last executing test programs: 8m32.843582346s ago: executing program 4 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 8m32.441668464s ago: executing program 4 (id=497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) dup3(0xffffffffffffffff, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) memfd_create(0x0, 0x3) 8m30.31052635s ago: executing program 4 (id=503): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) 8m29.581759586s ago: executing program 2 (id=506): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 8m29.025005691s ago: executing program 2 (id=510): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) read(r2, &(0x7f0000000180)=""/167, 0xa7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast2, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000540)="7bf44c9bfffeffff4e75591949cf98376cd721d7", 0x14}], 0x10bd}, 0x48002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3], 0x7c}}, 0x0) 8m26.571717575s ago: executing program 3 (id=512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 8m26.369126446s ago: executing program 2 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x24000880) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x600200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x7ff, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) epoll_create(0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000240)={0x73, "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"}) 8m26.233161243s ago: executing program 3 (id=515): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x25, 0x8000039, 0x8, 0x5, 0xd, 0x4, 0x4, 0xf, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000400)="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", 0x139}, 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019440)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000006ed3a705ea3d8429f1121c5271d366ba2c8a2693b6f100000000000000"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019300)=@updpolicy={0xfc, 0x19, 0x4, 0x70bd29, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r5 = userfaultfd(0x801) mkdirat(0xffffffffffffffff, &(0x7f00000194c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000019400)) r6 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) connect$inet(r2, 0x0, 0x0) 8m25.272420719s ago: executing program 2 (id=516): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x202, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0}) 8m24.745272269s ago: executing program 4 (id=517): r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) read$FUSE(r3, &(0x7f0000006280)={0x2020}, 0x2020) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) 8m24.24831149s ago: executing program 3 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 8m23.543032751s ago: executing program 4 (id=520): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 8m23.522380043s ago: executing program 3 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) 8m23.298318169s ago: executing program 4 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 8m23.240117179s ago: executing program 3 (id=523): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) 8m22.975079239s ago: executing program 2 (id=525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 8m22.776935151s ago: executing program 3 (id=526): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x22000, 0x2, 0x1}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x5, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x401}, &(0x7f00000003c0)=0x8) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0xffffffffffffff8c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r5, 0x409, 0x7) writev(r5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x1000}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x1c, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) 8m22.76134549s ago: executing program 2 (id=527): r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0xa, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000880)={{r3}, "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"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e00", 0xb) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0f80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8m8.060380656s ago: executing program 32 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 8m7.677194313s ago: executing program 33 (id=527): r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0xa, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000880)={{r3}, "d6b7be4f87f431dc321fb8d7a742192d1584ae495d8bf63ec5be72556ed3033605e8b7c191ffddee63cf58dee4a0fa8bee3f76e6b5f876b3c2a939ab8d77469d611ff5ef4270aca203072645b2138d76a9cd41939f625fde1338b36b13d98181b85e632144b448503298efe29d3928f4df02025587fa2cb9bd2955f506660cd2f66e5139b7cb2f7deacd7f62e0f9c2d0490ccff4d4f775e0702397370be279cc86d82b2ea70abfe5093e72c0d867655746a0ee1b8aa2d009a363690f2087b237cf3ef059df05f03234024fbbdec4975d2a5b1bab6278be3714b571f25fbf4d34ce74cf921266d88b406523cd9ea70504947d6979f15c2217a386ef7392548bb97473864e646ad395339541663d46b74d3d55d0d762fa1723baa5699b0b0e4ef33436c128efb329542042f050d3bffa796ab26a057d2bf01f367aa61808f5bdcc5d12c9afb1e81814b5ba063ecfb345821bc3ffc1e0e3c9876621bea6c6c8386068e4b80e44cd2c5aac6314b173be37f49737abc24255ffb8f59664c8cf64c62ba7c324d1c5e04ef0234cbb1a529c4d3a21b1a181b1ae94f314f7d652b996c355d5c4cec9622a335b20c723132762e351d97310f90c1a4828d729dcaf2622aef0dedc2fb9a917a564d8411fba4a844589918e4ddbc9cb1ae569b1c9814994dbcc5531f622878d13714f348815148d4a36494280c810e8c15f1286797099bd884dd5b562c0ec9f8d4d2c4da903b219c3b35adc6361ec76075ed2647ebc03a9d3610b6fef4b2c440048519c0e9ad7599b8bdb29593e603fb7ae5829bde1b3dcf17c8465cd41086e0045642584131f17795ef2f3181f23efd6a22015927be772ef1c3ada1286b511c0fca71ff965e9e0f54ee4172e15993a0cf2181eb9828476f43ddc4ef83dc11f4362884d754969c9efb46a1daadac93b9410995cf848929939ae5917a0e3f25d5198fa3b3c8865470c6c2317576d2bc1084694d33237eda8e49cb03c9455ae546b7bc0c60c79e84e178ef3e132b6b3d5d1638d2d36262057573cf8e3c804a6f94904b3e914a97a0c6525d82425cb1afc6e8494e66b93f88e5ad10e757128d3cfcdcb9d844652d7fe14cfedc3d0ed63bda830b0955dc98a645093f14b354266dca83b6021205c809a06fdbc261a52c3eb7b14fec28f6e5a258d6affaabc6ba538cbf7147cf75c89b9e185faeedfbe9e2b86a4cb54991667abd0eed178417d8af6840937617cd0c19ebf2d710ab27580cc357ba110bb047437d32984a53f1dc9c38f2c34096f8d417fef5eef46537668b23f7add2f667d3e26954dc634cd5bc3e25049cba09bc7fbd71b557158d880c6bce4b7bab9e203509da77551db259b3a581cb4aaa885a5f5249c7bd45cffd6aaae0d6012258fdbddae7abe5218b2f89702c6f4b0484889c26e9179ed996579b33bec5efc8a3bce3f3d623aeaa7ed88f54d578e4bb8fa92f5dbe033451f6e7d421bf8a5f47a336d7486eff3ac1c7d790508218071d04fa84ed0eee2223e26ff0e81c212ec2aa269f05c675c2fb348a1dfd75cca4887d8a4fba55bd6ac8073cc536798dd7d8eed90191206b63a5daecb5d2c78b2f275574b302a5e2aca35d92df39155576eb51e7f7995ffcb9c6156dfb980158617afab935d10c3ae53dee49f5c8071e755f2ea226a33fb74c4bc885ce568f7a3a061428694b8848840df54f04b9984705f5e1b823aebf3553084de8e9287b88bd7b31fcbe346ec8c8c7ff0bfd6464b35d3642b091ce96279cacd99c1f6ee1096ae876ff8a5cd62e5dcfcf27c342b136051a891da22fb1dea918e7c57d604d4e7993912a0154caa85524114194afd94ec627defe83ada77906fd9741dd2ae97b96c01f31cbc8c15e3d4ded3314fd66caeaea8f770ffa60ce6c5ea43cdf8588675fb01d31d7555823f81547e639d4e5bf1b1b31ad03255776a4b1ea8469b21323662c3e1c58f2ee1f47a0b4a1189065c29474f3fe2b080be4f750077400a9cccb6798e129e1a8092bcf1b6b319cb35951449a61e05b8ea7ac3590f498ad8287786644c4e73db4cb9f662a37b27876b0dc3f73978aa3164a65600825cdee7cfa3bbd2db2edd20fa186560e2f95f5bc702599c92b79303b7707032cb9cba8265737f3e42f16d880c4851c01e4301733569eec51505ad1f3b1b2919a958b55e8474df00ec708db23e518e43690e4313bbbc8ea17c3c633ebdc2fb6078dc4f7266b23e94e823e50dd7554cec6faf1fcbdf0fa9defbddd1ca364a67fb86d76a3415cb1cf7f631b9de911ffa7f2a64f609e5b682ff37cf135ad7906ce76fdc74b1f5dda6aaab4610ac1388bc89ba9beb6293c627b09530564c7e218d11f7854f1aaa86cefa97f78db29e62e08e9cff86c1ccafb9e01cf702fb81ddc1703a5893f02700dd9b214b19aa13c02743ccdc9df17005f41552dd6786e203f353116fd853001eff384e85a8d58f8f708cdaaf50703c261171f05aa87220c5b5c7b6c2b3e0714d1a09472515a4c766c34f176bf93bf44dc87228655ca084810c0d497a296a6bd9094f089b9965a4c35c086e99a34fe3f4d43e1c6eaa78a593811321f8a0cbcc479341c04820aa2a494e7a5137b395bd9c85a2c0f140ce6f5120198530a60ddb76bd304df4829e2d1b2764ee030b9547751cc589d054b5fb7cb088fc823bfaddcc50bb12d7e460045ce3aefb89277145e140249a9380ea24a3f895fed76e99f94c3228a4b1ece26162f56ce428d42687593477f107f733bf8427cbd169f7de4741abbbb3396d587ec15e16ef9df6e24c19b191b6f17d6f217d0c45eb1377bf24a767b8f6176c9667d77dff9e23f8deb029664f7731362893df0470041bbaed3cf29fa0838f742905ddb66c7ad08de8758597c1274cdeff1f8abfd399a14321b27bb215c09c41a9597be3b088700295772ed043c8b2ccfe0cfac4de654d8172f29ec6af6dfa8fa4900bf3640d815368cd25e426f9544cd71a9b7c1a170cba18093ddac8942d7a4c17c0113e5c87a4db77ca3bd235fb13beba5635d0bca361900a27760935168292068abf1a973f96f7b66b6eccf87515a22200bd5b8a4afc8e24847628477fa05740709067451ea24da8a22b2e05757c232dc95d7c434e5deaf2a3502aa9aae68953ba04522fc772dc95ca41e28ac79344e9eaa8cdf3634febbff2c45cd7c69d90f7dd07c6e1d7750b864b57fde94c63ebb7f4e87584ee3ea2657f23fd4605e3d48b746da0708add879cf6d2bb97868af506c74df0c40dc1b5e85321b80c41f7f1c047cd8caf3793b327a79004f2282223ac4dcef51f61c402b377671fc971875c8d7c869f8eb5bdbd990310b70a156db06a45d2aa26c062c4b6e82f2b4c0ef9133eddea93851147ae66d2af032df1cdfecd24ce5bb985f110b48119436ecf60b781165fa46a5ff24484de669378df8e2826889ee113380a623e4aad2e14182040ec717b0e923ee0b92aa926361a874e0fa960891698eb2c7ec366d379228813a93f542d4b7f4fe4a4600f69d9fbfd60e105044200d46bc24fa9e58553ba6f2798a1cd98a3571ad594cd00165ef058b1c234ef73069d4f716e58b974fbafd52ec54dad61cd9e5814c5fb99f614053e39a359b33f3f0a676924c948b186f505df08b764dd3c8ebaef0dcf99e5d7aa89b0186fcc8cb99f27f6b75a8f60861b5ebe8afa2a4c6d181740752c1ac6df50ff9a1b3c92ed8aba48a2fab039a394467e3e728d21b14c7ab4a9d74a4da956782a0d189dfdb18334c933f92918e7709f6e9a2779b1d457ccbb1b693f85c4e2f63ace6db246f4c4f1ecd2e5e34b8dd38d08841f3419ecab6366a0d8882271a68361f03adb688c931b4d57e9f70472bb6394d466d0ba9ee59d3cc7a348ff3909743646ce007425eaefe1dfeeccd7189eef7e90666cc51eda3f6a6279bb17b27ec9d0114a995e2823ee53a8f91843285ede90b0f132c557b8243f9d1a1183e87a702bf95c8faa29a41cfb4306694cc49fbfebc78d5d5d056f067d44feef0a2b3b4d8949c9f35f32d0a0dda6afff93f6bd9e481aa7f676936e9015337d03b28c49d27f49757ee39fd05b57baa5f44f170de534d3258faa335d1597d03ff083f53b1ad0744539db11765a3b69922b6b06b5976f1cce5f6b8a60bbc87c5ba1b91cda98c292467448a6f4b890becee1a6a48d537e975cea39e58379afa96ce8f40397e8fab8ee6506c3126cc52b57c1b74ebdb47d742e18c5fb12a462fbbdbba7079fac3192a28a9e16586b8f4d7c246243a7d8d5edc8e45f18904ae22664cc326a917d7ea7b6ee0aa632124acda1c36846c697e910fdbc146dbb62ce0dd2a33f7a42e62ca05952bbdbefa450bd6180e4fc0b0384d538b0bdf6a9f400a0a415d225c09d1fcdcc91a05edadac9cceee3755de5ab7521ea968c038aeb757273af16f1e7154f0a4f97697d30be02848b3777ae3c1f01449622e0b13e296f1db63fea641d4b1ed72dd8cee93ec57fbc9988a109ea40fad92ba91717a0304a48382c1042b03f48888b9bec242a88b27fd7ea01403839564c8d71c0b5bf0cf905eae9a786f58ded99d3efd8c49fcc1ca95aa58c884916276d460f17533ec6169d75a46a0ec7e8c295112cc94930dbd85c25d5a317a60e46580c535ff5e21387f98c01e9443ae2a642a00ed9240a7c1dc70ab05906f899029ddbd0dab60a98b22356c3350eca288723eb6649a78808b9b804d615fbded7ba927014f1a1792c6bf30661b9ed71414952d5acd6a7e68bd4ee6d7b2e71153e2d863a92b07a9e453d42880695f327b6bdc0ba49beb0f1dd936e8bb6d874d078c5413c14ef22a1705b1c950f1ff21f67185dd3414c85cd3a6c768602048a240812ac348bdd3ef0bb0a7daba3b3dd57738ac3cd8bdce8b87ed6fa48cb22cde1f85aef7e022e5bb53fbb2f828a774a12b782cbcb7110911016c79ffa3a00b46b296113287d2235da379c5c99dd9bc8a31a8b6ca721218dae7930a8c8e1aa1fa6360491f57cb72a04f85833fddff27daf69a08dcd54fa53ad73d255da33a67798b879032cd9f45c9db92689b0feb3f1eef352f102e294ed23cfc40ae40d12f2c3479cb63bb1625b4bea047673acdeb4a80f695c1d0e2a490d0979e81868a461c6462f123735c566f1c8b138baa0e6bfef94e6e3754439e28ce812de06f04c5c8a10c6bb7ccfb67912c0ea6611cb301b5bfc181f94f8f0dfc6f12ebd9c7a0c2af5a33d500d9038f679cdda118c5928c42744d6df3dd4e9b819b988f96120019889cc957559598e66d32df049a95ebd0ae33002a987e7805e19b7c34666fa38b36913fc19eeab224fba80347ddee49f1e008a008eebf76761fb59f435e43be686099df4b716bf39c2bef9c268d4d9245a5eeebf902ce1a1e1b2b678301dfe1f2ab606b52efe8e0aba60a778bc3e82b99b0485514df2049e9428ba62802f3d86fd07166098011a35d2b4396c3aaf4e1cd9da85ddaee204fb92372347294c16c385c2ef6876b07c040c5d940205e901acde436d88cf211059d0e30e90bbe914a6de59f131c1b350fb437b3f0c68a23bfe17841134b221c6763f82cb78ef3c26c60ef2158f893385996a0b32e5341e56687d6b3ff612fde4381e814dbc478cbaca3e0354ca1071ee4e87fd56fc10fff714284e468d50be180a8044679c7c0082d38d82a8723fbe760a21cf74d3595686ed571b8270d05b3b30ef8927f7ba80e36fc32712363519c935581c06d6a0d897193ef99361c142f3a7f14095f30a34f7a70553b8de3d935a3c57216de6fbba944931"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e00", 0xb) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0f80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8m7.531201833s ago: executing program 34 (id=526): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x22000, 0x2, 0x1}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x5, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x401}, &(0x7f00000003c0)=0x8) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0xffffffffffffff8c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r5, 0x409, 0x7) writev(r5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x1000}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x1c, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) 2m44.23211116s ago: executing program 5 (id=1205): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'geneve1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) r3 = syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "65cb0629f5a3e37d035000ed1ea2"}}]}, 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8, 0xffffffff}]}, 0x10) 2m43.171036373s ago: executing program 5 (id=1210): socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x29, 0x3, 0x6, 0x5, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x1, 0x81, 0x4a07}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r4, 0x4b6a, &(0x7f0000000000)={0x1, 0x40000000, 0x0, 0xfeff200d, 0x0, 0x0}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) 2m38.752023782s ago: executing program 5 (id=1219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x895, 0x0, &(0x7f00000001c0), &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, 0x40810, 0x9407}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x14) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163a48412ba8f017f02473b358357c7b86d4169e0d4326307d58fb48a35d179e2e0a47e2f22107cac3f99e8750fbf2c2116644e8c94dd5d2472d0309870e963bb6cc0c830b348e23af4ddaa6bc0de8d1331f72a97147d584f6745a28e0bb41ae92a062a385befc84ead311f22f008beb5c6bbe1559ed9ba309210972e1096b878d42a985f1e5cf5980717a4f8f49723f96804a03cc3309fbfa27c17f25fa66c03d6ca488135ddabcc8bbed52dedbd0718cd2262f7cb0d275398fe4b3a188d8ff2d64539a29d7c3693cf545b5ee200e6fb92a5a08ec7d3c7ca46dbed5f00b475328d5ab77113f46c9b53d6845ca", 0xf7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48040}], 0x1, 0x40800) 2m37.578721512s ago: executing program 5 (id=1222): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, 0x0, 0x0) 2m37.505017282s ago: executing program 5 (id=1223): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f00000004c0)="9266b709b6a124c788f903c38e5f6f0102c2de5d1cb867eb", 0x0, 0xffffffffffffffc4) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 2m34.340423594s ago: executing program 5 (id=1235): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x48040) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) 18.688120333s ago: executing program 6 (id=1512): memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 17.682929971s ago: executing program 6 (id=1514): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 16.624098064s ago: executing program 6 (id=1515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 15.981904145s ago: executing program 6 (id=1517): setpgid(0x0, 0x0) msgget$private(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @remote, 0x0, 0x3}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0x2, 0xfffe, 0x0, 0x8, 0xa, 0x0, 0x0, 0x84}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0x0, 0xa}, 0xffffffff, 0x6e6bba, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x4d6, 0x6c}, 0x3, @in=@empty, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x0, 0x2000}}, 0xe8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="11032dbd3468fedbdf25010000001100b191c0c0695aea1bb0e5caa697d63365bd9d1ba461861c407654d0b554a86811338d9bd2800a8a7f90bbc93fc6187bcc861153fab7fc570c087d9b05592cf3560425e5e8d5f8ccc2a6d7d81c8bce155e077b097ada88a6f747b3c784cab3dfefa827a7bcebe307c8c81f0397b9ed2e08df0ba737bad0a72d9e75d82d202cd1dbf1e0e939019fc2746b504308c185b7501773d13c5965563414b518167f59bf94d4270ccc53ce037204ca63d081160508d9aaa8c492"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8010) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000000)=""/14, 0xe, 0x100, 0x0, 0x0) 10.15636586s ago: executing program 7 (id=1528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x895, 0x0, &(0x7f00000001c0), &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, 0x40810, 0x9407}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x14) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163a48412ba8f017f02473b358357c7b86d4169e0d4326307d58fb48a35d179e2e0a47e2f22107cac3f99e8750fbf2c2116644e8c94dd5d2472d0309870e963bb6cc0c830b348e23af4ddaa6bc0de8d1331f72a97147d584f6745a28e0bb41ae92a062a385befc84ead311f22f008beb5c6bbe1559ed9ba309210972e1096b878d42a985f1e5cf5980717a4f8f49723f96804a03cc3309fbfa27c17f25fa66c03d6ca488135ddabcc8bbed52dedbd0718cd2262f7cb0d275398fe4b3a188d8ff2d64539a29d7c3693cf545b5ee200e6fb92a5a08ec7d3c7ca46dbed5f00b475328d5ab77113f46c9b53d6845ca", 0xf7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48040}], 0x1, 0x40800) 9.339318172s ago: executing program 1 (id=1531): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a0102000000000008000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) io_cancel(0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x7c03, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, r6}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 8.940717095s ago: executing program 6 (id=1532): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x980, 0x0) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102386, &(0x7f0000000040)=0x18ff2) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 7.828849436s ago: executing program 1 (id=1535): madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$null(0xffffff9c, &(0x7f0000000040), 0x84601, 0x0) r0 = syz_io_uring_setup(0x620c, 0x0, &(0x7f00000007c0), &(0x7f0000000200)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @sdr={0x3147504d, 0x1}}) 7.599774733s ago: executing program 1 (id=1537): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001780), 0x0, &(0x7f0000000380)}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.32247992s ago: executing program 0 (id=1538): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0xff, 0x9}, [@RTA_IIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000140)=r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 7.303144395s ago: executing program 7 (id=1539): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.795565001s ago: executing program 1 (id=1540): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getrusage(0x0, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard') 5.385898348s ago: executing program 7 (id=1541): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000003f11f4f345b10752cdbcc56a0a1763497ef67eeda758ccf1498d11fcbe0f057fbeefc95c6c485f6f66f1d1e2a589dfc4"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001, 0x4, 0x100, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x401, 0x0, 0xee, 0x0, 0x6, 0xfffffffffffffffe, 0x40, 0x0, 0x7f, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x9, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0xfffffffffffff56c, 0x4, 0x4, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x80000000000000, 0x800000, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, 0x80]}) 3.361627218s ago: executing program 7 (id=1542): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fanotify_init(0x20, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x2}, 0x0, 0x0) 3.321347972s ago: executing program 0 (id=1543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xe4bc1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_cancel(0x0, 0x0, 0x0) 3.214295426s ago: executing program 1 (id=1544): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) write$char_usb(r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 2.835771895s ago: executing program 7 (id=1545): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) 1.824014667s ago: executing program 0 (id=1546): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2f00000018bbac2b3a"], 0x20) 1.63937898s ago: executing program 7 (id=1547): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32], 0x20) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) 1.458818668s ago: executing program 0 (id=1548): r0 = memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x8) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000080)="dc", 0x1}], 0x1) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = getpid() syz_clone3(&(0x7f0000000380)={0x82040480, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r8], 0x1}, 0x58) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4606, 0x0) 886.640947ms ago: executing program 6 (id=1549): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x38, 0xfffffffffffffffe}, 0x10) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000000400000014000500fc010000000000000000000000000800080002"], 0x4c}}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f00000002c0)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 309.566281ms ago: executing program 0 (id=1550): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001780), 0x0, &(0x7f0000000380)}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) 83.08674ms ago: executing program 0 (id=1551): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 0s ago: executing program 1 (id=1552): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000095000000000000003f11f4f345b10752cdbcc56a0a1763497ef67eeda758ccf1498d11fcbe0f057fbeefc95c6c485f6f66f1d1e2a589dfc4"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001, 0x4, 0x100, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x401, 0x0, 0xee, 0x0, 0x6, 0xfffffffffffffffe, 0x40, 0x0, 0x7f, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x9, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0xfffffffffffff56c, 0x4, 0x4, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x80000000000000, 0x800000, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, 0x80]}) kernel console output (not intermixed with test programs): left allmulticast mode [ 377.368698][ T1172] bridge_slave_1: left promiscuous mode [ 377.368935][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.482830][ T1172] bridge_slave_0: left allmulticast mode [ 377.482859][ T1172] bridge_slave_0: left promiscuous mode [ 377.487094][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.634567][ T1172] bridge_slave_1: left allmulticast mode [ 377.634596][ T1172] bridge_slave_1: left promiscuous mode [ 377.634861][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.782917][ T1172] bridge_slave_0: left allmulticast mode [ 377.782947][ T1172] bridge_slave_0: left promiscuous mode [ 377.783269][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.884216][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.884260][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.433255][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 379.433281][ T8088] netlink: 'syz.1.633': attribute type 20 has an invalid length. [ 379.433289][ T8088] netlink: 'syz.1.633': attribute type 21 has an invalid length. [ 382.247799][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.340286][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.360878][ T1172] bond0 (unregistering): Released all slaves [ 383.877555][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.957541][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.981395][ T1172] bond0 (unregistering): Released all slaves [ 384.293000][ T1172] tipc: Disabling bearer [ 384.293505][ T1172] tipc: Left network mode [ 384.712333][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 384.712459][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 384.714434][ T8116] netlink: 'syz.0.638': attribute type 6 has an invalid length. [ 384.974485][ T1172] tipc: Disabling bearer [ 384.974763][ T1172] tipc: Left network mode [ 385.125332][ T7726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.408538][ T8120] Invalid source name [ 385.408554][ T8120] UBIFS error (pid: 8120): cannot open "./file0", error -22 [ 386.422017][ T7726] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.592732][ T2203] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.592878][ T2203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.000502][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.000635][ T7409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.056055][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.874352][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 388.874403][ T8155] netlink: 'syz.1.645': attribute type 20 has an invalid length. [ 388.874416][ T8155] netlink: 'syz.1.645': attribute type 21 has an invalid length. [ 389.200406][ T8160] Invalid source name [ 389.200428][ T8160] UBIFS error (pid: 8160): cannot open "./file0", error -22 [ 390.206593][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.490842][ T1172] hsr_slave_0: left promiscuous mode [ 390.507734][ T1172] hsr_slave_1: left promiscuous mode [ 390.509282][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.509313][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.561008][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.561034][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.747128][ T1172] hsr_slave_0: left promiscuous mode [ 390.767233][ T1172] hsr_slave_1: left promiscuous mode [ 390.769178][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.769203][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.820796][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.820824][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.010502][ T8168] Invalid source name [ 391.010520][ T8168] UBIFS error (pid: 8168): cannot open "./file0", error -22 [ 391.104133][ T1172] veth1_macvtap: left promiscuous mode [ 391.104249][ T1172] veth0_macvtap: left promiscuous mode [ 391.104550][ T1172] veth1_vlan: left promiscuous mode [ 391.104734][ T1172] veth0_vlan: left promiscuous mode [ 391.287319][ T1172] veth1_macvtap: left promiscuous mode [ 391.287434][ T1172] veth0_macvtap: left promiscuous mode [ 391.287707][ T1172] veth1_vlan: left promiscuous mode [ 391.289933][ T1172] veth0_vlan: left promiscuous mode [ 394.721100][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 394.930016][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 395.458207][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.478631][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.480290][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.495866][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.496988][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.672572][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 395.690515][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 395.691823][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 395.693444][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 395.694627][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 395.950871][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 395.964672][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 395.995635][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 396.038800][ T5812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 396.040611][ T5812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 397.590587][ T5807] Bluetooth: hci3: command tx timeout [ 397.835320][ T5807] Bluetooth: hci6: command tx timeout [ 398.151134][ T5807] Bluetooth: hci7: command tx timeout [ 399.487708][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 399.667315][ T5807] Bluetooth: hci3: command tx timeout [ 399.697773][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 399.907193][ T5807] Bluetooth: hci6: command tx timeout [ 400.227459][ T5807] Bluetooth: hci7: command tx timeout [ 401.747038][ T5807] Bluetooth: hci3: command tx timeout [ 401.987141][ T5807] Bluetooth: hci6: command tx timeout [ 401.990572][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.009580][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.307360][ T5807] Bluetooth: hci7: command tx timeout [ 403.836987][ T5807] Bluetooth: hci3: command tx timeout [ 404.076978][ T5807] Bluetooth: hci6: command tx timeout [ 404.387065][ T5807] Bluetooth: hci7: command tx timeout [ 406.191698][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 406.191732][ T8211] netlink: 'syz.1.655': attribute type 20 has an invalid length. [ 406.191745][ T8211] netlink: 'syz.1.655': attribute type 21 has an invalid length. [ 407.246684][ T8216] netlink: 52 bytes leftover after parsing attributes in process `syz.0.658'. [ 411.087229][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.379830][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 411.379867][ T8263] netlink: 'syz.1.665': attribute type 20 has an invalid length. [ 411.379880][ T8263] netlink: 'syz.1.665': attribute type 21 has an invalid length. [ 411.559605][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 411.975643][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.177867][ T8279] netlink: 52 bytes leftover after parsing attributes in process `syz.1.667'. [ 412.257319][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 412.298186][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 412.794841][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.576981][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.160791][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.047429][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.191012][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.326712][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.328782][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.329062][ T8187] bridge_slave_0: entered allmulticast mode [ 415.334665][ T8187] bridge_slave_0: entered promiscuous mode [ 415.407947][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.408138][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.408356][ T8187] bridge_slave_1: entered allmulticast mode [ 415.411180][ T8187] bridge_slave_1: entered promiscuous mode [ 415.511873][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.789533][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 415.797092][ T1810] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 415.868814][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 415.947016][ T1810] usb 1-1: Using ep0 maxpacket: 32 [ 415.962928][ T1810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.962950][ T1810] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.965834][ T1810] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 415.965865][ T1810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.965883][ T1810] usb 1-1: Product: syz [ 415.965895][ T1810] usb 1-1: Manufacturer: syz [ 415.965907][ T1810] usb 1-1: SerialNumber: syz [ 416.005148][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 416.013317][ T1810] usb 1-1: config 0 descriptor?? [ 416.242695][ T5892] usb 1-1: USB disconnect, device number 9 [ 416.331627][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.440083][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.440258][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.440463][ T8191] bridge_slave_0: entered allmulticast mode [ 416.442840][ T8191] bridge_slave_0: entered promiscuous mode [ 416.445429][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.445556][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.445747][ T8193] bridge_slave_0: entered allmulticast mode [ 416.450718][ T8193] bridge_slave_0: entered promiscuous mode [ 416.466141][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.469451][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.469575][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.469806][ T8191] bridge_slave_1: entered allmulticast mode [ 416.472894][ T8191] bridge_slave_1: entered promiscuous mode [ 416.474135][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.474330][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.474522][ T8193] bridge_slave_1: entered allmulticast mode [ 416.479312][ T8193] bridge_slave_1: entered promiscuous mode [ 416.484223][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.042245][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.063427][ T8333] input: syz1 as /devices/virtual/input/input9 [ 417.410067][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.285663][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.367403][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.508132][ T8333] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 418.705890][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.722638][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.549901][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.625637][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.029040][ T8187] team0: Port device team_slave_0 added [ 420.082733][ T8334] gretap1: entered allmulticast mode [ 420.115761][ T8334] bond1: (slave gretap1): making interface the new active one [ 420.138799][ T8334] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 420.151522][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.191265][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.201552][ T8187] team0: Port device team_slave_1 added [ 420.858829][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.204077][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.273186][ T8191] team0: Port device team_slave_0 added [ 421.281935][ T8193] team0: Port device team_slave_0 added [ 421.345872][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.345888][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.345910][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.394799][ T8191] team0: Port device team_slave_1 added [ 421.402719][ T8193] team0: Port device team_slave_1 added [ 421.406554][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.406567][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.406589][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.620916][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.866869][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.208802][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.208818][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.208839][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.211366][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.211379][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.211402][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.429527][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.567669][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.567684][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.567707][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.587816][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.587831][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.587853][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.636801][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.618221][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.824872][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.042595][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.090171][ T8187] hsr_slave_0: entered promiscuous mode [ 425.091556][ T8187] hsr_slave_1: entered promiscuous mode [ 425.845905][ T8191] hsr_slave_0: entered promiscuous mode [ 425.855537][ T8191] hsr_slave_1: entered promiscuous mode [ 425.856230][ T8191] debugfs: 'hsr0' already exists in 'hsr' [ 425.856253][ T8191] Cannot create hsr debugfs directory [ 425.870065][ T8193] hsr_slave_0: entered promiscuous mode [ 425.871582][ T8193] hsr_slave_1: entered promiscuous mode [ 425.872672][ T8193] debugfs: 'hsr0' already exists in 'hsr' [ 425.872696][ T8193] Cannot create hsr debugfs directory [ 426.397785][ T1237] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 426.761815][ T1237] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.761899][ T1237] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 426.892273][ T1237] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.892303][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.892320][ T1237] usb 1-1: Product: syz [ 426.892379][ T1237] usb 1-1: Manufacturer: syz [ 426.892392][ T1237] usb 1-1: SerialNumber: syz [ 427.858728][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.181668][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.338040][ T1237] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 428.525121][ T1237] usb 1-1: USB disconnect, device number 10 [ 428.665104][ T8206] udevd[8206]: setting owner of /dev/bus/usb/001/010 to uid=0, gid=0 failed: No such file or directory [ 429.057998][ T1237] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 429.277047][ T1237] usb 1-1: Using ep0 maxpacket: 8 [ 429.344690][ T1237] usb 1-1: device descriptor read/all, error -71 [ 431.537117][ T5809] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 431.690937][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.690978][ T5809] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 431.700875][ T5809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.700902][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.700919][ T5809] usb 1-1: Product: syz [ 431.700931][ T5809] usb 1-1: Manufacturer: syz [ 431.700943][ T5809] usb 1-1: SerialNumber: syz [ 431.932976][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.933785][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.980822][ T5809] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 432.017352][ T5809] usb 1-1: USB disconnect, device number 13 [ 432.747214][ T5809] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 432.935300][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 432.938948][ T5809] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 432.938972][ T5809] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 432.939018][ T5809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.939037][ T5809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.939058][ T5809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 432.939078][ T5809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.939113][ T5809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.939131][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.156506][ T5809] usb 1-1: usb_control_msg returned -32 [ 433.156552][ T5809] usbtmc 1-1:16.0: can't read capabilities [ 433.174317][ T5809] usb 1-1: USB disconnect, device number 14 [ 433.247445][ T5939] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 433.410422][ T5939] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.410453][ T5939] usb 2-1: config 0 interface 0 has no altsetting 0 [ 433.412908][ T5939] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 433.412939][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 433.412949][ T5939] usb 2-1: Product: syz [ 433.412956][ T5939] usb 2-1: Manufacturer: syz [ 433.412963][ T5939] usb 2-1: SerialNumber: syz [ 433.417690][ T5939] usb 2-1: config 0 descriptor?? [ 433.453761][ T5939] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 433.516142][ T8206] udevd[8206]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.701337][ T8472] netlink: 60 bytes leftover after parsing attributes in process `syz.0.713'. [ 436.173040][ T5939] usb 2-1: USB disconnect, device number 7 [ 437.633664][ T1172] bridge_slave_1: left allmulticast mode [ 437.633690][ T1172] bridge_slave_1: left promiscuous mode [ 437.633945][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.735737][ T1172] bridge_slave_0: left allmulticast mode [ 437.735764][ T1172] bridge_slave_0: left promiscuous mode [ 437.736045][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.831011][ T1172] bridge_slave_1: left allmulticast mode [ 437.831036][ T1172] bridge_slave_1: left promiscuous mode [ 437.831220][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.836974][ T1810] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 437.991474][ T1810] usb 2-1: config 0 has no interfaces? [ 437.994470][ T1810] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.994495][ T1810] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 437.994513][ T1810] usb 2-1: Product: syz [ 437.994525][ T1810] usb 2-1: Manufacturer: syz [ 437.994537][ T1810] usb 2-1: SerialNumber: syz [ 438.106593][ T1810] usb 2-1: config 0 descriptor?? [ 438.159248][ T1172] bridge_slave_0: left allmulticast mode [ 438.159276][ T1172] bridge_slave_0: left promiscuous mode [ 438.159519][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.249913][ T1172] bridge_slave_1: left allmulticast mode [ 438.249943][ T1172] bridge_slave_1: left promiscuous mode [ 438.250176][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.341630][ T1172] bridge_slave_0: left allmulticast mode [ 438.341659][ T1172] bridge_slave_0: left promiscuous mode [ 438.341957][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.782749][ T1810] usb 2-1: USB disconnect, device number 8 [ 440.721799][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.722912][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.928700][ T8523] fuse: Unknown parameter '0x000000000000000b' [ 442.757088][ T8527] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 443.117820][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.177624][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.201703][ T1172] bond0 (unregistering): Released all slaves [ 444.637700][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.728469][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.790700][ T1172] bond0 (unregistering): Released all slaves [ 445.497664][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.567972][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.630404][ T1172] bond0 (unregistering): Released all slaves [ 446.667016][ T43] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 446.839205][ T43] usb 2-1: config 0 has no interfaces? [ 446.846540][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.846566][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.846584][ T43] usb 2-1: Product: syz [ 446.846596][ T43] usb 2-1: Manufacturer: syz [ 446.846609][ T43] usb 2-1: SerialNumber: syz [ 446.854929][ T43] usb 2-1: config 0 descriptor?? [ 446.909394][ T1172] hsr_slave_0: left promiscuous mode [ 446.978790][ T1172] hsr_slave_1: left promiscuous mode [ 446.979744][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.040452][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.247047][ T1172] hsr_slave_0: left promiscuous mode [ 447.287010][ T1172] hsr_slave_1: left promiscuous mode [ 447.287992][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.338425][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.515339][ T5939] usb 2-1: USB disconnect, device number 9 [ 447.567095][ T1172] hsr_slave_0: left promiscuous mode [ 447.607067][ T1172] hsr_slave_1: left promiscuous mode [ 447.609221][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.650131][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.958524][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'. [ 449.515879][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 449.758718][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 450.430515][ T8580] fuse: Unknown parameter '0x000000000000000b' [ 453.108069][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 453.227791][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 455.137928][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 455.317776][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 455.504856][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.516701][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.527074][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.572131][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.572896][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.923390][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.939975][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.944440][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.980593][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.981590][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.219280][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.228882][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.230147][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.248575][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.277122][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.119056][ T5892] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 457.279372][ T5892] usb 1-1: config 0 has no interfaces? [ 457.282388][ T5892] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.282412][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 457.282429][ T5892] usb 1-1: Product: syz [ 457.282440][ T5892] usb 1-1: Manufacturer: syz [ 457.282453][ T5892] usb 1-1: SerialNumber: syz [ 457.456770][ T5892] usb 1-1: config 0 descriptor?? [ 457.667924][ T5807] Bluetooth: hci0: command tx timeout [ 458.067027][ T5807] Bluetooth: hci2: command tx timeout [ 458.312346][ T5807] Bluetooth: hci5: command tx timeout [ 458.387070][ T5809] usb 1-1: USB disconnect, device number 15 [ 459.223589][ T8588] chnl_net:caif_netlink_parms(): no params data found [ 459.727386][ T8583] chnl_net:caif_netlink_parms(): no params data found [ 459.746976][ T5807] Bluetooth: hci0: command tx timeout [ 460.708753][ T5807] Bluetooth: hci2: command tx timeout [ 460.889299][ T5807] Bluetooth: hci5: command tx timeout [ 461.617163][ T5809] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 461.727503][ T8590] chnl_net:caif_netlink_parms(): no params data found [ 461.784081][ T5809] usb 2-1: config 0 has no interfaces? [ 461.797392][ T5809] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 461.797419][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 461.797436][ T5809] usb 2-1: Product: syz [ 461.797454][ T5809] usb 2-1: Manufacturer: syz [ 461.797467][ T5809] usb 2-1: SerialNumber: syz [ 461.806255][ T5809] usb 2-1: config 0 descriptor?? [ 461.827329][ T5807] Bluetooth: hci0: command tx timeout [ 462.383081][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.383263][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.383481][ T8588] bridge_slave_0: entered allmulticast mode [ 462.397099][ T8588] bridge_slave_0: entered promiscuous mode [ 462.561874][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.562011][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.562266][ T8588] bridge_slave_1: entered allmulticast mode [ 462.577335][ T8588] bridge_slave_1: entered promiscuous mode [ 462.796878][ T5807] Bluetooth: hci2: command tx timeout [ 462.947475][ T5807] Bluetooth: hci5: command tx timeout [ 463.234236][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.234313][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.234453][ T8583] bridge_slave_0: entered allmulticast mode [ 463.236079][ T8583] bridge_slave_0: entered promiscuous mode [ 463.907386][ T5807] Bluetooth: hci0: command tx timeout [ 463.963342][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.963425][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.963572][ T8583] bridge_slave_1: entered allmulticast mode [ 463.965321][ T8583] bridge_slave_1: entered promiscuous mode [ 464.234239][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.419090][ T5809] usb 2-1: USB disconnect, device number 10 [ 464.431348][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.460094][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.460302][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.463751][ T8590] bridge_slave_0: entered allmulticast mode [ 464.466588][ T8590] bridge_slave_0: entered promiscuous mode [ 464.747540][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.747693][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.747938][ T8590] bridge_slave_1: entered allmulticast mode [ 464.757039][ T8590] bridge_slave_1: entered promiscuous mode [ 464.789951][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.958296][ T5807] Bluetooth: hci2: command tx timeout [ 465.027227][ T5807] Bluetooth: hci5: command tx timeout [ 465.157726][ T8698] hub 9-0:1.0: USB hub found [ 465.180795][ T8698] hub 9-0:1.0: 1 port detected [ 465.595803][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.630760][ T8696] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 465.633446][ T8696] team0: Port device batadv1 added [ 465.639306][ T8588] team0: Port device team_slave_0 added [ 465.842524][ T8588] team0: Port device team_slave_1 added [ 466.194092][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.382642][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.385528][ T8583] team0: Port device team_slave_0 added [ 466.400841][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.400857][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.400880][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.540256][ T8583] team0: Port device team_slave_1 added [ 466.542263][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.542276][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.542303][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.416314][ T8590] team0: Port device team_slave_0 added [ 468.319683][ T8590] team0: Port device team_slave_1 added [ 468.468789][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.468806][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.468831][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.919683][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.919698][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.919720][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.974548][ T8588] hsr_slave_0: entered promiscuous mode [ 469.976008][ T8588] hsr_slave_1: entered promiscuous mode [ 469.977585][ T8588] debugfs: 'hsr0' already exists in 'hsr' [ 469.977609][ T8588] Cannot create hsr debugfs directory [ 470.001075][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.001095][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.001120][ T8590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.016317][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.016334][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.016358][ T8590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.567148][ T1237] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 470.664773][ T8583] hsr_slave_0: entered promiscuous mode [ 470.666427][ T8583] hsr_slave_1: entered promiscuous mode [ 470.668709][ T8583] debugfs: 'hsr0' already exists in 'hsr' [ 470.668734][ T8583] Cannot create hsr debugfs directory [ 470.740651][ T1237] usb 2-1: config 0 has no interfaces? [ 470.754694][ T1237] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.754722][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 470.754740][ T1237] usb 2-1: Product: syz [ 470.754753][ T1237] usb 2-1: Manufacturer: syz [ 470.754765][ T1237] usb 2-1: SerialNumber: syz [ 470.791698][ T1237] usb 2-1: config 0 descriptor?? [ 471.102010][ T8590] hsr_slave_0: entered promiscuous mode [ 471.103492][ T8590] hsr_slave_1: entered promiscuous mode [ 471.104476][ T8590] debugfs: 'hsr0' already exists in 'hsr' [ 471.104500][ T8590] Cannot create hsr debugfs directory [ 474.117878][ T31] usb 2-1: USB disconnect, device number 11 [ 474.264243][ T1172] bridge_slave_1: left allmulticast mode [ 474.264270][ T1172] bridge_slave_1: left promiscuous mode [ 474.264541][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.341446][ T1172] bridge_slave_0: left allmulticast mode [ 474.341482][ T1172] bridge_slave_0: left promiscuous mode [ 474.361733][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.386434][ T8775] hub 9-0:1.0: USB hub found [ 474.386822][ T8775] hub 9-0:1.0: 1 port detected [ 474.463304][ T1172] bridge_slave_1: left allmulticast mode [ 474.463332][ T1172] bridge_slave_1: left promiscuous mode [ 474.466500][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.563321][ T1172] bridge_slave_0: left allmulticast mode [ 474.563341][ T1172] bridge_slave_0: left promiscuous mode [ 474.563606][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.823282][ T1172] bridge_slave_1: left allmulticast mode [ 474.823310][ T1172] bridge_slave_1: left promiscuous mode [ 474.823554][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.758446][ T1172] bridge_slave_0: left allmulticast mode [ 475.758476][ T1172] bridge_slave_0: left promiscuous mode [ 475.758723][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.952319][ T8791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.767'. [ 477.892376][ T8795] netlink: 'syz.1.768': attribute type 17 has an invalid length. [ 477.892483][ T8795] netlink: 5 bytes leftover after parsing attributes in process `syz.1.768'. [ 478.380476][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.457839][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.530135][ T1172] bond0 (unregistering): Released all slaves [ 478.740064][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.828319][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.899123][ T1172] bond0 (unregistering): Released all slaves [ 479.097689][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.177911][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.239256][ T1172] bond0 (unregistering): Released all slaves [ 479.267177][ T8795] macvtap0: entered allmulticast mode [ 479.267191][ T8795] veth0_macvtap: entered allmulticast mode [ 479.268508][ T8795] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 479.406072][ T8588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.486372][ T8588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.126446][ T8588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 481.369959][ T8588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 481.427074][ T992] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 482.449468][ T992] usb 1-1: config 0 has no interfaces? [ 482.483381][ T992] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.483409][ T992] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.483427][ T992] usb 1-1: Product: syz [ 482.483438][ T992] usb 1-1: Manufacturer: syz [ 482.483450][ T992] usb 1-1: SerialNumber: syz [ 482.547249][ T992] usb 1-1: config 0 descriptor?? [ 482.687145][ T1172] hsr_slave_0: left promiscuous mode [ 482.707740][ T1172] hsr_slave_1: left promiscuous mode [ 482.708394][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.730312][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.887374][ T1172] hsr_slave_0: left promiscuous mode [ 482.906989][ T1172] hsr_slave_1: left promiscuous mode [ 482.907960][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.930299][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.047644][ T1172] hsr_slave_0: left promiscuous mode [ 483.067269][ T1172] hsr_slave_1: left promiscuous mode [ 483.068209][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.119617][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.787811][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 483.908865][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 484.469915][ T31] usb 1-1: USB disconnect, device number 16 [ 484.888460][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 484.927153][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 485.017735][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 485.093098][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.093140][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 485.095522][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.095546][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.095564][ T31] usb 1-1: Product: syz [ 485.095577][ T31] usb 1-1: Manufacturer: syz [ 485.095586][ T31] usb 1-1: SerialNumber: syz [ 485.403529][ T8825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.406585][ T8825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.508923][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 485.514916][ T31] usb 1-1: USB disconnect, device number 17 [ 485.937149][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 486.027722][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 486.087163][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 486.092437][ T31] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 486.092464][ T31] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 486.092511][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.092533][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.092555][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 486.092579][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 486.092603][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 486.092643][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 486.092665][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.197866][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 486.395453][ T31] usb 1-1: usb_control_msg returned -32 [ 486.395500][ T31] usbtmc 1-1:16.0: can't read capabilities [ 486.427474][ T31] usb 1-1: USB disconnect, device number 18 [ 487.421139][ T8588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.646493][ T8588] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.962771][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.964036][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.965072][ T8590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 488.008006][ T8590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 488.100293][ T8590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 489.284963][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.285167][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.950816][ T8590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 490.935875][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 490.935898][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.782'. [ 491.185970][ T8583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.604821][ T8583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 493.436167][ T8583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 493.540487][ T8583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 495.897110][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 495.897135][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.790'. [ 496.033056][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.326555][ T8903] Invalid source name [ 496.326580][ T8903] UBIFS error (pid: 8903): cannot open "./file0", error -22 [ 496.523358][ T8908] random: crng reseeded on system resumption [ 496.595849][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.667677][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.677218][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.724248][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.746639][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.751839][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.751982][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.888760][ T8583] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.966627][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.968968][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.014473][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.014629][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.494720][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 497.494743][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.798'. [ 497.943527][ T8590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.944297][ T8588] veth0_vlan: entered promiscuous mode [ 498.610527][ T8588] veth1_vlan: entered promiscuous mode [ 498.704464][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.788257][ T8588] veth0_macvtap: entered promiscuous mode [ 498.818319][ T8588] veth1_macvtap: entered promiscuous mode [ 498.875052][ T8948] Invalid source name [ 498.875068][ T8948] UBIFS error (pid: 8948): cannot open "./file0", error -22 [ 498.947219][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.990851][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.084391][ T3572] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.085589][ T3572] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.086611][ T3572] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.086650][ T3572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.578746][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.578765][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.682527][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 501.682548][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.807'. [ 501.754382][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.754445][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.804974][ T2203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.804993][ T2203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.939998][ T8590] veth0_vlan: entered promiscuous mode [ 502.008898][ T8590] veth1_vlan: entered promiscuous mode [ 502.098755][ T8583] veth0_vlan: entered promiscuous mode [ 502.147500][ T8583] veth1_vlan: entered promiscuous mode [ 502.163041][ T8995] Invalid source name [ 502.163057][ T8995] UBIFS error (pid: 8995): cannot open "./file0", error -22 [ 502.181338][ T8999] binder: 8997:8999 ioctl c0306201 200000000540 returned -22 [ 502.446064][ T8590] veth0_macvtap: entered promiscuous mode [ 502.500834][ T8590] veth1_macvtap: entered promiscuous mode [ 503.336975][ T5812] Bluetooth: hci5: command 0x0405 tx timeout [ 503.455270][ T8583] veth0_macvtap: entered promiscuous mode [ 503.516179][ T8583] veth1_macvtap: entered promiscuous mode [ 503.556565][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.627407][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.843223][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.843904][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.351028][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.393879][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.396737][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.428872][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.437037][ T992] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 504.593506][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 504.593527][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.817'. [ 504.608149][ T992] usb 6-1: Using ep0 maxpacket: 32 [ 504.630407][ T992] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 504.630433][ T992] usb 6-1: config 0 has no interface number 0 [ 504.640681][ T1111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.652807][ T1111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.665538][ T992] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 504.665566][ T992] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 504.665583][ T992] usb 6-1: Product: syz [ 504.665596][ T992] usb 6-1: Manufacturer: syz [ 504.874894][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.893736][ T992] usb 6-1: config 0 descriptor?? [ 504.922135][ T1111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.642023][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.659248][ T992] usb 6-1: USB disconnect, device number 2 [ 505.717671][ T1111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.038073][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.233471][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.266315][ T9040] Invalid source name [ 506.266330][ T9040] UBIFS error (pid: 9040): cannot open "./file0", error -22 [ 507.289548][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.315493][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.347211][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.347231][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.557851][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 507.557873][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.5.826'. [ 508.353457][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.353487][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.546286][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.546305][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.696208][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.696227][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.080785][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.876214][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.104243][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.632845][ T9087] Invalid source name [ 511.632861][ T9087] UBIFS error (pid: 9087): cannot open "./file0", error -22 [ 511.682863][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.183993][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.444925][ T9105] fuse: Unknown parameter '0x000000000000000b' [ 513.162129][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.543085][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.429910][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.466810][ T9137] Invalid source name [ 516.466821][ T9137] UBIFS error (pid: 9137): cannot open "./file0", error -22 [ 516.608914][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.081130][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.599592][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.720448][ T9156] fuse: Unknown parameter '0x000000000000000b' [ 517.721292][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.239940][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.368858][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.678137][ T9173] overlayfs: failed to resolve './file1': -2 [ 523.052808][ T9204] fuse: Unknown parameter '0x000000000000000c' [ 525.137416][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 526.982224][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.212231][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.920865][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.083587][ T1810] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 528.237031][ T1810] usb 2-1: Using ep0 maxpacket: 32 [ 528.239495][ T1810] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 528.239520][ T1810] usb 2-1: config 0 has no interface number 0 [ 528.239564][ T1810] usb 2-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.239582][ T1810] usb 2-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 528.239604][ T1810] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 528.239625][ T1810] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 528.239647][ T1810] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 528.239667][ T1810] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 528.239687][ T1810] usb 2-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.241948][ T1810] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 528.241965][ T1810] usb 2-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 528.241974][ T1810] usb 2-1: Product: syz [ 528.241981][ T1810] usb 2-1: Manufacturer: syz [ 528.241988][ T1810] usb 2-1: SerialNumber: syz [ 528.249337][ T1810] usb 2-1: config 0 descriptor?? [ 528.250526][ T9230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.270191][ T1810] spcp8x5 2-1:0.110: SPCP8x5 converter detected [ 528.936117][ T1810] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 528.976277][ T1810] usb 2-1: USB disconnect, device number 12 [ 529.077394][ T1810] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 529.079166][ T1810] spcp8x5 2-1:0.110: device disconnected [ 529.619920][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.877'. [ 530.137013][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.496362][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.566566][ T9268] random: crng reseeded on system resumption [ 533.457584][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.889'. [ 533.486991][ T5809] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 533.502521][ T9310] binder: 9309:9310 ioctl c0306201 200000000540 returned -22 [ 533.935870][ T9314] binder: 9309:9314 ioctl c0306201 200000000640 returned -22 [ 534.077056][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 534.092453][ T5809] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 534.092477][ T5809] usb 2-1: config 0 has no interface number 0 [ 534.092522][ T5809] usb 2-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.092541][ T5809] usb 2-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 534.092565][ T5809] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 534.092589][ T5809] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 534.092611][ T5809] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 534.092630][ T5809] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 534.092650][ T5809] usb 2-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 534.210547][ T5809] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 534.210576][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 534.210594][ T5809] usb 2-1: Product: syz [ 534.210607][ T5809] usb 2-1: Manufacturer: syz [ 534.210619][ T5809] usb 2-1: SerialNumber: syz [ 534.295627][ T5809] usb 2-1: config 0 descriptor?? [ 534.305374][ T9303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 534.374560][ T5809] spcp8x5 2-1:0.110: SPCP8x5 converter detected [ 534.391103][ T5813] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 534.530136][ T5809] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 534.550642][ T5809] usb 2-1: USB disconnect, device number 13 [ 534.567840][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 534.571426][ T5813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 534.572754][ T5813] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 534.572776][ T5813] usb 1-1: config 7 has no interface number 0 [ 534.572823][ T5813] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 534.572843][ T5813] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 534.572864][ T5813] usb 1-1: config 7 interface 187 has no altsetting 0 [ 534.576793][ T5813] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 534.576817][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.590159][ T5813] usb 1-1: Product: syz [ 534.590179][ T5813] usb 1-1: Manufacturer: syz [ 534.590192][ T5813] usb 1-1: SerialNumber: syz [ 534.727910][ T5809] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 534.728949][ T5809] spcp8x5 2-1:0.110: device disconnected [ 534.907387][ T9312] loop2: detected capacity change from 0 to 7 [ 534.954623][ T9312] Dev loop2: unable to read RDB block 7 [ 534.954674][ T9312] loop2: unable to read partition table [ 534.954819][ T9312] loop2: partition table beyond EOD, truncated [ 534.954840][ T9312] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 535.021663][ T5813] usb 1-1: Cannot retrieve CPort count: -71 [ 535.021693][ T5813] usb 1-1: Cannot retrieve CPort count: -71 [ 535.021714][ T5813] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 535.060352][ T5813] usb 1-1: USB disconnect, device number 19 [ 535.115881][ T8610] udevd[8610]: setting mode of /dev/bus/usb/001/019 to 020664 failed: No such file or directory [ 535.129618][ T8610] udevd[8610]: setting owner of /dev/bus/usb/001/019 to uid=0, gid=0 failed: No such file or directory [ 535.273993][ T9326] random: crng reseeded on system resumption [ 538.132381][ T9356] random: crng reseeded on system resumption [ 539.332581][ T9375] binder: 9373:9375 ioctl c0306201 200000000540 returned -22 [ 539.389428][ T9378] overlayfs: failed to resolve './file1': -2 [ 539.392370][ T9381] binder: 9373:9381 ioctl c0306201 200000000640 returned -22 [ 539.411338][ T9374] macvlan2: entered promiscuous mode [ 539.411368][ T9374] macvlan2: entered allmulticast mode [ 539.411721][ T9374] veth0_to_bond: entered promiscuous mode [ 539.456818][ T9374] team0: Port device macvlan2 added [ 539.587162][ T5893] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 539.746989][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 539.749731][ T5893] usb 7-1: config 0 has an invalid interface number: 110 but max is 0 [ 539.749754][ T5893] usb 7-1: config 0 has no interface number 0 [ 539.749799][ T5893] usb 7-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.749825][ T5893] usb 7-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 539.749848][ T5893] usb 7-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 539.749871][ T5893] usb 7-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 539.749894][ T5893] usb 7-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 539.749914][ T5893] usb 7-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 539.749934][ T5893] usb 7-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.753394][ T5893] usb 7-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 539.753500][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 539.753519][ T5893] usb 7-1: Product: syz [ 539.753531][ T5893] usb 7-1: Manufacturer: syz [ 539.753544][ T5893] usb 7-1: SerialNumber: syz [ 540.533973][ T9389] tty tty2: ldisc open failed (-12), clearing slot 1 [ 540.567713][ T5893] usb 7-1: config 0 descriptor?? [ 540.569260][ T9379] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 540.594868][ T5893] spcp8x5 7-1:0.110: SPCP8x5 converter detected [ 540.612944][ T5893] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 540.802938][ T5893] usb 7-1: USB disconnect, device number 2 [ 540.867684][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 540.867727][ T9397] netlink: 'syz.1.910': attribute type 20 has an invalid length. [ 540.867741][ T9397] netlink: 'syz.1.910': attribute type 21 has an invalid length. [ 540.927337][ T5893] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 540.928246][ T5893] spcp8x5 7-1:0.110: device disconnected [ 544.693233][ T9438] overlayfs: failed to resolve './file1': -2 [ 545.735563][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.922'. [ 545.735598][ T9452] netlink: 'syz.6.922': attribute type 20 has an invalid length. [ 545.735611][ T9452] netlink: 'syz.6.922': attribute type 21 has an invalid length. [ 550.676776][ T9490] overlayfs: failed to resolve './file0': -2 [ 553.367944][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 553.367977][ T9511] netlink: 'syz.5.936': attribute type 20 has an invalid length. [ 553.367991][ T9511] netlink: 'syz.5.936': attribute type 21 has an invalid length. [ 554.012257][ T9519] netlink: 'syz.6.937': attribute type 17 has an invalid length. [ 554.012368][ T9519] netlink: 5 bytes leftover after parsing attributes in process `syz.6.937'. [ 554.019642][ T9519] macvtap0: entered allmulticast mode [ 554.019813][ T9519] veth0_macvtap: entered allmulticast mode [ 554.070459][ T9519] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 557.743979][ T9552] fuse: Unknown parameter '0x000000000000000c' [ 559.919755][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 559.919792][ T9568] netlink: 'syz.0.949': attribute type 20 has an invalid length. [ 559.919805][ T9568] netlink: 'syz.0.949': attribute type 21 has an invalid length. [ 563.000077][ T9597] fuse: Unknown parameter '0x000000000000000c' [ 564.388260][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.388332][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.026226][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 565.026259][ T9614] netlink: 'syz.0.965': attribute type 20 has an invalid length. [ 565.026272][ T9614] netlink: 'syz.0.965': attribute type 21 has an invalid length. [ 566.476266][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.961'. [ 570.041103][ T9661] fuse: Unknown parameter '0x000000000000000c' [ 570.839513][ T9660] veth0_to_team: entered promiscuous mode [ 570.839540][ T9660] veth0_to_team: entered allmulticast mode [ 571.306794][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 571.319658][ T9669] team0: Port device batadv2 added [ 571.527712][ T9669] hub 9-0:1.0: USB hub found [ 571.528791][ T9669] hub 9-0:1.0: 1 port detected [ 575.513748][ T9704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.513767][ T9704] IPv6: NLM_F_CREATE should be set when creating new route [ 578.815230][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.237020][ T5966] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 579.434982][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.711090][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.729391][ T5966] usb 7-1: config 0 has no interfaces? [ 579.734484][ T5966] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 579.734509][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 579.734527][ T5966] usb 7-1: Product: syz [ 579.734540][ T5966] usb 7-1: Manufacturer: syz [ 579.734553][ T5966] usb 7-1: SerialNumber: syz [ 579.904717][ T9750] fuse: Unknown parameter '0x000000000000000b' [ 579.908334][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.192970][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.459088][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.509274][ T5966] usb 7-1: config 0 descriptor?? [ 580.627127][ T9725] Bluetooth: hci0: command 0x0406 tx timeout [ 580.630357][ T9725] Bluetooth: hci2: command 0x0406 tx timeout [ 580.630387][ T9725] Bluetooth: hci5: command 0x0405 tx timeout [ 580.835079][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.7.997'. [ 583.736736][ T9767] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 583.766275][ T8998] usb 7-1: USB disconnect, device number 3 [ 583.890267][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 584.085699][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'. [ 584.086146][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 584.135703][ T9776] overlayfs: failed to resolve './file0': -2 [ 584.204672][ T9774] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 585.165012][ T9803] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 585.169724][ T9803] team0: Port device batadv1 added [ 585.673446][ T9807] hub 9-0:1.0: USB hub found [ 585.677701][ T9807] hub 9-0:1.0: 1 port detected [ 587.496188][ T9822] syzkaller0: entered promiscuous mode [ 587.496213][ T9822] syzkaller0: entered allmulticast mode [ 587.796978][ T1810] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 587.959968][ T1810] usb 8-1: config 0 has no interfaces? [ 587.973253][ T1810] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 587.975563][ T1810] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 587.975585][ T1810] usb 8-1: Product: syz [ 587.975597][ T1810] usb 8-1: Manufacturer: syz [ 587.975610][ T1810] usb 8-1: SerialNumber: syz [ 587.976163][ T9832] overlayfs: failed to resolve './file1': -2 [ 588.046610][ T1810] usb 8-1: config 0 descriptor?? [ 588.421738][ T9836] No control pipe specified [ 589.242361][ T9842] netlink: 'syz.1.1022': attribute type 17 has an invalid length. [ 589.242376][ T9842] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1022'. [ 591.019323][ T31] usb 8-1: USB disconnect, device number 2 [ 591.063557][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 591.157168][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 591.330204][ T9866] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 591.351993][ T9874] overlayfs: failed to resolve './file1': -2 [ 591.711172][ T9873] hub 9-0:1.0: USB hub found [ 591.711622][ T9873] hub 9-0:1.0: 1 port detected [ 591.896559][ T9887] No control pipe specified [ 592.122349][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 592.124554][ T9879] team0: Port device batadv1 added [ 593.225394][ T9892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 593.948936][ T37] audit: type=1326 audit(3911212503.584:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 593.949281][ T37] audit: type=1326 audit(3911212503.584:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 593.949452][ T37] audit: type=1326 audit(3911212503.584:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 593.949923][ T37] audit: type=1326 audit(3911212503.584:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 594.063156][ T37] audit: type=1326 audit(3911212503.584:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 594.063208][ T37] audit: type=1326 audit(3911212503.694:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 594.063248][ T37] audit: type=1326 audit(3911212503.694:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 594.063293][ T37] audit: type=1326 audit(3911212503.694:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 594.063331][ T37] audit: type=1326 audit(3911212503.694:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 594.106943][ T5893] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 594.187022][ T37] audit: type=1326 audit(3911212503.814:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9910 comm="syz.0.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 594.310977][ T5893] usb 2-1: config 0 has no interfaces? [ 594.313737][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 594.313762][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 594.313780][ T5893] usb 2-1: Product: syz [ 594.313788][ T5893] usb 2-1: Manufacturer: syz [ 594.313795][ T5893] usb 2-1: SerialNumber: syz [ 594.354128][ T5893] usb 2-1: config 0 descriptor?? [ 594.616816][ T9920] overlayfs: failed to resolve './file1': -2 [ 594.642470][ T9922] No control pipe specified [ 594.909813][ T9929] pim6reg: entered allmulticast mode [ 596.632401][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.275697][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.681889][ T9959] random: crng reseeded on system resumption [ 597.849629][ T5966] usb 2-1: USB disconnect, device number 14 [ 599.068800][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1061'. [ 599.179498][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 599.181199][ T9973] team0: Port device batadv1 added [ 600.347692][ T9973] hub 9-0:1.0: USB hub found [ 600.352271][ T9973] hub 9-0:1.0: 1 port detected [ 600.930996][T10001] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1066'. [ 603.650115][T10019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1074'. [ 603.650786][T10019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1074'. [ 604.156170][T10025] gfs2: not a GFS2 filesystem [ 605.527165][ T1810] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 605.781542][T10035] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1079'. [ 606.455697][ T1810] usb 2-1: device descriptor read/64, error -71 [ 606.642111][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 606.642126][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 606.696989][ T1810] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 606.827127][ T1810] usb 2-1: device descriptor read/64, error -71 [ 606.937325][ T1810] usb usb2-port1: attempt power cycle [ 606.987969][ T5809] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 607.339768][ T5809] usb 8-1: device descriptor read/64, error -71 [ 607.450738][T10052] fuse: Unknown parameter '0x000000000000000b' [ 609.879191][ T5809] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 610.486182][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1090'. [ 610.507174][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 610.507189][ T37] audit: type=1326 audit(3911212520.144:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10057 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 611.440142][ T37] audit: type=1326 audit(3911212521.064:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10057 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729409f749 code=0x7ffc0000 [ 615.601593][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 615.601617][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 615.715080][T10094] fuse: Unknown parameter '0x000000000000000c' [ 617.206971][ T5813] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 617.337064][ T5813] usb 8-1: device descriptor read/64, error -71 [ 617.490555][T10092] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 617.587141][ T5813] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 617.589832][ T8998] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 617.716968][ T5813] usb 8-1: device descriptor read/64, error -71 [ 617.717052][ T8998] usb 6-1: device descriptor read/64, error -71 [ 617.847052][ T5813] usb usb8-port1: attempt power cycle [ 617.967001][ T8998] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 618.136057][ T8998] usb 6-1: device descriptor read/64, error -71 [ 618.602414][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1104'. [ 619.054505][ T5813] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 619.059166][ T8998] usb usb6-port1: attempt power cycle [ 619.289634][ T5813] usb 8-1: device descriptor read/8, error -71 [ 619.560242][T10123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1107'. [ 619.671819][ T5813] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 621.621611][ T8998] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 622.357857][ T5813] usb 8-1: device descriptor read/8, error -71 [ 623.383558][ T5813] usb usb8-port1: unable to enumerate USB device [ 623.389196][ T8998] usb 6-1: device descriptor read/8, error -71 [ 623.415521][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 623.415534][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 623.809536][T10148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 623.809554][T10148] IPv6: NLM_F_CREATE should be set when creating new route [ 625.110624][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.110696][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.212568][T10158] fuse: Unknown parameter '0x000000000000000c' [ 626.458595][T10164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1116'. [ 627.811367][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.002752][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.150479][T10185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1120'. [ 630.390926][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.288101][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.021061][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1125'. [ 633.021085][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1125'. [ 633.624979][T10208] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1126'. [ 633.966629][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1127'. [ 635.812636][T10212] netlink: 'syz.7.1128': attribute type 1 has an invalid length. [ 636.893362][T10241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1139'. [ 637.574237][T10255] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1140'. [ 639.287102][T10270] 9pnet_fd: Insufficient options for proto=fd [ 641.326064][T10296] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1157'. [ 642.645097][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 642.645120][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'. [ 643.285704][T10314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1159'. [ 648.095994][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1169'. [ 648.097881][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1169'. [ 648.164137][T10341] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 648.927141][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1170'. [ 648.927156][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1170'. [ 649.613932][T10348] random: crng reseeded on system resumption [ 649.638617][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1171'. [ 649.996618][T10355] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1174'. [ 651.763161][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1180'. [ 651.767214][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1180'. [ 652.137092][ T1810] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 652.286224][T10387] random: crng reseeded on system resumption [ 652.292704][ T1810] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 652.292736][ T1810] usb 1-1: config 0 interface 0 has no altsetting 0 [ 652.296083][ T1810] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 652.296107][ T1810] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 652.296125][ T1810] usb 1-1: Product: syz [ 652.296137][ T1810] usb 1-1: Manufacturer: syz [ 652.296150][ T1810] usb 1-1: SerialNumber: syz [ 652.323177][ T1810] usb 1-1: config 0 descriptor?? [ 652.503410][ T1810] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 654.397469][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1187'. [ 654.886555][T10336] udevd[10336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.067858][ T1810] usb 1-1: USB disconnect, device number 20 [ 655.261773][T10401] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 655.261833][T10401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 655.996044][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1193'. [ 656.009306][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1193'. [ 656.656700][T10430] random: crng reseeded on system resumption [ 658.336175][T10455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 658.336234][T10455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 658.577094][T10459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'. [ 658.581927][T10459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'. [ 659.846969][ T1810] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 660.003629][ T1810] usb 1-1: Using ep0 maxpacket: 8 [ 660.006593][ T1810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.006639][ T1810] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 660.006661][ T1810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.042243][ T1810] usb 1-1: config 0 descriptor?? [ 660.309792][ T1810] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 660.982867][ T1810] usb 1-1: USB disconnect, device number 21 [ 661.400519][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1211'. [ 663.687797][T10498] overlayfs: missing 'lowerdir' [ 663.897087][ T1810] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 664.052073][ T1810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.052114][ T1810] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 664.055261][ T1810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.055287][ T1810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.055305][ T1810] usb 1-1: Product: syz [ 664.055317][ T1810] usb 1-1: Manufacturer: syz [ 664.055330][ T1810] usb 1-1: SerialNumber: syz [ 664.117332][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1218'. [ 664.117761][T10508] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1218'. [ 664.714928][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.715485][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.740887][ T1810] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 664.759169][ T1810] usb 1-1: USB disconnect, device number 22 [ 664.981842][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1221'. [ 664.981864][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 665.077054][ T5813] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 665.226928][ T5813] usb 8-1: Using ep0 maxpacket: 32 [ 665.229659][ T5813] usb 8-1: config 0 has an invalid interface number: 110 but max is 0 [ 665.229682][ T5813] usb 8-1: config 0 has no interface number 0 [ 665.229726][ T5813] usb 8-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 665.229747][ T5813] usb 8-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 665.229770][ T5813] usb 8-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 665.229794][ T5813] usb 8-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 665.229816][ T5813] usb 8-1: config 0 interface 110 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 665.229836][ T5813] usb 8-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 665.232867][ T5813] usb 8-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 665.232891][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 665.232908][ T5813] usb 8-1: Product: syz [ 665.232921][ T5813] usb 8-1: Manufacturer: syz [ 665.232933][ T5813] usb 8-1: SerialNumber: syz [ 665.249377][ T5813] usb 8-1: config 0 descriptor?? [ 665.250725][T10514] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 665.260265][ T5813] spcp8x5 8-1:0.110: required endpoints missing [ 665.266982][ T1810] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 665.466955][ T1810] usb 1-1: Using ep0 maxpacket: 8 [ 665.470686][ T1810] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 665.470711][ T1810] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 665.470757][ T1810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.470775][ T1810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.470793][ T1810] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 665.470815][ T1810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 665.470836][ T1810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 665.470868][ T1810] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.470905][ T1810] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 665.470924][ T1810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.497922][ T5813] usb 8-1: USB disconnect, device number 9 [ 665.683456][ T1810] usb 1-1: usb_control_msg returned -32 [ 665.683504][ T1810] usbtmc 1-1:16.0: can't read capabilities [ 665.722454][ T1810] usb 1-1: USB disconnect, device number 23 [ 666.008788][T10532] hub 9-0:1.0: USB hub found [ 666.017184][T10532] hub 9-0:1.0: 1 port detected [ 667.835120][T10543] overlayfs: missing 'lowerdir' [ 668.087940][T10537] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR [ 668.142116][T10550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1230'. [ 668.142558][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1230'. [ 668.745093][T10559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1234'. [ 669.497810][ T1810] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 669.698006][ T1810] usb 1-1: Using ep0 maxpacket: 32 [ 669.989559][ T1810] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 669.989586][ T1810] usb 1-1: config 0 has no interface number 0 [ 669.989624][ T1810] usb 1-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.989645][ T1810] usb 1-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 669.989667][ T1810] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 669.989688][ T1810] usb 1-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 669.989707][ T1810] usb 1-1: config 0 interface 110 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 669.989722][ T1810] usb 1-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.991504][ T3559] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.008483][ T1810] usb 1-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 670.008512][ T1810] usb 1-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 670.008530][ T1810] usb 1-1: Product: syz [ 670.008550][ T1810] usb 1-1: Manufacturer: syz [ 670.008564][ T1810] usb 1-1: SerialNumber: syz [ 670.219591][ T1810] usb 1-1: config 0 descriptor?? [ 670.227821][T10565] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 670.248259][ T1810] spcp8x5 1-1:0.110: required endpoints missing [ 670.421823][T10580] overlayfs: missing 'lowerdir' [ 670.462092][ T5813] usb 1-1: USB disconnect, device number 24 [ 670.665695][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 670.684626][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 670.707334][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 670.720966][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 670.721709][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.825117][ T3559] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.884407][ T3559] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.914503][T10600] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1247'. [ 671.925919][T10591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1244'. [ 671.958899][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1244'. [ 673.170833][ T9723] Bluetooth: hci2: command tx timeout [ 673.954687][ T3559] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.055688][T10616] hub 9-0:1.0: USB hub found [ 674.056066][T10616] hub 9-0:1.0: 1 port detected [ 676.262712][ T9723] Bluetooth: hci2: command tx timeout [ 677.179666][T10644] syzkaller0: entered promiscuous mode [ 677.179692][T10644] syzkaller0: entered allmulticast mode [ 677.324028][T10653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1260'. [ 677.728195][T10663] binder: 10662:10663 ioctl c0306201 200000000640 returned -22 [ 677.821147][T10583] chnl_net:caif_netlink_parms(): no params data found [ 678.025915][ T3559] bridge_slave_1: left allmulticast mode [ 678.025943][ T3559] bridge_slave_1: left promiscuous mode [ 678.026213][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.128062][ T3559] bridge_slave_0: left allmulticast mode [ 678.128091][ T3559] bridge_slave_0: left promiscuous mode [ 678.128355][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.150260][T10674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 678.150277][T10674] IPv6: NLM_F_CREATE should be set when creating new route [ 678.307223][ T9723] Bluetooth: hci2: command tx timeout [ 680.406889][ T9723] Bluetooth: hci2: command tx timeout [ 681.846272][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.878357][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.895278][T10699] binder: 10698:10699 ioctl c0306201 200000000640 returned -22 [ 682.063631][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.325181][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.374248][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.267576][ T3559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.327971][ T3559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.349733][ T3559] bond0 (unregistering): Released all slaves [ 683.427432][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.876136][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.975823][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.389597][T10735] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.452002][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.618270][T10749] binder: 10747:10749 ioctl c0306201 200000000640 returned -22 [ 685.659290][T10711] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 685.659481][T10711] syzkaller0: entered promiscuous mode [ 685.659501][T10711] syzkaller0: entered allmulticast mode [ 685.998045][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.106683][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.108223][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.402268][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.638700][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.008442][T10766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 690.872448][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.050372][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.102724][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.165453][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.243650][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.390810][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.391027][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.391290][T10583] bridge_slave_0: entered allmulticast mode [ 691.394065][T10583] bridge_slave_0: entered promiscuous mode [ 691.456349][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.456487][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.456738][T10583] bridge_slave_1: entered allmulticast mode [ 691.478583][T10583] bridge_slave_1: entered promiscuous mode [ 691.715554][T10799] binder: 10798:10799 ioctl c0306201 200000000640 returned -22 [ 691.803291][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.389022][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.796815][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.942977][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.943481][T10810] syzkaller0: entered promiscuous mode [ 692.943503][T10810] syzkaller0: entered allmulticast mode [ 693.131533][ T3559] hsr_slave_0: left promiscuous mode [ 693.167122][ T3559] hsr_slave_1: left promiscuous mode [ 693.167824][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.167841][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.197042][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.197070][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.318264][ T3559] veth1_macvtap: left promiscuous mode [ 693.318328][ T3559] veth0_macvtap: left promiscuous mode [ 693.318486][ T3559] veth1_vlan: left promiscuous mode [ 693.318586][ T3559] veth0_vlan: left promiscuous mode [ 693.657481][ T3559] pim6reg (unregistering): left allmulticast mode [ 693.738942][ T3559] team0 (unregistering): Port device batadv1 removed [ 694.142354][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.424828][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.525643][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.092139][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.211516][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.493001][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.900536][ T3559] team0 (unregistering): Port device team_slave_1 removed [ 696.172502][ T3559] team0 (unregistering): Port device team_slave_0 removed [ 698.882281][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.403961][T10583] team0: Port device team_slave_0 added [ 700.430684][T10583] team0: Port device team_slave_1 added [ 700.476062][T10844] binder: 10843:10844 ioctl c0306201 200000000640 returned -22 [ 700.567107][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 700.826495][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.826555][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 700.826577][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.841450][ T43] usb 1-1: config 0 descriptor?? [ 700.874385][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 700.914732][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.914747][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.914771][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.931387][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.931404][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.931428][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.083293][T10848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.292849][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 701.295631][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 701.298394][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 701.315964][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 701.325269][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 701.326350][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 701.347125][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 701.367730][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 701.372253][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 701.373126][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 701.373587][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 701.373938][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 701.374283][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 701.374926][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 701.375372][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 701.375890][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 701.488585][ T43] pwc: Registered as video103. [ 701.660431][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 701.818663][ T43] usb 1-1: USB disconnect, device number 25 [ 702.296420][T10865] bond1: entered promiscuous mode [ 702.296448][T10865] bond1: entered allmulticast mode [ 702.371507][T10583] hsr_slave_0: entered promiscuous mode [ 702.379199][T10583] hsr_slave_1: entered promiscuous mode [ 702.660990][T10880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1320'. [ 702.850387][T10887] syzkaller0: entered promiscuous mode [ 702.850404][T10887] syzkaller0: entered allmulticast mode [ 704.016540][T10895] binder: 10894:10895 ioctl c0306201 200000000640 returned -22 [ 704.832104][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 705.090883][T10909] bond1: entered promiscuous mode [ 705.090910][T10909] bond1: entered allmulticast mode [ 705.559181][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.203059][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.741660][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.056258][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.262507][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.505028][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.518292][T10935] binder: 10933:10935 ioctl c0306201 200000000640 returned -22 [ 707.697353][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.928252][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.291876][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.541806][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.939451][T10969] bond2: entered promiscuous mode [ 709.939478][T10969] bond2: entered allmulticast mode [ 712.778433][T11004] binder: 11002:11004 ioctl c0306201 200000000640 returned -22 [ 714.750840][T11021] bond2: entered promiscuous mode [ 714.750867][T11021] bond2: entered allmulticast mode [ 714.759332][T11022] syzkaller0: entered promiscuous mode [ 714.759356][T11022] syzkaller0: entered allmulticast mode [ 717.252557][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1358'. [ 717.513376][T10583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 717.727917][T11056] binder: 11055:11056 ioctl c0306201 200000000640 returned -22 [ 717.731928][T10583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.852428][T10583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 718.037715][T10583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 720.813922][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.942520][T10583] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.026796][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.180369][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.236154][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.254786][T10426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.221882][T11120] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 724.221934][T11120] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 724.230495][T11120] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 724.230545][T11120] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 724.605744][T11119] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 726.252501][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.798396][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1377'. [ 727.856035][T11158] bond2: entered promiscuous mode [ 727.856062][T11158] bond2: entered allmulticast mode [ 727.924682][T11160] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 728.492426][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1378'. [ 728.518259][T10583] veth0_vlan: entered promiscuous mode [ 728.543506][T10583] veth1_vlan: entered promiscuous mode [ 728.662481][T10583] veth0_macvtap: entered promiscuous mode [ 728.689879][T10583] veth1_macvtap: entered promiscuous mode [ 728.799144][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.811872][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.004368][ T5982] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.004853][ T5982] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.004938][ T5982] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.004974][ T5982] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.165156][ T1237] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 731.717584][ T1237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.717651][ T1237] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 731.717673][ T1237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.809134][ T1237] usb 2-1: config 0 descriptor?? [ 731.923135][ T1237] usb 2-1: can't set config #0, error -71 [ 731.959610][ T1237] usb 2-1: USB disconnect, device number 18 [ 732.718580][ T3572] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 733.099081][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 733.102298][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 733.104426][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 733.109196][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 733.115575][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 733.234548][T11201] hub 9-0:1.0: USB hub found [ 733.239398][T11201] hub 9-0:1.0: 1 port detected [ 733.846058][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 733.859268][T11217] bond1: entered promiscuous mode [ 733.859292][T11217] bond1: entered allmulticast mode [ 733.876989][ T8998] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 733.918668][T11219] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 734.069384][ T8998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.069441][ T8998] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 734.069466][ T8998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 734.072332][ T8998] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 734.072358][ T8998] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 734.072377][ T8998] usb 7-1: Product: syz [ 734.072390][ T8998] usb 7-1: Manufacturer: syz [ 734.072404][ T8998] usb 7-1: SerialNumber: syz [ 734.077648][ T8998] usb 7-1: config 0 descriptor?? [ 734.240728][ T8998] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 734.301081][T11142] udevd[11142]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.268042][ T9723] Bluetooth: hci3: command tx timeout [ 735.277138][ T1237] usb 7-1: USB disconnect, device number 4 [ 737.347009][ T9723] Bluetooth: hci3: command tx timeout [ 738.710409][ T5813] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 738.859874][ T5813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.859910][ T5813] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 738.859922][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.863313][ T5813] usb 1-1: config 0 descriptor?? [ 738.868756][ T5813] pwc: Askey VC010 type 2 USB webcam detected. [ 739.087614][ T3555] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.353699][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 739.355067][ T5813] pwc: recv_control_msg error -32 req 02 val 2700 [ 739.356173][ T5813] pwc: recv_control_msg error -32 req 02 val 2c00 [ 739.359796][ T5813] pwc: recv_control_msg error -32 req 04 val 1000 [ 739.391351][ T5813] pwc: recv_control_msg error -32 req 04 val 1300 [ 739.394300][ T5813] pwc: recv_control_msg error -32 req 04 val 1400 [ 739.395701][ T5813] pwc: recv_control_msg error -32 req 02 val 2000 [ 739.427067][ T9723] Bluetooth: hci3: command tx timeout [ 739.618180][ T5813] pwc: recv_control_msg error -71 req 04 val 1500 [ 739.618589][ T5813] pwc: recv_control_msg error -71 req 02 val 2500 [ 739.618970][ T5813] pwc: recv_control_msg error -71 req 02 val 2400 [ 739.619324][ T5813] pwc: recv_control_msg error -71 req 02 val 2600 [ 739.619695][ T5813] pwc: recv_control_msg error -71 req 02 val 2900 [ 739.620049][ T5813] pwc: recv_control_msg error -71 req 02 val 2800 [ 739.620554][ T5813] pwc: recv_control_msg error -71 req 04 val 1100 [ 739.620924][ T5813] pwc: recv_control_msg error -71 req 04 val 1200 [ 739.623632][ T5813] pwc: Registered as video103. [ 739.626292][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 739.710622][ T5813] usb 1-1: USB disconnect, device number 26 [ 740.742242][ T3555] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.145015][T11203] chnl_net:caif_netlink_parms(): no params data found [ 741.507265][ T9723] Bluetooth: hci3: command tx timeout [ 742.322376][ T3555] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.391594][ T3555] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.802275][T11284] serio: Serial port ptm0 [ 745.497845][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.497951][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.498188][T11203] bridge_slave_0: entered allmulticast mode [ 745.501126][T11203] bridge_slave_0: entered promiscuous mode [ 745.504909][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.505040][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.505173][T11203] bridge_slave_1: entered allmulticast mode [ 745.563895][T11203] bridge_slave_1: entered promiscuous mode [ 746.114269][T11203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.222877][ T43] IPVS: starting estimator thread 0... [ 746.332271][T11203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.347296][T11303] IPVS: using max 11 ests per chain, 26400 per kthread [ 747.087076][ T1237] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 747.208544][T11203] team0: Port device team_slave_0 added [ 747.239353][ T1237] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.239415][ T1237] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 747.239436][ T1237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.306278][ T1237] usb 7-1: config 0 descriptor?? [ 747.322715][ T1237] pwc: Askey VC010 type 2 USB webcam detected. [ 747.347820][T11203] team0: Port device team_slave_1 added [ 747.523308][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.523383][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.723419][ T1237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 747.724087][ T1237] pwc: recv_control_msg error -32 req 02 val 2700 [ 747.724643][ T1237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 747.725211][ T1237] pwc: recv_control_msg error -32 req 04 val 1000 [ 747.725702][ T1237] pwc: recv_control_msg error -32 req 04 val 1300 [ 747.726252][ T1237] pwc: recv_control_msg error -32 req 04 val 1400 [ 747.726740][ T1237] pwc: recv_control_msg error -32 req 02 val 2000 [ 747.928944][ T1237] pwc: recv_control_msg error -71 req 04 val 1500 [ 747.929418][ T1237] pwc: recv_control_msg error -71 req 02 val 2500 [ 747.929989][ T1237] pwc: recv_control_msg error -71 req 02 val 2400 [ 747.933389][ T1237] pwc: recv_control_msg error -71 req 02 val 2600 [ 747.933869][ T1237] pwc: recv_control_msg error -71 req 02 val 2900 [ 747.934421][ T1237] pwc: recv_control_msg error -71 req 02 val 2800 [ 747.935114][ T1237] pwc: recv_control_msg error -71 req 04 val 1100 [ 747.935575][ T1237] pwc: recv_control_msg error -71 req 04 val 1200 [ 747.957335][ T1237] pwc: Registered as video103. [ 747.960909][ T1237] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 748.970309][ T1237] usb 7-1: USB disconnect, device number 5 [ 749.013010][T11203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.013020][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.013037][T11203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.072059][T11203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.072075][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.072097][T11203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.267117][ T3555] bridge_slave_1: left allmulticast mode [ 749.267143][ T3555] bridge_slave_1: left promiscuous mode [ 749.272809][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.608983][ T3555] bridge_slave_0: left allmulticast mode [ 749.609013][ T3555] bridge_slave_0: left promiscuous mode [ 749.609274][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.783324][T11342] No control pipe specified [ 756.857943][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.937775][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.959631][ T3555] bond0 (unregistering): Released all slaves [ 757.094791][T11318] syzkaller0: entered promiscuous mode [ 757.094816][T11318] syzkaller0: entered allmulticast mode [ 757.123621][T11341] batadv_slave_0: entered promiscuous mode [ 757.126152][T11341] batman_adv: batadv0: Adding interface: macvtap1 [ 757.126163][T11341] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.126184][T11341] batman_adv: batadv0: Interface activated: macvtap1 [ 757.541477][T11362] random: crng reseeded on system resumption [ 758.533928][T11371] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 758.533953][T11371] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 758.534205][T11371] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 758.534223][T11371] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 758.544189][ T992] libceph: connect (1)[c::]:6789 error -101 [ 758.548546][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 758.730841][T11368] ceph: No mds server is up or the cluster is laggy [ 763.493600][T11404] random: crng reseeded on system resumption [ 763.600975][T11411] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 763.601028][T11411] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 763.607073][T11411] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 763.607124][T11411] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 764.132216][T11203] hsr_slave_0: entered promiscuous mode [ 764.133587][T11203] hsr_slave_1: entered promiscuous mode [ 764.134516][T11203] debugfs: 'hsr0' already exists in 'hsr' [ 764.134540][T11203] Cannot create hsr debugfs directory [ 764.515060][T11399] Invalid logical block size (8192) [ 764.724091][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.756331][ T3555] hsr_slave_0: left promiscuous mode [ 764.997623][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.215054][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.495501][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.850826][ T3555] hsr_slave_1: left promiscuous mode [ 765.851819][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.851843][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.149643][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.471625][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.822414][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.850417][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.850449][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.085325][ T3555] veth1_macvtap: left promiscuous mode [ 767.085428][ T3555] veth0_macvtap: left promiscuous mode [ 767.085701][ T3555] veth1_vlan: left promiscuous mode [ 767.085883][ T3555] veth0_vlan: left promiscuous mode [ 767.689624][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.775577][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.982530][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.811043][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.210348][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.215931][T11467] fuse: Unknown parameter '0x0000000000000009' [ 769.294513][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.347143][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.514651][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.570817][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.887622][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 771.127594][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 773.729655][T11446] syzkaller0: entered promiscuous mode [ 773.729672][T11446] syzkaller0: entered allmulticast mode [ 774.039675][T11474] random: crng reseeded on system resumption [ 782.311612][T11511] fuse: Unknown parameter '0x0000000000000009' [ 783.067810][T11509] veth0_to_team: entered promiscuous mode [ 783.067836][T11509] veth0_to_team: entered allmulticast mode [ 783.365881][T11519] random: crng reseeded on system resumption [ 786.062089][T11533] syzkaller0: entered promiscuous mode [ 786.062115][T11533] syzkaller0: entered allmulticast mode [ 787.551523][T11567] fuse: Unknown parameter '0x0000000000000009' [ 789.448804][T11580] random: crng reseeded on system resumption [ 794.530090][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 794.539000][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 794.543946][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 794.558037][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 794.566476][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 797.269725][ T9723] Bluetooth: hci2: command tx timeout [ 798.516269][T11630] chnl_net:caif_netlink_parms(): no params data found [ 799.347184][ T9723] Bluetooth: hci2: command tx timeout [ 801.429708][ T9723] Bluetooth: hci2: command tx timeout [ 803.457730][T10575] bridge_slave_1: left allmulticast mode [ 803.457758][T10575] bridge_slave_1: left promiscuous mode [ 803.457992][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.516989][ T9723] Bluetooth: hci2: command tx timeout [ 803.618664][T10575] bridge_slave_0: left allmulticast mode [ 803.618691][T10575] bridge_slave_0: left promiscuous mode [ 803.618964][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.004239][T10575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.997728][T10575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.691436][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.840946][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.032621][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.119740][T10575] bond0 (unregistering): Released all slaves [ 806.271007][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.388882][T11755] netlink: zone id is out of range [ 806.388898][T11755] netlink: zone id is out of range [ 806.388913][T11755] netlink: zone id is out of range [ 806.388921][T11755] netlink: zone id is out of range [ 806.388928][T11755] netlink: zone id is out of range [ 806.388935][T11755] netlink: zone id is out of range [ 806.388942][T11755] netlink: zone id is out of range [ 806.388950][T11755] netlink: zone id is out of range [ 806.388957][T11755] netlink: zone id is out of range [ 806.388964][T11755] netlink: zone id is out of range [ 806.389962][T11755] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 806.563171][T11755] batman_adv: batadv0: Adding interface: macvtap2 [ 806.563189][T11755] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.563219][T11755] batman_adv: batadv0: Interface activated: macvtap2 [ 807.082837][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.166008][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.566990][T10575] hsr_slave_0: left promiscuous mode [ 808.029800][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.046663][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.215887][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.523499][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.863172][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.956013][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.956086][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.993192][T10575] hsr_slave_1: left promiscuous mode [ 809.007591][T10575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.187798][T10575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.966186][T11798] netlink: 'syz.0.1523': attribute type 17 has an invalid length. [ 809.966202][T11798] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1523'. [ 810.764689][ T992] libceph: connect (1)[c::]:6789 error -101 [ 810.764906][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 810.787570][T10575] team0 (unregistering): Port device team_slave_1 removed [ 810.825721][T11809] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 810.825754][T11809] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 810.826044][T11809] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 810.826061][T11809] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 810.997683][T10575] team0 (unregistering): Port device team_slave_0 removed [ 811.051112][ T992] libceph: connect (1)[c::]:6789 error -101 [ 811.051240][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 811.351312][T11805] ceph: No mds server is up or the cluster is laggy [ 812.480103][ T992] libceph: connect (1)[c::]:6789 error -101 [ 812.480307][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 812.852605][T11798] macvtap0: entered allmulticast mode [ 812.852621][T11798] veth0_macvtap: entered allmulticast mode [ 812.853231][T11798] net_ratelimit: 12 callbacks suppressed [ 812.853240][T11798] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 812.890914][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.891048][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.891280][T11630] bridge_slave_0: entered allmulticast mode [ 812.893964][T11630] bridge_slave_0: entered promiscuous mode [ 813.302586][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.302768][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.303017][T11630] bridge_slave_1: entered allmulticast mode [ 813.305599][T11630] bridge_slave_1: entered promiscuous mode [ 814.185736][T11630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.201937][T11630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.017987][T11630] team0: Port device team_slave_0 added [ 815.098868][T11630] team0: Port device team_slave_1 added [ 815.121106][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 815.121141][T11843] netlink: 'syz.0.1536': attribute type 20 has an invalid length. [ 815.121155][T11843] netlink: 'syz.0.1536': attribute type 21 has an invalid length. [ 815.422374][T11852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.422392][T11852] IPv6: NLM_F_CREATE should be set when creating new route [ 815.693188][T11854] trusted_key: encrypted_key: insufficient parameters specified [ 816.746260][T11630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.746519][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.787053][T11630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.134168][T11630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.134186][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.134212][T11630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.620200][ T992] libceph: connect (1)[c::]:6789 error -101 [ 817.620397][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 817.809036][T11865] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 817.809091][T11865] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 817.811757][T11865] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 817.811804][T11865] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 819.063810][T11861] ceph: No mds server is up or the cluster is laggy [ 819.069375][ T992] libceph: connect (1)[c::]:6789 error -101 [ 819.069589][ T992] libceph: mon0 (1)[c::]:6789 connect error [ 819.240002][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.341703][T11630] hsr_slave_0: entered promiscuous mode [ 819.343064][T11630] hsr_slave_1: entered promiscuous mode [ 819.539845][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.577820][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.797058][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.857282][ T5809] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 820.017010][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 820.019719][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 820.019765][ T5809] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 820.019787][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.085808][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.783642][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.808915][ T5809] usb 2-1: config 0 descriptor?? [ 821.071730][ T5809] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 822.189540][ T992] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 822.347324][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1549'. [ 822.347355][T11891] netlink: 'syz.6.1549': attribute type 20 has an invalid length. [ 822.347368][T11891] netlink: 'syz.6.1549': attribute type 21 has an invalid length. [ 822.357540][ T992] usb 8-1: Using ep0 maxpacket: 32 [ 822.360611][ T992] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.363707][ T992] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 822.363731][ T992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.363748][ T992] usb 8-1: Product: syz [ 822.363760][ T992] usb 8-1: Manufacturer: syz [ 822.363772][ T992] usb 8-1: SerialNumber: syz [ 822.384506][ T992] usb 8-1: config 0 descriptor?? [ 822.417750][ T992] usb 8-1: bad CDC descriptors [ 822.420537][ T992] usb 8-1: unsupported MDLM descriptors [ 822.576695][ T992] usb 2-1: USB disconnect, device number 19 [ 822.890021][ T43] ================================================================== [ 822.890037][ T43] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 822.890074][ T43] Read of size 8 at addr ffffc9000e1fb008 by task kworker/1:1/43 [ 822.890088][ T43] [ 822.890108][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 822.890128][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.890139][ T43] Workqueue: usb_hub_wq hub_event [ 822.890166][ T43] Call Trace: [ 822.890176][ T43] [ 822.890184][ T43] dump_stack_lvl+0x189/0x250 [ 822.890209][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.890229][ T43] ? __pfx__printk+0x10/0x10 [ 822.890248][ T43] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 822.890272][ T43] ? __virt_addr_valid+0xdc/0x5c0 [ 822.890293][ T43] ? __virt_addr_valid+0xdc/0x5c0 [ 822.890315][ T43] print_report+0xca/0x240 [ 822.890334][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 822.890352][ T43] kasan_report+0x118/0x150 [ 822.890374][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 822.890396][ T43] __list_del_entry_valid_or_report+0xb5/0x190 [ 822.890416][ T43] kcov_remote_start+0x2b0/0x6f0 [ 822.890437][ T43] hub_event+0x158/0x4a20 [ 822.890465][ T43] ? do_raw_spin_lock+0x121/0x290 [ 822.890483][ T43] ? look_up_lock_class+0x74/0x170 [ 822.890511][ T43] ? register_lock_class+0x51/0x320 [ 822.890533][ T43] ? __lock_acquire+0xab9/0xd20 [ 822.890555][ T43] ? __pfx_hub_event+0x10/0x10 [ 822.890572][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 822.890593][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.890613][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 822.890630][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 822.890649][ T43] process_scheduled_works+0xae1/0x17b0 [ 822.890679][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 822.890705][ T43] worker_thread+0x8a0/0xda0 [ 822.890734][ T43] kthread+0x711/0x8a0 [ 822.890755][ T43] ? __pfx_worker_thread+0x10/0x10 [ 822.890773][ T43] ? __pfx_kthread+0x10/0x10 [ 822.890792][ T43] ? rt_spin_unlock+0x150/0x200 [ 822.890812][ T43] ? rt_spin_unlock+0x161/0x200 [ 822.890828][ T43] ? __pfx_kthread+0x10/0x10 [ 822.890849][ T43] ret_from_fork+0x4bc/0x870 [ 822.890868][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 822.890888][ T43] ? __switch_to_asm+0x39/0x70 [ 822.890904][ T43] ? __switch_to_asm+0x33/0x70 [ 822.890918][ T43] ? __pfx_kthread+0x10/0x10 [ 822.890939][ T43] ret_from_fork_asm+0x1a/0x30 [ 822.890962][ T43] [ 822.890968][ T43] [ 822.890973][ T43] The buggy address belongs to a vmalloc virtual mapping [ 822.890989][ T43] Memory state around the buggy address: [ 822.891005][ T43] ffffc9000e1faf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 822.891016][ T43] ffffc9000e1faf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 822.891026][ T43] >ffffc9000e1fb000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 822.891038][ T43] ^ [ 822.891047][ T43] ffffc9000e1fb080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 822.891057][ T43] ffffc9000e1fb100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 822.891065][ T43] ================================================================== [ 822.891084][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 822.891096][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 822.891115][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.891125][ T43] Workqueue: usb_hub_wq hub_event [ 822.891142][ T43] Call Trace: [ 822.891148][ T43] [ 822.891155][ T43] dump_stack_lvl+0x99/0x250 [ 822.891176][ T43] ? __asan_memcpy+0x40/0x70 [ 822.891193][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.891213][ T43] ? __pfx__printk+0x10/0x10 [ 822.891236][ T43] vpanic+0x237/0x6d0 [ 822.891251][ T43] ? __pfx_vpanic+0x10/0x10 [ 822.891271][ T43] panic+0xb9/0xc0 [ 822.891285][ T43] ? __pfx_panic+0x10/0x10 [ 822.891299][ T43] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 822.891322][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 822.891345][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 822.891364][ T43] check_panic_on_warn+0x89/0xb0 [ 822.891380][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 822.891399][ T43] end_report+0x78/0x160 [ 822.891418][ T43] kasan_report+0x129/0x150 [ 822.891439][ T43] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 822.891461][ T43] __list_del_entry_valid_or_report+0xb5/0x190 [ 822.891481][ T43] kcov_remote_start+0x2b0/0x6f0 [ 822.891510][ T43] hub_event+0x158/0x4a20 [ 822.891538][ T43] ? do_raw_spin_lock+0x121/0x290 [ 822.891555][ T43] ? look_up_lock_class+0x74/0x170 [ 822.891576][ T43] ? register_lock_class+0x51/0x320 [ 822.891597][ T43] ? __lock_acquire+0xab9/0xd20 [ 822.891619][ T43] ? __pfx_hub_event+0x10/0x10 [ 822.891636][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 822.891656][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.891676][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 822.891694][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 822.891713][ T43] process_scheduled_works+0xae1/0x17b0 [ 822.891741][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 822.891767][ T43] worker_thread+0x8a0/0xda0 [ 822.891796][ T43] kthread+0x711/0x8a0 [ 822.891818][ T43] ? __pfx_worker_thread+0x10/0x10 [ 822.891836][ T43] ? __pfx_kthread+0x10/0x10 [ 822.891855][ T43] ? rt_spin_unlock+0x150/0x200 [ 822.891874][ T43] ? rt_spin_unlock+0x161/0x200 [ 822.891890][ T43] ? __pfx_kthread+0x10/0x10 [ 822.891911][ T43] ret_from_fork+0x4bc/0x870 [ 822.891930][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 822.891951][ T43] ? __switch_to_asm+0x39/0x70 [ 822.891965][ T43] ? __switch_to_asm+0x33/0x70 [ 822.891980][ T43] ? __pfx_kthread+0x10/0x10 [ 822.892001][ T43] ret_from_fork_asm+0x1a/0x30 [ 822.892024][ T43] [ 822.892500][ T43] Kernel Offset: disabled