last executing test programs: 31m53.895933936s ago: executing program 32 (id=12): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)='+\fER', 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x205, 0x70bd2c, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffff45}]}, 0x34}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x80, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r6, 0x0, 0x0, 0x10122, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="550a0000005ab609f902000000000000000000000000000000000000009500000000000000000000cfc409e9ca2c43c063e6fb13c6e34a6b6b7de9d04b577866ff940f076816ee76c82626127925606b77bfb90609435565647ce56290bdb08d7f148cfa7da6016ead63f00b3880421d1fbec04ef336762242d0e076a847eed0ec54f79c3be82ec69a964140b53d31e6306e25a6618827de98"], &(0x7f0000000000)='GPL\x00'}, 0x80) 31m52.685815186s ago: executing program 33 (id=15): mremap(&(0x7f0000590000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$cdc_ecm(0x4, 0x7d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x5, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x8, 0x24, 0x6, 0x0, 0x0, "b65558"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2198, 0x3, 0xc1e2, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x6, 0x9, 0x5, 0xffff, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xa}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x2e}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xb7, 0x5}, @ncm={0x6, 0x24, 0x1a, 0xd73d, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff8, 0x3, 0xff1e}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x40, 0x87}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x8, 0x0, 0x40, 0x1}, 0x40, &(0x7f0000000240)={0x5, 0xf, 0x40, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6b, "dbeb155e2b17b983a7c22cab658edb58"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x30, 0x40, 0x2001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0xe, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xda, 0x7, 0x9, [0xf]}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1018}}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8be2bf425eeba3c277f09332f84fe9f24272059625703661763ed5efd08af27a1b6ccc3a7ae63ff339676e5caa6447e4a0575131495bc643681ca8e18b95bc7db66366c50cd89c9a59746da83dcced2526003b48e250bb7a20eabaf34e950fd1eeb6cce37de630e51a067e786dc3ecde5d2218962d33adde6734636adcf597b93be0cc3f307127d2b0df08a75d14f41ed41237db5e7b10fdacd56231cd781566b26080a06edbd7af51e6310233f0cea9aea8fe2c08a94cdc1ae11c6bef6f0fb5d4155567b47db0c4fc61940d157fc5a1df14ff33bd638b56b200b032cd99504751cb6c29d8252e6ebd0c1ac4c3df73d335aaf060f54d6a4f1c225eaca5e3f313a1d29f940d7a9fcaa040d7cab55550954a3c4d8bd772890fff6eadf3de96a396758e0a3d21cb", 0x2e9}], 0x1}}], 0x1, 0x400c0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 31m45.060490199s ago: executing program 34 (id=29): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='f', @ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) link(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) unshare(0x2a020480) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r5, 0x58, &(0x7f00000003c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) 30m49.036305745s ago: executing program 35 (id=186): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, &(0x7f0000000340)={&(0x7f0000000240)=""/72, 0x48}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xdb) 30m48.243086266s ago: executing program 2 (id=193): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 30m47.729407772s ago: executing program 2 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x8820, 0x0, 0x1, 0x0, 0x0) setpgid(0x0, 0x0) setpgid(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10082, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 30m46.828444609s ago: executing program 2 (id=196): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000fb0000090000000000000000020001000000000000e0000200000000030005000000000002000000e000000100"], 0x50}}, 0x0) 30m30.796050049s ago: executing program 36 (id=196): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000fb0000090000000000000000020001000000000000e0000200000000030005000000000002000000e000000100"], 0x50}}, 0x0) 30m26.465834655s ago: executing program 37 (id=206): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x2, 0x0) fanotify_mark(r3, 0x1, 0x4000101b, r2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 30m16.632131157s ago: executing program 38 (id=217): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x10, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28m7.269722123s ago: executing program 39 (id=592): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdir(0x0, 0x92) dup3(r1, r0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 28m2.425051887s ago: executing program 40 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 27m17.020526832s ago: executing program 41 (id=633): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xfe, 0xa46, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0186e86, &(0x7f0000000800)={@id={0x20000000, 0x2000000, @auto="060000001a04b9435da0352cc7411e9e"}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x22, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) 27m6.405005984s ago: executing program 42 (id=642): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0xffffffc8) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 26m19.782421335s ago: executing program 2 (id=645): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 26m18.675490088s ago: executing program 2 (id=676): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = syz_mount_image$fuse(0x0, 0x0, 0x4400, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000008440), 0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0x4, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) linkat(r2, 0x0, r2, &(0x7f0000000180)='./file0\x00', 0x1400) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) r4 = socket$packet(0x11, 0x1, 0x300) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x1000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x80c82) close_range(r5, 0xffffffffffffffff, 0x0) shutdown(r3, 0x0) 26m11.828003974s ago: executing program 2 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 25m54.184191924s ago: executing program 43 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 22m48.496718733s ago: executing program 0 (id=1057): r0 = open(&(0x7f0000000240)='./file3\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20048000) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x24, 0x1b2, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000400)='./file1\x00', 0x3b24d40, &(0x7f0000000600)={[{@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4e4, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 22m45.859476631s ago: executing program 0 (id=1061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000c40)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x77, 0x3, 0x5}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11, 0x5}}}}}}, 0x0) 22m43.622099007s ago: executing program 0 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "a48ce447bb2f04f1aaa1a0baeaddd6216d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e08"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0) 22m42.699318545s ago: executing program 8 (id=1067): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000001000010029bd7000fedb", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e640000001c0016801800018014000a0001c07ad6"], 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000200)={0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xb9}, 0x1c) 22m42.65295693s ago: executing program 0 (id=1068): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x4f3, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x10000, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0xfffffffc, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x40000001, 0x0, 0x7, 0x800000, 0x7], [0xe, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x401, 0x0, 0x0, 0x0, 0x82ce, 0x0, 0x3, 0x1, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0xffffffdb], [0x0, 0x0, 0x4, 0x6, 0x0, 0x401, 0x1000, 0x211, 0x4, 0x7ff, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x5, 0x5, 0x7fff, 0x0, 0xd, 0x71, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x1, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0xff, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x33b]}, 0x45c) 22m38.81098688s ago: executing program 0 (id=1070): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(0x0, &(0x7f0000000280), 0x20000000, &(0x7f00000006c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) unshare(0x6020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2000100, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fanotify_init(0xf00, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0x5, 0x5, 0x3, 0x800}, {0x5, 0x2, 0x8, 0x80000000}, {0xfff8, 0x7, 0x2, 0x5}, {0xb, 0x3, 0x0, 0x101}, {0x8, 0x1, 0x6, 0x7}]}) 22m30.979344564s ago: executing program 8 (id=1072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000810000000000000018000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 22m30.851096915s ago: executing program 0 (id=1074): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0202"], 0x20}, 0x1, 0x7}, 0x4040004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7648, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x1}) r1 = io_uring_setup(0x640, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0xb, 0x246, 0x0, r0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22m27.311769599s ago: executing program 8 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22m26.722020629s ago: executing program 8 (id=1085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x8, 0x7, 0x4, 0x4, 0x0, 0x200, 0x6, 0x1}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ec, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 22m25.547748848s ago: executing program 8 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) unshare(0x2a020400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) 22m19.011501433s ago: executing program 8 (id=1090): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(0x0, 0x2, 0x2001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x90000009}) syz_read_part_table(0x1053, &(0x7f00000008c0)="$eJzszzGqwkAUhtH/PRMSsHEL1q4ittqmchPuQMHGjdi4MVchkTEWCrYiwjnVfMPMhRu+6u+lhiRtOdRvnk6fY3XdNsl+Ms+h+0/aoblfd7OclouU2JReD6NdnWr8eOkfE45Nlf78kaUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MfcAgAA///KhRGw") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) 22m14.940757639s ago: executing program 44 (id=1074): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0202"], 0x20}, 0x1, 0x7}, 0x4040004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7648, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x1}) r1 = io_uring_setup(0x640, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0xb, 0x246, 0x0, r0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22m2.812015141s ago: executing program 45 (id=1090): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(0x0, 0x2, 0x2001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x90000009}) syz_read_part_table(0x1053, &(0x7f00000008c0)="$eJzszzGqwkAUhtH/PRMSsHEL1q4ittqmchPuQMHGjdi4MVchkTEWCrYiwjnVfMPMhRu+6u+lhiRtOdRvnk6fY3XdNsl+Ms+h+0/aoblfd7OclouU2JReD6NdnWr8eOkfE45Nlf78kaUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MfcAgAA///KhRGw") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) 20m12.211387174s ago: executing program 5 (id=1377): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r0) 20m11.397546093s ago: executing program 5 (id=1380): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 20m9.791226988s ago: executing program 5 (id=1385): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 20m8.938994019s ago: executing program 5 (id=1389): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) 20m8.029630239s ago: executing program 5 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 20m7.435956547s ago: executing program 5 (id=1397): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10b400, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, 0x0, 0x0, 0x2, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 19m52.088123752s ago: executing program 46 (id=1397): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10b400, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, 0x0, 0x0, 0x2, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 42.9787454s ago: executing program 3 (id=6719): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 42.62443208s ago: executing program 3 (id=6722): creat(&(0x7f0000000140)='./file0\x00', 0x71) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 41.463981303s ago: executing program 3 (id=6727): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfa, 0x159, &(0x7f00000009c0)="$eJzskL1OInEUR8/A8LGbZWETNtndZI2JhQSDDEOwswAjkQIn0dBYmcAYSUCMJIbOj9rCB6BQCytCYSwtFCsUGnwOOhMSG8x/ZsBCH+F/mjtz7p3fvZnV5X6EELi/Y7FSq+4fmPW6WZrdMPLZzZvbu5/C+wC/Uy1KdrlPw66oKgxPbP0YcAEVc7FYq5S8QBoiQEYFyh407FmxMhP2s1OumAnHReag8xvL6RMnMhyXdNw/FTJB22lvML6EeZH3i2neK9BoepyDY9Hr/+40XDnvC+3W03qvm4tFZ8wzPfvXLWTBFLsU8d1LvBvzxdutQb83PjLyRj+p60tJLaFpqYHx3Muljs9R134cwpY1/5HnFRkFOFWgqUDL6ocelADQuRgZ/qAv/A1ceyFQGs2h6IifOzKqinOd3Slu//FMDNOHKeNPRiKRSCQSiUQikUgkki95DwAA//+AsVjB") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000000000845130830000000000001090224000100000000090400000203000000092104000001220500090581030000000000ce9dd12fb04aac9be4527180c7aaf0beea35db4700895ff1856a2ec195e70d865aa4ec4aa6"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) eventfd(0x0) 36.923839901s ago: executing program 3 (id=6736): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {}, {@utf8no}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@nfs}, {@shortname_mixed}, {@fat=@quiet}, {@numtail}]}, 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 36.272568586s ago: executing program 3 (id=6740): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.632532087s ago: executing program 3 (id=6742): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) pread64(0xffffffffffffffff, &(0x7f00000020c0)=""/4107, 0x100b, 0x7f) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000500000002000000040000000500", @ANYRES32, @ANYBLOB="fabb5c00000000e60a573d1e77e221d09c43f10f336c97f7fe3febfd3e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysv\x00', 0x100000, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00') syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x23b, &(0x7f0000002540)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) getdents(r4, 0x0, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) 32.225785501s ago: executing program 47 (id=6742): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) pread64(0xffffffffffffffff, &(0x7f00000020c0)=""/4107, 0x100b, 0x7f) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000500000002000000040000000500", @ANYRES32, @ANYBLOB="fabb5c00000000e60a573d1e77e221d09c43f10f336c97f7fe3febfd3e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysv\x00', 0x100000, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00') syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x23b, &(0x7f0000002540)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) getdents(r4, 0x0, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) 9.084688741s ago: executing program 7 (id=6839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYBLOB="01008000ffffffff0000004683c7000000166820c0"], 0x38}}, 0x0) 8.749173478s ago: executing program 7 (id=6840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xd10a}]}}]}, 0x50}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.084046785s ago: executing program 7 (id=6842): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x18}) memfd_create(&(0x7f0000000040)='/dev/kvm\x00', 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.292389049s ago: executing program 7 (id=6847): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/40, 0x28) getdents64(r0, &(0x7f0000000480)=""/41, 0x29) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 3.290810205s ago: executing program 7 (id=6851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000, 0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000880), 0x8, 0x52, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x1b, &(0x7f0000000a40)=@raw=[@jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0x4, 0xfffffffffffffffc}, @map_idx={0x18, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000b40)='GPL\x00', 0x5, 0x2, &(0x7f0000000b80)=""/2, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xa, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x1], &(0x7f0000000c80)=[{0x4, 0x2, 0x10, 0xb}, {0x0, 0x1, 0xd, 0x3}, {0x5, 0x1, 0x4, 0x8}, {0x3, 0x2, 0xc, 0x9}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xe, r4, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000030000000000000000ad2e7fa388c1ba1aefc70239", @ANYRES32, @ANYBLOB="0000000000000000da00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ff010000000000000000000000000001000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000200)={0x3, 0x1, 0xc, 0x3}) listen(r1, 0xfff) socket(0x1a, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000340)) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100001", @ANYRES64=r8, @ANYRESOCT=r0], 0x1c}}, 0x8010) 3.28833236s ago: executing program 1 (id=6853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0xff, 0x968, 0x642bf1daa73fd432, 0x4, 0x680, 0x1, 0xfffffffd, 0x6, r3}, &(0x7f00000000c0)=0x20) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000100)=['\x00', '\n\x9fbY\xdf\xae\xba', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10', '/dev/kvm\x00', '\x00', '*,\\\x00'], 0x67cdb72193b134e2}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0x5, 0xc, 0x400001}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x37, 0x0, "04b674b0f0cee2ce0b2e22b7c9ecfd6a510f8d437fdc2f98f9fcc676de5b8cb4397a9bba097357b040f7e9c5735e0d81ab3a911afc1f37aa8c6bc0a52c4478218ea91f1fec24207bc65c5904b6bf57f2"}, 0xd8) sendmmsg$inet(r7, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)='8h?', 0x3}], 0x1}}], 0x1, 0xc0) 3.287931199s ago: executing program 7 (id=6854): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.27466863s ago: executing program 9 (id=6855): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x39a}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 3.272884189s ago: executing program 6 (id=6856): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 2.947994658s ago: executing program 9 (id=6858): unshare(0x600) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x6c033, 0xffffffffffffffff, 0x2000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 2.897967111s ago: executing program 6 (id=6859): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xda0, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xd5c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x11c, 0x1, [@m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x69, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81db4b5bb82e527e794cf9c32a539860aa592d929cecb48c76df399b49231fc0de0b4c4b5e510bd82e77a2a017326f355f49b6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_POLICE={0xc1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x1, 0xffffffff, 0x1, 0x8, 0x3, 0x8, 0x9, 0xb8d3, 0x3, 0x6, 0x1, 0x0, 0x9, 0x2, 0x7, 0x0, 0x5, 0x6, 0x4, 0x5, 0x5, 0xa, 0x2, 0x5112, 0x8001, 0x8, 0x100, 0x6, 0x2, 0x2, 0x16, 0x4, 0xfffffff8, 0x7, 0x2, 0xa0fa, 0x81, 0xfcd, 0x4, 0x81, 0x7, 0x3563, 0x8, 0x80, 0x7, 0xa0, 0x6, 0x8001, 0x4, 0xb, 0xc33, 0x2, 0xffffee8f, 0x7f, 0x8001, 0x7fff, 0xd4, 0x3, 0x5, 0x9fb8, 0x5, 0x0, 0x4, 0xfffffffb, 0x5, 0x5, 0xa5, 0x2, 0x2, 0x9, 0x9, 0x5, 0x8, 0x4, 0x9, 0xe0000000, 0x9, 0x5, 0x9, 0x1000, 0x80000001, 0xc203, 0x9e, 0xa8, 0x0, 0xa6c3, 0x35f, 0x4, 0x2, 0x3ff, 0x1000, 0xd, 0x7, 0x2, 0x3, 0x8, 0xe, 0xfffff85d, 0xf8, 0x3, 0x40, 0x8, 0x6, 0x5, 0x100, 0x5, 0x200, 0x7, 0x2, 0x18b0, 0x6, 0x9, 0x5, 0x10, 0x7fff, 0x401, 0x4, 0x9, 0x3, 0xe, 0xfffffffd, 0x200, 0x5, 0x2, 0x42, 0x2, 0x1, 0x6, 0x2, 0x3, 0x50, 0xff, 0x3, 0xfffffffa, 0x5, 0x8, 0x3, 0x80, 0x0, 0xfffff000, 0x20, 0x80000000, 0xd48f, 0x6, 0x2, 0xc6, 0xbec3, 0x5, 0x2, 0x101, 0x9, 0x8, 0x10, 0x1, 0x9, 0x188a78cc, 0x3, 0xfffffff7, 0x6, 0x0, 0x9, 0x872, 0xe, 0x9, 0x7, 0xe5ff, 0x7, 0x101, 0x4, 0x9, 0x892, 0x80, 0xffffffff, 0x0, 0x10, 0x9, 0x6, 0x1, 0x6, 0x1, 0x9, 0xfffffffe, 0x3, 0x7, 0x10000000, 0xf3, 0x2, 0x1fe, 0x8, 0xd63, 0x9, 0x8, 0x6, 0x5, 0x3, 0x3ff, 0xd9a, 0x6, 0x6, 0x2, 0x0, 0x6, 0x2, 0x8000, 0x9, 0x6, 0x4697, 0x9, 0x3, 0x3, 0x7a0f58ff, 0x1, 0xffffff80, 0x7f, 0x2, 0x2, 0x7, 0x2, 0x12, 0x1, 0x4, 0x2b, 0x800, 0x6, 0x2, 0x80000001, 0x0, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xd17, 0x5e4, 0x9, 0x0, 0x4, 0x7, 0xa, 0x940b, 0x7, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0xfff, 0x4, 0x4, 0x1, 0x9, 0x2, 0x8, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x2, 0x7fffffff, 0x5, 0x7, 0x3, 0x9, 0x7, 0x5, 0x2, 0x2eb, 0xd791, 0x7, 0x101, 0x8000, 0x5, 0x1, 0xfffffffe, 0xb, 0x6, 0xf, 0x7, 0x5, 0x8, 0x6, 0x2, 0x80, 0x10000, 0x9, 0x8, 0x10001, 0x0, 0x3, 0x5, 0x1, 0x0, 0x2066a48f, 0x7bc2, 0x7, 0x7ff, 0xfffe, 0xe28, 0x8000, 0x1, 0x3b, 0x6, 0x3, 0x7, 0x1, 0x200, 0x2, 0xb31, 0x9, 0x10000, 0x80000001, 0x8, 0x10001, 0x8, 0x2, 0xffffff71, 0x7b74, 0xb, 0x6, 0x4, 0x9, 0x2, 0xfffffffd, 0x0, 0x1000, 0x7ff, 0x2, 0x7, 0x480000, 0x6, 0xe81d, 0x5, 0x8, 0xfffffffd, 0x80000000, 0x4534, 0x8, 0x1ff, 0x4, 0xd01, 0x135, 0x7d0, 0x7, 0xd, 0x3, 0x6, 0x2, 0x2cf6, 0xffffffff, 0x8, 0x4, 0x5, 0x81, 0x6, 0x0, 0x8, 0x9, 0x3, 0x22d, 0x8, 0xd87e, 0x2, 0x6, 0x7fff, 0x0, 0x0, 0x3, 0x436e, 0x4, 0x101, 0x10000, 0xfffffff7, 0x400, 0x4, 0xfff, 0x5, 0x20, 0x9, 0xe6b7a86, 0xb, 0x0, 0x9, 0x6, 0x8, 0x5, 0x8c1, 0x5, 0x0, 0x4, 0x40, 0xc1d0, 0x37, 0xc, 0x4, 0x9, 0xc20b, 0x4, 0x4, 0x5, 0xffffbc53, 0x7, 0x5, 0x7, 0x9, 0x3, 0x0, 0x2, 0x1ff, 0x28000000, 0x5, 0x0, 0x7ff, 0x54, 0x2, 0x101, 0x1da, 0x8, 0x2, 0xffff0000, 0x8, 0xd, 0x8, 0x9, 0xa6c, 0x7, 0x1, 0x10001, 0x3b, 0xf, 0x3, 0x5, 0x1f9, 0x4, 0xa2, 0x0, 0x62a1, 0x3, 0xffffffff, 0x5, 0x5, 0x401, 0x5ed6, 0x800, 0x3, 0x514, 0x9, 0x800, 0x8, 0x5, 0x101, 0x7fffffff, 0x40004, 0x20, 0x4, 0xc983, 0x3, 0x7, 0x200, 0x198ecda, 0x5, 0x9, 0x401, 0x5, 0x4, 0x1, 0xd0, 0x73d, 0xd, 0x0, 0x1, 0x3, 0x8cee, 0x4, 0x5, 0x4, 0xe, 0xd4, 0xffffffff, 0xed6, 0x7, 0x2be, 0x3, 0x4, 0x8, 0x2d, 0x7, 0x3, 0x10001, 0x21, 0x8, 0x10000, 0x3, 0x10, 0x8, 0x7, 0x5, 0x4, 0x800, 0x10001, 0x8, 0x49, 0x6, 0x2, 0x4f, 0x2, 0x5, 0xff, 0x5, 0x4, 0x5, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xd, 0x529fc9b, 0x5, 0x3, 0x80000001, 0x294, 0x40, 0x9, 0x4, 0x8000000, 0x8001, 0x1, 0x7fffffff, 0x3, 0x8, 0x4, 0x6, 0x3, 0xb89, 0x6, 0xfffffffd, 0x7, 0x0, 0x5, 0xfffffffc, 0xffffffff, 0x8, 0x1, 0x832, 0x0, 0xdb66, 0x49e, 0x7, 0x4, 0x7, 0x2f6, 0x6, 0xfffffffe, 0x1, 0x10000, 0x8, 0x2, 0x2, 0x3, 0x1, 0x3, 0x101, 0xc4, 0x8, 0x3, 0x2, 0xfc8, 0xfffffff9, 0x14, 0x7fffffff, 0x6, 0x9, 0x9, 0x1, 0x4, 0x8, 0x3ff, 0x7, 0x5, 0x10, 0xcc2, 0x1, 0x9, 0x0, 0x7, 0x8, 0x7, 0xfa, 0x800, 0xa8, 0x7, 0x6, 0x4, 0x10000, 0x9, 0x6, 0xc9e, 0x5, 0x5, 0x5, 0x4, 0x3, 0xd36, 0x3, 0x3ff, 0x3, 0x6, 0x7ff, 0x80000000, 0x7, 0x6, 0x8, 0x5e, 0x6, 0x6, 0x9, 0xfffffffc, 0x3, 0x4, 0xbb, 0x101, 0x4, 0x6, 0xd, 0x520, 0x9, 0x7fff, 0xb087, 0x8c, 0xfffffff3, 0x7fffffff, 0xff, 0x2685, 0x2, 0x7ff, 0x0, 0xfffffff8, 0x1, 0x5, 0x8, 0xfffffff9, 0xfff, 0x5, 0x3, 0xb, 0x6, 0x7fffffff, 0x7, 0xc, 0x1, 0x800, 0x40, 0x3, 0x74, 0x0, 0x4, 0xfffffff8, 0x9, 0x10001, 0xa11a, 0xd317, 0x58c9cf3b, 0x2, 0x8, 0x400, 0x6ef, 0x4, 0x7, 0x5, 0x4, 0xffffffff, 0x1, 0x1, 0x9, 0x36, 0x2, 0x2a, 0x27567183, 0x8, 0x663, 0x6, 0x3ff, 0x7, 0x6, 0x0, 0x7, 0x9, 0x6, 0x3, 0x80000001, 0x4000000, 0xd5, 0x6, 0xc, 0xfffffff8, 0x7dc, 0x0, 0xffe00000, 0x1, 0x100, 0x400, 0x10001, 0x2352, 0x7fffffff, 0xf, 0x8, 0x4, 0x17b0, 0x6af0, 0x8, 0x7, 0x2, 0x5, 0x3, 0x91, 0x3, 0x8, 0x8, 0x2, 0x7, 0x1, 0x0, 0x14000, 0x771, 0xe, 0x5, 0x10, 0x80, 0x9, 0x6, 0xe266, 0x6, 0x3, 0x2, 0x7, 0x41, 0xffffffff, 0x8, 0x8000, 0x7, 0x4, 0x60, 0x1000, 0xfff, 0x5, 0xffffffd1, 0x7f, 0xaa5, 0x1, 0xf4, 0x8, 0xfff, 0x5, 0x0, 0xfff, 0x0, 0x6, 0x5, 0x5, 0x1ff, 0x7, 0xc, 0x0, 0x7, 0x6, 0x2, 0x6030c913, 0x4fb5, 0x7f, 0x8]}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8}]}}]}, 0xda0}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 2.771317964s ago: executing program 1 (id=6860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000005400e501000000000000000007"], 0x38}}, 0x0) 2.566902223s ago: executing program 9 (id=6861): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.436364389s ago: executing program 6 (id=6862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getpid() 2.389492854s ago: executing program 1 (id=6863): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000, 0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000880), 0x8, 0x52, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x1b, &(0x7f0000000a40)=@raw=[@jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0x4, 0xfffffffffffffffc}, @map_idx={0x18, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000b40)='GPL\x00', 0x5, 0x2, &(0x7f0000000b80)=""/2, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xa, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x1], &(0x7f0000000c80)=[{0x4, 0x2, 0x10, 0xb}, {0x0, 0x1, 0xd, 0x3}, {0x5, 0x1, 0x4, 0x8}, {0x3, 0x2, 0xc, 0x9}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xe, r4, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000da00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ff010000000000000000000000000001000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000200)={0x3, 0x1, 0xc, 0x3}) listen(r1, 0xfff) socket(0x1a, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000340)) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100001", @ANYRES64=r8, @ANYRESOCT=r0], 0x1c}}, 0x8010) 2.149428198s ago: executing program 4 (id=6864): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.012764542s ago: executing program 9 (id=6865): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 1.771624106s ago: executing program 1 (id=6866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2}, 0x5d}], 0x1, 0x10022, 0x0) 1.626939535s ago: executing program 4 (id=6867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x45, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.332845745s ago: executing program 6 (id=6868): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x46}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3c, 0x400006) 1.15624947s ago: executing program 4 (id=6869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="32780f64398323756224d03a", 0xc, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ff7f0000000000000d00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001080000", @ANYRES32=0x0, @ANYRES32], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2200000001080500000000000000000100000a09000100737908a76b7a31000000000051b7635d13ed97bf6b36a579b8934008f95509c3fcacf0d7b191357fd7fdf0c42433e85c811ebc920e4e78b467dc11fc2b6d01d8ea26c17c6a8f173b753dc017663d0e519554b7e2acc2a616eac8bcd86354f6805cf284d3d09527ddb7d3a52bcc6967686a427d8016428798a938ae"], 0x20}, 0x1, 0x0, 0x0, 0x8d1}, 0x20000800) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 1.100374354s ago: executing program 1 (id=6870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0xff, 0x968, 0x642bf1daa73fd432, 0x4, 0x680, 0x1, 0xfffffffd, 0x6, r3}, &(0x7f00000000c0)=0x20) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000100)=['\x00', '\n\x9fbY\xdf\xae\xba', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10', '/dev/kvm\x00', '\x00', '*,\\\x00'], 0x67cdb72193b134e2}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0x5, 0xc, 0x400001}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x37, 0x0, "04b674b0f0cee2ce0b2e22b7c9ecfd6a510f8d437fdc2f98f9fcc676de5b8cb4397a9bba097357b040f7e9c5735e0d81ab3a911afc1f37aa8c6bc0a52c4478218ea91f1fec24207bc65c5904b6bf57f2"}, 0xd8) sendmmsg$inet(r7, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)='8h?', 0x3}], 0x1}}], 0x1, 0xc0) 821.731427ms ago: executing program 6 (id=6871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 747.147911ms ago: executing program 4 (id=6872): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xda0, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xd5c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x11c, 0x1, [@m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x69, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81db4b5bb82e527e794cf9c32a539860aa592d929cecb48c76df399b49231fc0de0b4c4b5e510bd82e77a2a017326f355f49b6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_POLICE={0xc1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x1, 0xffffffff, 0x1, 0x8, 0x3, 0x8, 0x9, 0xb8d3, 0x3, 0x6, 0x1, 0x0, 0x9, 0x2, 0x7, 0x0, 0x5, 0x6, 0x4, 0x5, 0x5, 0xa, 0x2, 0x5112, 0x8001, 0x8, 0x100, 0x6, 0x2, 0x2, 0x16, 0x4, 0xfffffff8, 0x7, 0x2, 0xa0fa, 0x81, 0xfcd, 0x4, 0x81, 0x7, 0x3563, 0x8, 0x80, 0x7, 0xa0, 0x6, 0x8001, 0x4, 0xb, 0xc33, 0x2, 0xffffee8f, 0x7f, 0x8001, 0x7fff, 0xd4, 0x3, 0x5, 0x9fb8, 0x5, 0x0, 0x4, 0xfffffffb, 0x5, 0x5, 0xa5, 0x2, 0x2, 0x9, 0x9, 0x5, 0x8, 0x4, 0x9, 0xe0000000, 0x9, 0x5, 0x9, 0x1000, 0x80000001, 0xc203, 0x9e, 0xa8, 0x0, 0xa6c3, 0x35f, 0x4, 0x2, 0x3ff, 0x1000, 0xd, 0x7, 0x2, 0x3, 0x8, 0xe, 0xfffff85d, 0xf8, 0x3, 0x40, 0x8, 0x6, 0x5, 0x100, 0x5, 0x200, 0x7, 0x2, 0x18b0, 0x6, 0x9, 0x5, 0x10, 0x7fff, 0x401, 0x4, 0x9, 0x3, 0xe, 0xfffffffd, 0x200, 0x5, 0x2, 0x42, 0x2, 0x1, 0x6, 0x2, 0x3, 0x50, 0xff, 0x3, 0xfffffffa, 0x5, 0x8, 0x3, 0x80, 0x0, 0xfffff000, 0x20, 0x80000000, 0xd48f, 0x6, 0x2, 0xc6, 0xbec3, 0x5, 0x2, 0x101, 0x9, 0x8, 0x10, 0x1, 0x9, 0x188a78cc, 0x3, 0xfffffff7, 0x6, 0x0, 0x9, 0x872, 0xe, 0x9, 0x7, 0xe5ff, 0x7, 0x101, 0x4, 0x9, 0x892, 0x80, 0xffffffff, 0x0, 0x10, 0x9, 0x6, 0x1, 0x6, 0x1, 0x9, 0xfffffffe, 0x3, 0x7, 0x10000000, 0xf3, 0x2, 0x1fe, 0x8, 0xd63, 0x9, 0x8, 0x6, 0x5, 0x3, 0x3ff, 0xd9a, 0x6, 0x6, 0x2, 0x0, 0x6, 0x2, 0x8000, 0x9, 0x6, 0x4697, 0x9, 0x3, 0x3, 0x7a0f58ff, 0x1, 0xffffff80, 0x7f, 0x2, 0x2, 0x7, 0x2, 0x12, 0x1, 0x4, 0x2b, 0x800, 0x6, 0x2, 0x80000001, 0x0, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xd17, 0x5e4, 0x9, 0x0, 0x4, 0x7, 0xa, 0x940b, 0x7, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0xfff, 0x4, 0x4, 0x1, 0x9, 0x2, 0x8, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x2, 0x7fffffff, 0x5, 0x7, 0x3, 0x9, 0x7, 0x5, 0x2, 0x2eb, 0xd791, 0x7, 0x101, 0x8000, 0x5, 0x1, 0xfffffffe, 0xb, 0x6, 0xf, 0x7, 0x5, 0x8, 0x6, 0x2, 0x80, 0x10000, 0x9, 0x8, 0x10001, 0x0, 0x3, 0x5, 0x1, 0x0, 0x2066a48f, 0x7bc2, 0x7, 0x7ff, 0xfffe, 0xe28, 0x8000, 0x1, 0x3b, 0x6, 0x3, 0x7, 0x1, 0x200, 0x2, 0xb31, 0x9, 0x10000, 0x80000001, 0x8, 0x10001, 0x8, 0x2, 0xffffff71, 0x7b74, 0xb, 0x6, 0x4, 0x9, 0x2, 0xfffffffd, 0x0, 0x1000, 0x7ff, 0x2, 0x7, 0x480000, 0x6, 0xe81d, 0x5, 0x8, 0xfffffffd, 0x80000000, 0x4534, 0x8, 0x1ff, 0x4, 0xd01, 0x135, 0x7d0, 0x7, 0xd, 0x3, 0x6, 0x2, 0x2cf6, 0xffffffff, 0x8, 0x4, 0x5, 0x81, 0x6, 0x0, 0x8, 0x9, 0x3, 0x22d, 0x8, 0xd87e, 0x2, 0x6, 0x7fff, 0x0, 0x0, 0x3, 0x436e, 0x4, 0x101, 0x10000, 0xfffffff7, 0x400, 0x4, 0xfff, 0x5, 0x20, 0x9, 0xe6b7a86, 0xb, 0x0, 0x9, 0x6, 0x8, 0x5, 0x8c1, 0x5, 0x0, 0x4, 0x40, 0xc1d0, 0x37, 0xc, 0x4, 0x9, 0xc20b, 0x4, 0x4, 0x5, 0xffffbc53, 0x7, 0x5, 0x7, 0x9, 0x3, 0x0, 0x2, 0x1ff, 0x28000000, 0x5, 0x0, 0x7ff, 0x54, 0x2, 0x101, 0x1da, 0x8, 0x2, 0xffff0000, 0x8, 0xd, 0x8, 0x9, 0xa6c, 0x7, 0x1, 0x10001, 0x3b, 0xf, 0x3, 0x5, 0x1f9, 0x4, 0xa2, 0x0, 0x62a1, 0x3, 0xffffffff, 0x5, 0x5, 0x401, 0x5ed6, 0x800, 0x3, 0x514, 0x9, 0x800, 0x8, 0x5, 0x101, 0x7fffffff, 0x40004, 0x20, 0x4, 0xc983, 0x3, 0x7, 0x200, 0x198ecda, 0x5, 0x9, 0x401, 0x5, 0x4, 0x1, 0xd0, 0x73d, 0xd, 0x0, 0x1, 0x3, 0x8cee, 0x4, 0x5, 0x4, 0xe, 0xd4, 0xffffffff, 0xed6, 0x7, 0x2be, 0x3, 0x4, 0x8, 0x2d, 0x7, 0x3, 0x10001, 0x21, 0x8, 0x10000, 0x3, 0x10, 0x8, 0x7, 0x5, 0x4, 0x800, 0x10001, 0x8, 0x49, 0x6, 0x2, 0x4f, 0x2, 0x5, 0xff, 0x5, 0x4, 0x5, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xd, 0x529fc9b, 0x5, 0x3, 0x80000001, 0x294, 0x40, 0x9, 0x4, 0x8000000, 0x8001, 0x1, 0x7fffffff, 0x3, 0x8, 0x4, 0x6, 0x3, 0xb89, 0x6, 0xfffffffd, 0x7, 0x0, 0x5, 0xfffffffc, 0xffffffff, 0x8, 0x1, 0x832, 0x0, 0xdb66, 0x49e, 0x7, 0x4, 0x7, 0x2f6, 0x6, 0xfffffffe, 0x1, 0x10000, 0x8, 0x2, 0x2, 0x3, 0x1, 0x3, 0x101, 0xc4, 0x8, 0x3, 0x2, 0xfc8, 0xfffffff9, 0x14, 0x7fffffff, 0x6, 0x9, 0x9, 0x1, 0x4, 0x8, 0x3ff, 0x7, 0x5, 0x10, 0xcc2, 0x1, 0x9, 0x0, 0x7, 0x8, 0x7, 0xfa, 0x800, 0xa8, 0x7, 0x6, 0x4, 0x10000, 0x9, 0x6, 0xc9e, 0x5, 0x5, 0x5, 0x4, 0x3, 0xd36, 0x3, 0x3ff, 0x3, 0x6, 0x7ff, 0x80000000, 0x7, 0x6, 0x8, 0x5e, 0x6, 0x6, 0x9, 0xfffffffc, 0x3, 0x4, 0xbb, 0x101, 0x4, 0x6, 0xd, 0x520, 0x9, 0x7fff, 0xb087, 0x8c, 0xfffffff3, 0x7fffffff, 0xff, 0x2685, 0x2, 0x7ff, 0x0, 0xfffffff8, 0x1, 0x5, 0x8, 0xfffffff9, 0xfff, 0x5, 0x3, 0xb, 0x6, 0x7fffffff, 0x7, 0xc, 0x1, 0x800, 0x40, 0x3, 0x74, 0x0, 0x4, 0xfffffff8, 0x9, 0x10001, 0xa11a, 0xd317, 0x58c9cf3b, 0x2, 0x8, 0x400, 0x6ef, 0x4, 0x7, 0x5, 0x4, 0xffffffff, 0x1, 0x1, 0x9, 0x36, 0x2, 0x2a, 0x27567183, 0x8, 0x663, 0x6, 0x3ff, 0x7, 0x6, 0x0, 0x7, 0x9, 0x6, 0x3, 0x80000001, 0x4000000, 0xd5, 0x6, 0xc, 0xfffffff8, 0x7dc, 0x0, 0xffe00000, 0x1, 0x100, 0x400, 0x10001, 0x2352, 0x7fffffff, 0xf, 0x8, 0x4, 0x17b0, 0x6af0, 0x8, 0x7, 0x2, 0x5, 0x3, 0x91, 0x3, 0x8, 0x8, 0x2, 0x7, 0x1, 0x0, 0x14000, 0x771, 0xe, 0x5, 0x10, 0x80, 0x9, 0x6, 0xe266, 0x6, 0x3, 0x2, 0x7, 0x41, 0xffffffff, 0x8, 0x8000, 0x7, 0x4, 0x60, 0x1000, 0xfff, 0x5, 0xffffffd1, 0x7f, 0xaa5, 0x1, 0xf4, 0x8, 0xfff, 0x5, 0x0, 0xfff, 0x0, 0x6, 0x5, 0x5, 0x1ff, 0x7, 0xc, 0x0, 0x7, 0x6, 0x2, 0x6030c913, 0x4fb5, 0x7f, 0x8]}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8}]}}]}, 0xda0}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 721.206894ms ago: executing program 9 (id=6873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000005400e501000000000000000007"], 0x38}}, 0x0) 401.05837ms ago: executing program 4 (id=6874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x3, 0x0, [{0x40000101, 0x0, 0x3}, {0x263, 0x0, 0x8000000000000000}, {0x2d2, 0x0, 0xc109}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) 269.588253ms ago: executing program 1 (id=6875): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002480), 0x0, 0x404) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) 250.306866ms ago: executing program 9 (id=6876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000, 0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000880), 0x8, 0x52, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x1b, &(0x7f0000000a40)=@raw=[@jmp={0x5, 0x0, 0xb, 0x3, 0x9, 0x4, 0xfffffffffffffffc}, @map_idx={0x18, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000b40)='GPL\x00', 0x5, 0x2, &(0x7f0000000b80)=""/2, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xa, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x1], &(0x7f0000000c80)=[{0x4, 0x2, 0x10, 0xb}, {0x0, 0x1, 0xd, 0x3}, {0x5, 0x1, 0x4, 0x8}, {0x3, 0x2, 0xc, 0x9}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xe, r4, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000da00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ff010000000000000000000000000001000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000200)={0x3, 0x1, 0xc, 0x3}) listen(r1, 0xfff) socket(0x1a, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000340)) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100001", @ANYRES64=r8, @ANYRESOCT=r0], 0x1c}}, 0x8010) 211.318892ms ago: executing program 6 (id=6877): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free_batched\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000100)=0x5, 0xd4ba) 0s ago: executing program 4 (id=6878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): b failed: -71 [ 1925.938337][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1925.993421][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1926.003461][T20031] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input68 [ 1926.062613][T20031] usb 4-1: USB disconnect, device number 85 [ 1926.148793][T25674] loop6: detected capacity change from 0 to 40427 [ 1926.165569][T25674] F2FS-fs (loop6): invalid crc value [ 1926.175939][T25676] tipc: Resetting bearer [ 1926.202232][T25675] tipc: Resetting bearer [ 1926.263185][T25675] tipc: Disabling bearer [ 1926.464564][T25674] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1926.489267][T25674] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1927.023132][T25691] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6060'. [ 1927.524465][T25701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1927.560557][T20031] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1927.752894][T20031] usb 4-1: Using ep0 maxpacket: 16 [ 1927.787499][T20031] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1927.800091][T20031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1927.874293][T20031] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1927.883955][T20031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.892245][T20031] usb 4-1: Product: syz [ 1927.896594][T20031] usb 4-1: Manufacturer: syz [ 1927.901501][T20031] usb 4-1: SerialNumber: syz [ 1927.963511][T20031] usb 4-1: config 0 descriptor?? [ 1927.982195][T20031] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1927.991841][T20031] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1928.132125][T14314] usb 8-1: new full-speed USB device number 81 using dummy_hcd [ 1928.342207][T25710] tipc: Enabled bearer , priority 0 [ 1928.354756][T25710] syzkaller0: entered promiscuous mode [ 1928.360909][T25710] syzkaller0: entered allmulticast mode [ 1928.381271][T14314] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1928.390958][T14314] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.399174][T14314] usb 8-1: Product: syz [ 1928.403671][T14314] usb 8-1: Manufacturer: syz [ 1928.408457][T14314] usb 8-1: SerialNumber: syz [ 1928.424724][T25710] tipc: Resetting bearer [ 1928.447011][T25709] tipc: Resetting bearer [ 1928.466715][T14314] usb 8-1: config 0 descriptor?? [ 1928.476470][T25709] tipc: Disabling bearer [ 1928.616973][T20031] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1928.626656][T20031] em28xx 4-1:0.0: Config register raw data: 0x56 [ 1928.692207][T14314] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1928.715942][T11928] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1928.830090][T20031] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1928.840046][T20031] em28xx 4-1:0.0: No AC97 audio processor [ 1928.901143][T11928] usb 7-1: Using ep0 maxpacket: 16 [ 1928.928646][T11928] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1928.938747][T11928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.971740][T11928] usb 7-1: config 0 descriptor?? [ 1928.988042][T11928] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1929.062618][T19926] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1929.253344][T19926] usb 5-1: Using ep0 maxpacket: 32 [ 1929.270715][T19926] usb 5-1: config 0 has no interfaces? [ 1929.289882][T19926] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1929.299740][T19926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.308332][T19926] usb 5-1: Product: syz [ 1929.313098][T19926] usb 5-1: Manufacturer: syz [ 1929.317982][T19926] usb 5-1: SerialNumber: syz [ 1929.333704][T19926] usb 5-1: config 0 descriptor?? [ 1929.338766][T20031] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1929.511551][T20031] usb 10-1: Using ep0 maxpacket: 16 [ 1929.525334][T20031] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1929.536222][T20031] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1929.572917][T20031] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1929.574187][T19926] usb 5-1: USB disconnect, device number 96 [ 1929.582826][T20031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.597146][T20031] usb 10-1: Product: syz [ 1929.601872][T20031] usb 10-1: Manufacturer: syz [ 1929.606878][T20031] usb 10-1: SerialNumber: syz [ 1929.832192][T11928] gspca_sonixj: reg_r err -32 [ 1929.837688][T11928] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1929.859346][T20031] usb 10-1: 0:2 : does not exist [ 1929.894663][T20031] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1929.950340][T20031] usb 10-1: USB disconnect, device number 93 [ 1930.294442][T25723] loop4: detected capacity change from 0 to 16 [ 1930.322142][T25723] erofs (device loop4): mounted with root inode @ nid 36. [ 1930.341652][T25723] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1930.362915][T25723] erofs (device loop4): failed to decompress -21 in[56, 4040] out[1851] [ 1930.371705][T25723] erofs (device loop4): read error -117 @ 43 of nid 36 [ 1930.412870][T25723] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1930.422310][T25723] erofs (device loop4): failed to decompress -21 in[56, 4040] out[1851] [ 1930.431150][T25723] erofs (device loop4): read error -117 @ 43 of nid 36 [ 1930.462349][T20031] usb 4-1: USB disconnect, device number 86 [ 1930.470168][T20031] em28xx 4-1:0.0: Disconnecting em28xx [ 1930.490840][T25723] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1930.500175][T25723] erofs (device loop4): failed to decompress -21 in[56, 4040] out[1851] [ 1930.509002][T25723] erofs (device loop4): read error -117 @ 43 of nid 36 [ 1930.510699][T20031] em28xx 4-1:0.0: Freeing device [ 1930.964326][T25729] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6075'. [ 1931.066320][T14314] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1931.479098][T25737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1931.526867][T14314] usb 7-1: USB disconnect, device number 93 [ 1931.884851][T25742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1932.032863][T14314] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1932.251678][T14314] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1932.261330][T14314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.269970][T14314] usb 7-1: Product: syz [ 1932.275126][T14314] usb 7-1: Manufacturer: syz [ 1932.280089][T14314] usb 7-1: SerialNumber: syz [ 1932.298998][T14314] usb 7-1: config 0 descriptor?? [ 1932.343337][T20031] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1932.494541][T11928] usb 8-1: USB disconnect, device number 81 [ 1932.508577][T20031] usb 4-1: Using ep0 maxpacket: 16 [ 1932.544976][T20031] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1932.557609][T20031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1932.574806][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6080'. [ 1932.627179][T20031] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1932.638515][T20031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.647589][T20031] usb 4-1: Product: syz [ 1932.651951][T20031] usb 4-1: Manufacturer: syz [ 1932.656932][T20031] usb 4-1: SerialNumber: syz [ 1932.678622][T14314] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1932.746593][T20031] usb 4-1: config 0 descriptor?? [ 1932.747585][T14314] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1932.777262][T20031] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1932.787130][T20031] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1932.792571][T14314] usb 7-1: USB disconnect, device number 94 [ 1932.911808][T25756] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1933.103813][T19926] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1933.263497][T11928] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1933.273605][T19926] usb 8-1: Using ep0 maxpacket: 32 [ 1933.302721][T19926] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1933.312324][T19926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.326268][T19926] usb 8-1: config 0 descriptor?? [ 1933.344121][T19926] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1933.380700][T20031] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1933.397285][T20031] em28xx 4-1:0.0: Config register raw data: 0x56 [ 1933.401302][T25762] input: syz1 as /devices/virtual/input/input69 [ 1933.435161][T11928] usb 10-1: Using ep0 maxpacket: 16 [ 1933.461190][T11928] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1933.473530][T11928] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1933.560812][T11928] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1933.570629][T11928] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.579150][T11928] usb 10-1: Product: syz [ 1933.580689][T19926] gspca_vc032x: reg_r err -32 [ 1933.583808][T11928] usb 10-1: Manufacturer: syz [ 1933.588534][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.588600][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.593546][T11928] usb 10-1: SerialNumber: syz [ 1933.609649][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.615426][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.620846][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.626392][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.631813][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.638971][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.641943][T11928] usb 10-1: config 0 descriptor?? [ 1933.644526][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.644588][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.644653][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.644713][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.644774][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.644833][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.644897][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.644957][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.674364][T20031] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1933.675819][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.681037][T20031] em28xx 4-1:0.0: No AC97 audio processor [ 1933.686497][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 1933.686574][T19926] gspca_vc032x: Unknown sensor... [ 1933.686851][T19926] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1933.757604][T11928] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1933.767491][T11928] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1934.281216][T11928] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1934.290459][T11928] em28xx 10-1:0.0: Config register raw data: 0x56 [ 1934.494636][T11928] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1934.502007][T11928] em28xx 10-1:0.0: No AC97 audio processor [ 1934.588617][T25779] blktrace: Concurrent blktraces are not allowed on loop12 [ 1935.154351][T11928] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1935.263243][T19926] usb 4-1: USB disconnect, device number 87 [ 1935.271255][T19926] em28xx 4-1:0.0: Disconnecting em28xx [ 1935.307778][T19926] em28xx 4-1:0.0: Freeing device [ 1935.321131][T11928] usb 7-1: device descriptor read/64, error -71 [ 1935.446789][T25792] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6100'. [ 1935.575417][T11928] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1935.714956][T11928] usb 7-1: device descriptor read/64, error -71 [ 1935.830806][T11928] usb usb7-port1: attempt power cycle [ 1935.850470][T20031] usb 8-1: USB disconnect, device number 82 [ 1935.955620][T25799] loop7: detected capacity change from 0 to 16 [ 1935.966053][T25799] erofs (device loop7): mounted with root inode @ nid 36. [ 1935.978735][T25799] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1935.989598][T25799] erofs (device loop7): failed to decompress -21 in[56, 4040] out[1851] [ 1935.998397][T25799] erofs (device loop7): read error -117 @ 43 of nid 36 [ 1936.026659][T25799] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1936.035623][T25799] erofs (device loop7): failed to decompress -21 in[56, 4040] out[1851] [ 1936.044186][T25799] erofs (device loop7): read error -117 @ 43 of nid 36 [ 1936.071810][T25799] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1936.080813][T25799] erofs (device loop7): failed to decompress -21 in[56, 4040] out[1851] [ 1936.089649][T25799] erofs (device loop7): read error -117 @ 43 of nid 36 [ 1936.185796][T11928] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1936.238120][T11928] usb 7-1: device descriptor read/8, error -71 [ 1936.266467][T20031] usb 10-1: USB disconnect, device number 94 [ 1936.274201][T20031] em28xx 10-1:0.0: Disconnecting em28xx [ 1936.300714][T20031] em28xx 10-1:0.0: Freeing device [ 1936.655386][T11928] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1936.677757][T11928] usb 7-1: device descriptor read/8, error -71 [ 1936.816171][T11928] usb usb7-port1: unable to enumerate USB device [ 1937.116497][T25815] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6110'. [ 1937.351444][T25819] kvm: pic: non byte write [ 1937.420630][T19926] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1937.585413][T19926] usb 10-1: Using ep0 maxpacket: 32 [ 1937.599280][T19926] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1937.611460][T19926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1937.622788][T19926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1937.632956][T19926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1937.644558][T19926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1937.672054][T19926] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1937.681851][T19926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.690621][T19926] usb 10-1: Product: syz [ 1937.695061][T19926] usb 10-1: Manufacturer: syz [ 1937.700010][T19926] usb 10-1: SerialNumber: syz [ 1937.709837][T19926] usb 10-1: config 0 descriptor?? [ 1937.933284][T19926] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1937.946756][T19926] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1937.954430][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1937.971122][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1937.991855][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.036100][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.056353][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.106755][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.116712][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.124176][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.152267][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.196151][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.225687][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.245950][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.268315][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.289131][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.303958][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.336085][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.344096][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.362392][T19926] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1938.376730][T19926] input input70: Timeout waiting for response from device. [ 1938.405784][T19926] usb 10-1: USB disconnect, device number 95 [ 1938.556696][T14314] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1938.610111][T25830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6116'. [ 1938.630236][T25832] netlink: 'syz.7.6117': attribute type 4 has an invalid length. [ 1938.835991][T14314] usb 7-1: Using ep0 maxpacket: 16 [ 1938.847324][T14314] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1938.859270][T14314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1938.909194][T14314] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1938.918788][T14314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.927144][T14314] usb 7-1: Product: syz [ 1938.931478][T14314] usb 7-1: Manufacturer: syz [ 1938.936361][T14314] usb 7-1: SerialNumber: syz [ 1938.950795][T19926] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1938.967298][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6119'. [ 1938.993590][T14314] usb 7-1: config 0 descriptor?? [ 1939.018378][T14314] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1939.027977][T14314] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1939.146272][T19926] usb 4-1: Using ep0 maxpacket: 32 [ 1939.161683][T19926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1939.174286][T19926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1939.190380][T19926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1939.202130][T19926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1939.213840][T19926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1939.252418][T19926] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1939.262352][T19926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.270906][T19926] usb 4-1: Product: syz [ 1939.275377][T19926] usb 4-1: Manufacturer: syz [ 1939.280354][T19926] usb 4-1: SerialNumber: syz [ 1939.299822][T19926] usb 4-1: config 0 descriptor?? [ 1939.653443][T14314] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1939.673800][T14314] em28xx 7-1:0.0: Config register raw data: 0x56 [ 1939.738467][T19926] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1939.745067][T19926] input input71: Device does not respond to id packet M [ 1939.776885][T19926] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1939.783499][T19926] input input71: Device does not respond to id packet P [ 1939.816087][T19926] input input71: Device does not respond to id packet B [ 1939.877630][T14314] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1939.885012][T14314] em28xx 7-1:0.0: No AC97 audio processor [ 1939.997230][T19926] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1940.003630][T19926] input input71: Device does not respond to id packet N [ 1940.065493][T19926] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1940.087412][T19926] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1940.113314][T19926] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1940.127403][T19926] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1940.137272][T19926] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input71 [ 1940.187983][T19926] usb 4-1: USB disconnect, device number 88 [ 1940.922486][T25860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1941.282182][T25865] kvm: pic: non byte write [ 1941.389881][T11928] usb 7-1: USB disconnect, device number 99 [ 1941.397310][T11928] em28xx 7-1:0.0: Disconnecting em28xx [ 1941.413807][T11928] em28xx 7-1:0.0: Freeing device [ 1941.625547][T25868] input: syz1 as /devices/virtual/input/input72 [ 1942.738136][T19926] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1942.932960][T19926] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1942.944825][T19926] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1942.955087][T19926] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1942.964552][T19926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.991842][T25881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1943.022757][T19926] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1943.270388][T19926] usb 4-1: USB disconnect, device number 89 [ 1943.468697][T25891] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6142'. [ 1943.630877][T25895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1943.788693][T14314] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1944.479658][T14314] usb 10-1: Using ep0 maxpacket: 32 [ 1944.499457][T14314] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1944.517057][T14314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1944.530048][T14314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1944.540308][T14314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1944.551797][T14314] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1944.571427][T14314] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1944.580865][T14314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.589277][T14314] usb 10-1: Product: syz [ 1944.593699][T14314] usb 10-1: Manufacturer: syz [ 1944.598568][T14314] usb 10-1: SerialNumber: syz [ 1944.655399][T14314] usb 10-1: config 0 descriptor?? [ 1944.874468][T14314] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1945.257370][T14314] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1945.295901][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.304341][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.321405][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.357261][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.390512][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.398320][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.416917][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.430128][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.484371][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.499492][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.520205][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.527610][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.543744][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.560039][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.579785][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.601943][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.630323][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.660186][T14314] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1945.666585][T14314] input input73: Timeout waiting for response from device. [ 1945.726329][T14314] usb 10-1: USB disconnect, device number 96 [ 1946.160164][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1946.467075][T25921] netlink: 'syz.7.6151': attribute type 4 has an invalid length. [ 1948.621754][T11928] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1952.774633][T11928] usb 10-1: device descriptor read/64, error -71 [ 1953.413729][T11928] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1953.594205][T20031] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1953.772829][T20031] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1953.784604][T20031] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1953.795456][T20031] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1953.805268][T20031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.831713][T25934] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1953.878340][T20031] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1954.129795][T14314] usb 7-1: USB disconnect, device number 100 [ 1954.220294][T25945] loop9: detected capacity change from 0 to 16 [ 1954.267069][T25945] erofs (device loop9): mounted with root inode @ nid 36. [ 1954.291699][T25945] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1954.334542][T25945] erofs (device loop9): failed to decompress -21 in[56, 4040] out[1851] [ 1954.343704][T25945] erofs (device loop9): read error -117 @ 43 of nid 36 [ 1954.396257][T25949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6164'. [ 1954.409154][T25950] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1954.418453][T25950] erofs (device loop9): failed to decompress -21 in[56, 4040] out[1851] [ 1954.427637][T25950] erofs (device loop9): read error -117 @ 43 of nid 36 [ 1954.767713][T25956] siw: device registration error -23 [ 1955.528408][T25970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6174'. [ 1955.572061][T25970] syz_tun: entered promiscuous mode [ 1955.580222][T25970] macvtap2: entered promiscuous mode [ 1955.586806][T25970] macvtap2: entered allmulticast mode [ 1955.592364][T25970] syz_tun: entered allmulticast mode [ 1955.649585][T25970] syz_tun: left allmulticast mode [ 1955.655985][T25970] syz_tun: left promiscuous mode [ 1956.537004][T14314] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1956.598059][T25985] tipc: Enabling of bearer rejected, failed to enable media [ 1956.731592][T14314] usb 4-1: Using ep0 maxpacket: 16 [ 1956.755704][T14314] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1956.766127][T14314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.787172][T14314] usb 4-1: config 0 descriptor?? [ 1956.804135][T14314] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1958.273398][T14314] gspca_sonixj: reg_r err -110 [ 1958.278721][T14314] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1960.391953][T26013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.604760][T11928] usb 4-1: USB disconnect, device number 90 [ 1961.317502][T11928] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1961.467471][T14314] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1961.504019][T11928] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1961.513412][T11928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.523429][T11928] usb 4-1: Product: syz [ 1961.528441][T11928] usb 4-1: Manufacturer: syz [ 1961.533222][T11928] usb 4-1: SerialNumber: syz [ 1961.577216][T11928] usb 4-1: config 0 descriptor?? [ 1961.631951][T14314] usb 7-1: Using ep0 maxpacket: 16 [ 1961.654752][T14314] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1961.667390][T14314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1961.706340][T14314] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1961.716341][T14314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.729468][T14314] usb 7-1: Product: syz [ 1961.733824][T14314] usb 7-1: Manufacturer: syz [ 1961.740261][T14314] usb 7-1: SerialNumber: syz [ 1961.778947][T14314] usb 7-1: config 0 descriptor?? [ 1961.808408][T14314] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1961.818201][T14314] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1961.874900][T11928] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1962.463364][T14314] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1962.491402][T14314] em28xx 7-1:0.0: Config register raw data: 0x56 [ 1962.675386][T14314] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1962.682915][T14314] em28xx 7-1:0.0: No AC97 audio processor [ 1964.502453][T14314] usb 7-1: USB disconnect, device number 101 [ 1964.513915][T14314] em28xx 7-1:0.0: Disconnecting em28xx [ 1964.582118][T11928] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1964.583159][T14314] em28xx 7-1:0.0: Freeing device [ 1965.010560][T14314] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1965.189454][T14314] usb 7-1: Using ep0 maxpacket: 16 [ 1965.201957][T14314] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1965.219190][T14314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1965.273564][T14314] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1965.283371][T14314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.292783][T14314] usb 7-1: Product: syz [ 1965.297152][T14314] usb 7-1: Manufacturer: syz [ 1965.302129][T14314] usb 7-1: SerialNumber: syz [ 1965.317900][T14314] usb 7-1: config 0 descriptor?? [ 1965.339759][T14314] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1965.349876][T14314] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1965.779867][T26076] tipc: Enabling of bearer rejected, failed to enable media [ 1965.829409][T19926] usb 4-1: USB disconnect, device number 91 [ 1965.974530][T14314] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1965.993544][T14314] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1966.017968][T14314] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1966.025963][T14314] em28xx 7-1:0.0: No AC97 audio processor [ 1966.096143][T14314] usb 7-1: USB disconnect, device number 102 [ 1966.104456][T14314] em28xx 7-1:0.0: Disconnecting em28xx [ 1966.142739][T14314] em28xx 7-1:0.0: Freeing device [ 1967.492499][T26106] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6231'. [ 1968.819306][T26118] tipc: Enabling of bearer rejected, failed to enable media [ 1970.383362][T26141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6246'. [ 1972.096978][T14314] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1972.264618][T14314] usb 7-1: Using ep0 maxpacket: 16 [ 1972.295133][T14314] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1972.305119][T14314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.356408][T26176] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6263'. [ 1972.370319][T14314] usb 7-1: config 0 descriptor?? [ 1972.403682][T14314] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1973.752751][T11928] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1974.884110][T11928] usb 4-1: Using ep0 maxpacket: 16 [ 1974.909777][T11928] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1974.944353][T11928] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1974.953957][T11928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.962210][T11928] usb 4-1: Product: syz [ 1974.966712][T11928] usb 4-1: Manufacturer: syz [ 1974.971486][T11928] usb 4-1: SerialNumber: syz [ 1975.094834][T20031] usb 7-1: USB disconnect, device number 103 [ 1975.136777][T11928] usb 4-1: config 0 descriptor?? [ 1975.162895][T11928] usb 4-1: can't set config #0, error -71 [ 1975.177891][T11928] usb 4-1: USB disconnect, device number 92 [ 1975.614771][T11928] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1975.783917][T11928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.794755][T11928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1975.816530][T11928] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1975.826151][T11928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1975.834542][T11928] usb 4-1: SerialNumber: syz [ 1975.869263][T14314] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1976.051611][T14314] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.062193][T14314] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1976.077040][T14314] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1976.079318][T11928] usb 4-1: skipping empty audio interface (v1) [ 1976.087994][T14314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.147081][T14314] usb 7-1: config 0 descriptor?? [ 1976.246556][T11928] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1976.297216][T11928] usb 4-1: USB disconnect, device number 93 [ 1976.390773][T14314] usb 7-1: string descriptor 0 read error: -71 [ 1976.426987][T14314] usb 7-1: USB disconnect, device number 104 [ 1980.641079][ T30] audit: type=1326 audit(1756586735.045:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.664949][ T30] audit: type=1326 audit(1756586735.045:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.692538][ T30] audit: type=1326 audit(1756586735.055:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.717092][ T30] audit: type=1326 audit(1756586735.055:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.739995][ T30] audit: type=1326 audit(1756586735.055:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.764542][ T30] audit: type=1326 audit(1756586735.055:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.792000][ T30] audit: type=1326 audit(1756586735.055:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.816258][ T30] audit: type=1326 audit(1756586735.105:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.839130][ T30] audit: type=1326 audit(1756586735.105:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.862721][ T30] audit: type=1326 audit(1756586735.105:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.6.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b318ebe9 code=0x7ffc0000 [ 1980.895692][T26249] loop6: detected capacity change from 0 to 8192 [ 1981.669614][T26256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6296'. [ 1982.048615][T26254] loop3: detected capacity change from 0 to 8192 [ 1982.280443][T14314] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1982.449769][T14314] usb 7-1: Using ep0 maxpacket: 16 [ 1982.461715][T14314] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.472745][T14314] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1982.482054][T14314] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1982.491455][T14314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.530560][T14314] usb 7-1: config 0 descriptor?? [ 1982.776868][T14314] usb 7-1: USB disconnect, device number 105 [ 1983.260365][T26278] loop3: detected capacity change from 0 to 128 [ 1983.464204][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.464204][T26278] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1983.508474][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.508474][T26278] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1983.597829][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.597829][T26278] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1983.612186][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.612186][T26278] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1983.626776][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.626776][T26278] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1983.640780][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.640780][T26278] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1983.660455][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.660455][T26278] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1983.676220][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.676220][T26278] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1983.706764][T26278] syz.3.6304: attempt to access beyond end of device [ 1983.706764][T26278] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1984.198818][T14314] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1984.395074][T14314] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1984.405835][T14314] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1984.419892][T14314] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1984.429361][T14314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.545754][T26300] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6312'. [ 1984.669224][T14314] usb 4-1: usb_control_msg returned -32 [ 1984.682374][T14314] usbtmc 4-1:16.0: can't read capabilities [ 1984.711198][T14314] usb 4-1: USB disconnect, device number 94 [ 1984.796397][T26304] loop6: detected capacity change from 0 to 128 [ 1984.828592][T26304] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1984.855626][T26304] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1985.722935][T18460] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1986.239814][T14314] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1986.410585][T14314] usb 4-1: Using ep0 maxpacket: 16 [ 1986.437620][T14314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1986.448518][T14314] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1986.457877][T14314] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1986.467385][T14314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.481814][T14314] usb 4-1: config 0 descriptor?? [ 1986.718202][T11928] usb 4-1: USB disconnect, device number 95 [ 1986.750227][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 1986.750310][ T30] audit: type=1326 audit(1756586741.162:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c758ebe9 code=0x7ffc0000 [ 1986.794553][ T30] audit: type=1326 audit(1756586741.202:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3c7585ba7 code=0x7ffc0000 [ 1986.817281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.827464][ T30] audit: type=1326 audit(1756586741.202:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3c752adb9 code=0x7ffc0000 [ 1986.851783][ T30] audit: type=1326 audit(1756586741.202:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3c7585ba7 code=0x7ffc0000 [ 1986.875642][ T30] audit: type=1326 audit(1756586741.202:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3c752adb9 code=0x7ffc0000 [ 1986.899187][ T30] audit: type=1326 audit(1756586741.202:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3c758ebe9 code=0x7ffc0000 [ 1986.921835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.931790][ T30] audit: type=1326 audit(1756586741.202:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c758ebe9 code=0x7ffc0000 [ 1986.954402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.962247][ T30] audit: type=1326 audit(1756586741.202:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fa3c758ebe9 code=0x7ffc0000 [ 1986.984769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.991459][ T30] audit: type=1326 audit(1756586741.202:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c758ebe9 code=0x7ffc0000 [ 1987.014357][ T30] audit: type=1326 audit(1756586741.202:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26323 comm="syz.7.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3c758ebe9 code=0x7ffc0000 [ 1987.036874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1987.261949][T26331] loop6: detected capacity change from 0 to 128 [ 1987.499511][T26335] syz.6.6326: attempt to access beyond end of device [ 1987.499511][T26335] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 1988.181398][T14314] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1988.382896][T14314] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1988.393183][T14314] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1988.406569][T14314] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1988.415931][T14314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.444675][T21954] buffer_io_error: 4 callbacks suppressed [ 1988.444753][T21954] Buffer I/O error on dev loop6, logical block 240, lost async page write [ 1988.747099][T14314] usb 4-1: usb_control_msg returned -32 [ 1988.753694][T14314] usbtmc 4-1:16.0: can't read capabilities [ 1988.828523][T14314] usb 4-1: USB disconnect, device number 96 [ 1989.622275][T19926] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1989.802601][T19926] usb 7-1: Using ep0 maxpacket: 16 [ 1989.815804][T19926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1989.826636][T19926] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1989.836040][T19926] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1989.845552][T19926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.880155][T19926] usb 7-1: config 0 descriptor?? [ 1990.120115][T19926] usb 7-1: USB disconnect, device number 106 [ 1991.311643][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1991.323006][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1991.347395][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1991.375070][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1991.392350][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1992.524902][T26389] chnl_net:caif_netlink_parms(): no params data found [ 1992.685977][T11928] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1992.863480][T11928] usb 7-1: Using ep0 maxpacket: 16 [ 1992.902508][T11928] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1992.912132][T11928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.946065][T11928] usb 7-1: config 0 descriptor?? [ 1992.978671][T11928] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1993.187171][ T4449] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.367949][ T4449] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.425030][T21146] Bluetooth: hci3: command tx timeout [ 1993.443137][ T4449] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.518360][ T4449] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.842624][T26389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.850752][T26389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.858672][T26389] bridge_slave_0: entered allmulticast mode [ 1993.868297][T26389] bridge_slave_0: entered promiscuous mode [ 1993.901181][T26389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.910825][T26389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.918831][T26389] bridge_slave_1: entered allmulticast mode [ 1993.928492][T26389] bridge_slave_1: entered promiscuous mode [ 1994.084394][T20031] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1994.120229][T26389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.162034][T26389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.244518][T20031] usb 4-1: Using ep0 maxpacket: 16 [ 1994.256753][ T4449] bridge_slave_1: left allmulticast mode [ 1994.262898][ T4449] bridge_slave_1: left promiscuous mode [ 1994.270452][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.283009][T20031] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1994.294699][T20031] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1994.306592][T20031] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1994.314131][T20031] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1994.323684][T20031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.339497][T20031] usb 4-1: config 0 descriptor?? [ 1994.350155][ T4449] bridge_slave_0: left allmulticast mode [ 1994.356177][ T4449] bridge_slave_0: left promiscuous mode [ 1994.362940][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.910748][T20031] usbhid 4-1:0.0: can't add hid device: -71 [ 1994.919386][T20031] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1994.956128][T20031] usb 4-1: USB disconnect, device number 97 [ 1995.163996][ T4449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1995.185271][ T4449] bond_slave_0: left promiscuous mode [ 1995.205805][ T4449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1995.243394][ T4449] bond_slave_1: left promiscuous mode [ 1995.254935][ T4449] bond0 (unregistering): Released all slaves [ 1995.277083][ T4449] bond1 (unregistering): Released all slaves [ 1995.315374][ T4449] bond2 (unregistering): Released all slaves [ 1995.515446][T21146] Bluetooth: hci3: command tx timeout [ 1995.546843][T26389] team0: Port device team_slave_0 added [ 1995.596934][T26389] team0: Port device team_slave_1 added [ 1995.659135][ T4449] tipc: Left network mode [ 1995.667150][T19926] usb 7-1: USB disconnect, device number 107 [ 1995.752371][ T4449] IPVS: stopping master sync thread 21593 ... [ 1995.791927][T26389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.799428][T26389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.826539][T26389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.022768][T26389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.031221][T26389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.059764][T26389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.066621][T26442] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6371'. [ 1996.318425][ T4449] hsr_slave_0: left promiscuous mode [ 1996.340770][ T4449] hsr_slave_1: left promiscuous mode [ 1996.349979][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1996.358953][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1996.402863][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1996.410934][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1996.487125][ T4449] veth1_macvtap: left promiscuous mode [ 1996.493156][ T4449] veth0_macvtap: left promiscuous mode [ 1996.499226][ T4449] veth1_vlan: left promiscuous mode [ 1996.504884][ T4449] veth0_vlan: left promiscuous mode [ 1997.595718][T21146] Bluetooth: hci3: command tx timeout [ 1997.660874][T11928] infiniband syz1: ib_query_port failed (-19) [ 1997.686068][T26459] loop6: detected capacity change from 0 to 1024 [ 1997.888738][T26463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6381'. [ 1997.910762][ T4449] IPVS: stop unused estimator thread 0... [ 1997.931581][T26389] hsr_slave_0: entered promiscuous mode [ 1997.941653][T26389] hsr_slave_1: entered promiscuous mode [ 1999.671497][T21146] Bluetooth: hci3: command tx timeout [ 1999.768062][T14314] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1999.960373][T26389] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1999.982441][T26389] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2000.034372][T26389] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2000.044310][T14314] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2000.055404][T14314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.064226][T14314] usb 7-1: Product: syz [ 2000.068747][T14314] usb 7-1: Manufacturer: syz [ 2000.073523][T14314] usb 7-1: SerialNumber: syz [ 2000.105157][T14314] usb 7-1: config 0 descriptor?? [ 2000.136802][T26389] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2000.325196][T26477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6387'. [ 2000.334874][T26477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6387'. [ 2000.697348][T14314] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 2000.742565][T14314] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2000.777487][T14314] usb 7-1: USB disconnect, device number 108 [ 2001.008559][T26497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6394'. [ 2001.076730][T26389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2001.154382][T26389] 8021q: adding VLAN 0 to HW filter on device team0 [ 2001.203512][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.211099][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2001.265422][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.273005][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2001.747572][T26504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6398'. [ 2002.418033][T14314] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2002.638091][T14314] usb 7-1: Using ep0 maxpacket: 16 [ 2002.654546][T14314] usb 7-1: config 0 has no interfaces? [ 2002.675649][T14314] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2002.685249][T14314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.693739][T14314] usb 7-1: Product: syz [ 2002.698261][T14314] usb 7-1: Manufacturer: syz [ 2002.703038][T14314] usb 7-1: SerialNumber: syz [ 2002.744882][T14314] usb 7-1: config 0 descriptor?? [ 2002.775564][T26526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6406'. [ 2002.836278][T26389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2003.050895][T20031] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2003.255976][T20031] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2003.267345][T20031] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2003.281902][T20031] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2003.291960][T20031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.479606][T26534] 9pnet_fd: p9_fd_create_tcp (26534): problem connecting socket to 127.0.0.1 [ 2003.557011][T20031] usb 4-1: usb_control_msg returned -32 [ 2003.564615][T20031] usbtmc 4-1:16.0: can't read capabilities [ 2003.928076][T26389] veth0_vlan: entered promiscuous mode [ 2003.957456][T26389] veth1_vlan: entered promiscuous mode [ 2004.184829][T26389] veth0_macvtap: entered promiscuous mode [ 2004.234171][T26389] veth1_macvtap: entered promiscuous mode [ 2004.347705][T26389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2004.415714][T26389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2004.509746][T21969] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.537602][T21969] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.579694][T21969] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.608233][T21969] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.263265][ T8865] usb 7-1: USB disconnect, device number 109 [ 2005.759596][T14314] usb 4-1: USB disconnect, device number 98 [ 2006.321245][T14314] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2006.530120][T14314] usb 4-1: Using ep0 maxpacket: 32 [ 2006.558741][T14314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2006.569383][T14314] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2006.578743][T14314] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2006.588289][T14314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.669155][T14314] usb 4-1: config 0 descriptor?? [ 2007.470432][T20031] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2007.614277][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2007.650755][T20031] usb 7-1: Using ep0 maxpacket: 16 [ 2007.676740][T20031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2007.707707][T20031] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2007.717327][T20031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.726485][T20031] usb 7-1: Product: syz [ 2007.731420][T20031] usb 7-1: Manufacturer: syz [ 2007.736199][T20031] usb 7-1: SerialNumber: syz [ 2007.788789][T20031] usb 7-1: config 0 descriptor?? [ 2007.865112][T20031] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2008.338596][T14314] usb 7-1: USB disconnect, device number 110 [ 2008.352796][T21969] usb 7-1: Failed to submit usb control message: -71 [ 2008.359770][T21969] usb 7-1: unable to send the bmi data to the device: -71 [ 2008.367300][T21969] usb 7-1: unable to get target info from device [ 2008.374608][T21969] usb 7-1: could not get target info (-71) [ 2008.380751][T21969] usb 7-1: could not probe fw (-71) [ 2008.498996][T21969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2008.507343][T21969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2008.627684][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2008.636074][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2009.491445][T14314] usb 4-1: USB disconnect, device number 99 [ 2009.506031][T26629] loop6: detected capacity change from 0 to 256 [ 2011.499794][T26629] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 2012.168622][T26643] loop6: detected capacity change from 0 to 1024 [ 2015.141870][T21032] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2016.116424][T26663] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6442'. [ 2016.415948][T20031] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 2016.615160][T20031] usb 8-1: Using ep0 maxpacket: 32 [ 2016.653069][T20031] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2016.662893][T20031] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2016.672503][T20031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.720399][T20031] usb 8-1: config 0 descriptor?? [ 2016.910661][T26675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6446'. [ 2016.966514][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6446'. [ 2017.289156][T21032] usb 4-1: no configurations [ 2017.294078][T21032] usb 4-1: can't read configurations, error -22 [ 2017.352089][T26682] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2017.763620][T26690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6452'. [ 2018.056020][T20031] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2018.149350][T21032] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2018.314714][T21032] usb 4-1: Using ep0 maxpacket: 32 [ 2018.363364][T21032] usb 4-1: no configurations [ 2018.369307][T21032] usb 4-1: can't read configurations, error -22 [ 2018.578334][T21032] usb usb4-port1: attempt power cycle [ 2018.977190][T21032] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2019.040568][T21032] usb 4-1: Using ep0 maxpacket: 32 [ 2019.060101][T21032] usb 4-1: no configurations [ 2019.065119][T21032] usb 4-1: can't read configurations, error -22 [ 2019.277609][T21032] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2019.359279][T21032] usb 4-1: Using ep0 maxpacket: 32 [ 2019.388447][T21032] usb 4-1: no configurations [ 2019.393337][T21032] usb 4-1: can't read configurations, error -22 [ 2019.466882][T21032] usb usb4-port1: unable to enumerate USB device [ 2019.552232][T21032] usb 8-1: USB disconnect, device number 83 [ 2020.198509][T20031] usb 7-1: Using ep0 maxpacket: 32 [ 2020.472589][T26706] input: syz1 as /devices/virtual/input/input75 [ 2021.277907][T20031] usb 7-1: unable to read config index 0 descriptor/all [ 2021.285153][T20031] usb 7-1: can't read configurations, error -71 [ 2022.006996][T20031] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2022.078144][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2022.078224][ T30] audit: type=1326 audit(1756586776.474:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb0f8ebe9 code=0x7ffc0000 [ 2022.256383][ T30] audit: type=1326 audit(1756586776.504:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cb0f85ba7 code=0x7ffc0000 [ 2022.283281][ T30] audit: type=1326 audit(1756586776.504:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4cb0f2adb9 code=0x7ffc0000 [ 2022.306898][ T30] audit: type=1326 audit(1756586776.504:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cb0f8ebe9 code=0x7ffc0000 [ 2022.330199][ T30] audit: type=1326 audit(1756586776.504:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb0f8ebe9 code=0x7ffc0000 [ 2022.353153][ T30] audit: type=1326 audit(1756586776.514:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cb0f85ba7 code=0x7ffc0000 [ 2022.378317][ T30] audit: type=1326 audit(1756586776.514:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4cb0f2adb9 code=0x7ffc0000 [ 2022.401870][ T30] audit: type=1326 audit(1756586776.534:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cb0f85ba7 code=0x7ffc0000 [ 2022.424687][ T30] audit: type=1326 audit(1756586776.534:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4cb0f2adb9 code=0x7ffc0000 [ 2022.447779][ T30] audit: type=1326 audit(1756586776.534:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26719 comm="syz.7.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4cb0f85ba7 code=0x7ffc0000 [ 2022.655907][T20031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2022.667387][T20031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.677933][T20031] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2022.689559][T20031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.020401][T20031] usb 7-1: config 0 descriptor?? [ 2025.214936][T26725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2025.310945][T26725] 9pnet_fd: p9_fd_create_tcp (26725): problem connecting socket to 127.0.0.1 [ 2025.396323][T20031] usbhid 7-1:0.0: can't add hid device: -71 [ 2025.403341][T20031] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2026.289752][T20031] usb 7-1: USB disconnect, device number 112 [ 2026.900319][ T8865] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 2027.023907][T26739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6470'. [ 2027.095264][ T8865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2027.107886][ T8865] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2027.117735][ T8865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.140142][ T8865] usb 7-1: config 0 descriptor?? [ 2027.148346][T26735] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2027.301771][T20031] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2027.361188][T21146] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2027.535097][T20031] usb 4-1: Using ep0 maxpacket: 32 [ 2027.578069][T20031] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2027.590684][T20031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2027.604700][T20031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2027.616091][T20031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2027.628052][T20031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2027.818836][T20031] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2027.828353][T20031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.837192][T20031] usb 4-1: Product: syz [ 2027.841676][T20031] usb 4-1: Manufacturer: syz [ 2027.846703][T20031] usb 4-1: SerialNumber: syz [ 2027.857127][T20031] usb 4-1: config 0 descriptor?? [ 2027.873148][ T8865] usbhid 7-1:0.0: can't add hid device: -71 [ 2027.880056][ T8865] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2027.893525][ T8865] usb 7-1: USB disconnect, device number 113 [ 2028.069764][T20031] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 2028.099729][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.108554][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.141463][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.166311][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.179305][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.194084][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.205098][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.213826][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.234540][T26753] siw: device registration error -23 [ 2028.240162][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.256241][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.291706][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.309364][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.338125][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.360207][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.395188][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.425996][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.439024][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.475502][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.498584][T26755] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2028.511036][T20031] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2028.517381][T20031] input input76: Timeout waiting for response from device. [ 2028.556358][T20031] usb 4-1: USB disconnect, device number 104 [ 2030.350508][T26764] IPVS: Error joining to the multicast group [ 2031.934588][T26775] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6482'. [ 2032.491998][T20031] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 2032.549574][T26781] overlayfs: failed to clone upperpath [ 2032.588310][T26777] bridge0: port 2(bridge_slave_1) entered disabled state [ 2032.596698][T26777] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.346760][T26783] loop6: detected capacity change from 0 to 32768 [ 2033.415679][T20031] usb 8-1: Using ep0 maxpacket: 32 [ 2033.504370][T20031] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2033.518087][T20031] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2033.531157][T20031] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2033.543526][T20031] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2033.556762][T20031] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2033.971291][T20031] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2033.981004][T20031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.989507][T20031] usb 8-1: Product: syz [ 2033.994001][T20031] usb 8-1: Manufacturer: syz [ 2033.998763][T20031] usb 8-1: SerialNumber: syz [ 2034.107521][T26783] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 2034.107651][T26783] allowing incompatible features above 0.0: (unknown version) [ 2034.107746][T26783] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2034.147990][T26783] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 2034.156506][T26783] bcachefs (loop6): initializing new filesystem [ 2034.177200][T26783] bcachefs (loop6): going read-write [ 2034.229674][T26783] bcachefs (loop6): marking superblocks [ 2034.282162][T26783] bcachefs (loop6): initializing freespace [ 2034.309337][T26783] bcachefs (loop6): done initializing freespace [ 2034.329231][T26783] bcachefs (loop6): reading snapshots table [ 2034.335706][T26783] bcachefs (loop6): reading snapshots done [ 2034.399766][T26777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2034.423622][T26777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2034.430477][T20031] usb 8-1: config 0 descriptor?? [ 2034.585123][T26783] bcachefs (loop6): done starting filesystem [ 2034.701697][T26795] loop3: detected capacity change from 0 to 512 [ 2034.846515][T26795] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 2035.009493][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2035.009578][ T30] audit: type=1804 audit(1756586789.358:3495): pid=26798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6485" name="/newroot/537/file0/bus" dev="loop6" ino=4098 res=1 errno=0 [ 2035.234850][T11928] syz1: Port: 1 Link DOWN [ 2035.252490][ T75] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.311738][T20031] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 2035.318413][T20031] input input77: Device does not respond to id packet M [ 2035.358945][ T75] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.397131][T26798] Invalid ELF header magic: != ELF [ 2035.442456][T26795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2035.477453][ T75] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.548724][ T75] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.767689][T26783] syz.6.6485 (26783) used greatest stack depth: 1200 bytes left [ 2035.776062][T20031] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 2035.782338][T20031] input input77: Device does not respond to id packet P [ 2035.806037][T20031] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 2035.812357][T20031] input input77: Device does not respond to id packet B [ 2035.886979][T18460] bcachefs (loop6): shutting down [ 2035.892286][T18460] bcachefs (loop6): going read-only [ 2035.898050][T18460] bcachefs (loop6): finished waiting for writes to stop [ 2035.990074][T18460] bcachefs (loop6): flushing journal and stopping allocators, journal seq 5 [ 2036.026948][T26804] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.6486: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 2036.093821][T20031] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2036.144616][T26804] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.6486: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 2036.192301][T26804] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.6486: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 2036.193473][T26805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6486'. [ 2036.220453][T20031] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2036.221735][T20031] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2036.244213][T20031] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2036.253439][T20031] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input77 [ 2036.311960][T18460] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 5 [ 2036.316092][T20031] usb 8-1: USB disconnect, device number 84 [ 2036.332690][T26804] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.6486: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 2036.451093][T18460] bcachefs (loop6): clean shutdown complete, journal seq 6 [ 2036.492291][T26804] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.6486: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 2036.585301][T18460] bcachefs (loop6): marking filesystem clean [ 2036.878647][T18460] bcachefs (loop6): shutdown complete [ 2040.011804][T19868] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 2040.054617][T19868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2040.300988][T26822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6494'. [ 2041.502255][T26834] loop7: detected capacity change from 0 to 1024 [ 2041.618178][T26834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2041.630770][T26834] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2041.879188][T26838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2042.760369][T26833] loop3: detected capacity change from 0 to 8192 [ 2043.840406][T26837] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2044.351593][T26389] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2044.795200][T26849] siw: device registration error -23 [ 2044.912439][T26844] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.920887][T26844] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.110491][T20031] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 2045.154536][T26844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2045.178302][T26844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2045.397853][T20031] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2045.407570][T20031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.415981][T20031] usb 7-1: Product: syz [ 2045.420613][T20031] usb 7-1: Manufacturer: syz [ 2045.425432][T20031] usb 7-1: SerialNumber: syz [ 2045.464641][T20031] usb 7-1: config 0 descriptor?? [ 2045.726249][T20031] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2045.910259][T26851] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.918531][T26851] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.153015][T26851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2046.179176][T26851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2046.570845][T26866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6511'. [ 2046.584471][T21969] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.602618][T21969] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.641101][T21969] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.676331][T21969] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.700911][T26816] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.709571][T26816] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.753000][T26816] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.776617][T26816] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.380451][ T8865] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2047.550699][ T8865] usb 4-1: Using ep0 maxpacket: 16 [ 2047.573658][ T8865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.585789][ T8865] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2047.865647][ T8865] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2047.875534][ T8865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.884003][ T8865] usb 4-1: Product: syz [ 2047.888812][ T8865] usb 4-1: Manufacturer: syz [ 2047.893787][ T8865] usb 4-1: SerialNumber: syz [ 2048.066525][ T8865] usb 4-1: config 0 descriptor?? [ 2048.235467][T20031] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2048.259461][T20031] usb 7-1: USB disconnect, device number 114 [ 2048.540141][T26885] siw: device registration error -23 [ 2050.295750][T26901] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6526'. [ 2051.287250][T11928] usb 4-1: USB disconnect, device number 105 [ 2052.055397][T26912] siw: device registration error -23 [ 2052.435020][T11928] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2052.623205][T11928] usb 7-1: Using ep0 maxpacket: 16 [ 2052.670818][T11928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.735153][T11928] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2052.745003][T11928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.753549][T11928] usb 7-1: Product: syz [ 2052.757894][T11928] usb 7-1: Manufacturer: syz [ 2052.762840][T11928] usb 7-1: SerialNumber: syz [ 2052.873799][T11928] usb 7-1: config 0 descriptor?? [ 2054.074866][T26929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6537'. [ 2054.424043][T11928] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2054.590410][T11928] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2054.602956][T11928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2054.614715][T11928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2054.624839][T11928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2054.638149][T11928] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2054.648099][T11928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.662192][T26939] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6541'. [ 2054.716074][T11928] usb 4-1: config 0 descriptor?? [ 2055.176027][T11928] usbhid 4-1:0.0: can't add hid device: -71 [ 2055.182561][T11928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2055.551048][T21032] usb 7-1: USB disconnect, device number 115 [ 2055.924603][T19926] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 2056.140750][T26955] binder_alloc: 26953: binder_alloc_buf, no vma [ 2056.150712][T11928] usb 4-1: USB disconnect, device number 106 [ 2056.221662][T26957] binder_alloc: 26953: binder_alloc_buf, no vma [ 2056.229103][T19926] usb 8-1: Using ep0 maxpacket: 32 [ 2056.273827][T19926] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 2056.282869][T19926] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2056.295737][T19926] usb 8-1: config 0 interface 0 altsetting 191 has an invalid descriptor for endpoint zero, skipping [ 2056.307699][T19926] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2056.321512][T19926] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2056.360743][T19926] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2056.370144][T19926] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2056.379105][T19926] usb 8-1: Product: syz [ 2056.383462][T19926] usb 8-1: Manufacturer: syz [ 2056.388345][T19926] usb 8-1: SerialNumber: syz [ 2056.433031][T19926] usb 8-1: config 0 descriptor?? [ 2056.469513][T19926] ldusb 8-1:0.0: Interrupt in endpoint not found [ 2056.520980][T26947] Invalid ELF header magic: != ELF [ 2056.833425][T26966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6552'. [ 2056.863061][T26966] macvtap3: entered promiscuous mode [ 2056.869698][T26966] macvtap3: entered allmulticast mode [ 2056.875412][T26966] bond0: entered allmulticast mode [ 2056.880707][T26966] bond_slave_0: entered allmulticast mode [ 2056.886862][T26966] bond_slave_1: entered allmulticast mode [ 2056.896184][T26969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6553'. [ 2056.898340][T26966] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 2056.998910][T26970] bond0: left allmulticast mode [ 2057.004619][T26970] bond_slave_0: left allmulticast mode [ 2057.010526][T26970] bond_slave_1: left allmulticast mode [ 2057.660769][T20031] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2058.717992][T26766] Bluetooth: hci4: Frame reassembly failed (-84) [ 2058.751517][T26993] 9pnet_fd: p9_fd_create_tcp (26993): problem connecting socket to 127.0.0.1 [ 2058.851986][T20031] usb 4-1: Using ep0 maxpacket: 16 [ 2058.869613][T20031] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.876139][T19926] usb 8-1: USB disconnect, device number 85 [ 2058.894679][T20031] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2058.904839][T20031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.913242][T20031] usb 4-1: Product: syz [ 2058.918017][T20031] usb 4-1: Manufacturer: syz [ 2058.922798][T20031] usb 4-1: SerialNumber: syz [ 2058.998241][T20031] usb 4-1: config 0 descriptor?? [ 2059.143129][T26987] Invalid ELF header magic: != ELF [ 2059.657027][T20031] usb 8-1: new full-speed USB device number 86 using dummy_hcd [ 2059.673664][T27008] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6570'. [ 2059.836819][T20031] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2059.846417][T20031] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.854623][T20031] usb 8-1: Product: syz [ 2059.859204][T20031] usb 8-1: Manufacturer: syz [ 2059.863998][T20031] usb 8-1: SerialNumber: syz [ 2059.878168][T20031] usb 8-1: config 0 descriptor?? [ 2060.131569][T20031] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2060.324272][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6572'. [ 2060.616175][T11928] usb 4-1: USB disconnect, device number 107 [ 2060.737716][ T5819] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2060.740035][T21146] Bluetooth: hci4: command 0x1003 tx timeout [ 2060.766131][T20031] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2061.287631][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6577'. [ 2061.321608][T27028] macvtap3: entered promiscuous mode [ 2061.328003][T27028] syz_tun: entered promiscuous mode [ 2061.334346][T27028] macvtap3: entered allmulticast mode [ 2061.340205][T27028] syz_tun: entered allmulticast mode [ 2061.366250][T27028] syz_tun: left allmulticast mode [ 2061.372064][T27028] syz_tun: left promiscuous mode [ 2061.792499][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6581'. [ 2062.431392][T27052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6586'. [ 2062.531153][T21032] usb 8-1: USB disconnect, device number 86 [ 2062.588566][T11928] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2062.758218][T11928] usb 4-1: Using ep0 maxpacket: 16 [ 2062.781787][T11928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2062.792800][T11928] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2062.819803][T11928] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2062.829566][T11928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.837929][T11928] usb 4-1: Product: syz [ 2062.842275][T11928] usb 4-1: Manufacturer: syz [ 2062.847518][T11928] usb 4-1: SerialNumber: syz [ 2062.869382][T11928] usb 4-1: config 0 descriptor?? [ 2062.915591][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6589'. [ 2062.962779][T27058] macvtap4: entered promiscuous mode [ 2062.968541][T27058] syz_tun: entered promiscuous mode [ 2062.974769][T27058] macvtap4: entered allmulticast mode [ 2062.980541][T27058] syz_tun: entered allmulticast mode [ 2063.034737][T27058] syz_tun: left allmulticast mode [ 2063.040259][T27058] syz_tun: left promiscuous mode [ 2063.068243][T21032] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 2063.096487][T27061] input: syz1 as /devices/virtual/input/input78 [ 2064.238525][T21032] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.248934][T21032] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2064.272831][T21032] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2064.284003][T21032] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2064.293110][T21032] usb 8-1: SerialNumber: syz [ 2064.413239][T27064] Invalid ELF header magic: != ELF [ 2064.535475][T21032] usb 8-1: 0:2 : does not exist [ 2064.541095][T21032] usb 8-1: unit 48 not found! [ 2064.545973][T21032] usb 8-1: unit 27 not found! [ 2064.550981][T21032] usb 8-1: unit 129 not found! [ 2064.555950][T21032] usb 8-1: unit 84 not found! [ 2064.561032][T21032] usb 8-1: unit 254 not found! [ 2064.565969][T21032] usb 8-1: unit 169 not found! [ 2064.593085][T27073] siw: device registration error -23 [ 2064.643784][T21032] usb 8-1: USB disconnect, device number 87 [ 2065.139954][T11928] usb 7-1: new full-speed USB device number 116 using dummy_hcd [ 2065.345319][T11928] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2065.354824][T11928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.363399][T11928] usb 7-1: Product: syz [ 2065.367740][T11928] usb 7-1: Manufacturer: syz [ 2065.372674][T11928] usb 7-1: SerialNumber: syz [ 2065.472269][T11928] usb 7-1: config 0 descriptor?? [ 2065.479436][T21032] usb 4-1: USB disconnect, device number 108 [ 2065.561602][T27092] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6600'. [ 2065.656972][T27094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6602'. [ 2065.735562][T11928] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2065.987686][T27099] fuse: Unknown parameter 'group_id00000000000000000000' [ 2066.412382][T27105] siw: device registration error -23 [ 2066.446231][T11928] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2067.681464][T27131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6616'. [ 2067.727905][T27131] macvtap1: entered promiscuous mode [ 2067.733692][T27131] bridge0: entered promiscuous mode [ 2067.739891][T27131] macvtap1: entered allmulticast mode [ 2067.745832][T27131] bridge0: entered allmulticast mode [ 2067.755323][T27132] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6615'. [ 2067.782124][T27133] bridge0: left allmulticast mode [ 2067.787466][T27133] bridge0: left promiscuous mode [ 2068.074552][T27135] fuse: Unknown parameter 'group_id00000000000000000000' [ 2068.102351][T21032] usb 7-1: USB disconnect, device number 116 [ 2068.355816][T27141] loop6: detected capacity change from 0 to 1764 [ 2068.431288][T27141] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 2068.454185][ T5819] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 2068.859220][T27154] loop7: detected capacity change from 0 to 8 [ 2069.093032][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2069.513060][T11928] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 2069.681851][T11928] usb 8-1: Using ep0 maxpacket: 16 [ 2069.717470][T11928] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.728155][T11928] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2069.822198][T11928] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2069.831838][T11928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.840037][T11928] usb 8-1: Product: syz [ 2069.844636][T11928] usb 8-1: Manufacturer: syz [ 2069.849409][T11928] usb 8-1: SerialNumber: syz [ 2069.885968][T27173] fuse: Bad value for 'user_id' [ 2069.891026][T27173] fuse: Bad value for 'user_id' [ 2069.914797][T11928] usb 8-1: config 0 descriptor?? [ 2070.121695][T19926] usb 7-1: new full-speed USB device number 117 using dummy_hcd [ 2070.396707][T19926] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2070.406121][T19926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.414643][T19926] usb 7-1: Product: syz [ 2070.418990][T19926] usb 7-1: Manufacturer: syz [ 2070.424126][T19926] usb 7-1: SerialNumber: syz [ 2070.446239][T19926] usb 7-1: config 0 descriptor?? [ 2070.536137][ T5819] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2070.685965][T19926] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2070.818348][T27190] loop3: detected capacity change from 0 to 8 [ 2071.318099][T19926] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2071.430215][ T5819] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 2071.522627][T11928] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2071.689112][T11928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.700753][T11928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.711344][T11928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2071.724849][T11928] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2071.734243][T11928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.746983][T11928] usb 4-1: config 0 descriptor?? [ 2072.397681][T11928] usbhid 4-1:0.0: can't add hid device: -71 [ 2072.404582][T11928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2072.419408][T11928] usb 4-1: USB disconnect, device number 109 [ 2072.498157][T19926] usb 8-1: USB disconnect, device number 88 [ 2072.521454][ T5819] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2072.530130][ T5819] Bluetooth: hci1: Injecting HCI hardware error event [ 2072.538534][ T5819] Bluetooth: hci1: hardware error 0x00 [ 2072.768463][T27221] siw: device registration error -23 [ 2073.190155][T11928] usb 7-1: USB disconnect, device number 117 [ 2073.466679][T27235] bridge: RTM_NEWNEIGH with invalid ether address [ 2073.480293][T27235] bridge: RTM_NEWNEIGH with invalid ether address [ 2073.693638][T19926] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 2073.827269][T27243] overlayfs: failed to resolve './file1': -2 [ 2073.883704][T19926] usb 8-1: Using ep0 maxpacket: 16 [ 2073.915953][T19926] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2073.926700][T19926] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2073.996709][T19926] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2074.006413][T19926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.016260][T19926] usb 8-1: Product: syz [ 2074.020609][T19926] usb 8-1: Manufacturer: syz [ 2074.026186][T19926] usb 8-1: SerialNumber: syz [ 2074.272806][T19926] usb 8-1: 0:2 : does not exist [ 2074.347612][T19926] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 2074.419753][T19926] usb 8-1: USB disconnect, device number 89 [ 2074.584096][ T5819] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2074.589069][T21146] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2074.599204][T21146] Bluetooth: hci0: Injecting HCI hardware error event [ 2074.607937][T21146] Bluetooth: hci0: hardware error 0x00 [ 2074.794118][T11928] usb 7-1: new full-speed USB device number 118 using dummy_hcd [ 2074.986154][T11928] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2074.995894][T11928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.004286][T11928] usb 7-1: Product: syz [ 2075.008644][T11928] usb 7-1: Manufacturer: syz [ 2075.013498][T11928] usb 7-1: SerialNumber: syz [ 2075.106541][T11928] usb 7-1: config 0 descriptor?? [ 2075.360887][T11928] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2075.464420][ T5819] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2075.472953][ T5819] Bluetooth: hci5: Injecting HCI hardware error event [ 2075.480884][ T5819] Bluetooth: hci5: hardware error 0x00 [ 2075.993390][T11928] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2076.148438][T27280] input: syz1 as /devices/virtual/input/input79 [ 2076.666052][T21146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2076.789773][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6680'. [ 2076.820262][T27295] macvtap1: entered promiscuous mode [ 2076.826584][T27295] syz_tun: entered promiscuous mode [ 2076.832836][T27295] macvtap1: entered allmulticast mode [ 2076.838639][T27295] syz_tun: entered allmulticast mode [ 2076.882861][T27296] syz_tun: left allmulticast mode [ 2076.888413][T27296] syz_tun: left promiscuous mode [ 2077.551618][ T5819] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2077.812408][T20031] usb 7-1: USB disconnect, device number 118 [ 2078.018238][T11928] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 2078.218084][T11928] usb 8-1: Using ep0 maxpacket: 32 [ 2078.250740][T11928] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2078.260300][T11928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.303623][T11928] usb 8-1: config 0 descriptor?? [ 2078.334271][T11928] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2078.528708][T11928] gspca_vc032x: reg_r err -32 [ 2078.533674][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.539707][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.545166][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.550753][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.556325][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.561754][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.567804][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.573235][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.578840][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.584289][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.589830][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.595266][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.601169][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.606696][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.612129][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.617725][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.623841][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.629562][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2078.635074][T11928] gspca_vc032x: Unknown sensor... [ 2078.640644][T11928] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 2079.156979][T19926] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2079.328911][T19926] usb 4-1: Using ep0 maxpacket: 32 [ 2079.353716][T19926] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2079.363246][T19926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.376556][T19926] usb 4-1: config 0 descriptor?? [ 2079.402457][T19926] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2079.517316][T11928] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 2079.644084][T19926] gspca_vc032x: reg_r err -32 [ 2079.651707][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.658045][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.663481][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.669087][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.674510][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.680157][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.685571][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.691196][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.697032][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.702447][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.708042][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.713459][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.719130][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.724559][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.730420][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.735929][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.741504][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.747008][T19926] gspca_vc032x: I2c Bus Busy Wait 00 [ 2079.754716][T19926] gspca_vc032x: Unknown sensor... [ 2079.756955][T11928] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2079.760977][T19926] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 2079.769502][T11928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.785265][T11928] usb 7-1: Product: syz [ 2079.789800][T11928] usb 7-1: Manufacturer: syz [ 2079.794573][T11928] usb 7-1: SerialNumber: syz [ 2079.825776][T11928] usb 7-1: config 0 descriptor?? [ 2080.056584][T11928] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2080.683965][T11928] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2080.818440][T11928] usb 8-1: USB disconnect, device number 90 [ 2081.039481][T27364] loop7: detected capacity change from 0 to 8 [ 2081.086042][T27364] cramfs: bad data blocksize 4294934200 [ 2081.092404][T27364] cramfs: bad data blocksize 4294934200 [ 2081.570382][T11928] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2081.748092][T11928] usb 8-1: Using ep0 maxpacket: 8 [ 2081.772754][T11928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2081.785313][T11928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2081.796378][T11928] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2081.810519][T11928] usb 8-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 2081.820039][T11928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.833030][T11928] usb 8-1: config 0 descriptor?? [ 2082.013461][T19926] usb 4-1: USB disconnect, device number 110 [ 2082.692040][T19926] usb 7-1: USB disconnect, device number 119 [ 2082.818972][T11928] sony 0003:1345:3008.0037: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.7-1/input0 [ 2082.832392][T11928] sony 0003:1345:3008.0037: failed to claim input [ 2082.933074][T11928] usb 8-1: USB disconnect, device number 91 [ 2083.605287][T27403] fuse: Unknown parameter 'group_i00000000000000000000' [ 2084.058644][T11928] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2084.239177][T11928] usb 8-1: Using ep0 maxpacket: 32 [ 2084.273656][T11928] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2084.283468][T11928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.335103][T11928] usb 8-1: config 0 descriptor?? [ 2084.363182][T11928] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2084.593622][T11928] gspca_vc032x: reg_r err -32 [ 2084.598680][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.604194][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.609874][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.615295][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.620886][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.626389][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.631961][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.637370][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.642959][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.648371][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.653894][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.659528][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.664946][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.671618][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.677045][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.682589][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.688063][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.693613][T11928] gspca_vc032x: I2c Bus Busy Wait 00 [ 2084.699230][T11928] gspca_vc032x: Unknown sensor... [ 2084.704647][T11928] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 2087.816693][T27430] loop3: detected capacity change from 0 to 8 [ 2087.946914][T27430] cramfs: bad data blocksize 4294934200 [ 2087.952834][T27430] cramfs: bad data blocksize 4294934200 [ 2088.111724][T19926] usb 8-1: USB disconnect, device number 92 [ 2088.481629][T21032] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2088.741435][T21032] usb 4-1: Using ep0 maxpacket: 8 [ 2089.166678][T21032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.179602][T21032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.190265][T21032] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2089.204135][T21032] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 2089.213637][T21032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.363590][T21032] usb 4-1: config 0 descriptor?? [ 2089.470152][T21032] usb 4-1: can't set config #0, error -71 [ 2089.514814][T21032] usb 4-1: USB disconnect, device number 111 [ 2089.672534][T19926] usb 8-1: new full-speed USB device number 93 using dummy_hcd [ 2089.767380][T27449] loop3: detected capacity change from 0 to 128 [ 2089.858217][T19926] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2089.868085][T19926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.876581][T19926] usb 8-1: Product: syz [ 2089.880943][T19926] usb 8-1: Manufacturer: syz [ 2089.885873][T19926] usb 8-1: SerialNumber: syz [ 2089.937352][T19926] usb 8-1: config 0 descriptor?? [ 2090.176899][T27455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6738'. [ 2090.193265][T19926] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2090.377397][T27457] loop6: detected capacity change from 0 to 16 [ 2090.391223][T27457] erofs (device loop6): mounted with root inode @ nid 36. [ 2090.428751][T27457] erofs (device loop6): readahead error at folio 6 @ nid 36 [ 2090.437148][T27457] erofs (device loop6): readahead error at folio 4 @ nid 36 [ 2090.446018][T27457] erofs (device loop6): invalid logical cluster 0 at nid 36 [ 2090.453837][T27457] erofs (device loop6): readahead error at folio 0 @ nid 36 [ 2090.461980][T27457] bio_check_eod: 2301 callbacks suppressed [ 2090.462059][T27457] syz.6.6739: attempt to access beyond end of device [ 2090.462059][T27457] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 2090.482858][T27457] syz.6.6739: attempt to access beyond end of device [ 2090.482858][T27457] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 2090.497200][T27457] syz.6.6739: attempt to access beyond end of device [ 2090.497200][T27457] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 2090.514120][T27457] erofs (device loop6): invalid logical cluster 0 at nid 36 [ 2090.530687][T27457] erofs (device loop6): read error -117 @ 0 of nid 36 [ 2090.538102][T27457] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 2091.591757][T21960] bridge_slave_1: left allmulticast mode [ 2091.598310][T21960] bridge_slave_1: left promiscuous mode [ 2091.605537][T21960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.834924][T21960] bridge_slave_0: left allmulticast mode [ 2091.844216][T21960] bridge_slave_0: left promiscuous mode [ 2091.850904][T21960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.206932][T27470] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6743'. [ 2092.665211][T21960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2092.715391][T21960] bond_slave_0: left promiscuous mode [ 2092.807454][T21960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2092.864823][T21960] bond_slave_1: left promiscuous mode [ 2092.874144][T21960] bond0 (unregistering): Released all slaves [ 2092.902499][T21960] bond1 (unregistering): Released all slaves [ 2092.932953][T21960] bond2 (unregistering): Released all slaves [ 2092.963198][T21960] bond3 (unregistering): Released all slaves [ 2093.150977][T19926] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2093.217154][T19926] usb 8-1: USB disconnect, device number 93 [ 2093.654898][T21960] tipc: Left network mode [ 2093.715821][T21960] IPVS: stopping master sync thread 22743 ... [ 2094.099526][T21960] hsr_slave_0: left promiscuous mode [ 2094.119021][T21960] hsr_slave_1: left promiscuous mode [ 2094.127403][T21960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2094.154924][T21960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2094.580230][T27476] loop7: detected capacity change from 0 to 8 [ 2094.700437][T27476] cramfs: bad data blocksize 4294934200 [ 2094.707218][T27476] cramfs: bad data blocksize 4294934200 [ 2095.368113][T21960] IPVS: stop unused estimator thread 0... [ 2095.514564][T21032] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 2095.561955][T21146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2095.575422][T21146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2095.588312][T21146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2095.656752][T21146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2095.670556][T21146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2095.889631][T21032] usb 8-1: Using ep0 maxpacket: 8 [ 2095.920160][T21032] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2095.931526][T21032] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2095.943170][T21032] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2095.956958][T21032] usb 8-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 2095.966952][T21032] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.014129][T21032] usb 8-1: config 0 descriptor?? [ 2096.258974][T27496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6754'. [ 2096.478176][T21032] sony 0003:1345:3008.0038: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.7-1/input0 [ 2096.490598][T21032] sony 0003:1345:3008.0038: failed to claim input [ 2096.552478][T27486] chnl_net:caif_netlink_parms(): no params data found [ 2096.643782][T11928] usb 8-1: USB disconnect, device number 94 [ 2096.785349][T19926] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 2097.010390][T19926] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2097.019826][T19926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.028215][T19926] usb 7-1: Product: syz [ 2097.032556][T19926] usb 7-1: Manufacturer: syz [ 2097.037503][T19926] usb 7-1: SerialNumber: syz [ 2097.059809][T19926] usb 7-1: config 0 descriptor?? [ 2097.227902][T27486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2097.237767][T27486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.245999][T27486] bridge_slave_0: entered allmulticast mode [ 2097.257431][T27486] bridge_slave_0: entered promiscuous mode [ 2097.280385][T27486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2097.288379][T27486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2097.296715][T27486] bridge_slave_1: entered allmulticast mode [ 2097.306953][T27486] bridge_slave_1: entered promiscuous mode [ 2097.316872][T19926] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2097.461277][T27486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2097.502957][T27486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2097.715955][T21146] Bluetooth: hci2: command tx timeout [ 2097.775576][T27486] team0: Port device team_slave_0 added [ 2097.802072][T27486] team0: Port device team_slave_1 added [ 2097.999832][T27486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2098.007287][T27486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2098.034168][T27486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2098.207503][T27486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2098.214888][T27486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2098.241584][T27486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2098.338291][T27516] loop7: detected capacity change from 0 to 8192 [ 2098.450287][T27516] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2098.570559][T27486] hsr_slave_0: entered promiscuous mode [ 2098.584206][T27486] hsr_slave_1: entered promiscuous mode [ 2098.594555][T27486] debugfs: 'hsr0' already exists in 'hsr' [ 2098.602553][T27486] Cannot create hsr debugfs directory [ 2098.918499][T27527] lo: entered allmulticast mode [ 2098.924339][T27527] tunl0: entered allmulticast mode [ 2098.932598][T27527] gre0: entered allmulticast mode [ 2098.938886][T27527] gretap0: entered allmulticast mode [ 2098.944920][T27527] erspan0: entered allmulticast mode [ 2098.951116][T27527] ip_vti0: entered allmulticast mode [ 2098.957669][T27527] ip6_vti0: entered allmulticast mode [ 2098.964066][T27527] sit0: entered allmulticast mode [ 2098.970085][T27527] ip6tnl0: entered allmulticast mode [ 2098.976248][T27527] ip6gre0: entered allmulticast mode [ 2098.982264][T27527] syz_tun: entered allmulticast mode [ 2098.988908][T27527] ip6gretap0: entered allmulticast mode [ 2098.995219][T27527] bridge0: entered allmulticast mode [ 2099.001520][T27527] vcan0: entered allmulticast mode [ 2099.007410][T27527] bond0: entered allmulticast mode [ 2099.013282][T27527] bond_slave_0: entered allmulticast mode [ 2099.019659][T27527] bond_slave_1: entered allmulticast mode [ 2099.026546][T27527] dummy0: entered allmulticast mode [ 2099.032675][T27527] nlmon0: entered allmulticast mode [ 2099.038946][T27527] caif0: entered allmulticast mode [ 2099.044994][T27527] batadv0: entered allmulticast mode [ 2099.051455][T27527] vxcan0: entered allmulticast mode [ 2099.057463][T27527] vxcan1: entered allmulticast mode [ 2099.063424][T27527] veth0: entered allmulticast mode [ 2099.069604][T27527] veth1: entered allmulticast mode [ 2099.075647][T27527] veth0_to_bridge: entered allmulticast mode [ 2099.083395][T27527] veth1_to_bridge: entered allmulticast mode [ 2099.091163][T27527] veth0_to_bond: entered allmulticast mode [ 2099.098811][T27527] veth1_to_bond: entered allmulticast mode [ 2099.106593][T27527] veth0_to_team: entered allmulticast mode [ 2099.113891][T27527] team_slave_0: entered allmulticast mode [ 2099.120743][T27527] veth1_to_team: entered allmulticast mode [ 2099.127670][T27527] team_slave_1: entered allmulticast mode [ 2099.134355][T27527] veth0_to_batadv: entered allmulticast mode [ 2099.141567][T27527] batadv_slave_0: entered allmulticast mode [ 2099.148634][T27527] veth1_to_batadv: entered allmulticast mode [ 2099.155568][T27527] batadv_slave_1: entered allmulticast mode [ 2099.162624][T27527] xfrm0: entered allmulticast mode [ 2099.169328][T27527] veth0_to_hsr: entered allmulticast mode [ 2099.176225][T27527] hsr_slave_0: entered allmulticast mode [ 2099.182872][T27527] veth1_to_hsr: entered allmulticast mode [ 2099.189694][T27527] hsr_slave_1: entered allmulticast mode [ 2099.196581][T27527] hsr0: entered allmulticast mode [ 2099.202585][T27527] veth1_virt_wifi: entered allmulticast mode [ 2099.209697][T27527] veth0_virt_wifi: entered allmulticast mode [ 2099.217339][T27527] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2099.225596][T27527] veth1_vlan: entered allmulticast mode [ 2099.232366][T27527] veth0_vlan: entered allmulticast mode [ 2099.239120][T27527] vlan0: entered allmulticast mode [ 2099.245187][T27527] vlan1: entered allmulticast mode [ 2099.251387][T27527] macvlan0: entered allmulticast mode [ 2099.258015][T27527] macvlan1: entered allmulticast mode [ 2099.264343][T27527] ipvlan0: entered allmulticast mode [ 2099.270762][T27527] ipvlan1: entered allmulticast mode [ 2099.277093][T27527] veth1_macvtap: entered allmulticast mode [ 2099.283886][T27527] veth0_macvtap: entered allmulticast mode [ 2099.290839][T27527] macvtap0: entered allmulticast mode [ 2099.297372][T27527] macsec0: entered allmulticast mode [ 2099.303656][T27527] geneve0: entered allmulticast mode [ 2099.310062][T27527] geneve1: entered allmulticast mode [ 2099.317631][T27527] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 2099.325721][T27527] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 2099.334533][T27527] vlan3: left promiscuous mode [ 2099.339633][T27527] bond1: left promiscuous mode [ 2099.346173][T27527] bond2: entered allmulticast mode [ 2099.352079][T27527] macvtap1: left promiscuous mode [ 2099.358269][T27527] netdevsim netdevsim9 eth0: entered allmulticast mode [ 2099.366247][T27527] netdevsim netdevsim9 eth1: entered allmulticast mode [ 2099.374093][T27527] netdevsim netdevsim9 eth2: entered allmulticast mode [ 2099.382101][T27527] netdevsim netdevsim9 eth3: entered allmulticast mode [ 2099.390051][T27527] macvtap2: left promiscuous mode [ 2099.396230][T27527] macvtap3: left promiscuous mode [ 2099.402197][T27527] macvtap4: left promiscuous mode [ 2099.797790][T21146] Bluetooth: hci2: command tx timeout [ 2099.869843][T19926] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2099.897759][T19926] usb 7-1: USB disconnect, device number 120 [ 2099.916835][T21032] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 2100.312439][T21032] usb 8-1: Using ep0 maxpacket: 16 [ 2100.442497][T21032] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2100.455075][T21032] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2100.803568][T21032] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2100.813270][T21032] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.821672][T21032] usb 8-1: Product: syz [ 2100.826006][T21032] usb 8-1: Manufacturer: syz [ 2100.831264][T21032] usb 8-1: SerialNumber: syz [ 2101.157966][T21032] usb 8-1: 0:2 : does not exist [ 2101.223163][T21032] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 2101.304409][T21032] usb 8-1: USB disconnect, device number 95 [ 2101.576537][T27486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2101.620583][T27547] loop6: detected capacity change from 0 to 1024 [ 2101.642253][T27486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2101.702319][T27486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2101.746184][T27547] hfsplus: request for non-existent node 3 in B*Tree [ 2101.753189][T27547] hfsplus: request for non-existent node 3 in B*Tree [ 2101.771138][T27486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2101.879432][T21146] Bluetooth: hci2: command tx timeout [ 2102.364365][T27555] loop6: detected capacity change from 0 to 512 [ 2102.408568][T27555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2102.523139][T27486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2102.570023][T27555] EXT4-fs (loop6): 1 truncate cleaned up [ 2102.572180][T27486] 8021q: adding VLAN 0 to HW filter on device team0 [ 2102.578058][T27555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2102.637658][T26766] bridge0: port 1(bridge_slave_0) entered blocking state [ 2102.645128][T26766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2102.660324][T26766] bridge0: port 2(bridge_slave_1) entered blocking state [ 2102.667951][T26766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2103.280704][T27557] loop7: detected capacity change from 0 to 8192 [ 2103.466065][T27557] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2103.506968][T27486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2104.069829][T21146] Bluetooth: hci2: command tx timeout [ 2105.698036][T18460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2106.031426][T27588] input: syz1 as /devices/virtual/input/input80 [ 2106.193175][T27486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2106.603453][T27486] veth0_vlan: entered promiscuous mode [ 2106.689454][T27486] veth1_vlan: entered promiscuous mode [ 2106.973518][T27486] veth0_macvtap: entered promiscuous mode [ 2107.034901][T27486] veth1_macvtap: entered promiscuous mode [ 2107.213386][T27486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2107.290764][T27486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2107.305830][T27600] loop6: detected capacity change from 0 to 512 [ 2107.355746][T21960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.369875][T27600] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2107.384266][T21960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.413997][T21960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.464093][T21960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.479711][T27600] EXT4-fs (loop6): 1 truncate cleaned up [ 2107.491020][T27600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2108.231677][T18460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2108.490155][T27623] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 2108.504775][T27619] siw: device registration error -23 [ 2108.791246][T21032] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2108.971581][T21032] usb 7-1: Using ep0 maxpacket: 16 [ 2109.013558][T21032] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2109.025093][T21032] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2109.067356][T21032] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2109.077073][T21032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.086316][T21032] usb 7-1: Product: syz [ 2109.090668][T21032] usb 7-1: Manufacturer: syz [ 2109.096120][T21032] usb 7-1: SerialNumber: syz [ 2109.370830][T21032] usb 7-1: 0:2 : does not exist [ 2109.382857][T11928] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 2109.419871][T21032] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2109.509610][T21032] usb 7-1: USB disconnect, device number 121 [ 2109.521492][T11928] usb 8-1: device descriptor read/64, error -71 [ 2109.779477][T11928] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 2109.931492][T11928] usb 8-1: device descriptor read/64, error -71 [ 2110.044295][T11928] usb usb8-port1: attempt power cycle [ 2110.413103][T11928] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 2110.469399][T11928] usb 8-1: device descriptor read/8, error -71 [ 2110.492147][T21032] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2110.726628][T21032] usb 7-1: Using ep0 maxpacket: 16 [ 2110.742712][T11928] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 2110.797324][T11928] usb 8-1: device descriptor read/8, error -71 [ 2110.801163][T21032] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.814226][T21032] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2110.832216][T21032] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2110.842249][T21032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.850653][T21032] usb 7-1: Product: syz [ 2110.855218][T21032] usb 7-1: Manufacturer: syz [ 2110.859980][T21032] usb 7-1: SerialNumber: syz [ 2110.920767][T11928] usb usb8-port1: unable to enumerate USB device [ 2111.103343][T21032] usb 7-1: 0:2 : does not exist [ 2111.140218][T21032] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2111.196483][T21032] usb 7-1: USB disconnect, device number 122 [ 2111.419806][T22085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2111.428087][T22085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2111.582842][T21969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2111.590883][T21969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2112.715035][T27686] tipc: Enabling of bearer rejected, failed to enable media [ 2114.373802][T11928] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 2114.534258][T11928] usb 8-1: device descriptor read/64, error -71 [ 2114.778346][T11928] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 2114.954188][T11928] usb 8-1: device descriptor read/64, error -71 [ 2115.070560][T11928] usb usb8-port1: attempt power cycle [ 2115.455828][T11928] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 2115.537342][T11928] usb 8-1: device descriptor read/8, error -71 [ 2115.556529][T27736] tipc: Enabling of bearer rejected, failed to enable media [ 2115.785830][T11928] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 2115.814351][T21032] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 2115.839773][T11928] usb 8-1: device descriptor read/8, error -71 [ 2115.958466][T11928] usb usb8-port1: unable to enumerate USB device [ 2116.040915][T21032] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2116.050697][T21032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.059227][T21032] usb 7-1: Product: syz [ 2116.063576][T21032] usb 7-1: Manufacturer: syz [ 2116.068464][T21032] usb 7-1: SerialNumber: syz [ 2116.133969][T21032] usb 7-1: config 0 descriptor?? [ 2116.374914][T21032] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2116.876490][T11928] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2117.133285][T11928] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2117.144649][T11928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.153539][T11928] usb 2-1: Product: syz [ 2117.158017][T11928] usb 2-1: Manufacturer: syz [ 2117.162798][T11928] usb 2-1: SerialNumber: syz [ 2117.247329][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 2117.269318][T11928] usb 2-1: config 0 descriptor?? [ 2117.422015][T21032] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2117.476348][T27769] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6838'. [ 2117.490952][T11928] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2117.908315][T27774] tipc: Started in network mode [ 2117.913589][T27774] tipc: Node identity 76c1bd6edf2b, cluster identity 4711 [ 2117.924379][T27774] tipc: Enabled bearer , priority 0 [ 2117.956625][T27774] syzkaller0: entered promiscuous mode [ 2117.964646][T27774] syzkaller0: entered allmulticast mode [ 2118.029955][T27774] tipc: Resetting bearer [ 2118.058802][T27772] tipc: Resetting bearer [ 2118.098688][T27772] tipc: Disabling bearer [ 2118.581257][T11928] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2118.741761][T27784] tipc: Enabling of bearer rejected, failed to enable media [ 2118.759396][T11928] usb 7-1: USB disconnect, device number 123 [ 2119.803026][T27810] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6851'. [ 2119.817262][T21032] usb 2-1: USB disconnect, device number 4 [ 2123.314388][T27823] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 2123.326248][T27823] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2123.510732][T11928] usb 8-1: new full-speed USB device number 104 using dummy_hcd [ 2123.746568][T11928] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2123.756180][T11928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.764934][T11928] usb 8-1: Product: syz [ 2123.769574][T11928] usb 8-1: Manufacturer: syz [ 2123.774348][T11928] usb 8-1: SerialNumber: syz [ 2123.813333][T27832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6860'. [ 2123.837027][T11928] usb 8-1: config 0 descriptor?? [ 2124.061074][T11928] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2125.898654][T27863] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6873'. [ 2126.546900][T26816] ===================================================== [ 2126.554791][T26816] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0 [ 2126.563693][T26816] n_tty_receive_buf_closing+0xfe/0x9a0 [ 2126.572451][T26816] n_tty_receive_buf_common+0x19d5/0x2540 [ 2126.579655][T26816] n_tty_receive_buf2+0x4c/0x60 [ 2126.585130][T26816] tty_ldisc_receive_buf+0xc6/0x2c0 [ 2126.585629][T11928] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2126.591205][T26816] tty_port_default_receive_buf+0xd7/0x1a0 [ 2126.607280][T26816] flush_to_ldisc+0x43e/0xe30 [ 2126.612751][T26816] process_scheduled_works+0xb8e/0x1d80 [ 2126.618925][T26816] worker_thread+0xedf/0x1590 [ 2126.626045][T26816] kthread+0xd59/0xf00 [ 2126.630923][T26816] ret_from_fork+0x1e3/0x310 [ 2126.636103][T26816] ret_from_fork_asm+0x1a/0x30 [ 2126.641740][T26816] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2126.644579][T26816] Uninit was stored to memory at: [ 2126.650725][T26816] n_tty_receive_buf_closing+0xf7/0x9a0 [ 2126.657020][T26816] n_tty_receive_buf_common+0x19d5/0x2540 [ 2126.663546][T26816] n_tty_receive_buf2+0x4c/0x60 [ 2126.669055][T26816] tty_ldisc_receive_buf+0xc6/0x2c0 [ 2126.677403][T26816] tty_port_default_receive_buf+0xd7/0x1a0 [ 2126.685904][T26816] flush_to_ldisc+0x43e/0xe30 [ 2126.687692][T11928] usb 8-1: USB disconnect, device number 104 [ 2126.691543][T26816] process_scheduled_works+0xb8e/0x1d80 [ 2126.703892][T26816] worker_thread+0xedf/0x1590 [ 2126.709241][T26816] kthread+0xd59/0xf00 [ 2126.714040][T26816] ret_from_fork+0x1e3/0x310 [ 2126.719228][T26816] ret_from_fork_asm+0x1a/0x30 [ 2126.724824][T26816] [ 2126.727671][T26816] Uninit was created at: [ 2126.732740][T26816] __kmalloc_noprof+0x95f/0x1310 [ 2126.738353][T26816] __tty_buffer_request_room+0x3d4/0x7a0 [ 2126.745026][T26816] __tty_insert_flip_string_flags+0x157/0x6f0 [ 2126.751858][T26816] uart_insert_char+0x368/0x930 [ 2126.757331][T26816] serial8250_read_char+0x1ba/0x670 [ 2126.763345][T26816] serial8250_handle_irq+0x930/0x1110 [ 2126.769335][T26816] serial8250_default_handle_irq+0x116/0x330 [ 2126.779550][T26816] serial8250_interrupt+0xc8/0x400 [ 2126.786546][T26816] __handle_irq_event_percpu+0x11f/0xbf0 [ 2126.792978][T26816] handle_irq_event+0xe0/0x2a0 [ 2126.798321][T26816] handle_edge_irq+0x2a9/0xb50 [ 2126.803773][T26816] __common_interrupt+0x9d/0x180 [ 2126.809331][T26816] common_interrupt+0x94/0xb0 [ 2126.814747][T26816] asm_common_interrupt+0x2b/0x40 [ 2126.820612][T26816] [ 2126.823477][T26816] CPU: 0 UID: 0 PID: 26816 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(none) [ 2126.834033][T26816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2126.844845][T26816] Workqueue: events_unbound flush_to_ldisc [ 2126.851508][T26816] ===================================================== [ 2126.858979][T26816] Disabling lock debugging due to kernel taint [ 2126.865939][T26816] Kernel panic - not syncing: kmsan.panic set ... [ 2126.872471][T26816] CPU: 0 UID: 0 PID: 26816 Comm: kworker/u8:1 Tainted: G B syzkaller #0 PREEMPT(none) [ 2126.883760][T26816] Tainted: [B]=BAD_PAGE [ 2126.888090][T26816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2126.898258][T26816] Workqueue: events_unbound flush_to_ldisc [ 2126.904246][T26816] Call Trace: [ 2126.907603][T26816] [ 2126.910607][T26816] __dump_stack+0x26/0x30 [ 2126.915086][T26816] dump_stack_lvl+0x53/0x270 [ 2126.919822][T26816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2126.925782][T26816] dump_stack+0x1e/0x25 [ 2126.930091][T26816] vpanic+0x361/0xc50 [ 2126.934229][T26816] panic+0x15d/0x160 [ 2126.938305][T26816] kmsan_report+0x31c/0x320 [ 2126.942945][T26816] ? __msan_warning+0x1b/0x30 [ 2126.947737][T26816] ? n_tty_receive_buf_closing+0xfe/0x9a0 [ 2126.953637][T26816] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 2126.959706][T26816] ? n_tty_receive_buf2+0x4c/0x60 [ 2126.964897][T26816] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 2126.970415][T26816] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 2126.976550][T26816] ? flush_to_ldisc+0x43e/0xe30 [ 2126.981537][T26816] ? process_scheduled_works+0xb8e/0x1d80 [ 2126.987434][T26816] ? worker_thread+0xedf/0x1590 [ 2126.992440][T26816] ? kthread+0xd59/0xf00 [ 2126.996801][T26816] ? ret_from_fork+0x1e3/0x310 [ 2127.001683][T26816] ? ret_from_fork_asm+0x1a/0x30 [ 2127.006779][T26816] ? ret_from_fork_asm+0x1a/0x30 [ 2127.011878][T26816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2127.017846][T26816] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 2127.023740][T26816] ? __update_load_avg_se+0x194/0x11c0 [ 2127.029380][T26816] ? kmsan_get_metadata+0xfb/0x160 [ 2127.034642][T26816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2127.040611][T26816] ? kmsan_get_metadata+0xfb/0x160 [ 2127.045863][T26816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2127.051821][T26816] ? kmsan_get_metadata+0xfb/0x160 [ 2127.057069][T26816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2127.063017][T26816] ? kmsan_get_metadata+0xfb/0x160 [ 2127.068270][T26816] __msan_warning+0x1b/0x30 [ 2127.072896][T26816] n_tty_receive_buf_closing+0xfe/0x9a0 [ 2127.078690][T26816] n_tty_receive_buf_common+0x19d5/0x2540 [ 2127.084679][T26816] n_tty_receive_buf2+0x4c/0x60 [ 2127.089714][T26816] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 2127.095426][T26816] tty_ldisc_receive_buf+0xc6/0x2c0 [ 2127.100793][T26816] tty_port_default_receive_buf+0xd7/0x1a0 [ 2127.106768][T26816] flush_to_ldisc+0x43e/0xe30 [ 2127.111605][T26816] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 2127.118185][T26816] ? __pfx_flush_to_ldisc+0x10/0x10 [ 2127.123528][T26816] process_scheduled_works+0xb8e/0x1d80 [ 2127.129302][T26816] worker_thread+0xedf/0x1590 [ 2127.134173][T26816] kthread+0xd59/0xf00 [ 2127.138360][T26816] ? __pfx_worker_thread+0x10/0x10 [ 2127.143660][T26816] ? __pfx_kthread+0x10/0x10 [ 2127.148381][T26816] ret_from_fork+0x1e3/0x310 [ 2127.153089][T26816] ? __pfx_kthread+0x10/0x10 [ 2127.157844][T26816] ret_from_fork_asm+0x1a/0x30 [ 2127.162818][T26816] [ 2127.166193][T26816] Kernel Offset: disabled [ 2127.170564][T26816] Rebooting in 86400 seconds..