotauencer' [ 2538.318921][T24810] netlink: 'syz.7.4582': attribute type 1 has an invalid length. [ 2539.872478][T24820] netlink: 'syz.0.4587': attribute type 1 has an invalid length. [ 2540.756017][T24839] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2541.051427][T24845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2541.441462][T24854] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4593'. [ 2542.085610][T24852] netlink: 'syz.3.4596': attribute type 1 has an invalid length. [ 2543.135271][T24871] veth0_to_team: entered promiscuous mode [ 2543.141207][T24871] veth0_to_team: entered allmulticast mode [ 2544.585386][T24872] netlink: 'syz.3.4601': attribute type 1 has an invalid length. [ 2544.729478][T24886] overlayfs: failed to resolve './file1': -2 [ 2545.935221][T24894] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2547.443526][T24900] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4607'. [ 2547.967599][T15243] Bluetooth: hci1: unexpected event 0x03 length: 13 > 11 [ 2548.076685][T24909] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4608'. [ 2548.989371][T15243] Bluetooth: hci2: unexpected event for opcode 0x041c [ 2550.295497][T24936] pimreg: left allmulticast mode [ 2550.346102][T24410] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2551.120291][T24410] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 2551.129942][T24410] usb 5-1: config 0 has no interface number 0 [ 2551.136424][T24410] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 2551.148260][T24410] usb 5-1: config 0 interface 11 has no altsetting 0 [ 2551.155088][T24410] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2551.165006][T24410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.818031][T24410] usb 5-1: config 0 descriptor?? [ 2551.827631][T24929] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2551.838110][T24410] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 2551.846093][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87 [ 2551.855708][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 2551.863539][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 2551.872019][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 2551.882536][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 2551.890538][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 2551.990192][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 2552.034068][T24410] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2552.050281][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 2552.071944][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 2552.088554][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 2552.118345][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 2552.137346][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 2552.153752][T24410] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 2552.169162][T24410] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2552.189755][T24410] usb 5-1: USB disconnect, device number 16 [ 2552.202853][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4629'. [ 2552.203913][T24410] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2552.238679][T24410] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2552.250533][T24410] keyspan 5-1:0.11: device disconnected [ 2552.576262][T24960] can0: slcan on ttyS3. [ 2552.613305][T24960] ubi: mtd0 is already attached to ubi31 [ 2553.342146][T24955] can0 (unregistered): slcan off ttyS3. [ 2554.063731][T15243] Bluetooth: hci2: unexpected event for opcode 0x080f [ 2555.613148][T15243] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2556.072559][T24991] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2556.084417][T24991] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2557.163415][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2557.170926][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2557.906864][T15243] Bluetooth: hci4: unexpected event for opcode 0x100c [ 2558.208915][T25025] overlayfs: failed to resolve './file1': -2 [ 2559.034929][T15243] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2559.043835][T15243] Bluetooth: hci2: Injecting HCI hardware error event [ 2559.053811][T18467] Bluetooth: hci2: hardware error 0x00 [ 2559.918433][T25011] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4648'. [ 2559.929580][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4648'. [ 2560.274547][T25022] netlink: 'syz.4.4652': attribute type 1 has an invalid length. [ 2560.860052][T25047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2561.283781][T18467] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2563.380738][T25079] netlink: 'syz.3.4666': attribute type 1 has an invalid length. [ 2564.714563][T25111] Cannot find map_set index 0 as target [ 2567.294544][ T5841] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2569.295938][T25159] netlink: 'syz.9.4696': attribute type 1 has an invalid length. [ 2569.743023][ T5841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2569.812878][ T5841] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2569.854093][ T5841] usb 5-1: can't read configurations, error -71 [ 2570.190707][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4708'. [ 2571.645471][T25198] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 2571.665566][T25198] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 2571.684733][T25198] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 2571.697115][T25198] geneve3: entered promiscuous mode [ 2571.703200][T25198] geneve3: entered allmulticast mode [ 2573.361370][T25237] netlink: 'syz.0.4726': attribute type 21 has an invalid length. [ 2573.388476][T25237] IPv6: NLM_F_CREATE should be specified when creating new route [ 2573.407750][T25237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2573.415052][T25237] IPv6: NLM_F_CREATE should be set when creating new route [ 2573.422376][T25237] IPv6: NLM_F_CREATE should be set when creating new route [ 2573.429655][T25237] IPv6: NLM_F_CREATE should be set when creating new route [ 2573.994387][T25241] netlink: 'syz.7.4730': attribute type 1 has an invalid length. [ 2574.114569][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4735'. [ 2575.750748][T25284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2579.292623][T25323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2580.311433][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4768'. [ 2581.235574][T25366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2581.862328][T25367] usb usb8: usbfs: process 25367 (syz.3.4774) did not claim interface 0 before use [ 2582.721456][T25379] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2583.155328][T25386] netlink: 'syz.9.4782': attribute type 1 has an invalid length. [ 2583.689893][T25403] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2585.425497][T25414] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.527424][T13570] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2586.713162][T13570] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2586.746192][T13570] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2586.773539][T13570] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2586.800141][T13570] usb 4-1: config 220 has no interface number 2 [ 2586.821629][T13570] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2586.849940][T13570] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2586.859664][T13570] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2586.866699][T13570] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2586.876327][T13570] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2586.898669][T13570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.917523][T13570] usb 4-1: Product: syz [ 2586.921721][T13570] usb 4-1: Manufacturer: syz [ 2586.933733][T13570] usb 4-1: SerialNumber: syz [ 2587.234329][T13570] usb 4-1: selecting invalid altsetting 0 [ 2587.240672][T13570] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 2587.260743][T13570] usb 4-1: No valid video chain found. [ 2587.398612][T13570] usb 4-1: selecting invalid altsetting 0 [ 2587.479511][T13570] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 2587.737753][T13570] usb 4-1: USB disconnect, device number 12 [ 2587.888370][T25490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4823'. [ 2588.084898][T25495] loop8: detected capacity change from 0 to 8 [ 2588.097391][T25495] Dev loop8: unable to read RDB block 8 [ 2588.108271][T25495] loop8: unable to read partition table [ 2588.133865][T25495] loop8: partition table beyond EOD, truncated [ 2588.167018][T25495] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 2588.697924][T22919] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 2588.870957][T22919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2588.890575][T22919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2589.005894][T13570] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2589.222330][T13570] usb 10-1: Using ep0 maxpacket: 16 [ 2589.361405][T13570] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2589.475325][T13570] usb 10-1: config 0 has no interface number 0 [ 2589.518175][T22919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2589.530341][T22919] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2589.565209][T22919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.573257][T22919] usb 5-1: Product: syz [ 2589.596670][T22919] usb 5-1: Manufacturer: syz [ 2589.612430][T22919] usb 5-1: SerialNumber: syz [ 2589.633251][T22919] usb 5-1: config 0 descriptor?? [ 2589.651033][T25514] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2589.661678][T13570] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2589.684409][T13570] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.699010][T13570] usb 10-1: Product: syz [ 2589.702497][T22919] usb 5-1: ucan: probing device on interface #0 [ 2589.703746][T13570] usb 10-1: Manufacturer: syz [ 2589.703766][T13570] usb 10-1: SerialNumber: syz [ 2589.721094][T22919] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 2589.727345][T22919] usb 5-1: ucan: probe failed; try to update the device firmware [ 2589.735950][T13570] usb 10-1: config 0 descriptor?? [ 2589.751423][T13570] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2589.847624][T25528] random: crng reseeded on system resumption [ 2590.191783][T13570] gspca_spca1528: reg_w err -71 [ 2590.217431][T13570] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 2590.234596][T13570] usb 10-1: USB disconnect, device number 4 [ 2591.761983][T25548] netlink: 'syz.3.4845': attribute type 1 has an invalid length. [ 2591.813104][ T8410] usb 5-1: USB disconnect, device number 19 [ 2591.911030][T25554] netlink: 'syz.0.4849': attribute type 1 has an invalid length. [ 2593.295548][ T8410] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2593.373674][T25578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2593.399763][T25578] netlink: 'syz.3.4852': attribute type 10 has an invalid length. [ 2593.544597][ T8410] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2593.598966][ T8410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2593.670254][ T8410] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2593.727220][ T8410] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2593.887538][ T8410] usb 5-1: Manufacturer: syz [ 2594.020918][ T8410] usb 5-1: config 0 descriptor?? [ 2594.363033][T25584] netlink: 'syz.7.4860': attribute type 1 has an invalid length. [ 2594.601818][ T8410] rc_core: IR keymap rc-hauppauge not found [ 2594.806832][ T8410] Registered IR keymap rc-empty [ 2594.823740][ T8410] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2594.941884][T25593] overlayfs: failed to clone upperpath [ 2595.870473][ T8410] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 2595.922284][ T5841] usb 5-1: USB disconnect, device number 20 [ 2595.922622][T25591] tipc: Enabled bearer , priority 10 [ 2596.019062][T25595] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2596.072278][T25595] team0: Device ipvlan2 is already an upper device of the team interface [ 2596.542834][T25610] netlink: 'syz.0.4866': attribute type 1 has an invalid length. [ 2596.563182][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4869'. [ 2596.755366][T25616] netlink: 'syz.4.4870': attribute type 29 has an invalid length. [ 2596.776158][T25616] netlink: 'syz.4.4870': attribute type 29 has an invalid length. [ 2597.785421][T25635] netlink: 'syz.3.4878': attribute type 1 has an invalid length. [ 2597.810465][T25635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2597.854658][T25635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2597.861706][T25635] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 2597.873167][T25635] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 2598.008310][T25647] netlink: 'syz.9.4883': attribute type 1 has an invalid length. [ 2598.634585][T25663] netlink: 'syz.3.4890': attribute type 1 has an invalid length. [ 2600.078112][T25681] netlink: 'syz.4.4895': attribute type 1 has an invalid length. [ 2600.873479][T25691] netlink: 'syz.3.4897': attribute type 1 has an invalid length. [ 2601.272039][ T5841] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 2601.328610][T25704] netlink: 'syz.0.4903': attribute type 1 has an invalid length. [ 2601.444897][ T5841] usb 10-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2601.482843][T25710] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4908'. [ 2601.496328][ T5841] usb 10-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2601.545686][ T5841] usb 10-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 2601.604740][ T5841] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2601.621664][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2601.638460][ T5841] usb 10-1: SerialNumber: syz [ 2601.993195][T25694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2602.082827][T25694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2602.510048][ T5841] rndis_host 10-1:253.0: RNDIS init failed, -71 [ 2602.516766][ T5841] rndis_host 10-1:253.0: probe with driver rndis_host failed with error -71 [ 2602.531060][ T5841] usb 10-1: USB disconnect, device number 5 [ 2603.403363][T25739] netlink: 'syz.7.4919': attribute type 1 has an invalid length. [ 2603.516447][T25748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2603.757111][T25757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4927'. [ 2604.985665][T25784] loop8: detected capacity change from 0 to 8 [ 2605.021373][T25784] Dev loop8: unable to read RDB block 8 [ 2605.051375][T25784] loop8: unable to read partition table [ 2605.061588][T25784] loop8: partition table beyond EOD, truncated [ 2605.069700][T25784] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 2605.251103][T25785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2605.346486][T25792] netlink: 'syz.9.4942': attribute type 1 has an invalid length. [ 2605.949707][T25031] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2606.043895][T25814] overlayfs: failed to clone upperpath [ 2606.062444][T25813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4951'. [ 2606.916896][T25031] usb 10-1: Using ep0 maxpacket: 16 [ 2606.919276][T25031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2606.919312][T25031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.919352][T25031] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2606.919376][T25031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.923045][T25031] usb 10-1: config 0 descriptor?? [ 2607.029349][T25828] netlink: 'syz.0.4954': attribute type 1 has an invalid length. [ 2607.197995][T25832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4957'. [ 2607.397079][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.414191][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.440910][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.453951][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.472279][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.504694][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.526907][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.534357][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.558896][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.575115][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.593685][T25031] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 2607.645991][T25839] xt_CT: No such helper "snmp" [ 2608.162619][T25031] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 2608.171997][T25031] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 2608.183666][T25031] usb 10-1: USB disconnect, device number 6 [ 2608.377591][T25848] netlink: 'syz.0.4963': attribute type 1 has an invalid length. [ 2608.672790][T25855] netlink: 'syz.3.4967': attribute type 1 has an invalid length. [ 2608.772585][T25857] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2608.819470][T25031] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2609.638969][T25031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 2610.097344][T25031] usb 10-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 2610.128860][T25031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.147752][T25031] usb 10-1: config 0 descriptor?? [ 2610.165259][T25861] netlink: 'syz.0.4978': attribute type 1 has an invalid length. [ 2610.436073][T25869] netlink: 'syz.4.4969': attribute type 1 has an invalid length. [ 2611.215697][T25031] glorious 0003:258A:0036.0008: hidraw0: USB HID v0.01 Device [Glorious Model O] on usb-dummy_hcd.9-1/input0 [ 2611.414340][ T5841] usb 10-1: USB disconnect, device number 7 [ 2611.435668][T25888] team_slave_0: entered promiscuous mode [ 2611.441976][T25888] team_slave_1: entered promiscuous mode [ 2611.456151][T25888] macsec1: entered promiscuous mode [ 2611.467042][T25888] team0: entered promiscuous mode [ 2611.498949][T25888] team0: left promiscuous mode [ 2611.507196][T25888] team_slave_0: left promiscuous mode [ 2611.512743][T25888] team_slave_1: left promiscuous mode [ 2611.567671][T25890] netlink: 'syz.0.4980': attribute type 29 has an invalid length. [ 2611.577486][T25893] netlink: 'syz.0.4980': attribute type 29 has an invalid length. [ 2612.049184][ T5841] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2612.234453][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2612.257861][ T5841] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 2612.278388][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.301293][ T5841] usb 5-1: config 0 descriptor?? [ 2613.302651][ T5841] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 2613.310134][ T5841] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 2613.335683][ T5841] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 2613.343959][ T5841] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 2613.351742][ T5841] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 2613.369720][ T5841] playstation 0003:054C:0BA0.0009: hidraw0: USB HID v0.09 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 2613.462996][ T5841] playstation 0003:054C:0BA0.0009: Failed to retrieve feature with reportID 18: -71 [ 2613.493485][ T5841] playstation 0003:054C:0BA0.0009: Failed to retrieve DualShock4 pairing info: -71 [ 2613.524776][ T5841] playstation 0003:054C:0BA0.0009: Failed to get MAC address from DualShock4 [ 2613.549050][ T5841] playstation 0003:054C:0BA0.0009: Failed to create dualshock4. [ 2613.559634][ T5841] playstation 0003:054C:0BA0.0009: probe with driver playstation failed with error -71 [ 2613.576212][ T5841] usb 5-1: USB disconnect, device number 21 [ 2614.028832][ T8410] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2614.248787][ T8410] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2614.304415][T25941] netlink: 'syz.9.4999': attribute type 1 has an invalid length. [ 2614.711455][ T8410] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2614.720993][ T8410] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2614.748300][T25941] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2614.768762][ T8410] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2614.821733][ T8410] usb 4-1: Product: syz [ 2614.835476][ T8410] usb 4-1: Manufacturer: syz [ 2614.842011][ T8410] usb 4-1: SerialNumber: syz [ 2614.858212][ T8410] usb 4-1: config 0 descriptor?? [ 2614.883417][ T8410] usb 4-1: selecting invalid altsetting 0 [ 2615.578030][ T5841] usb 4-1: USB disconnect, device number 13 [ 2616.530285][T25979] netlink: 'syz.4.5012': attribute type 1 has an invalid length. [ 2617.163557][T26002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5021'. [ 2617.288140][T24412] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2617.448907][T24412] usb 5-1: Using ep0 maxpacket: 32 [ 2617.472471][T24412] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 2617.497567][T24412] usb 5-1: config 0 has no interface number 0 [ 2617.515037][T24412] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2617.530682][T26013] netlink: 'syz.0.5026': attribute type 2 has an invalid length. [ 2617.534248][T24412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.559961][T24412] usb 5-1: Product: syz [ 2617.564198][T24412] usb 5-1: Manufacturer: syz [ 2617.575992][T26013] k›*·]‘: entered promiscuous mode [ 2617.580129][T24412] usb 5-1: SerialNumber: syz [ 2617.601565][T24412] usb 5-1: config 0 descriptor?? [ 2617.859191][T24412] radio-si470x 5-1:0.35: this is not a si470x device. [ 2617.916176][T24412] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 2618.130989][T24412] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 2618.243005][T24412] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 2618.297447][T24412] usb 5-1: USB disconnect, device number 22 [ 2618.336413][T24412] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 2618.384977][T26038] loop8: detected capacity change from 0 to 8 [ 2618.410132][T26038] Dev loop8: unable to read RDB block 8 [ 2618.424546][T26036] netlink: 'syz.0.5035': attribute type 10 has an invalid length. [ 2618.428358][T26038] loop8: unable to read partition table [ 2618.435837][T26036] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2618.446134][T26036] : (slave netdevsim0): Enslaving as an active interface with an up link [ 2618.464016][T26038] loop8: partition table beyond EOD, truncated [ 2618.482620][T26038] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 2619.547823][T26053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5044'. [ 2619.598029][T26053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5044'. [ 2620.758594][T26082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2620.770064][T26082] netlink: 'syz.7.5052': attribute type 10 has an invalid length. [ 2620.782776][T26082] : (slave netdevsim0): Enslaving as an active interface with an up link [ 2622.391614][T24410] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 2622.575116][T24410] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2622.605770][T24410] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2622.645979][T24410] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2622.773088][T24410] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.794947][ T8409] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2622.802425][T24410] usb 10-1: config 0 descriptor?? [ 2622.822005][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2622.825254][T24410] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2622.828724][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2622.847995][T24410] dvb-usb: bulk message failed: -22 (3/0) [ 2622.874342][T24410] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2622.888407][T24410] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2622.901221][T24410] usb 10-1: media controller created [ 2622.912913][T24410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2622.937111][T24410] dvb-usb: bulk message failed: -22 (6/0) [ 2622.943321][T24410] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2622.954148][T24410] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input28 [ 2622.968912][T24410] dvb-usb: schedule remote query interval to 150 msecs. [ 2622.976053][T24410] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2622.976854][ T8409] usb 5-1: Using ep0 maxpacket: 8 [ 2623.009428][ T8409] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2623.027676][ T8409] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2623.037798][ T8409] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2623.044809][ T8409] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 2623.071181][ T8409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.078632][T26114] tipc: Enabling of bearer rejected, failed to enable media [ 2623.088019][ T8410] usb 10-1: USB disconnect, device number 8 [ 2623.110694][ T8409] usb 5-1: config 0 descriptor?? [ 2623.166917][ T8410] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2623.414706][T24410] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2623.577745][T24410] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2623.587057][T24410] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2623.596133][T24410] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2623.607277][T24410] usb 4-1: config 220 has no interface number 2 [ 2623.614101][T24410] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2623.627681][T24410] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2623.634684][T24410] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2623.649835][T24410] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2623.663173][T24410] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2623.690433][T24410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2623.709955][T24410] usb 4-1: Product: syz [ 2623.717994][T24410] usb 4-1: Manufacturer: syz [ 2623.728787][T24410] usb 4-1: SerialNumber: syz [ 2623.746809][ T8409] smartjoyplus 0003:0B43:0003.000A: ignoring exceeding usage max [ 2623.756228][ T8409] smartjoyplus 0003:0B43:0003.000A: ignoring exceeding usage max [ 2623.765273][ T8409] smartjoyplus 0003:0B43:0003.000A: usage index exceeded [ 2623.772901][ T8409] smartjoyplus 0003:0B43:0003.000A: item 0 0 2 2 parsing failed [ 2623.781669][ T8409] smartjoyplus 0003:0B43:0003.000A: parse failed [ 2623.788121][ T8409] smartjoyplus 0003:0B43:0003.000A: probe with driver smartjoyplus failed with error -22 [ 2623.801623][ T8409] usb 5-1: USB disconnect, device number 23 [ 2623.810396][T26123] netlink: 'syz.0.5069': attribute type 10 has an invalid length. [ 2624.010096][T24410] usb 4-1: selecting invalid altsetting 0 [ 2624.033738][T24410] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 2624.050421][T24410] usb 4-1: No valid video chain found. [ 2624.073753][T24410] usb 4-1: selecting invalid altsetting 0 [ 2624.088987][T24410] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 2624.112665][T24410] usb 4-1: USB disconnect, device number 14 [ 2624.497996][T26130] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2627.284568][T26144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5076'. [ 2627.293709][T26144] tipc: Invalid UDP bearer configuration [ 2627.293767][T26144] tipc: Enabling of bearer rejected, failed to enable media [ 2628.686110][T24412] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2629.594696][T24412] usb 4-1: Using ep0 maxpacket: 16 [ 2629.608149][T24412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2629.630756][T24412] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2629.650424][T24412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.659840][T26194] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5097'. [ 2629.698033][T24412] usb 4-1: config 0 descriptor?? [ 2630.166163][T24412] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 2630.191717][T24412] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 2630.206989][T24412] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x4 [ 2630.231080][T24412] mcp2221 0003:04D8:00DD.000B: item fetching failed at offset 3/5 [ 2630.256901][T24412] mcp2221 0003:04D8:00DD.000B: can't parse reports [ 2630.265312][T24412] mcp2221 0003:04D8:00DD.000B: probe with driver mcp2221 failed with error -22 [ 2630.392521][T24412] usb 4-1: USB disconnect, device number 15 [ 2631.316933][ T8409] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2631.419378][T26219] bridge0: port 2(bridge_slave_1) entered disabled state [ 2631.433837][T25031] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2631.509449][ T8409] usb 4-1: Using ep0 maxpacket: 8 [ 2631.521232][ T8409] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2631.530628][ T8409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.538655][ T8409] usb 4-1: Product: syz [ 2631.557059][ T8409] usb 4-1: Manufacturer: syz [ 2631.561707][ T8409] usb 4-1: SerialNumber: syz [ 2631.586731][ T8409] usb 4-1: config 0 descriptor?? [ 2631.594630][ T8409] gspca_main: se401-2.14.0 probing 047d:5003 [ 2631.605147][T25031] usb 10-1: Using ep0 maxpacket: 32 [ 2631.619620][T25031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2631.646701][T25031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2631.661272][T25031] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2631.671044][T25031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2631.685333][T25031] usb 10-1: config 0 descriptor?? [ 2631.782193][T26232] netlink: 'syz.7.5113': attribute type 1 has an invalid length. [ 2631.936491][ T8410] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 2632.222162][T25031] kone 0003:1E7D:2CED.000C: item fetching failed at offset 2/5 [ 2632.230019][ T8409] gspca_se401: Bayer format not supported! [ 2632.238523][ T8410] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2632.250973][T25031] kone 0003:1E7D:2CED.000C: parse failed [ 2632.257024][T25031] kone 0003:1E7D:2CED.000C: probe with driver kone failed with error -22 [ 2632.267530][ T8410] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2632.276229][T24410] usb 4-1: USB disconnect, device number 16 [ 2632.276445][ T8410] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2632.292828][ T8410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.311278][ T8410] usb 5-1: config 0 descriptor?? [ 2632.326417][ T8410] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2632.334264][ T8410] dvb-usb: bulk message failed: -22 (3/0) [ 2632.344658][ T8410] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2632.353975][ T8410] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2632.361096][ T8410] usb 5-1: media controller created [ 2632.372567][ T8410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2632.398593][T24412] usb 10-1: USB disconnect, device number 9 [ 2632.400288][ T8410] dvb-usb: bulk message failed: -22 (6/0) [ 2632.412593][ T8410] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2632.436226][ T8410] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 2632.454143][ T8410] dvb-usb: schedule remote query interval to 150 msecs. [ 2632.464722][ T8410] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2632.551937][T26228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2632.563840][T26228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2632.584216][T24410] usb 5-1: USB disconnect, device number 24 [ 2632.618176][T24410] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2634.160138][T22919] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2634.342369][T22919] usb 10-1: Using ep0 maxpacket: 32 [ 2634.399729][T22919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2635.059920][T22919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2635.070840][T22919] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2635.311840][T22919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2635.340931][T26269] netlink: 'syz.3.5129': attribute type 1 has an invalid length. [ 2635.383482][T22919] usb 10-1: config 0 descriptor?? [ 2635.982678][T26282] netlink: 'syz.7.5134': attribute type 1 has an invalid length. [ 2636.013264][T22919] greenasia 0003:0E8F:0012.000D: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.9-1/input0 [ 2636.045908][T22919] greenasia 0003:0E8F:0012.000D: no inputs found [ 2636.144789][T26287] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5136'. [ 2636.158000][T26287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5136'. [ 2636.273058][ T8409] usb 10-1: USB disconnect, device number 10 [ 2636.651387][T24411] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2637.877016][T24411] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2637.886571][T24411] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2637.897717][T24411] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2637.907737][T24411] usb 4-1: config 1 has no interface number 1 [ 2637.914295][T24411] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2637.931878][T24411] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2637.941592][T24411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2637.950304][T24411] usb 4-1: Product: syz [ 2637.955142][T24411] usb 4-1: Manufacturer: syz [ 2637.960895][T24411] usb 4-1: SerialNumber: syz [ 2638.221247][T24411] usb 4-1: Failed to set altset [ 2638.378628][T24411] usb 4-1: 0:2: cannot create sequencer device [ 2638.649644][T24411] usb 4-1: Failed to set altset [ 2638.860131][T24411] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 2638.889842][T24411] usb 4-1: USB disconnect, device number 17 [ 2638.940625][T26306] netlink: 'syz.4.5144': attribute type 1 has an invalid length. [ 2639.310213][T24411] kernel write not supported for file /1346/attr/exec (pid: 24411 comm: kworker/0:5) [ 2639.784047][T26345] overlayfs: failed to clone upperpath [ 2641.074393][T26362] overlayfs: failed to resolve './file0': -2 [ 2641.911763][T22919] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2641.922411][T24411] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 2642.120554][T22919] usb 4-1: Using ep0 maxpacket: 8 [ 2642.131902][T24411] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2642.170533][T22919] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2642.185320][T24411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.204748][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2642.250394][T24411] usb 10-1: config 0 descriptor?? [ 2642.272236][T22919] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2642.327926][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2642.379349][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2642.401396][T22919] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2642.413122][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2642.435393][T22919] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2642.457525][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2642.473176][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2642.487473][T22919] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2642.514781][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2642.549016][T24411] [drm] vendor descriptor length:c3 data:02 30 00 00 00 00 00 00 00 00 00 [ 2642.566071][T22919] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2642.582700][T24411] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2642.604591][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2642.624435][T22919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2642.674756][T22919] usb 4-1: string descriptor 0 read error: -22 [ 2642.681181][T22919] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2642.712477][T22919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.756187][T22919] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2642.822153][T24411] [drm:udl_init] *ERROR* Selecting channel failed [ 2642.856692][T24411] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 2642.886608][T24411] [drm] Initialized udl on minor 2 [ 2642.927858][T24411] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2642.960502][T24411] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 2643.084340][T26395] overlayfs: failed to resolve './file0': -2 [ 2643.657231][T22919] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2643.668547][T24411] usb 10-1: USB disconnect, device number 11 [ 2643.686814][T22919] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 2643.699824][T22919] usb 4-1: USB disconnect, device number 18 [ 2643.993341][T26404] netlink: 'syz.4.5180': attribute type 1 has an invalid length. [ 2644.237408][T26410] overlayfs: failed to resolve './file0': -2 [ 2644.929417][T22919] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2646.056492][T26426] overlayfs: failed to resolve './file0': -2 [ 2646.093982][T22919] usb 5-1: Using ep0 maxpacket: 16 [ 2646.101319][T22919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2646.113648][T22919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2646.132855][T22919] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2646.142482][T22919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.473435][T22919] usb 5-1: Product: syz [ 2646.477883][T22919] usb 5-1: Manufacturer: syz [ 2646.482973][T22919] usb 5-1: SerialNumber: syz [ 2646.491238][T22919] usb 5-1: config 0 descriptor?? [ 2646.500879][T22919] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2646.525683][T22919] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2647.171789][T26455] overlayfs: failed to resolve './file0': -2 [ 2647.744804][T22919] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2647.757604][T22919] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 2647.765045][T22919] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 2647.798584][T22919] em28xx 5-1:0.0: No AC97 audio processor [ 2647.868702][T22919] usb 5-1: USB disconnect, device number 25 [ 2647.890240][T22919] em28xx 5-1:0.0: Disconnecting em28xx [ 2647.973146][T22919] em28xx 5-1:0.0: Freeing device [ 2648.275489][T26463] overlayfs: failed to resolve './file0': -2 [ 2648.434103][ T8409] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2648.676928][ T8409] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2648.735850][ T8409] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2648.789825][ T8409] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2648.836418][ T8409] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 2648.966672][ T8409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.977583][ T8409] usb 4-1: config 0 descriptor?? [ 2649.460478][T24411] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2649.505392][ T8409] acrux 0003:1A34:F705.000E: unknown main item tag 0x0 [ 2649.512337][ T8409] acrux 0003:1A34:F705.000E: unknown main item tag 0x0 [ 2649.520292][ T8409] acrux 0003:1A34:F705.000E: unknown main item tag 0x0 [ 2649.527326][ T8409] acrux 0003:1A34:F705.000E: unknown main item tag 0x0 [ 2649.534220][ T8409] acrux 0003:1A34:F705.000E: unknown main item tag 0x0 [ 2649.541225][ T8409] acrux 0003:1A34:F705.000E: unknown main item tag 0x0 [ 2649.548193][ T8409] acrux 0003:1A34:F705.000E: unknown main item tag 0x0 [ 2649.562430][ T8409] acrux 0003:1A34:F705.000E: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.3-1/input0 [ 2649.573662][ T8409] acrux 0003:1A34:F705.000E: no inputs found [ 2649.579969][ T8409] acrux 0003:1A34:F705.000E: Failed to enable force feedback support, error: -19 [ 2649.620827][T24411] usb 10-1: Using ep0 maxpacket: 32 [ 2649.641720][T24411] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2649.684846][T24411] usb 10-1: config 0 has no interface number 0 [ 2649.691648][T26482] netlink: 'syz.0.5210': attribute type 10 has an invalid length. [ 2649.705242][T24410] usb 4-1: USB disconnect, device number 19 [ 2649.711957][T24411] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2649.742599][T24411] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2649.760473][T24411] usb 10-1: Product: syz [ 2649.764779][T24411] usb 10-1: Manufacturer: syz [ 2649.781827][T24411] usb 10-1: SerialNumber: syz [ 2649.791126][T24411] usb 10-1: config 0 descriptor?? [ 2649.801855][T24411] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2649.834601][T22919] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2650.025141][T22919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2650.034418][T26474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2650.048408][T22919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2650.054120][T26474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.058234][T22919] usb 5-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 2650.096009][T24411] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2650.107239][T22919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.120518][T24411] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2650.140013][T22919] usb 5-1: config 0 descriptor?? [ 2650.596155][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2650.605571][T22919] usbhid 5-1:0.0: can't add hid device: -71 [ 2650.611617][T22919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2650.620065][ T8409] usb 10-1: USB disconnect, device number 12 [ 2650.623499][T22919] usb 5-1: USB disconnect, device number 26 [ 2650.641645][ T8409] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2650.736452][T26486] overlayfs: failed to resolve './file1': -2 [ 2650.764326][ T8409] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2650.909309][ T8409] quatech2 10-1:0.51: device disconnected [ 2651.524166][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5215'. [ 2651.539560][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5215'. [ 2651.724105][T24411] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2651.923278][T24411] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2651.976312][T24411] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2652.028690][T24411] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2652.076379][T24411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.129213][T26492] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2652.155602][T24411] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2654.769855][T26524] overlayfs: failed to resolve './file1': -2 [ 2655.221266][ T8410] usb 10-1: USB disconnect, device number 13 [ 2655.487650][T26537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5231'. [ 2655.662551][ T8410] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2655.832620][ T8410] usb 10-1: Using ep0 maxpacket: 8 [ 2655.897684][ T8410] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 2655.953368][ T8410] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 2656.010744][ T8410] usb 10-1: config 0 has no interface number 0 [ 2656.048761][ T8410] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2656.194858][ T8410] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2656.315179][ T8410] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2656.522986][ T8410] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2656.545308][ T8410] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2656.553996][ T8410] usb 10-1: Product: syz [ 2656.561643][ T8410] usb 10-1: config 0 descriptor?? [ 2656.567618][T26535] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2656.696958][T26557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5238'. [ 2656.809657][ T30] audit: type=1400 audit(1744984566.825:724): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=26561 comm="syz.3.5240" dest=20002 netif=wpan0 [ 2656.901880][ T8409] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2657.094484][ T8409] usb 5-1: Using ep0 maxpacket: 32 [ 2657.102042][ T8409] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2657.115702][ T8409] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 2657.137086][ T8409] usb 5-1: config 127 has no interface number 0 [ 2657.143477][ T8409] usb 5-1: config 127 interface 25 has no altsetting 0 [ 2657.167171][ T8409] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 2657.190651][ T8409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.198763][ T8409] usb 5-1: Product: syz [ 2657.216503][ T8409] usb 5-1: Manufacturer: syz [ 2657.221195][ T8409] usb 5-1: SerialNumber: syz [ 2657.263631][ T8410] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input30 [ 2657.276202][T22919] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 2657.464556][T22919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2657.500185][T24411] usb 10-1: USB disconnect, device number 14 [ 2657.500289][ C1] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2657.516097][T22919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2657.527631][ T8409] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 2657.558085][T22919] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 2657.591472][T22919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.613285][T22919] usb 4-1: config 0 descriptor?? [ 2658.137017][ T8409] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 2658.146028][T22919] logitech-djreceiver 0003:046D:C52F.000F: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.3-1/input0 [ 2658.173224][ T8409] usb 5-1: USB disconnect, device number 27 [ 2658.334930][ T8409] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2658.379654][T25031] usb 4-1: USB disconnect, device number 20 [ 2658.585350][ T8409] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2658.617049][ T8409] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2658.641346][ T8409] usb 5-1: can't read configurations, error -71 [ 2658.975466][T26604] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5259'. [ 2659.159501][T26613] netlink: 'syz.3.5264': attribute type 2 has an invalid length. [ 2659.309773][T26620] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2659.321596][T26620] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2659.331588][T26620] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2659.339573][T26620] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 2659.422550][T26621] overlayfs: failed to clone upperpath [ 2659.442111][T26620] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2659.546431][T26620] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2659.622229][T25031] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 2659.674224][T26620] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2659.747980][T26620] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 2659.905441][T25031] usb 10-1: config 0 has an invalid interface number: 202 but max is 0 [ 2659.948987][T25031] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2659.980030][T25031] usb 10-1: config 0 has no interface number 0 [ 2659.987224][T25031] usb 10-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2659.997704][T25031] usb 10-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2660.026911][T25031] usb 10-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 2660.060337][T25031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.085736][T25031] usb 10-1: Product: syz [ 2660.099554][T25031] usb 10-1: Manufacturer: syz [ 2660.118515][T25031] usb 10-1: SerialNumber: syz [ 2660.131168][T26625] macsec1: entered allmulticast mode [ 2660.136631][T26625] macvlan0: entered allmulticast mode [ 2660.150812][T25031] usb 10-1: config 0 descriptor?? [ 2660.157269][T26625] veth1_vlan: entered allmulticast mode [ 2660.168276][T25031] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 2660.177735][T26625] macvlan0: left allmulticast mode [ 2660.182411][T25031] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2660.183657][T26625] veth1_vlan: left allmulticast mode [ 2660.196678][T25031] dvb-usb: bulk message failed: -22 (2/0) [ 2660.222038][T25031] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2660.235773][T25031] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 2660.376810][ T8409] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 2660.435497][T25031] usb 10-1: USB disconnect, device number 15 [ 2660.539629][ T8409] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2660.552481][ T8409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2660.563447][ T8409] usb 5-1: config 0 descriptor?? [ 2660.577886][ T8409] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2660.792851][ T8409] gp8psk: usb in 128 operation failed. [ 2661.015600][ T8409] gp8psk: FW Version = 48.28.159 (0x301c9f) Build 2206/163/118 [ 2661.172721][T26636] netlink: 'syz.9.5272': attribute type 1 has an invalid length. [ 2661.265444][ T8409] gp8psk: usb in 149 operation failed. [ 2661.276444][ T8409] gp8psk: failed to get FPGA version [ 2661.394874][ T8409] gp8psk: usb in 138 operation failed. [ 2661.400531][ T8409] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2661.423377][ T8409] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2661.561195][ T8409] usb 5-1: USB disconnect, device number 30 [ 2664.864738][T26674] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 2665.358587][T26674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2665.619175][T26676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2665.632318][T26676] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 2666.246662][T26676] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 2668.442778][T26703] netlink: 'syz.9.5296': attribute type 1 has an invalid length. [ 2669.433194][T22919] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2670.951169][T22919] usb 5-1: Using ep0 maxpacket: 16 [ 2670.961993][T22919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2670.972172][T22919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2671.112792][T22919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2671.123028][T22919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2671.301073][T26762] overlayfs: failed to clone upperpath [ 2671.763880][T22919] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2671.797002][T22919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2671.806122][T22919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2671.821045][T22919] usb 5-1: Manufacturer: syz [ 2671.842366][T22919] usb 5-1: config 0 descriptor?? [ 2673.143938][T22919] rc_core: IR keymap rc-hauppauge not found [ 2673.150438][T22919] Registered IR keymap rc-empty [ 2673.158404][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2673.188583][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2673.225161][T22919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2673.258778][T22919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 2673.341454][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2673.368479][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2673.410664][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2673.443219][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2673.507318][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2674.366277][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2674.415682][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2674.457040][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2674.491434][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2674.576044][T22919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2674.649832][T22919] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2674.705346][T22919] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2674.783499][T22919] usb 5-1: USB disconnect, device number 31 [ 2674.949130][T26811] overlayfs: failed to clone upperpath [ 2675.938116][ T8409] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2676.923578][T26829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5334'. [ 2677.249924][ T8409] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2677.271932][ T8409] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2677.315402][ T8409] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2677.365740][ T8409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.426164][T26831] netlink: 'syz.4.5333': attribute type 1 has an invalid length. [ 2677.512839][T26813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2677.813722][ T8409] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2677.835388][T26831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2677.945986][T26826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2677.995866][T26826] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2678.039465][T26826] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2678.067388][T26840] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5338'. [ 2678.091513][ T8409] usb 4-1: USB disconnect, device number 21 [ 2679.765270][T25031] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2680.014258][T25031] usb 5-1: Using ep0 maxpacket: 8 [ 2680.120364][T25031] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 2680.276800][T25031] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2680.299737][T25031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2680.317302][T25031] usb 5-1: SerialNumber: syz [ 2680.340178][T25031] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 2680.600430][T25031] usb 5-1: USB disconnect, device number 32 [ 2681.365612][T24412] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2681.739503][T22919] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 2681.773595][T24412] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2681.784085][T24412] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.814620][T24412] usb 10-1: config 0 descriptor?? [ 2682.751655][T24412] cp210x 10-1:0.0: cp210x converter detected [ 2682.813754][T26896] overlayfs: missing 'lowerdir' [ 2682.843108][T22919] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 242, using maximum allowed: 30 [ 2682.958123][T22919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2682.979616][T22919] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 2683.002465][T22919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2683.009249][T22919] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 2683.027898][T22919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2683.043451][T22919] usb 4-1: config 0 descriptor?? [ 2683.211580][T24412] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2683.261858][T24412] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2683.277627][T26898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2683.489679][T24411] usb 10-1: USB disconnect, device number 16 [ 2683.513112][T22919] apple 0003:05AC:0225.0010: unknown main item tag 0x0 [ 2683.540808][T24411] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2683.558225][T22919] apple 0003:05AC:0225.0010: hidraw0: USB HID v0.03 Device [HID 05ac:0225] on usb-dummy_hcd.3-1/input0 [ 2684.352907][T24411] cp210x 10-1:0.0: device disconnected [ 2684.373707][T22919] usb 4-1: USB disconnect, device number 22 [ 2686.475908][T24411] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2686.683563][T24411] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 2686.760940][T24411] usb 4-1: config 0 has no interface number 0 [ 2686.840643][T24411] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2686.852916][T24411] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2686.931461][T24411] usb 4-1: config 0 interface 255 has no altsetting 0 [ 2686.957686][T24411] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2687.036740][T24411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2687.043139][T26941] netlink: 'syz.9.5370': attribute type 1 has an invalid length. [ 2687.141937][T26942] netlink: 'syz.4.5367': attribute type 10 has an invalid length. [ 2687.264634][T26940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2687.301011][T24411] usb 4-1: config 0 descriptor?? [ 2687.344762][T24411] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 2687.584691][ T52] usb 4-1: USB disconnect, device number 23 [ 2688.079922][T26955] netlink: 'syz.9.5376': attribute type 1 has an invalid length. [ 2688.501029][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2690.263172][T26973] netlink: 6 bytes leftover after parsing attributes in process `syz.7.5383'. [ 2690.495987][T24411] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2690.677936][T22919] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 2690.702334][T24411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2690.721789][T24411] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2690.767711][T24411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2690.796633][T24411] usb 4-1: config 0 descriptor?? [ 2691.442580][T22919] usb 10-1: config 7 has an invalid interface number: 101 but max is 0 [ 2691.455928][T22919] usb 10-1: config 7 has no interface number 0 [ 2691.466794][T22919] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2691.476460][T22919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2691.485918][T22919] usb 10-1: Product: syz [ 2691.491073][T22919] usb 10-1: Manufacturer: syz [ 2691.496836][T22919] usb 10-1: SerialNumber: syz [ 2691.889959][T24411] lg-g15 0003:046D:C222.0011: unbalanced collection at end of report description [ 2691.940821][T24411] lg-g15 0003:046D:C222.0011: probe with driver lg-g15 failed with error -22 [ 2692.143208][T25031] usb 4-1: USB disconnect, device number 24 [ 2692.355091][T22919] as10x_usb: device has been detected [ 2692.373456][T22919] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2692.438250][T22919] usb 10-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2692.537945][T22919] as10x_usb: error during firmware upload part1 [ 2692.556055][T22919] Registered device Elgato EyeTV DTT Deluxe [ 2692.558888][T22919] usb 10-1: USB disconnect, device number 17 [ 2692.594648][T27002] 9pnet_fd: Insufficient options for proto=fd [ 2692.637467][T22919] Unregistered device Elgato EyeTV DTT Deluxe [ 2692.639645][T22919] as10x_usb: device has been disconnected [ 2692.956533][T27009] netlink: 'syz.3.5395': attribute type 7 has an invalid length. [ 2694.459547][ T9378] Bluetooth: hci5: Frame reassembly failed (-84) [ 2695.414290][ T8410] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2695.585294][ T8410] usb 4-1: Using ep0 maxpacket: 8 [ 2695.602211][ T8410] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2695.624488][ T8410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2695.636687][ T8410] usb 4-1: config 0 descriptor?? [ 2695.780842][T27070] netlink: 'syz.9.5422': attribute type 1 has an invalid length. [ 2695.854266][T18467] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2696.031377][ T8410] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2696.709505][ T8410] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2696.722822][ T8410] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 2696.751258][ T8410] asix 4-1:0.0: probe with driver asix failed with error -71 [ 2696.771254][ T8410] usb 4-1: USB disconnect, device number 25 [ 2696.932549][T25031] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2697.094548][T25031] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2697.106129][T25031] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2697.116209][T25031] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2697.125637][T25031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.140872][T27085] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2697.151070][T25031] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2697.189563][T24411] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2697.393085][T24411] usb 5-1: Using ep0 maxpacket: 32 [ 2697.408353][T24411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2697.419968][T24411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2697.430391][T24411] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2697.442331][T24411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.453240][T24411] usb 5-1: config 0 descriptor?? [ 2697.569272][T25031] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 2697.621133][ T8410] usb 10-1: USB disconnect, device number 18 [ 2697.742353][T25031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2697.753481][T25031] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2697.765216][T25031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 2697.783809][T25031] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2697.793143][T25031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.802508][T25031] usb 4-1: Product: syz [ 2697.806744][T25031] usb 4-1: Manufacturer: syz [ 2697.811503][T25031] usb 4-1: SerialNumber: syz [ 2697.818916][T25031] usb 4-1: config 0 descriptor?? [ 2697.825965][T27095] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2697.835488][T27095] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2697.844930][T25031] usb 4-1: ucan: probing device on interface #0 [ 2697.908476][T24411] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 2698.117769][T24411] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 2698.339950][T24411] ft260 0003:0403:6030.0012: failed to retrieve system status [ 2698.348574][T24411] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -71 [ 2698.360252][T24411] usb 5-1: USB disconnect, device number 33 [ 2698.508757][T25031] ucan 4-1:0.0 can0: registered device [ 2698.529059][T27112] netem: incorrect gi model size [ 2698.534475][T27112] netem: change failed [ 2698.781570][T25031] ucan 4-1:0.0 can0: firmware string: unknown [ 2698.791489][T25031] usb 4-1: USB disconnect, device number 26 [ 2699.561058][T27126] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2699.618435][T27131] sg_read: process 681 (syz.4.5450) changed security contexts after opening file descriptor, this is not allowed. [ 2700.129776][T24411] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2700.242006][T25031] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2700.253244][T25031] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2700.258044][T22919] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2700.269229][T25031] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2700.276829][T25031] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2700.301342][T25031] rtc rtc0: __rtc_set_alarm: err=-22 [ 2700.323925][T24411] usb 5-1: Using ep0 maxpacket: 16 [ 2700.342059][T24411] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2700.365268][T24411] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2700.377394][T24411] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2700.386845][T24411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.395031][T24411] usb 5-1: Product: syz [ 2700.400055][T24411] usb 5-1: Manufacturer: syz [ 2700.404693][T24411] usb 5-1: SerialNumber: syz [ 2700.439551][T22919] usb 10-1: Using ep0 maxpacket: 16 [ 2700.451848][T22919] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2700.472663][T22919] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2700.486640][T22919] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2700.497963][T22919] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2700.511242][T22919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.520030][T22919] usb 10-1: Product: syz [ 2700.524413][T22919] usb 10-1: Manufacturer: syz [ 2700.542221][T22919] usb 10-1: SerialNumber: syz [ 2700.559340][T22919] usb 10-1: config 0 descriptor?? [ 2700.854131][T22919] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input32 [ 2700.869680][T24411] usb 5-1: 0:2 : does not exist [ 2701.942677][T22919] usb 10-1: USB disconnect, device number 19 [ 2701.942839][ C1] synaptics_usb 10-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 2702.252027][T24411] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2702.288515][T24411] usb 5-1: USB disconnect, device number 34 [ 2702.468145][T27189] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 2702.497480][T27189] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 2702.930647][T22919] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2703.027374][T25031] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2703.271009][T25031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2703.324958][T25031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2703.398836][T25031] usb 10-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 2703.433235][T22919] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2703.433256][T25031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2703.453484][T25031] usb 10-1: config 0 descriptor?? [ 2703.476418][T22919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2703.505108][T22919] usb 4-1: config 0 descriptor?? [ 2703.527252][T22919] cp210x 4-1:0.0: cp210x converter detected [ 2703.953666][T25031] razer 0003:1532:010E.0013: unknown main item tag 0x3 [ 2703.963724][T22919] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2703.977420][T25031] razer 0003:1532:010E.0013: ignoring exceeding usage max [ 2704.000718][T22919] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2704.171272][T25031] razer 0003:1532:010E.0013: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.9-1/input0 [ 2704.207492][T25031] usb 4-1: USB disconnect, device number 27 [ 2704.223454][T25031] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2704.267567][T25031] cp210x 4-1:0.0: device disconnected [ 2704.409689][ T8409] usb 10-1: USB disconnect, device number 20 [ 2706.993969][ T52] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2707.111311][T27262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2707.117908][T27262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2707.149746][T27262] vhci_hcd vhci_hcd.0: Device attached [ 2707.179852][ T52] usb 10-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 2707.198516][ T52] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 2707.218450][ T52] usb 10-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 2707.227635][ T52] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.260448][ T52] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 2707.279476][T27267] netlink: 'syz.0.5506': attribute type 1 has an invalid length. [ 2707.432171][ T8410] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 2707.495469][ T52] gspca_sn9c2028: read1 error -32 [ 2707.503241][ T52] gspca_sn9c2028: read1 error -32 [ 2707.596686][T22919] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2708.068086][ T8409] usb 10-1: USB disconnect, device number 21 [ 2708.341095][T22919] usb 4-1: Using ep0 maxpacket: 16 [ 2708.359735][T22919] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2708.372470][T22919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.045735][T22919] usb 4-1: Product: syz [ 2709.050229][T22919] usb 4-1: Manufacturer: syz [ 2709.055553][T22919] usb 4-1: SerialNumber: syz [ 2709.150647][T22919] usb 4-1: config 0 descriptor?? [ 2709.284389][T22919] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2709.369168][T22919] usb 4-1: Detected FT232H [ 2709.638334][T27263] usb 39-1: recv xbuf, 0 [ 2709.649063][T22919] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2709.654217][T22089] vhci_hcd: stop threads [ 2709.659227][T22919] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2709.661927][T22089] vhci_hcd: release socket [ 2709.675055][T22089] vhci_hcd: disconnect device [ 2709.677985][T22919] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2709.716940][T22919] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2709.731096][ T8410] vhci_hcd: vhci_device speed not set [ 2709.743803][T22919] usb 4-1: USB disconnect, device number 28 [ 2709.766226][T22919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2709.793433][T22919] ftdi_sio 4-1:0.0: device disconnected [ 2710.104982][T24410] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2710.369467][T24410] usb 5-1: Using ep0 maxpacket: 32 [ 2710.479809][T24410] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2710.528345][T24410] usb 5-1: config 0 has no interface number 0 [ 2710.561898][T24410] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2710.574180][T24410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.608159][T24410] usb 5-1: Product: syz [ 2710.614672][T27307] netlink: 'syz.9.5520': attribute type 1 has an invalid length. [ 2710.689272][T24410] usb 5-1: Manufacturer: syz [ 2710.813691][T24410] usb 5-1: SerialNumber: syz [ 2710.876851][T24410] usb 5-1: config 0 descriptor?? [ 2710.887014][T24410] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2711.197097][T24410] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2711.482855][T24410] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2711.509695][T27310] netlink: 'syz.3.5522': attribute type 1 has an invalid length. [ 2711.558198][T27310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2711.625643][T27312] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2711.650779][T27312] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 2711.690175][T27312] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 2711.734803][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2711.745484][T24412] usb 5-1: USB disconnect, device number 35 [ 2711.802171][T24412] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2711.836213][T24412] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2711.858029][T24412] quatech2 5-1:0.51: device disconnected [ 2712.072414][ T52] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2712.243769][ T52] usb 10-1: Using ep0 maxpacket: 32 [ 2712.260329][ T52] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2712.295988][ T52] usb 10-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 2712.311294][ T52] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2712.319837][ T52] usb 10-1: Product: syz [ 2712.324275][ T52] usb 10-1: Manufacturer: syz [ 2712.329656][ T52] usb 10-1: SerialNumber: syz [ 2712.337853][ T52] usb 10-1: config 0 descriptor?? [ 2712.351022][ T52] usbtouchscreen 10-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 2712.414517][T24412] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 2712.519949][T27334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5529'. [ 2712.592651][T24412] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2712.600961][ T52] usb 10-1: USB disconnect, device number 22 [ 2712.624281][T24412] usb 4-1: not running at top speed; connect to a high speed hub [ 2712.640268][T24412] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 2712.652573][T24412] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2712.675327][T24412] usb 4-1: config 4 has no interface number 0 [ 2712.695639][T24412] usb 4-1: string descriptor 0 read error: -22 [ 2712.702001][T24412] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2712.722478][T24412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2712.766265][T24412] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 2712.776726][T24412] usb 4-1: No valid video chain found. [ 2712.990593][ T8410] usb 4-1: USB disconnect, device number 29 [ 2713.045672][T27345] netlink: 'syz.0.5534': attribute type 1 has an invalid length. [ 2713.133579][ T52] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2713.302198][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 2713.354623][T27352] netlink: 'syz.9.5536': attribute type 1 has an invalid length. [ 2713.444230][ T52] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2713.477502][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.488235][ T52] usb 5-1: Product: syz [ 2713.492541][ T52] usb 5-1: Manufacturer: syz [ 2713.498510][ T52] usb 5-1: SerialNumber: syz [ 2713.566249][ T52] usb 5-1: config 0 descriptor?? [ 2713.682438][ T52] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2713.744562][ T52] usb 5-1: setting power ON [ 2713.793269][ T52] dvb-usb: bulk message failed: -22 (2/0) [ 2713.858633][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2713.890300][ T52] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2713.895095][T27341] dvb-usb: bulk message failed: -22 (3/0) [ 2713.911377][ T52] usb 5-1: media controller created [ 2713.926492][T27341] usb 5-1: gpio_write failed. [ 2713.932030][T27341] cxusb: i2c wr: len=79 is too big! [ 2713.932030][T27341] [ 2714.454271][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2714.463777][T27356] netlink: 'syz.9.5538': attribute type 1 has an invalid length. [ 2714.486028][T27356] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2714.511511][T27356] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2714.518543][T27356] bond6: (slave vxcan9): The slave device specified does not support setting the MAC address [ 2714.530004][T27356] bond6: (slave vxcan9): Error -95 calling set_mac_address [ 2714.607778][ T52] usb 5-1: selecting invalid altsetting 6 [ 2714.629177][ T52] usb 5-1: digital interface selection failed (-22) [ 2714.642226][ T52] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2714.685152][ T52] usb 5-1: setting power OFF [ 2714.690533][ T52] dvb-usb: bulk message failed: -22 (2/0) [ 2714.704347][ T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2714.724039][ T52] (NULL device *): no alternate interface [ 2714.825975][ T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2714.878656][ T52] usb 5-1: USB disconnect, device number 36 [ 2715.600733][ T52] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2715.760997][T24412] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 2715.782627][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 2715.790504][ T52] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2715.801126][ T52] usb 5-1: config 0 has no interface number 0 [ 2715.814182][ T52] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2715.824699][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.833273][ T52] usb 5-1: Product: syz [ 2715.838263][ T52] usb 5-1: Manufacturer: syz [ 2715.843006][ T52] usb 5-1: SerialNumber: syz [ 2715.852029][ T52] usb 5-1: config 0 descriptor?? [ 2715.861137][ T52] smsc95xx v2.0.0 [ 2715.961263][T24412] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2715.975028][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2715.997595][T24412] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2716.028557][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2716.049748][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2716.072749][T24412] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2716.081262][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2716.108161][T24412] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2716.143537][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2716.177260][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2716.210471][T24412] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2716.229088][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2716.267776][T24412] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2716.288952][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2716.301681][T24412] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2716.321702][T24412] usb 4-1: string descriptor 0 read error: -22 [ 2716.330876][T24412] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2716.340804][T24412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.360754][T24412] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2717.021080][ T8410] usb 4-1: USB disconnect, device number 30 [ 2717.067790][ T52] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2717.081084][ T52] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2717.091492][ T52] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2717.113106][ T52] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 2717.138685][ T52] usb 5-1: USB disconnect, device number 37 [ 2717.152531][T27400] netlink: 'syz.0.5554': attribute type 1 has an invalid length. [ 2719.151219][T27429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5562'. [ 2719.155343][T27427] lo speed is unknown, defaulting to 1000 [ 2719.166769][T27429] netlink: 'syz.4.5562': attribute type 7 has an invalid length. [ 2719.177769][T27429] netlink: 'syz.4.5562': attribute type 8 has an invalid length. [ 2719.188339][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5562'. [ 2719.258589][T27429] erspan0: entered promiscuous mode [ 2719.265284][T27429] gretap0: entered promiscuous mode [ 2719.290643][T27429] erspan0: left promiscuous mode [ 2719.310726][T27429] gretap0: left promiscuous mode [ 2719.439251][T24410] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2719.655051][T24410] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2719.676852][T24410] usb 10-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 2719.700559][T24410] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2719.783287][T27443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2719.802572][T27443] netlink: 'syz.3.5566': attribute type 10 has an invalid length. [ 2720.344971][T24410] usb 10-1: Product: syz [ 2720.345001][T24410] usb 10-1: Manufacturer: syz [ 2720.345019][T24410] usb 10-1: SerialNumber: syz [ 2720.352582][T24410] usb 10-1: config 0 descriptor?? [ 2720.356225][T24410] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 2720.376252][T24410] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2720.383982][T24410] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 2720.384060][T24410] usb 10-1: media controller created [ 2720.438594][T24410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2720.616373][T25031] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2720.897070][T24410] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 2720.958756][T25031] usb 5-1: Using ep0 maxpacket: 32 [ 2721.327020][T25031] usb 5-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 2721.416158][T25031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.517417][T25031] usb 5-1: Product: syz [ 2721.544352][T25031] usb 5-1: Manufacturer: syz [ 2721.577467][T25031] usb 5-1: SerialNumber: syz [ 2721.632457][T25031] usb 5-1: config 0 descriptor?? [ 2721.666097][T25031] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 2721.733233][T24410] rc_core: IR keymap rc-twinhan1027 not found [ 2721.754855][T24410] Registered IR keymap rc-empty [ 2721.822075][T24410] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 2721.852957][T24410] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input34 [ 2722.092068][T24410] dvb-usb: schedule remote query interval to 150 msecs. [ 2722.099140][T24410] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 2722.108534][T24410] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2722.120765][T24410] usb 10-1: USB disconnect, device number 23 [ 2722.271088][T24412] m920x_read = error: -19 [ 2722.278176][T24412] dvb-usb: error -19 while querying for an remote control event. [ 2722.465637][T24410] m920x_read = error: -19 [ 2722.490783][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2722.750685][T24410] m920x_read = error: -19 [ 2722.751532][T25031] gspca_sunplus: reg_w_riv err -71 [ 2722.760644][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2722.882091][T25031] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 2722.922380][T25031] usb 5-1: USB disconnect, device number 38 [ 2722.956790][T24410] m920x_read = error: -19 [ 2722.961236][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2723.294784][T24410] m920x_read = error: -19 [ 2724.111368][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2724.816146][T27482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'. [ 2724.895964][T24411] m920x_read = error: -19 [ 2724.900463][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2725.074393][T24411] m920x_read = error: -19 [ 2725.090401][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2726.250066][T24411] m920x_read = error: -19 [ 2726.254571][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2726.508080][T24411] m920x_read = error: -19 [ 2726.521823][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2726.782888][T27504] netlink: 'syz.9.5588': attribute type 1 has an invalid length. [ 2726.793012][T24411] m920x_read = error: -19 [ 2726.816116][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2727.206285][T24410] m920x_read = error: -19 [ 2727.211124][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2727.361939][T24410] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2727.383683][T24411] m920x_read = error: -19 [ 2727.388177][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2727.543766][T24410] usb 4-1: Using ep0 maxpacket: 8 [ 2727.561467][T24410] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2727.629394][ T8421] m920x_read = error: -19 [ 2727.656324][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2727.696256][T24410] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2727.765676][T24410] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2727.811765][T24411] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2727.827344][T24410] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2727.855795][T24410] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2727.872110][T24410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2727.886010][T24412] m920x_read = error: -19 [ 2727.890415][T24412] dvb-usb: error -19 while querying for an remote control event. [ 2728.003355][T24411] usb 5-1: Using ep0 maxpacket: 8 [ 2728.099773][T24412] m920x_read = error: -19 [ 2728.104576][T24412] dvb-usb: error -19 while querying for an remote control event. [ 2728.134677][T24411] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2728.144286][T24411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2728.159619][T24410] usb 4-1: GET_CAPABILITIES returned 0 [ 2728.169142][T24410] usbtmc 4-1:16.0: can't read capabilities [ 2728.176097][T24411] usb 5-1: Product: syz [ 2728.180304][T24411] usb 5-1: Manufacturer: syz [ 2728.189788][T24411] usb 5-1: SerialNumber: syz [ 2728.205723][T24411] usb 5-1: config 0 descriptor?? [ 2728.300308][T24411] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2728.306986][T24410] m920x_read = error: -19 [ 2728.311349][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2728.534558][T24410] m920x_read = error: -19 [ 2728.561867][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2728.611552][T27535] netlink: 'syz.9.5598': attribute type 1 has an invalid length. [ 2728.772596][ T52] usb 4-1: USB disconnect, device number 31 [ 2728.890847][T24410] m920x_read = error: -19 [ 2728.895479][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2729.072880][T24410] m920x_read = error: -19 [ 2729.081031][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2730.128552][T24410] m920x_read = error: -19 [ 2730.154465][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2730.230551][T24411] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 2730.236511][T24411] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 2730.269438][T24411] usb 5-1: USB disconnect, device number 39 [ 2730.324218][T24410] m920x_read = error: -19 [ 2730.328636][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2731.157746][T24411] m920x_read = error: -19 [ 2731.161655][T25031] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2731.169126][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2731.493628][T24410] m920x_read = error: -19 [ 2731.517577][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2731.597780][T25031] usb 10-1: Using ep0 maxpacket: 8 [ 2731.608767][T25031] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 2731.701619][T25031] usb 10-1: config 179 has no interface number 0 [ 2731.733287][T27561] netlink: 'syz.4.5608': attribute type 1 has an invalid length. [ 2731.767003][T24410] m920x_read = error: -19 [ 2731.772322][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2731.777496][T25031] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2731.832998][T25031] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2731.851540][T27574] netlink: 'syz.0.5612': attribute type 1 has an invalid length. [ 2731.869484][T25031] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2731.887696][T25031] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2731.912689][T25031] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2731.949731][T24410] m920x_read = error: -19 [ 2731.965067][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2731.969947][T25031] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2732.031177][T25031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2732.034467][T27576] [ 2732.041661][T27576] ====================================================== [ 2732.048703][T27576] WARNING: possible circular locking dependency detected [ 2732.056349][T27576] 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 Not tainted [ 2732.063473][T27576] ------------------------------------------------------ [ 2732.070502][T27576] syz.7.5611/27576 is trying to acquire lock: [ 2732.076569][T27576] ffff88807a10e9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 2732.084952][T27576] [ 2732.084952][T27576] but task is already holding lock: [ 2732.092317][T27576] ffff888032edc468 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x500 [ 2732.101558][T27576] [ 2732.101558][T27576] which lock already depends on the new lock. [ 2732.101558][T27576] [ 2732.111959][T27576] [ 2732.111959][T27576] the existing dependency chain (in reverse order) is: [ 2732.120965][T27576] [ 2732.120965][T27576] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 2732.128358][T27576] lock_acquire+0x116/0x2f0 [ 2732.133398][T27576] __mutex_lock+0x1a5/0x10c0 [ 2732.138514][T27576] anon_pipe_write+0x167/0x14f0 [ 2732.143981][T27576] __kernel_write_iter+0x4c0/0x990 [ 2732.149611][T27576] __kernel_write+0x122/0x180 [ 2732.154808][T27576] autofs_notify_daemon+0x87e/0x1100 [ 2732.160617][T27576] autofs_wait+0x1324/0x1dd0 [ 2732.165731][T27576] autofs_mount_wait+0x170/0x330 [ 2732.171201][T27576] autofs_d_automount+0x555/0x710 [ 2732.176747][T27576] __traverse_mounts+0x2b5/0x580 [ 2732.182208][T27576] step_into+0x5bd/0x1000 [ 2732.187065][T27576] path_lookupat+0x169/0x440 [ 2732.192183][T27576] filename_lookup+0x290/0x670 [ 2732.197475][T27576] user_path_at+0x3a/0x60 [ 2732.202330][T27576] __se_sys_statfs+0xdc/0x220 [ 2732.207531][T27576] do_syscall_64+0xf3/0x210 [ 2732.212562][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2732.219070][T27576] [ 2732.219070][T27576] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 2732.226829][T27576] lock_acquire+0x116/0x2f0 [ 2732.231859][T27576] __mutex_lock+0x1a5/0x10c0 [ 2732.236972][T27576] autofs_notify_daemon+0x86b/0x1100 [ 2732.242781][T27576] autofs_wait+0x1324/0x1dd0 [ 2732.247898][T27576] autofs_mount_wait+0x170/0x330 [ 2732.253360][T27576] autofs_d_automount+0x555/0x710 [ 2732.258905][T27576] __traverse_mounts+0x2b5/0x580 [ 2732.264365][T27576] step_into+0x5bd/0x1000 [ 2732.269233][T27576] path_lookupat+0x169/0x440 [ 2732.274358][T27576] filename_lookup+0x290/0x670 [ 2732.279646][T27576] kern_path+0x35/0x50 [ 2732.284242][T27576] lookup_bdev+0xc8/0x290 [ 2732.289103][T27576] resume_store+0x1e1/0x720 [ 2732.294132][T27576] kernfs_fop_write_iter+0x398/0x510 [ 2732.299950][T27576] vfs_write+0x70f/0xd10 [ 2732.304709][T27576] ksys_write+0x19d/0x2d0 [ 2732.309557][T27576] do_syscall_64+0xf3/0x210 [ 2732.314586][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2732.321002][T27576] [ 2732.321002][T27576] -> #1 (&of->mutex){+.+.}-{4:4}: [ 2732.328224][T27576] lock_acquire+0x116/0x2f0 [ 2732.333267][T27576] __mutex_lock+0x1a5/0x10c0 [ 2732.338380][T27576] kernfs_seq_start+0x53/0x3b0 [ 2732.343661][T27576] seq_read_iter+0x3f1/0xda0 [ 2732.348781][T27576] vfs_read+0x9a0/0xb90 [ 2732.353470][T27576] ksys_read+0x19d/0x2d0 [ 2732.358229][T27576] do_syscall_64+0xf3/0x210 [ 2732.363271][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2732.369689][T27576] [ 2732.369689][T27576] -> #0 (&p->lock){+.+.}-{4:4}: [ 2732.376737][T27576] validate_chain+0xa69/0x24e0 [ 2732.382032][T27576] __lock_acquire+0xad5/0xd80 [ 2732.387237][T27576] lock_acquire+0x116/0x2f0 [ 2732.392270][T27576] __mutex_lock+0x1a5/0x10c0 [ 2732.397395][T27576] seq_read_iter+0xb4/0xda0 [ 2732.402431][T27576] copy_splice_read+0x63f/0xb50 [ 2732.407804][T27576] splice_file_to_pipe+0x290/0x500 [ 2732.413437][T27576] do_sendfile+0x526/0x8c0 [ 2732.418381][T27576] __se_sys_sendfile64+0x17e/0x1e0 [ 2732.424016][T27576] do_syscall_64+0xf3/0x210 [ 2732.429040][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2732.435458][T27576] [ 2732.435458][T27576] other info that might help us debug this: [ 2732.435458][T27576] [ 2732.445685][T27576] Chain exists of: [ 2732.445685][T27576] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 2732.445685][T27576] [ 2732.457955][T27576] Possible unsafe locking scenario: [ 2732.457955][T27576] [ 2732.465402][T27576] CPU0 CPU1 [ 2732.470763][T27576] ---- ---- [ 2732.476127][T27576] lock(&pipe->mutex); [ 2732.480289][T27576] lock(&sbi->pipe_mutex); [ 2732.487330][T27576] lock(&pipe->mutex); [ 2732.494005][T27576] lock(&p->lock); [ 2732.497816][T27576] [ 2732.497816][T27576] *** DEADLOCK *** [ 2732.497816][T27576] [ 2732.505953][T27576] 1 lock held by syz.7.5611/27576: [ 2732.511058][T27576] #0: ffff888032edc468 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x500 [ 2732.520728][T27576] [ 2732.520728][T27576] stack backtrace: [ 2732.526614][T27576] CPU: 0 UID: 0 PID: 27576 Comm: syz.7.5611 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 2732.526637][T27576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2732.526648][T27576] Call Trace: [ 2732.526657][T27576] [ 2732.526666][T27576] dump_stack_lvl+0x241/0x360 [ 2732.526692][T27576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2732.526714][T27576] ? __pfx__printk+0x10/0x10 [ 2732.526737][T27576] ? print_lock+0x171/0x1a0 [ 2732.526763][T27576] print_circular_bug+0x2e1/0x300 [ 2732.526781][T27576] check_noncircular+0x142/0x160 [ 2732.526810][T27576] validate_chain+0xa69/0x24e0 [ 2732.526841][T27576] ? look_up_lock_class+0x7b/0x170 [ 2732.526860][T27576] ? register_lock_class+0x54/0x330 [ 2732.526883][T27576] __lock_acquire+0xad5/0xd80 [ 2732.526909][T27576] lock_acquire+0x116/0x2f0 [ 2732.526929][T27576] ? seq_read_iter+0xb4/0xda0 [ 2732.526958][T27576] __mutex_lock+0x1a5/0x10c0 [ 2732.526975][T27576] ? seq_read_iter+0xb4/0xda0 [ 2732.527005][T27576] ? seq_read_iter+0xb4/0xda0 [ 2732.527029][T27576] ? __pfx___mutex_lock+0x10/0x10 [ 2732.527046][T27576] ? set_page_refcounted+0x77/0x160 [ 2732.527077][T27576] seq_read_iter+0xb4/0xda0 [ 2732.527105][T27576] ? rcu_is_watching+0x15/0xb0 [ 2732.527132][T27576] ? kernfs_fop_read_iter+0x142/0x650 [ 2732.527155][T27576] ? trace_kmalloc+0x1f/0xd0 [ 2732.527176][T27576] copy_splice_read+0x63f/0xb50 [ 2732.527196][T27576] ? __pfx_copy_splice_read+0x10/0x10 [ 2732.527215][T27576] ? __fget_files+0x2a/0x420 [ 2732.527233][T27576] ? wait_for_space+0x254/0x2e0 [ 2732.527257][T27576] ? __pfx_copy_splice_read+0x10/0x10 [ 2732.527273][T27576] splice_file_to_pipe+0x290/0x500 [ 2732.527309][T27576] do_sendfile+0x526/0x8c0 [ 2732.527333][T27576] ? __pfx_do_sendfile+0x10/0x10 [ 2732.527360][T27576] __se_sys_sendfile64+0x17e/0x1e0 [ 2732.527382][T27576] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2732.527405][T27576] ? do_syscall_64+0xb6/0x210 [ 2732.527424][T27576] do_syscall_64+0xf3/0x210 [ 2732.527441][T27576] ? clear_bhb_loop+0x45/0xa0 [ 2732.527460][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2732.527477][T27576] RIP: 0033:0x7fe39bd8e169 [ 2732.527493][T27576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2732.527509][T27576] RSP: 002b:00007fe39cb41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2732.527526][T27576] RAX: ffffffffffffffda RBX: 00007fe39bfb5fa0 RCX: 00007fe39bd8e169 [ 2732.527539][T27576] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2732.527549][T27576] RBP: 00007fe39be10a68 R08: 0000000000000000 R09: 0000000000000000 [ 2732.527560][T27576] R10: 000000000000970b R11: 0000000000000246 R12: 0000000000000000 [ 2732.527572][T27576] R13: 0000000000000000 R14: 00007fe39bfb5fa0 R15: 00007fff9d87b818 [ 2732.527594][T27576] [ 2732.805972][T24410] m920x_read = error: -19 [ 2732.810349][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2732.834905][T27556] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2732.986969][T24411] m920x_read = error: -19 [ 2732.991794][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2733.091076][T27556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.099697][T27556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.111170][T25031] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input35 [ 2733.167524][T24411] m920x_read = error: -19 [ 2733.171998][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2733.349256][T24411] m920x_read = error: -19 [ 2733.353672][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2733.541835][T24411] m920x_read = error: -19 [ 2733.546248][T24411] dvb-usb: error -19 while querying for an remote control event. [ 2733.562393][T24411] usb 10-1: USB disconnect, device number 24 [ 2733.562523][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2733.576984][T24411] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2733.577319][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 2733.734201][T24410] m920x_read = error: -19 [ 2733.738750][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2733.927222][ T8421] m920x_read = error: -19 [ 2733.931661][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2734.108366][ T8421] m920x_read = error: -19 [ 2734.112898][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2734.300778][ T8421] m920x_read = error: -19 [ 2734.305409][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2734.483930][ T8421] m920x_read = error: -19 [ 2734.488314][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2734.664394][ T8421] m920x_read = error: -19 [ 2734.668821][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2734.846525][ T8421] m920x_read = error: -19 [ 2734.851243][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2735.029523][T24410] m920x_read = error: -19 [ 2735.033908][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2735.209762][T24410] m920x_read = error: -19 [ 2735.214179][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2735.391410][T24410] m920x_read = error: -19 [ 2735.395794][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2735.584690][T24410] m920x_read = error: -19 [ 2735.589108][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2735.765714][T24410] m920x_read = error: -19 [ 2735.770211][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2735.947931][T24410] m920x_read = error: -19 [ 2735.952342][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2736.129544][T24410] m920x_read = error: -19 [ 2736.133915][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2736.323104][T24410] m920x_read = error: -19 [ 2736.327503][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2736.514251][T24410] m920x_read = error: -19 [ 2736.518657][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2736.706593][T24410] m920x_read = error: -19 [ 2736.711328][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2736.889085][T24410] m920x_read = error: -19 [ 2736.893476][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2737.070177][T24410] m920x_read = error: -19 [ 2737.074783][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2737.252911][ T8421] m920x_read = error: -19 [ 2737.258474][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2737.433654][ T8421] m920x_read = error: -19 [ 2737.438167][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2737.615365][ T8421] m920x_read = error: -19 [ 2737.619755][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2737.797122][ T8421] m920x_read = error: -19 [ 2737.801654][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2737.979789][ T8421] m920x_read = error: -19 [ 2737.984167][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2738.172432][ T8421] m920x_read = error: -19 [ 2738.176824][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2738.355661][ T8421] m920x_read = error: -19 [ 2738.360033][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2738.535232][ T8421] m920x_read = error: -19 [ 2738.540228][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2738.716659][ T8421] m920x_read = error: -19 [ 2738.721035][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2738.898444][ T8421] m920x_read = error: -19 [ 2738.903095][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2739.080606][ T8421] m920x_read = error: -19 [ 2739.085008][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2739.262442][ T8421] m920x_read = error: -19 [ 2739.266835][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2739.444010][ T8421] m920x_read = error: -19 [ 2739.448771][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2739.625873][T24410] m920x_read = error: -19 [ 2739.630336][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2739.807155][T24410] m920x_read = error: -19 [ 2739.811617][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2739.991677][T24410] m920x_read = error: -19 [ 2739.996351][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2740.171138][T24410] m920x_read = error: -19 [ 2740.175623][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2740.353044][T24410] m920x_read = error: -19 [ 2740.357410][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2740.534544][T24410] m920x_read = error: -19 [ 2740.539131][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2740.716031][T24410] m920x_read = error: -19 [ 2740.720404][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2740.897758][T24410] m920x_read = error: -19 [ 2740.902146][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2741.080302][T24410] m920x_read = error: -19 [ 2741.084910][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2741.261414][T24410] m920x_read = error: -19 [ 2741.265813][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2741.456007][T24410] m920x_read = error: -19 [ 2741.460485][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2741.635696][T24410] m920x_read = error: -19 [ 2741.640366][T24410] dvb-usb: error -19 while querying for an remote control event. [ 2741.817291][ T8421] m920x_read = error: -19 [ 2741.821670][ T8421] dvb-usb: error -19 while querying for an remote control event. [ 2742.011494][ T8421] m920x_read = error: -19 [ 2742.015871][ T8421] dvb-usb: error -19 while querying for an remote control event.