last executing test programs: 14m37.621003891s ago: executing program 32 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') read$FUSE(r5, &(0x7f00000027c0)={0x2020}, 0x2038) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), r6) lseek(r5, 0x5, 0x1) 13m55.918830949s ago: executing program 33 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 13m3.765095604s ago: executing program 34 (id=144): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x6, 0xc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f0000000840)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44000880) utime(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a00831300"/23], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="ed761b5b3b4996bbcf7e6556cdc375b25e8e7b9c51984b3f21c9929e95e19e443c7d88c85dc734f433698c", 0x2b, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0xfffff40d, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, 0x0, 0x0) 10m47.353221828s ago: executing program 7 (id=434): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r4, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e000006aac1414aa"], 0x10) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 10m46.495296044s ago: executing program 7 (id=435): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 10m45.812359932s ago: executing program 7 (id=437): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x4, 0x5a, &(0x7f00000006c0)=""/90}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x2931890e}, 0x33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) unshare(0x64000600) 10m43.898715308s ago: executing program 7 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m42.415499041s ago: executing program 7 (id=444): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000001"]) 10m41.17273133s ago: executing program 7 (id=446): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) dup2(r0, r0) 10m25.813126305s ago: executing program 35 (id=446): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) dup2(r0, r0) 10m4.108104604s ago: executing program 4 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r6], 0x24}}, 0x4004) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe) r8 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') r10 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x18d]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_BULK(r8, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521) 10m2.424802453s ago: executing program 4 (id=518): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8643e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c040}, 0x8041) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) r6 = socket$inet(0x2, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') syz_fuse_handle_req(r9, &(0x7f0000004200)="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", 0x2000, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r8, r7, 0x0, 0x9c) 10m0.714984124s ago: executing program 4 (id=521): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000380)=[{r0, 0x500}], 0x1, 0xae6) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) 9m59.116968309s ago: executing program 4 (id=525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) read(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x281, 0x0, 0x0) 9m58.315294548s ago: executing program 4 (id=527): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x100, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 9m57.364929275s ago: executing program 4 (id=529): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) dup2(r0, r0) 9m41.596716334s ago: executing program 36 (id=529): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) dup2(r0, r0) 4m2.61903884s ago: executing program 0 (id=1545): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000020000000100000604"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x8, 0x81, 0x9, 0x80000000, 0x5, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m0.868461494s ago: executing program 0 (id=1548): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x201408c, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 3m59.917640477s ago: executing program 0 (id=1549): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 3m55.424019006s ago: executing program 0 (id=1558): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000020000000100000604"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010009"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x9, 0x8, 0x81, 0x9, 0x80000000, 0x5, 0x9}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m54.449231204s ago: executing program 0 (id=1562): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 3m51.541408272s ago: executing program 0 (id=1565): prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x4) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x3) getuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) landlock_restrict_self(0xffffffffffffffff, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 3m35.885122258s ago: executing program 37 (id=1565): prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x4) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x3) getuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) landlock_restrict_self(0xffffffffffffffff, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 2m47.587692723s ago: executing program 1 (id=1697): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0x1, 0x1542, &(0x7f00000007c0)="$eJzs3Qu4TtX2MPAx5pxr2+TyJrmvMcfiTS6TJMklIZdKkoTknpAkSZJKbHJLQpLkupPcQ+5pJ/f7LfeQHEmShISE+T07+jidztd3zun8nf/Z4/c86zHHWmvONabxvu9a832evfe3nQZVrV+tUh1mhn+G/rWBF/9JAoBEAOgLAFkAIACAkllLZk09nl5j0j91EfFvUnfy1c5AXE1S/7RN6p+2Sf3TNql/2ib1T9uk/mmb1D9tk/oLkaZNzXWtbGl3k+///5dT/0pnuf//90H8211/71yp/38b/Q+dLfVPMxJ+b6fUP634/VuA1D9tk/qnZcHVTkBcZfL+T9uk/kKkaX/6d8przvwj5wf/lhz+hzcNVz+Hf3YTQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCH+B5zxlxkA+LV9tfMSQgghhBBCCCHEn8d/cLUzEEIIIYQQQgghxL8fggINBgJIgHSQCOkhA1wDGSETZIYsEINrIStcB9ngesgOOSAn5ILckAfyQggEFhgiyAf5IQ43QAG4EQpCISgMRcBBUSgGN0FxuBlKwC1QEm6FUnAblIYyUBbKwe1QHu6AClARKsGdUBmqQFWoBnfB3XAPVId7oQbcBzXhfqgFD0BteBDqQF2oBw9B/YSHoQE0hEbQGJpAU2j2B/2Ts/ymP6T2fxG6wEvQFbpBEnSHHvAy9IRe0Bv6QF94BfrBq9AfXoMBMBAGweswGN6AIfAmDIW3YBi8DcNhBIyEUTAaxkAyvANj4V0YB+89nAkmwESYBJNhCkyF92EaTIcZ8AHMhFkwG5LTz4V5MB8+hAXwEaTAx7AQPoFFsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE3wKWyGLbAVtsF22AE74TPYBbthD3wOe/GLf7D/6b/uD50REFChQoMGEzABEzERM2AGzIgZMTNmxhjGMCtmxWyYDbNjdsyJOTE35sa8mBcJCRkZ82E+jGMcC2ABLIgFsTAWRocOi2ExLI43YwksgSWxJJbCUlgay2AZLIflsDyWxwpYASthJayMlbEqVsW78C68B6tjdayBNbAm1sRaWAtrY22sg3WwHtbD+lgfG2ADbISNsAk2wWbYDJtjc2yBLbAVtsLW2BrbYBtsi22xHbbD9tgeO2AH7IgdsRN2ws74PD6PL+KL+BK+hN2wsuqOPbAH9sSe2Bv7YB98Bfvhq/gqvoYDcCAOwtfxdXwDh+ApHIpv4TAchuXVCByJmZDVGEzGZEwHY3EcjsPxOAEn4CScjFNwKk7FaTgdp+MHOBNn4Sycg3NwHs7H+bgAP8IUTMGFeBoX4WJcgktxGS7HZbgSV+FKXINrcQ2ux/W4ETfip/gpbsEtuA234Q7cgZ/hZ7gbd+MA3It7cR/uw/24Hw/gATyIB/EQHsLDeBiP4BE8ikfxGB7HE3gcT+JJPIWn8QwAnMWzeA7P4QW8kPrmV6mMMipBJahElagyqAwqo8qoMqvMKqZiKqvKqrKpbCq7yq5yqpwqt8qt8qq8ihQpVpHKp/KpuIqrAqqAKqgKqsKqsHLKqWKqmCquiqsSqoQqqW49U0rdpkqrMqqlK6fKqfKqlaugKqpKqpKqrKqoqqqaqqbuVner6qq6qqFqqJqqpqqlHlC1VXfsjXVVamXqq4HYQA3CRqqxaqKaqjfwEdVcDcEWqqVqpR5Tb+FQbKOau7bqSdVOjcT26mk1Cp9RHdUY7KSeU53V8+oF9aLqolq4rqqbGo/dVQ81CXuqXqq36qOmYRWVWrGq6jU1QA1Ug9Trah6+oYaoN3fjxQ9MNVyNUCPVKDVajVHJ6h01Vr2rxqn31Hg1QU1Uk9RkNUVNVe+raWq6mqE+UDPVLDVbzVFz1Tw1X32oFqiPVIr6WC1Un6hFarFaopaqZWq5WqFWqlVqtVqj1qp1ar3aoDaqTepTtVltUVvVNrVd7VA71Wdql9qt9qjP1V71hdqn/qL2qy/VAfWVOqi+VofUN+qw+lYdUd+po+p7dUwdVyfUD+qk+lGdUqfVGfWTOqt+VufUeXVBeQUatdJaGx3oBJ1OJ+r0OoO+RmfUmXRmnUXH9LU6q75OZ9PX6+w6h85pcuncOo/Oq0NN2mrWkc6n8+u4vkEX0DfqgrqQLqyLaKeL6mL6Jl1c36xL6Ft0SX2rLqVv06V1GV3Wg75dl9d36Aq6oq6k79SVdRVdVVfTd+m79T26ur5X19D36Zr6fl1LP6Br6wd1HV1X19MP6fr6Yd1AN9SNdGPdRDfVzfQjurl+VAe6pW6lH9Ot9eO6jX5Ct9VP6nb6Kd1eP6076Gd0R/2s7qSf0511RQA4ry9or7vqbjpJd9c99Mu6p+6le+s+uq9+RffTr+r++jU9QA/Ug/TrerB+Qw/Rb+qh+i09TL+th+sReqQepUfrMTpZv6PH6nf1OP2eHq8n6Il6kp6sp+jeqSOBuviK+YP+7/5O//6/XH2j3qQ/1Zv1Fr1Vb9Pb9Q69U+/Uu/QuvUfv0Xv1Xr1P79P79X59QB/QB/VBfUgf0of1YX1EH9FH9VF9TB/XP+kf9En9oz6lT+vT+id9Vp/V5/TF/wMwaJTRxpjAJJh0JtGkNxnMNSajyWQymywmZq41Wc11Jpu53mQ3OUxOk8vkNnlMXhMaMtawiUw+k9/EzQ2mgLnRFDSFTGFTxDhT1BQzN/3L/f8ov2ammWlumpsWpoVpZVqZ1qa1aWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms3nBvGC6mC6mq+lqkkyS6WFeNj1NL9Pb9DF9zSumn+ln+pv+ZoAZYAaZQWawGWyGmCFmaOKlRyYz3Iw0I81oM9ok+yxmrBlrxplxZrwZbyb2zWImm8lmqplqpplpZoaZYWaamWa2mW3mmrlmvplvFpgFJsWkmIVmoVlkFpvFZqlZapab5WalWWlWm9VmrVlr1pv1ZpHZZDaZzWaz2Wq2mu1mu9lpdppdZpfZY/aYvWav2Wf2mf1mvzlgDpiD5qA5ZA6Zw+awOWKOmKPmqDlmjpkT5oQ5aU6aU+aUOWPOmLPmrDlnzpkL5kLqY1+gAhWYwAQJQUKQGPwyySBjkDHIHGQOYkEsyBpkDbIF1wfZgxxBziBXkDvIE+QNwoACG3AQBfmC/EE8uCEoENwYFAwKBYWDIoELigbFgpuC4sHNQYnglqBkcGtQKrgtKB2UCcoG5YLbg/LBHUGFoGJQKbgzqBxUCaoG1YK7gruDe4Lqwb1BjeC+oGZwf1AreCCoHTwY1AnqBvWCh4L6wcNBg6Bh0ChoHDQJmgbN/tTxvT+V41HXNewWJoXdwx7hy2HPsFfYO+wT9g1fCfuFr4b9w9fCAeHAcFD4ejg4fCMcEr4ZDg3fCoeFb4fDwxHhyHBUODocEyaH74Rjw3fDceF74fhwQjgxmBRODqeEU8P3w2nh9HBG+EE4M5wVzg7nhHPDeSFeurmkhB+HC8NPwkXh4nBJuDRcFi4PV4Qrw1Xh6nBNuDZcF64v2e/iqeHmcEu4NdwWbg93hDvDz8Jd4e5wT/h5uDf8ItwX/iXcH34ZHgi/Cg+GX4eHwm/Cw+G34ZHwu/Bo+H14LDyeHsIfwpPhj+Gp8HR4JvwpPBv+HJ4Lz4cXQp/6cJ96eydDhhIogRIpkTJQBspIGSkzZaYYxSgrZaVslI2yU3bKSTkpN+WmvJSXUjEx5aN8FKc4FaACVJAKUmEqTI4cFaNiVJyKUwkqQSWpJJWiUlSaLJWlsnQ73U530B1UkSrSnXQnVaEqVI2qEeLdVJ2qUw2qQTWpJtWiWlSbalMdqkP1qB7Vp/rUgBpQI2pETagJNaNm1JyaUwtqQa2oFbWm1tSG2lBbakvtqB21p/bUgTpQR+pInagTdabO9AK9QF2oC3WlrpRESdSDelBP6km9qTf1pb7Uj/pRf+pPA2gADaJBNJgG0xAaQkPpLRpGb9NwGkEjaRSNpjGUTMk0lsbSOBpH42k8TaSJNJkm01SaStNoGs2gGTSTZtJsmk1zaS7Np/m0gBZQCqXQQlpIi2gRLaEltIyW0QpaQatoFa2hNbSO1tEG2kCbaBNtps20lbbSdtpOO2kn7aJdtIf20F7aS/toH+2n/XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYnaATdJJO0ik6RWfoDJ2ln+kcnacL5CnRprcZ7DU2o81kM9ss9rdxTpvL5rZ5bF4b2uw2h00PAL/GZK0taAvZwraIdbaoLWZv+pu4tC1jy9py9nZb3t5hK9jSNj1cGd9t77HV7b22hr3PVrN3/VVc095va9mHbW3b0NaxjW0929TWtw/bBrahbWQb2ya2qW1tH7dt7BO2rX3StrNP/U28wH5kV9nVdo1da3fZ3faM/ckett/as/Zn29V2s33tK7affdX2t6/ZAXbgX8cAdph92w63I+xIO8qOtmP+Jp5oJ6UDO8VOte/baXZ6amwnXxHPtx/amTbFzrZz7Fw775c4NacU+7FdaD/x3nu7xC61y+xyu8Ku/L+5LrXr7Qa70e60n9nNdovdarfZ7XbHL3HqPPbYz+1e+4U9ZL+x++2X9oA9Yg/ar3+JU+d3xH5nj9rv7TF73J6wP9iT9kd7yp7+Zf6pc//BnrcXrLfAyIo1Gw44gdNxIqfnDHwNZ+RMnJmzcIyv5ax8HWfj6zk75+CcnItzcx7OyyETW2aOOB/n5zjfwAX4Ri7IhbgwF2HHRbkY38TF+WYuwbdwSb6VS/FtXJrLcFkux7dzeb6DK3BFrsR3cmWusuWei592fA9X53u5Bt/HNfl+rsUPcG1+kOtwXa7HD3F9fpgbcENuxI25CTflZvwIN+dHuQW35Fb8GLfmx7kNP8Ft+Ulux09xe36aO/Az3JGf5U78HHfm5/kFfpG78EvclbtxEnfnHvwy9+Re3Jv7cF9+hfvxq9yfX+MBPJAH8evM/AYP4Td5KL/Fw/htHs4jeCSP4tE8hpP5HR7L7/I4fo/H8wSeyJN4Mk/hqfw+T+PpPIM/4Jk8i2fzHJ7L83g+f8gL+CNO4Y95IX/Ci3gxL+GlvIyX8wpeyat4Na/htbyO1/MG3sib+FPezFt4K2/j7byDd/JnvIt38x7+nPfyF7yP/8L7+Us+wF/xQf6aD/E3fJi/5SP8HR/l7/kYH+cT/AOf5B/5FJ/mM/wTn+Wf+Ryf5wvsGSKMVKQjEwVRQpQuSozSRxmia6KMUaYoc5QlikXXRln1dVG26Pooe5QjyhnlinJHeaK8URhRZCOOoihflD+KRzdEBaIbo4JRoahwVCRyUdGoWHRTVDy6OSoR3RKVjG6NSkW3RaWjMlHZqFx0e1Q+uiOqEFWMKkV3RpWjKlHVqFp0V3R3dE9UPbo3qhHdF5WI7o9qRQ9EtaMHozpR3ahe9FBUP3o4ahA1jBpFjaMmUdOoWfRI1Dx6NGoRtYxaRY9FraPHozbRE1Hb6MmoXfTU5eOFgouvr98cT4q6R/rS4969em58Xnx+/MP4gvhH8ZT4x/GF8U/ii+KL40viS+PL4svjK+Ir46viq+Nr4mvj6+Lr4xviG+PeV0sHDlMXwmBc4BJcOpfo0rsM7hqX0WVymV0WF3PXuqzuOpfNXe+yuxwup8vlcrs8Lq8LHTnr2EUun8vv4u4GV8Dd6Aq6Qq6wK+KcK+qKuaaumWvmmrtHXQvX0rVyj7nH3OPucfeEe8I96dq5p1x797Tr4J5xHd2z7ln3nOvsnncvuBddF/eS6+q6uSSX5Hq4Hq6n6+l6u96ur+vr+rl+rr/r7wa4AW6QG+QGu8FuiBvihrqhbpgb5oa74W6kG+lGu9Eu2SW7sW6sG+fGufFuvJvoJrrJbrKb6qa6aW6am+FmuJluppvtZru5bq6b7+a7BW6BS3EpbqFb6Ba5RW6JW+KWuWVuhVvhVrlVbo1b49a5dW6D2+A2uU1us9vstrqtbrvb7na6nW6X2+X2uD1ur9vr9rl9br/b7w64r9xB97U75L5xh9237oj7zh1137tj7rg74X5wJ92P7pQ77c64n9xZ97M75867C8675Ng7sbGxd2PjYu/FxscmxCbGJsUmx6bEpsbej02LTY/NiH0QmxmbFZsdmxObG5sXmx/7MLYg9lEsJfZxbGHsk9ii2OLYktjS2LLY8pj3eTZHPp/P7+P+Bl/A3+gL+kK+sC/inS/qi/mbfHF/sy/hb/El/a2+lL/Nl/ZlfFnf0DfyjX0T39Q384/45v5R38K39K38Y761f9y38U/4tv5J384/5dv7p30H/4zv6J/1nfxzsy69PH0X/5Lv6rv5JN/d9/Av+56+l+/t+/i+/hXfz7/q+/vX/AA/0A/yr/vB/g0/xL/ph/q3/DD/th/uR/iRfpQf7cf4ZP+OH+vf9eP8e368n+An+kl+sp/ip/r3/TQ/3c/wH/iZfpaf7ef4uX6en+8/9Av8Rz7Ff+wX+k/8Ir/YL/FL/TK/3K/wK/0qv9qv8Wv9Or/eb/Ab/SafDjb7LX6r3+a3+x1+p//M7/K7/R7/ud/rv/D7/F/8fv+lP+C/8gf91/6Q/8Yf9t/6I/47f9R/74/54/6E/8Gf9D/6U/60P+N/8mf9z/6cP+8v/CM/s5b+X/vGXAghhBDif7OkPzje/Xf2qUubOXRpx5ZcB688nrpuWpf9YruX2tUuBgBPdutU99etbt2kpF+vu0hDkH8OAMQu90+Ay/FiaAWP/9Iq/rv59VJlkX8zfnDF8dTx47cCZLjiqS8RfomvGL8ttISbze+P3/DD347/2/zjcwAK5r/cJ/VCv8aXxy/xd/Lf0foPxk//ZTJAiyv6ZITL8eXxi8Gj8BS0/aszhRBCCCGEEEKIi3qps53/aH2buj7PfcXqOB1cji+vP39/ff4HKvwZcxBCCCGEEEIIIcT/2zPPv/DEI23btuzwLzd6XBrxTxvwz2uk+89I4z+ggQBw/tKfePhPyEcaf7+h4KqmcZU/mIQQQgghhBB/ussP/Vc7EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIu36539DmPr/PvnK6+mrN1UhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiqvk/AQAA//+ef0bU") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2m46.406481208s ago: executing program 1 (id=1702): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000002100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2m45.386196246s ago: executing program 1 (id=1706): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x8000, 0x6000, 0x32314742, 0x1, 0x1a80, 0x7, 0x8, 0xc0, 0x0, 0x4, 0x2, 0x7}}) 2m44.372777597s ago: executing program 1 (id=1710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000000440)=""/218, 0xda}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) 2m43.356607605s ago: executing program 1 (id=1713): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 2m42.428184968s ago: executing program 1 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {}, {0x0, 0x9}], 0x20}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m25.889768689s ago: executing program 38 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {}, {0x0, 0x9}], 0x20}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m47.639670021s ago: executing program 8 (id=1856): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x100, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000002100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1m46.71364286s ago: executing program 8 (id=1857): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0x1, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x502, 'syz0\x00', 0x0}) 1m45.14248634s ago: executing program 8 (id=1862): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) 1m44.30856669s ago: executing program 8 (id=1866): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1m42.872435516s ago: executing program 8 (id=1869): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e041f0204"], 0x7) 1m42.085339319s ago: executing program 8 (id=1874): socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x0, 0xffffffffffffffff, 0x8008) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x2, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) 1m26.807776019s ago: executing program 39 (id=1874): socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x0, 0xffffffffffffffff, 0x8008) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x2, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) 51.727680353s ago: executing program 9 (id=2012): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 50.015492695s ago: executing program 9 (id=2017): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x4, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x80a0000, 0x4a, &(0x7f00000006c0)=""/74}, {0x3000, 0x2b, &(0x7f0000000640)=""/43}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 49.252570189s ago: executing program 9 (id=2020): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 47.832834138s ago: executing program 9 (id=2028): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0xffffffffffffffde, @remote}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x5}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0xffffffb1) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bind$x25(r6, &(0x7f0000000080), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'hsr0\x00', 0xc400}) 46.357523505s ago: executing program 9 (id=2037): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0xa, @sliced={0x3, [0xf15d, 0x4, 0x200, 0x0, 0x4, 0xc, 0x8, 0x42, 0x6, 0xfeff, 0x9ff, 0x5, 0x1, 0x2, 0x9, 0x1, 0x1ff, 0xf20a, 0x653, 0x9, 0xa, 0xfffc, 0x9, 0x37, 0x5, 0x1, 0x2, 0x58aa, 0x3, 0x65, 0x3, 0x100, 0x4, 0x8, 0x9, 0x5f, 0x6, 0x7, 0xff, 0xdb, 0x7, 0x9a, 0x0, 0x101, 0x9, 0xf, 0x101, 0x3], 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 44.459868601s ago: executing program 9 (id=2042): syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000540)=""/226, 0xe2, 0x100c2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) 29.168212309s ago: executing program 40 (id=2042): syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000540)=""/226, 0xe2, 0x100c2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) 9.084751525s ago: executing program 2 (id=2117): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 7.043738357s ago: executing program 3 (id=2122): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 7.017935276s ago: executing program 2 (id=2123): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 6.72937632s ago: executing program 6 (id=2124): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.09401215s ago: executing program 3 (id=2126): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0xa, @sliced={0x3, [0xf15d, 0x4, 0x200, 0x0, 0x4, 0xc, 0x8, 0x42, 0x6, 0xfeff, 0x9ff, 0x5, 0x1, 0x2, 0x9, 0x1, 0x1ff, 0xf20a, 0x653, 0x9, 0xa, 0xfffc, 0x9, 0x37, 0x5, 0x1, 0x2, 0x58aa, 0x3, 0x65, 0x3, 0x100, 0x4, 0x8, 0x9, 0x5f, 0x6, 0x7, 0xff, 0xdb, 0x7, 0x9a, 0x0, 0x101, 0x9, 0xf, 0x101, 0x3], 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.987687281s ago: executing program 2 (id=2127): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000092403000303"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x26, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4542, 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.94742722s ago: executing program 5 (id=2128): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x201408c, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 5.364761009s ago: executing program 3 (id=2129): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) inotify_init1(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000200), 0x0}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000906010200000000004e2200020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 5.293477459s ago: executing program 5 (id=2130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 4.816408024s ago: executing program 6 (id=2131): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) 4.648484633s ago: executing program 5 (id=2132): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 3.444644094s ago: executing program 6 (id=2133): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x3ffffffe}}, 0x0) 3.101066951s ago: executing program 2 (id=2134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000001000040ff"]) 2.851413169s ago: executing program 3 (id=2135): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 2.669206383s ago: executing program 6 (id=2136): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 2.437102868s ago: executing program 5 (id=2137): setreuid(0x0, 0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) 2.183150132s ago: executing program 2 (id=2138): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0xa, @sliced={0x3, [0xf15d, 0x4, 0x200, 0x0, 0x4, 0xc, 0x8, 0x42, 0x6, 0xfeff, 0x9ff, 0x5, 0x1, 0x2, 0x9, 0x1, 0x1ff, 0xf20a, 0x653, 0x9, 0xa, 0xfffc, 0x9, 0x37, 0x5, 0x1, 0x2, 0x58aa, 0x3, 0x65, 0x3, 0x100, 0x4, 0x8, 0x9, 0x5f, 0x6, 0x7, 0xff, 0xdb, 0x7, 0x9a, 0x0, 0x101, 0x9, 0xf, 0x101, 0x3], 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.941786766s ago: executing program 3 (id=2139): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x201408c, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.809439613s ago: executing program 5 (id=2140): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.748801882s ago: executing program 6 (id=2141): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 873.465119ms ago: executing program 6 (id=2142): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000002f80)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 807.197242ms ago: executing program 3 (id=2143): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000092403000303"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x26, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4542, 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) 496.533408ms ago: executing program 2 (id=2144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1e, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="582412748a9d54f5db757bc4bed58f792bd11ba21f27", 0x843e, 0x800, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) 0s ago: executing program 5 (id=2145): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[], 0x1, 0x1e6, &(0x7f0000000140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x3ffffffe}}, 0x0) kernel console output (not intermixed with test programs): ound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.626204][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.915'. [ 692.815929][ T5852] kernel write not supported for file /480/net/rt_cache (pid: 5852 comm: kworker/0:3) [ 692.927680][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.915'. [ 693.602781][ T5852] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 693.844102][ T5852] usb 9-1: Using ep0 maxpacket: 32 [ 693.904892][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.916244][ T5852] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.926594][ T5852] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 693.935980][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.996105][ T5852] usb 9-1: config 0 descriptor?? [ 694.109689][ T5852] hub 9-1:0.0: USB hub found [ 694.461408][ T5852] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 694.541838][ T5852] usbhid 9-1:0.0: can't add hid device: -71 [ 694.548527][ T5852] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 694.663314][ T5852] usb 9-1: USB disconnect, device number 14 [ 694.873843][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.922'. [ 695.256865][T10014] siw: device registration error -23 [ 696.298629][T10033] futex_wake_op: syz.8.927 tries to shift op by -1; fix this program [ 696.972102][ T5852] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 697.247277][ T5852] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.258097][ T5852] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.396237][ T5852] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.405842][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.414326][ T5852] usb 10-1: Product: syz [ 697.418821][ T5852] usb 10-1: Manufacturer: syz [ 697.423829][ T5852] usb 10-1: SerialNumber: syz [ 697.781706][ T5852] usb 10-1: 0:2 : does not exist [ 697.911332][ T5852] usb 10-1: USB disconnect, device number 10 [ 698.236994][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.410985][ T1630] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 698.644543][ T1630] usb 6-1: Using ep0 maxpacket: 16 [ 698.684274][ T1630] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.695065][ T1630] usb 6-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.710051][ T1630] usb 6-1: config 0 interface 0 has no altsetting 0 [ 698.716942][ T1630] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 698.727388][ T1630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.731063][T10055] usb usb1: check_ctrlrecip: process 10055 (syz.0.934) requesting ep 01 but needs 81 [ 698.929967][ T1630] usb 6-1: config 0 descriptor?? [ 698.989831][ T1630] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 699.097774][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.936'. [ 699.457379][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.936'. [ 699.979916][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.8.938'. [ 700.315746][T10070] siw: device registration error -23 [ 701.608358][ T24] usb 6-1: USB disconnect, device number 21 [ 702.092410][T10094] futex_wake_op: syz.8.942 tries to shift op by -1; fix this program [ 703.408296][ T5852] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 703.637278][ T5852] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.648268][ T5852] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 703.769525][ T5852] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 703.779358][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.787858][ T5852] usb 10-1: Product: syz [ 703.792358][ T5852] usb 10-1: Manufacturer: syz [ 703.797486][ T5852] usb 10-1: SerialNumber: syz [ 704.108477][ T5852] usb 10-1: 0:2 : does not exist [ 704.249526][ T5852] usb 10-1: USB disconnect, device number 11 [ 704.730595][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.970297][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.952'. [ 705.975829][ T5852] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 706.196241][ T5852] usb 10-1: Using ep0 maxpacket: 16 [ 706.219799][ T5852] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.230793][ T5852] usb 10-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 706.244282][ T5852] usb 10-1: config 0 interface 0 has no altsetting 0 [ 706.251383][ T5852] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 706.260832][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.358586][ T5852] usb 10-1: config 0 descriptor?? [ 706.461648][ T5852] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 707.224828][T10146] futex_wake_op: syz.5.958 tries to shift op by -1; fix this program [ 708.204181][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 708.522516][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 709.024938][ T5858] usb 10-1: USB disconnect, device number 12 [ 709.067252][ T5857] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 709.280068][ T5857] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.291036][ T5857] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.354898][ T5857] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.364460][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.372691][ T5857] usb 6-1: Product: syz [ 709.377360][ T5857] usb 6-1: Manufacturer: syz [ 709.382208][ T5857] usb 6-1: SerialNumber: syz [ 709.866678][ T5857] usb 6-1: 0:2 : does not exist [ 710.013952][ T5857] usb 6-1: USB disconnect, device number 22 [ 710.209561][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.8.968'. [ 710.436951][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.509514][T10207] futex_wake_op: syz.0.971 tries to shift op by -1; fix this program [ 711.583836][ T9944] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 711.804123][ T9944] usb 6-1: Using ep0 maxpacket: 32 [ 711.854581][ T9944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.865989][ T9944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.876230][ T9944] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 711.885848][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.111832][ T9944] usb 6-1: config 0 descriptor?? [ 712.176737][ T9944] hub 6-1:0.0: USB hub found [ 712.478032][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 712.647805][ T9944] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 712.745991][ T9944] usbhid 6-1:0.0: can't add hid device: -71 [ 712.754737][ T9944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 712.876893][ T9944] usb 6-1: USB disconnect, device number 23 [ 712.971755][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 713.622514][ T5857] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 713.891857][ T5857] usb 10-1: Using ep0 maxpacket: 16 [ 713.942166][ T5857] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.958421][ T5857] usb 10-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.973900][ T5857] usb 10-1: config 0 interface 0 has no altsetting 0 [ 713.980927][ T5857] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 713.990450][ T5857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.188915][ T5857] usb 10-1: config 0 descriptor?? [ 714.248940][ T5857] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 714.625495][T10238] usb usb1: check_ctrlrecip: process 10238 (syz.0.979) requesting ep 01 but needs 81 [ 714.811768][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 714.818472][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.116341][ T5857] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 716.373641][ T5857] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.384301][ T5857] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.465040][ T5857] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.475227][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.484027][ T5857] usb 6-1: Product: syz [ 716.488313][ T5857] usb 6-1: Manufacturer: syz [ 716.493133][ T5857] usb 6-1: SerialNumber: syz [ 716.570544][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 716.875788][ T5857] usb 6-1: 0:2 : does not exist [ 716.973067][T10261] usb 10-1: USB disconnect, device number 13 [ 717.083484][ T5857] usb 6-1: USB disconnect, device number 24 [ 717.222433][T10264] futex_wake_op: syz.8.986 tries to shift op by -1; fix this program [ 717.517542][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.846322][ T9944] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 717.846983][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 718.049816][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 718.079695][ T9944] usb 10-1: Using ep0 maxpacket: 32 [ 718.140429][ T9944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.153479][ T9944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.164548][ T9944] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 718.174033][ T9944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.380881][ T9944] usb 10-1: config 0 descriptor?? [ 718.444026][ T9944] hub 10-1:0.0: USB hub found [ 718.912113][ T9944] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 719.014312][ T9944] usbhid 10-1:0.0: can't add hid device: -71 [ 719.021169][ T9944] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 719.162072][ T9944] usb 10-1: USB disconnect, device number 14 [ 720.475074][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.999'. [ 721.218948][T10319] futex_wake_op: syz.3.1000 tries to shift op by -1; fix this program [ 722.769611][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1005'. [ 722.932682][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1005'. [ 724.146101][T10357] futex_wake_op: syz.3.1012 tries to shift op by -1; fix this program [ 724.238309][T10355] usb usb1: check_ctrlrecip: process 10355 (syz.8.1010) requesting ep 01 but needs 81 [ 725.061552][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 725.786975][T10261] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 726.024153][T10261] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.040583][T10261] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.139622][T10261] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.149921][T10261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.158354][T10261] usb 9-1: Product: syz [ 726.162730][T10261] usb 9-1: Manufacturer: syz [ 726.167686][T10261] usb 9-1: SerialNumber: syz [ 726.766151][ T9944] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 726.995861][ T9944] usb 6-1: Using ep0 maxpacket: 32 [ 727.075852][ T9944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.087214][ T9944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.097413][ T9944] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 727.107307][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.327500][ T9944] usb 6-1: config 0 descriptor?? [ 727.465563][ T9944] hub 6-1:0.0: USB hub found [ 727.686650][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 727.755299][T10397] fuse: Bad value for 'fd' [ 727.801475][T10394] futex_wake_op: syz.3.1024 tries to shift op by -1; fix this program [ 727.865867][ T9944] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 727.981947][ T9944] usbhid 6-1:0.0: can't add hid device: -71 [ 727.988727][ T9944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 728.144949][ T9944] usb 6-1: USB disconnect, device number 25 [ 728.206926][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 729.234897][T10261] usb 9-1: 0:2 : does not exist [ 729.417017][T10261] usb 9-1: USB disconnect, device number 15 [ 729.736320][T10410] usb usb1: check_ctrlrecip: process 10410 (syz.5.1027) requesting ep 01 but needs 81 [ 729.890203][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.624167][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 731.441831][ T5858] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 731.683116][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 731.721649][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.732343][ T5858] usb 6-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.745930][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 731.752973][ T5858] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 731.768049][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.898682][T10435] futex_wake_op: syz.3.1036 tries to shift op by -1; fix this program [ 731.975439][ T5858] usb 6-1: config 0 descriptor?? [ 732.025043][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1038'. [ 732.085322][ T5858] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 732.159835][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1038'. [ 732.243814][ T9944] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 732.502675][ T9944] usb 9-1: Using ep0 maxpacket: 32 [ 732.519087][ T9944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.530590][ T9944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.540832][ T9944] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 732.550277][ T9944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.729260][ T9944] usb 9-1: config 0 descriptor?? [ 732.786685][ T9944] hub 9-1:0.0: USB hub found [ 733.200395][ T9944] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 733.324926][ T9944] usbhid 9-1:0.0: can't add hid device: -71 [ 733.331625][ T9944] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 733.469989][ T9944] usb 9-1: USB disconnect, device number 16 [ 734.022187][ T9944] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 734.265299][ T9944] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.277272][ T9944] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.359412][ T9944] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.369284][ T9944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.379044][ T9944] usb 10-1: Product: syz [ 734.383699][ T9944] usb 10-1: Manufacturer: syz [ 734.388617][ T9944] usb 10-1: SerialNumber: syz [ 734.544639][ T5858] usb 6-1: USB disconnect, device number 26 [ 734.859965][T10471] usb usb1: check_ctrlrecip: process 10471 (syz.8.1044) requesting ep 01 but needs 81 [ 735.291194][ T9944] usb 10-1: 0:2 : does not exist [ 735.399004][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1046'. [ 735.427093][ T9944] usb 10-1: USB disconnect, device number 15 [ 735.664226][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.817397][T10480] overlayfs: failed to clone upperpath [ 736.607631][T10489] futex_wake_op: syz.8.1049 tries to shift op by -1; fix this program [ 737.063010][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1050'. [ 737.352023][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1050'. [ 738.599693][ T5858] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 738.807672][ T5858] usb 10-1: Using ep0 maxpacket: 32 [ 738.846621][ T5858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.858138][ T5858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.868658][ T5858] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 738.878171][ T5858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.976471][T10518] usb usb1: check_ctrlrecip: process 10518 (syz.8.1058) requesting ep 01 but needs 81 [ 739.061829][ T5858] usb 10-1: config 0 descriptor?? [ 739.102973][ T5858] hub 10-1:0.0: USB hub found [ 739.562300][ T5858] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 739.624096][ T5858] usbhid 10-1:0.0: can't add hid device: -71 [ 739.631140][ T5858] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 739.711668][ T5858] usb 10-1: USB disconnect, device number 16 [ 739.797154][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1062'. [ 740.546514][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1064'. [ 740.552613][T10534] futex_wake_op: syz.3.1063 tries to shift op by -1; fix this program [ 740.974438][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1064'. [ 743.374812][T10571] overlayfs: failed to clone upperpath [ 743.697915][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 743.727101][ T5858] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 743.960666][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 744.077760][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.089026][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.099221][ T5858] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 744.108501][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.199273][ T5858] usb 9-1: config 0 descriptor?? [ 744.213247][ T5858] hub 9-1:0.0: USB hub found [ 744.426847][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 744.713011][ T5858] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 744.748919][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 744.776941][ T5858] usbhid 9-1:0.0: can't add hid device: -71 [ 744.783290][ T5858] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 744.930597][ T5858] usb 9-1: USB disconnect, device number 17 [ 746.187118][T10601] futex_wake_op: syz.9.1081 tries to shift op by -1; fix this program [ 747.028551][T10610] usb usb1: check_ctrlrecip: process 10610 (syz.8.1084) requesting ep 01 but needs 81 [ 748.052665][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 748.595694][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'. [ 748.913256][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'. [ 750.426205][T10660] futex_wake_op: syz.9.1098 tries to shift op by -1; fix this program [ 751.810133][T10673] overlayfs: failed to clone upperpath [ 752.293724][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 753.382059][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1107'. [ 753.841134][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1107'. [ 754.141812][ T5858] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 754.346982][ T5858] usb 10-1: Using ep0 maxpacket: 16 [ 754.392774][T10707] usb usb1: check_ctrlrecip: process 10707 (syz.0.1111) requesting ep 01 but needs 81 [ 754.433698][ T5858] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.444491][ T5858] usb 10-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.458089][ T5858] usb 10-1: config 0 interface 0 has no altsetting 0 [ 754.465188][ T5858] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 754.474695][ T5858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.678017][ T5858] usb 10-1: config 0 descriptor?? [ 754.758303][ T5858] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 754.871244][T10716] futex_wake_op: syz.5.1112 tries to shift op by -1; fix this program [ 755.044091][ T5858] usb 10-1: USB disconnect, device number 17 [ 755.121475][ T9944] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 755.301544][ T9944] usb 9-1: Using ep0 maxpacket: 32 [ 755.344413][ T9944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.355765][ T9944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.365974][ T9944] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.375349][ T9944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.418087][ T9944] usb 9-1: config 0 descriptor?? [ 755.485541][ T9944] hub 9-1:0.0: USB hub found [ 755.896651][ T9944] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 755.965607][ T9944] usbhid 9-1:0.0: can't add hid device: -71 [ 755.973468][ T9944] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 756.069412][ T9944] usb 9-1: USB disconnect, device number 18 [ 757.286264][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1121'. [ 757.325939][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1122'. [ 757.707075][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1122'. [ 759.997696][T10771] usb usb1: check_ctrlrecip: process 10771 (syz.9.1125) requesting ep 01 but needs 81 [ 760.433500][T10778] overlayfs: failed to clone upperpath [ 760.713252][ T9944] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 760.860801][T10785] futex_wake_op: syz.0.1129 tries to shift op by -1; fix this program [ 760.948457][ T9944] usb 6-1: Using ep0 maxpacket: 16 [ 760.998403][ T9944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.009217][ T9944] usb 6-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.022666][ T9944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 761.031108][ T9944] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 761.041094][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.222538][ T9944] usb 6-1: config 0 descriptor?? [ 761.280273][ T9944] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 761.828962][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1134'. [ 762.228411][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1134'. [ 762.370710][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 763.445283][ T5858] usb 6-1: USB disconnect, device number 27 [ 764.376740][ T9944] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 764.605212][ T9944] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.617753][ T9944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 764.708202][T10829] usb usb1: check_ctrlrecip: process 10829 (syz.0.1141) requesting ep 01 but needs 81 [ 764.746768][ T9944] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 764.756331][ T9944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.764679][ T9944] usb 6-1: Product: syz [ 764.769356][ T9944] usb 6-1: Manufacturer: syz [ 764.774178][ T9944] usb 6-1: SerialNumber: syz [ 765.673291][ T9944] usb 6-1: 0:2 : does not exist [ 765.864726][ T9944] usb 6-1: USB disconnect, device number 28 [ 766.393690][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.523278][T10847] futex_wake_op: syz.9.1145 tries to shift op by -1; fix this program [ 767.355432][ T9944] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 767.554042][ T9944] usb 6-1: Using ep0 maxpacket: 16 [ 767.622337][ T9944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.633141][ T9944] usb 6-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.646960][ T9944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 767.653873][ T9944] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 767.663387][ T9944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.716497][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 767.837395][ T9944] usb 6-1: config 0 descriptor?? [ 767.934062][ T9944] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 770.367102][ T5858] usb 6-1: USB disconnect, device number 29 [ 770.958980][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 771.169132][ T5858] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 771.235647][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 771.299295][T10904] futex_wake_op: syz.8.1162 tries to shift op by -1; fix this program [ 771.414370][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.424942][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 771.537776][ T5858] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 771.547517][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.556254][ T5858] usb 6-1: Product: syz [ 771.560680][ T5858] usb 6-1: Manufacturer: syz [ 771.565629][ T5858] usb 6-1: SerialNumber: syz [ 772.404740][ T5858] usb 6-1: 0:2 : does not exist [ 772.544756][ T5858] usb 6-1: USB disconnect, device number 30 [ 772.861377][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.060299][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1166'. [ 774.361795][ T5852] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 774.521703][ T5852] usb 6-1: Using ep0 maxpacket: 16 [ 774.567076][ T5852] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.577965][ T5852] usb 6-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.591818][ T5852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 774.598759][ T5852] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 774.608271][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.804077][ T5852] usb 6-1: config 0 descriptor?? [ 774.864849][ T5852] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 775.750876][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 776.046180][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 776.233818][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 776.240798][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.480738][T10955] futex_wake_op: syz.3.1176 tries to shift op by -1; fix this program [ 776.890524][ T5858] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 777.076637][ T5852] usb 6-1: USB disconnect, device number 31 [ 777.090629][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 777.138496][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.150220][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.160537][ T5858] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 777.169823][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.353696][ T5858] usb 9-1: config 0 descriptor?? [ 777.415553][ T5858] hub 9-1:0.0: USB hub found [ 777.636786][ T5858] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 777.699506][ T5858] usbhid 9-1:0.0: can't add hid device: -71 [ 777.706948][ T5858] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 777.763065][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1181'. [ 777.837765][ T5858] usb 9-1: USB disconnect, device number 19 [ 778.001995][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1181'. [ 779.754755][T10993] usb usb1: check_ctrlrecip: process 10993 (syz.8.1186) requesting ep 01 but needs 81 [ 780.367089][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1189'. [ 780.689461][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1189'. [ 780.839931][T11004] futex_wake_op: syz.0.1190 tries to shift op by -1; fix this program [ 781.463205][ T5852] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 781.655080][ T5852] usb 9-1: Using ep0 maxpacket: 16 [ 781.682518][ T5852] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.693213][ T5852] usb 9-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.708588][ T5852] usb 9-1: config 0 interface 0 has no altsetting 0 [ 781.715500][ T5852] usb 9-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 781.726509][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.930560][ T5852] usb 9-1: config 0 descriptor?? [ 782.005735][ T5852] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 783.222103][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'. [ 783.379069][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 783.837511][ T5858] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 784.074073][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.085061][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.175078][ T5858] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.184771][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.193975][ T5858] usb 6-1: Product: syz [ 784.199379][ T5858] usb 6-1: Manufacturer: syz [ 784.204292][ T5858] usb 6-1: SerialNumber: syz [ 784.223663][T11046] usb usb1: check_ctrlrecip: process 11046 (syz.9.1201) requesting ep 01 but needs 81 [ 784.380684][ T5852] usb 9-1: USB disconnect, device number 20 [ 784.905005][ T5858] usb 6-1: 0:2 : does not exist [ 784.940913][T11053] overlayfs: failed to clone upperpath [ 785.027250][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1203'. [ 785.039837][ T5858] usb 6-1: USB disconnect, device number 32 [ 785.309093][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.512987][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1203'. [ 785.816834][T11061] futex_wake_op: syz.3.1205 tries to shift op by -1; fix this program [ 787.626094][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1212'. [ 787.841719][T11083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 788.704687][T11101] usb usb1: check_ctrlrecip: process 11101 (syz.5.1216) requesting ep 01 but needs 81 [ 789.375122][ T5858] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 789.657390][ T5858] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.668024][ T5858] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.722607][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 789.843444][ T5858] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.852977][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.861970][ T5858] usb 9-1: Product: syz [ 789.867169][ T5858] usb 9-1: Manufacturer: syz [ 789.872004][ T5858] usb 9-1: SerialNumber: syz [ 790.093646][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 790.902920][ T5858] usb 9-1: 0:2 : does not exist [ 791.003048][ T5858] usb 9-1: USB disconnect, device number 21 [ 791.517095][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.215292][T11143] overlayfs: failed to clone upperpath [ 792.514661][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1227'. [ 792.653517][ T5852] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 792.862282][ T5852] usb 6-1: Using ep0 maxpacket: 32 [ 792.943791][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.955155][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.967048][ T5852] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 792.976966][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.006197][ T5852] usb 6-1: config 0 descriptor?? [ 793.036609][ T5852] hub 6-1:0.0: USB hub found [ 793.071644][T11155] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1227'. [ 793.459227][ T5852] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 793.490304][ T5852] usbhid 6-1:0.0: can't add hid device: -71 [ 793.497072][ T5852] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 793.538426][ T5852] usb 6-1: USB disconnect, device number 33 [ 794.197928][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1232'. [ 794.388025][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1232'. [ 795.362382][ T5858] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 795.566464][ T5858] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.577702][ T5858] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 795.679789][ T5858] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 795.689379][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.697909][ T5858] usb 9-1: Product: syz [ 795.702489][ T5858] usb 9-1: Manufacturer: syz [ 795.707321][ T5858] usb 9-1: SerialNumber: syz [ 796.213297][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1242'. [ 796.506733][ T5858] usb 9-1: 0:2 : does not exist [ 796.566321][ T5858] usb 9-1: USB disconnect, device number 22 [ 796.687981][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1242'. [ 796.867065][T11194] usb usb1: check_ctrlrecip: process 11194 (syz.9.1244) requesting ep 01 but needs 81 [ 796.898465][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.761481][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1247'. [ 797.887306][T11196] lo speed is unknown, defaulting to 1000 [ 800.463766][T11233] usb usb1: check_ctrlrecip: process 11233 (syz.5.1258) requesting ep 01 but needs 81 [ 800.892875][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1259'. [ 801.340708][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 801.429917][T11239] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1259'. [ 801.681201][T11247] veth0_vlan: entered allmulticast mode [ 802.168011][T11248] lo speed is unknown, defaulting to 1000 [ 804.423957][ T5852] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 804.624449][ T5852] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.635176][ T5852] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 804.708658][ T5852] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 804.720995][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.729560][ T5852] usb 10-1: Product: syz [ 804.734108][ T5852] usb 10-1: Manufacturer: syz [ 804.739009][ T5852] usb 10-1: SerialNumber: syz [ 805.187716][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1274'. [ 805.223684][T11274] usb usb1: check_ctrlrecip: process 11274 (syz.5.1273) requesting ep 01 but needs 81 [ 805.538156][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1275'. [ 805.584611][ T5852] usb 10-1: 0:2 : does not exist [ 805.762882][ T5852] usb 10-1: USB disconnect, device number 18 [ 806.191038][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 806.626196][T11285] lo speed is unknown, defaulting to 1000 [ 808.804352][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1286'. [ 809.420047][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1288'. [ 810.126233][ T42] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 810.328392][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.339037][ T42] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 810.409543][ T42] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 810.419014][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.427456][ T42] usb 9-1: Product: syz [ 810.432057][ T42] usb 9-1: Manufacturer: syz [ 810.436915][ T42] usb 9-1: SerialNumber: syz [ 810.879816][T11324] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1291'. [ 811.136070][ T42] usb 9-1: 0:2 : does not exist [ 811.299252][ T42] usb 9-1: USB disconnect, device number 23 [ 811.615036][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.797412][ T5890] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 812.923366][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 813.053831][ T5890] usb 9-1: Using ep0 maxpacket: 16 [ 813.066657][ T5890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.077404][ T5890] usb 9-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.092562][ T5890] usb 9-1: config 0 interface 0 has no altsetting 0 [ 813.099472][ T5890] usb 9-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 813.109512][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.250940][T11348] lo speed is unknown, defaulting to 1000 [ 813.367003][ T5890] usb 9-1: config 0 descriptor?? [ 813.406176][ T5890] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 814.472044][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1304'. [ 814.725507][T11363] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1305'. [ 815.572062][ T42] usb 9-1: USB disconnect, device number 24 [ 815.907454][ T5890] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 816.098372][ T5890] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.108940][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.245026][ T5890] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.254814][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.263643][ T5890] usb 6-1: Product: syz [ 816.268142][ T5890] usb 6-1: Manufacturer: syz [ 816.272998][ T5890] usb 6-1: SerialNumber: syz [ 816.928770][ T5890] usb 6-1: 0:2 : does not exist [ 817.049696][ T5890] usb 6-1: USB disconnect, device number 34 [ 817.319687][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.349645][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 818.283445][T11397] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1317'. [ 818.328483][T11393] usb usb1: check_ctrlrecip: process 11393 (syz.9.1315) requesting ep 01 but needs 81 [ 818.764197][T11399] lo speed is unknown, defaulting to 1000 [ 818.955798][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1320'. [ 819.084326][ T42] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 819.293671][ T42] usb 9-1: Using ep0 maxpacket: 16 [ 819.351748][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.362648][ T42] usb 9-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.376065][ T42] usb 9-1: config 0 interface 0 has no altsetting 0 [ 819.389180][ T42] usb 9-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 819.401059][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.569259][ T42] usb 9-1: config 0 descriptor?? [ 819.671498][ T42] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 821.886939][ T5890] usb 9-1: USB disconnect, device number 25 [ 822.380284][T11437] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1331'. [ 823.252377][T11445] lo speed is unknown, defaulting to 1000 [ 824.156331][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 826.263179][T11476] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1344'. [ 827.291889][T11487] lo speed is unknown, defaulting to 1000 [ 827.467197][T11486] usb usb1: check_ctrlrecip: process 11486 (syz.9.1347) requesting ep 01 but needs 81 [ 828.620689][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1351'. [ 830.318042][ T5890] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 830.515320][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 830.588065][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.598635][ T5890] usb 6-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 830.612338][ T5890] usb 6-1: config 0 interface 0 has no altsetting 0 [ 830.619499][ T5890] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 830.628926][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.833429][ T5890] usb 6-1: config 0 descriptor?? [ 830.855832][ T5890] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 830.915204][T11516] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1359'. [ 831.114988][ T5890] usb 6-1: USB disconnect, device number 35 [ 831.211980][T11514] loop9: detected capacity change from 0 to 4096 [ 831.356625][T11514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.001403][ T8635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.428280][T11525] usb usb1: check_ctrlrecip: process 11525 (syz.0.1361) requesting ep 01 but needs 81 [ 833.072164][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 834.560564][T11550] netlink: 304 bytes leftover after parsing attributes in process `syz.9.1370'. [ 835.316022][ T5890] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 835.402919][T11555] lo speed is unknown, defaulting to 1000 [ 835.704703][ T5890] usb 10-1: Using ep0 maxpacket: 16 [ 835.852320][ T5890] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.863797][ T5890] usb 10-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.878240][ T5890] usb 10-1: config 0 interface 0 has no altsetting 0 [ 835.886161][ T5890] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 835.896550][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.054313][ T5890] usb 10-1: config 0 descriptor?? [ 836.086446][ T5890] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 836.366530][ T42] usb 10-1: USB disconnect, device number 19 [ 836.998297][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.005264][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.915127][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 838.252900][T11578] usb usb1: check_ctrlrecip: process 11578 (syz.9.1378) requesting ep 01 but needs 81 [ 838.612650][T11588] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1383'. [ 840.237135][ T5890] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 840.435894][ T5890] usb 9-1: Using ep0 maxpacket: 16 [ 840.458861][ T5890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.469565][ T5890] usb 9-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 840.482985][ T5890] usb 9-1: config 0 interface 0 has no altsetting 0 [ 840.490152][ T5890] usb 9-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 840.501270][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.555798][ T5890] usb 9-1: config 0 descriptor?? [ 840.595523][ T5890] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 840.897901][ T5890] usb 9-1: USB disconnect, device number 26 [ 840.921204][T11606] lo speed is unknown, defaulting to 1000 [ 842.360380][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1393'. [ 843.771470][T11623] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1396'. [ 844.095302][T11629] usb usb1: check_ctrlrecip: process 11629 (syz.0.1397) requesting ep 01 but needs 81 [ 845.278211][ T5852] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 845.335018][T11641] lo speed is unknown, defaulting to 1000 [ 845.593470][ T5852] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.604460][ T5852] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 845.669419][ T5852] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.679736][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.690116][ T5852] usb 6-1: Product: syz [ 845.694520][ T5852] usb 6-1: Manufacturer: syz [ 845.700012][ T5852] usb 6-1: SerialNumber: syz [ 846.326162][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1408'. [ 846.762289][ T5852] usb 6-1: 0:2 : does not exist [ 846.847486][T11656] siw: device registration error -23 [ 846.947233][ T5852] usb 6-1: USB disconnect, device number 36 [ 847.186587][ T8581] udevd[8581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.622537][T11664] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1411'. [ 849.145868][T11680] usb usb1: check_ctrlrecip: process 11680 (syz.9.1415) requesting ep 01 but needs 81 [ 849.499599][ T5852] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 849.712064][ T5852] usb 6-1: Using ep0 maxpacket: 16 [ 849.725707][ T5852] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.736391][ T5852] usb 6-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.749913][ T5852] usb 6-1: config 0 interface 0 has no altsetting 0 [ 849.756796][ T5852] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 849.768026][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.789864][ T5852] usb 6-1: config 0 descriptor?? [ 849.833311][ T5852] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 850.224958][ T5852] usb 6-1: USB disconnect, device number 37 [ 850.820646][T11692] lo speed is unknown, defaulting to 1000 [ 851.441743][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1423'. [ 851.492770][ T5852] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 851.632712][ T5852] usb 10-1: device descriptor read/64, error -71 [ 851.688203][T11708] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1424'. [ 852.051838][ T5852] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 852.059943][T11704] siw: device registration error -23 [ 852.290273][ T5852] usb 10-1: device descriptor read/64, error -71 [ 852.421568][ T5852] usb usb10-port1: attempt power cycle [ 852.848396][ T5852] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 852.933304][ T5852] usb 10-1: device descriptor read/8, error -71 [ 853.075619][T11722] usb usb1: check_ctrlrecip: process 11722 (syz.0.1428) requesting ep 01 but needs 81 [ 853.246675][ T5852] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 853.336750][ T5852] usb 10-1: device descriptor read/8, error -71 [ 853.471799][ T5852] usb usb10-port1: unable to enumerate USB device [ 854.991491][ T5852] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 855.129027][T11747] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1436'. [ 855.260714][ T5852] usb 10-1: Using ep0 maxpacket: 16 [ 855.314896][ T5852] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.325771][ T5852] usb 10-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 855.339246][ T5852] usb 10-1: config 0 interface 0 has no altsetting 0 [ 855.346481][ T5852] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 855.356012][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.532607][ T5852] usb 10-1: config 0 descriptor?? [ 855.564235][ T5852] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 855.642090][T11749] lo speed is unknown, defaulting to 1000 [ 855.846646][T11755] loop5: detected capacity change from 0 to 512 [ 856.386154][T11755] EXT4-fs (loop5): 1 orphan inode deleted [ 856.394872][T11755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.459337][ T3832] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 856.469847][ T3832] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 856.621494][T11755] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.836948][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 857.161904][T11764] siw: device registration error -23 [ 857.764206][ T5852] usb 10-1: USB disconnect, device number 24 [ 858.384488][T11774] loop8: detected capacity change from 0 to 256 [ 858.573242][ T5852] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 858.730532][ T5890] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 858.749858][ T5852] usb 10-1: device descriptor read/64, error -71 [ 858.975978][ T5890] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 858.984519][ T5890] usb 9-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 858.995139][ T5890] usb 9-1: config 0 has no interface number 0 [ 859.008607][ T5852] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 859.090944][ T5890] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 859.100566][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.108811][ T5890] usb 9-1: Product: syz [ 859.113359][ T5890] usb 9-1: Manufacturer: syz [ 859.118182][ T5890] usb 9-1: SerialNumber: syz [ 859.139843][ T5890] usb 9-1: config 0 descriptor?? [ 859.193093][ T5852] usb 10-1: device descriptor read/64, error -71 [ 859.319594][ T5852] usb usb10-port1: attempt power cycle [ 859.360215][ T42] usb 9-1: USB disconnect, device number 27 [ 859.441262][ T6097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.719373][ T5852] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 859.791250][ T5852] usb 10-1: device descriptor read/8, error -71 [ 859.825584][T11783] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1448'. [ 860.099549][ T5852] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 860.173546][ T5852] usb 10-1: device descriptor read/8, error -71 [ 860.308354][ T5852] usb usb10-port1: unable to enumerate USB device [ 860.709239][T11795] lo speed is unknown, defaulting to 1000 [ 861.692836][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'. [ 862.110008][T11804] siw: device registration error -23 [ 863.477436][T11820] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1461'. [ 865.289386][ T42] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 865.508233][ T42] usb 10-1: Using ep0 maxpacket: 16 [ 865.570084][ T42] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.580807][ T42] usb 10-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 865.594166][ T42] usb 10-1: config 0 interface 0 has no altsetting 0 [ 865.605321][ T42] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 865.615961][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.787435][ T5858] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 865.826752][ T42] usb 10-1: config 0 descriptor?? [ 865.868213][ T42] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 865.997119][ T5858] usb 6-1: device descriptor read/64, error -71 [ 866.275290][ T5858] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 866.449313][ T5858] usb 6-1: device descriptor read/64, error -71 [ 866.563210][ T5858] usb usb6-port1: attempt power cycle [ 866.773703][T11839] lo speed is unknown, defaulting to 1000 [ 866.957139][ T5858] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 867.079302][ T5858] usb 6-1: device descriptor read/8, error -71 [ 867.452768][ T5858] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 867.511583][ T5858] usb 6-1: device descriptor read/8, error -71 [ 867.627368][ T5858] usb usb6-port1: unable to enumerate USB device [ 868.170444][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 868.221323][ T5852] usb 10-1: USB disconnect, device number 29 [ 868.624210][T11851] siw: device registration error -23 [ 869.745670][T11859] netlink: 304 bytes leftover after parsing attributes in process `syz.9.1475'. [ 874.679942][T11882] lo speed is unknown, defaulting to 1000 [ 875.080197][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1486'. [ 875.295430][ T5852] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 875.480619][ T5852] usb 6-1: device descriptor read/64, error -71 [ 875.652694][T11896] siw: device registration error -23 [ 875.734511][ T5852] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 875.883665][ T5852] usb 6-1: device descriptor read/64, error -71 [ 875.959148][T11900] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1487'. [ 875.996976][ T5852] usb usb6-port1: attempt power cycle [ 876.403467][ T5852] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 876.484939][ T5852] usb 6-1: device descriptor read/8, error -71 [ 876.753526][ T5852] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 876.810544][ T5852] usb 6-1: device descriptor read/8, error -71 [ 876.931260][ T5852] usb usb6-port1: unable to enumerate USB device [ 877.944323][T11928] loop9: detected capacity change from 0 to 1024 [ 878.003492][T11928] EXT4-fs (loop9): filesystem is read-only [ 878.021876][T11928] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 878.033276][T11928] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 878.043526][T11928] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 878.192453][T11928] EXT4-fs error (device loop9): ext4_get_journal_inode:5796: comm syz.9.1496: inode #1: comm syz.9.1496: iget: illegal inode # [ 878.302853][T11928] EXT4-fs (loop9): no journal found [ 878.308486][T11928] EXT4-fs (loop9): can't get journal size [ 878.611124][T11928] EXT4-fs error (device loop9): __ext4_fill_super:5500: inode #2: comm syz.9.1496: iget: bad extra_isize 65535 (inode size 1024) [ 878.720780][T11928] EXT4-fs (loop9): get root inode failed [ 878.726688][T11928] EXT4-fs (loop9): mount failed [ 879.660534][T11941] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1500'. [ 879.787036][T11943] Bluetooth: MGMT ver 1.23 [ 879.812005][T11939] lo speed is unknown, defaulting to 1000 [ 880.557547][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 880.891726][T11953] siw: device registration error -23 [ 881.878020][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1505'. [ 882.669565][T11970] usb usb1: check_ctrlrecip: process 11970 (syz.5.1508) requesting ep 01 but needs 81 [ 883.586110][T11983] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1513'. [ 883.740276][ T5852] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 883.959197][ T5852] usb 9-1: Using ep0 maxpacket: 16 [ 884.006271][ T5852] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.018274][ T5852] usb 9-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 884.032307][ T5852] usb 9-1: config 0 interface 0 has no altsetting 0 [ 884.039348][ T5852] usb 9-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 884.049064][ T5852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.186974][ T5852] usb 9-1: config 0 descriptor?? [ 884.236290][ T5852] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 884.981789][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. [ 885.420189][T12000] siw: device registration error -23 [ 886.252268][ T5852] usb 9-1: USB disconnect, device number 28 [ 887.226800][T12013] overlayfs: failed to clone upperpath [ 887.870834][T12018] loop5: detected capacity change from 0 to 1024 [ 887.990497][T12018] EXT4-fs (loop5): Test dummy encryption mode enabled [ 888.164207][T12023] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1525'. [ 888.250635][T12018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.497682][T12018] fscrypt (loop5): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 888.979096][ T6097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.623865][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1530'. [ 890.000485][T12040] siw: device registration error -23 [ 891.028745][T12055] kvm: apic: phys broadcast and lowest prio [ 891.326932][T12059] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1536'. [ 891.498370][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1537'. [ 892.149000][T12067] usb usb1: check_ctrlrecip: process 12067 (syz.5.1539) requesting ep 01 but needs 81 [ 897.994360][T12089] loop8: detected capacity change from 0 to 512 [ 898.107665][T12089] EXT4-fs (loop8): Test dummy encryption mode enabled [ 898.114813][T12089] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 898.246632][T12089] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.1546: bad orphan inode 131083 [ 898.308240][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 898.315896][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 898.459255][T12089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.649849][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1547'. [ 899.010390][T12095] siw: device registration error -23 [ 899.126885][T12089] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 899.385133][T12089] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 899.785674][ T8226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.595520][T12112] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1551'. [ 901.212290][T12115] usb usb1: check_ctrlrecip: process 12115 (syz.8.1552) requesting ep 01 but needs 81 [ 901.249153][T12117] netlink: 'syz.5.1554': attribute type 13 has an invalid length. [ 901.269857][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1553'. [ 901.279312][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1553'. [ 901.288847][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1553'. [ 901.649687][T12117] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.658293][T12117] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.997220][T12117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.036687][T12117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.512521][T12117] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.521804][T12117] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.539679][T12117] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.552003][T12117] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.109962][T12129] input: syz0 as /devices/virtual/input/input6 [ 904.745585][T12136] overlayfs: failed to clone upperpath [ 904.975198][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1561'. [ 905.053533][ T5890] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 905.261237][ T5890] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.273320][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.366627][T12145] siw: device registration error -23 [ 905.384961][ T5890] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.394545][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 905.403787][ T5890] usb 6-1: SerialNumber: syz [ 905.952693][ T5890] usb 6-1: 0:2 : does not exist [ 905.957885][ T5890] usb 6-1: unit 5: unexpected type 0x0a [ 906.940234][ T5890] usb 6-1: USB disconnect, device number 46 [ 907.715171][T12080] udevd[12080]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.129847][T12155] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1564'. [ 909.953493][T12167] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 909.969798][T12171] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1568'. [ 909.993701][T12172] usb usb1: check_ctrlrecip: process 12172 (syz.8.1567) requesting ep 01 but needs 81 [ 912.397014][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1577'. [ 913.071998][T12195] siw: device registration error -23 [ 913.953949][T12199] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1578'. [ 915.113130][T12203] kAFS: No cell specified [ 915.505099][T12206] mmap: syz.8.1580 (12206) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 916.572408][T12217] netlink: 'syz.3.1583': attribute type 5 has an invalid length. [ 918.011670][ C0] hrtimer: interrupt took 305505 ns [ 919.467020][T12238] overlayfs: failed to clone upperpath [ 922.145487][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1589'. [ 922.624804][T12250] siw: device registration error -23 [ 922.799513][T12252] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1590'. [ 923.342118][ T5890] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 923.593625][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.604328][ T5890] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 923.613805][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.725686][ T5890] usb 6-1: config 0 descriptor?? [ 923.765681][ T5890] pwc: Askey VC010 type 2 USB webcam detected. [ 924.157035][ T5890] pwc: recv_control_msg error -32 req 02 val 2b00 [ 924.192650][ T5890] pwc: recv_control_msg error -32 req 02 val 2700 [ 924.235431][ T5890] pwc: recv_control_msg error -32 req 02 val 2c00 [ 924.276886][ T5890] pwc: recv_control_msg error -32 req 04 val 1000 [ 924.322202][ T5890] pwc: recv_control_msg error -32 req 04 val 1300 [ 924.356579][ T5890] pwc: recv_control_msg error -32 req 04 val 1400 [ 924.377593][ T5890] pwc: recv_control_msg error -32 req 02 val 2000 [ 924.399537][ T5890] pwc: recv_control_msg error -32 req 02 val 2100 [ 924.438061][ T5890] pwc: recv_control_msg error -32 req 04 val 1500 [ 924.471688][ T5890] pwc: recv_control_msg error -32 req 02 val 2500 [ 924.606845][T12262] capability: warning: `syz.8.1594' uses deprecated v2 capabilities in a way that may be insecure [ 924.689907][ T5890] pwc: recv_control_msg error -71 req 02 val 2600 [ 924.719855][ T5890] pwc: recv_control_msg error -71 req 02 val 2900 [ 924.742255][ T5890] pwc: recv_control_msg error -71 req 02 val 2800 [ 924.762461][ T5890] pwc: recv_control_msg error -71 req 04 val 1100 [ 924.777530][ T5890] pwc: recv_control_msg error -71 req 04 val 1200 [ 924.835697][ T5890] pwc: Registered as video103. [ 924.844009][ T5890] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 925.048966][ T5890] usb 6-1: USB disconnect, device number 47 [ 925.692732][ T9884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 925.702322][ T9884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 925.712076][ T9884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 925.725818][ T9884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 925.736872][ T9884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 925.826891][T12267] lo speed is unknown, defaulting to 1000 [ 927.637790][T12267] chnl_net:caif_netlink_parms(): no params data found [ 927.733542][T12281] usb usb1: check_ctrlrecip: process 12281 (syz.8.1597) requesting ep 01 but needs 81 [ 927.762690][ T9884] Bluetooth: hci3: command tx timeout [ 929.673800][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.684219][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.692852][T12267] bridge_slave_0: entered allmulticast mode [ 929.700920][T12267] bridge_slave_0: entered promiscuous mode [ 929.842537][ T9884] Bluetooth: hci3: command tx timeout [ 929.864829][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.873238][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.880845][T12267] bridge_slave_1: entered allmulticast mode [ 929.890736][T12267] bridge_slave_1: entered promiscuous mode [ 929.977531][T12299] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1602'. [ 930.333798][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.370652][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1603'. [ 930.484299][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.775105][T12307] siw: device registration error -23 [ 930.803884][T12267] team0: Port device team_slave_0 added [ 930.948867][T12267] team0: Port device team_slave_1 added [ 930.986929][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 931.497235][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.504896][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.531767][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.763844][T12316] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1606'. [ 931.788975][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.796935][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.827613][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.925960][ T9884] Bluetooth: hci3: command tx timeout [ 932.649573][T12267] hsr_slave_0: entered promiscuous mode [ 932.659479][T12267] hsr_slave_1: entered promiscuous mode [ 932.668387][T12267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.676284][T12267] Cannot create hsr debugfs directory [ 934.012487][ T9884] Bluetooth: hci3: command tx timeout [ 934.766756][T12334] capability: warning: `syz.8.1608' uses 32-bit capabilities (legacy support in use) [ 937.170996][T12267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 937.325357][T12267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 937.373106][T12267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 937.503262][T12267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 937.933252][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 938.883384][T12371] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1618'. [ 939.146424][ T6838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.311269][ T6838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.525525][ T6838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.777126][ T6838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.053906][T12267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.428388][T12267] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.572499][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.580037][ T7462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.590091][ T6838] bridge_slave_1: left allmulticast mode [ 940.597958][ T6838] bridge_slave_1: left promiscuous mode [ 940.604342][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.648481][ T6838] bridge_slave_0: left allmulticast mode [ 940.656135][ T6838] bridge_slave_0: left promiscuous mode [ 940.663713][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.837306][T12400] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1625'. [ 942.029373][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.085283][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.125732][ T6838] bond0 (unregistering): Released all slaves [ 942.276101][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.283700][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.017590][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1628'. [ 943.180148][ T6838] hsr_slave_0: left promiscuous mode [ 943.263240][ T6838] hsr_slave_1: left promiscuous mode [ 943.270975][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.281164][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.323520][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.331242][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.393334][T12411] siw: device registration error -23 [ 943.492960][ T6838] veth1_macvtap: left promiscuous mode [ 943.498706][ T6838] veth0_macvtap: left promiscuous mode [ 943.504951][ T6838] veth1_vlan: left promiscuous mode [ 944.013581][T12415] loop9: detected capacity change from 0 to 512 [ 944.032128][T12418] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1630'. [ 944.464336][T12415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.477747][T12415] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 944.967686][T12415] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #2: block 18: comm syz.9.1629: lblock 23 mapped to illegal pblock 18 (length 1) [ 945.024434][T12415] EXT4-fs (loop9): Remounting filesystem read-only [ 945.556447][ T8635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.596290][ T8121] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 945.609097][ T8121] Quota error (device loop9): write_blk: dquota write failed [ 945.616968][ T8121] Quota error (device loop9): free_dqentry: Can't write quota data block 5 [ 947.336741][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1636'. [ 947.346480][T12267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.945983][T12267] veth0_vlan: entered promiscuous mode [ 948.068668][T12267] veth1_vlan: entered promiscuous mode [ 948.407707][T12267] veth0_macvtap: entered promiscuous mode [ 948.462434][T12267] veth1_macvtap: entered promiscuous mode [ 948.687999][T12267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.863563][T12267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.948053][T12267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.957361][T12267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.970449][T12267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.979425][T12267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.463579][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 950.722483][T12485] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1643'. [ 952.329244][T12502] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1647'. [ 954.114365][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1651'. [ 954.583014][T12525] siw: device registration error -23 [ 955.028843][T12535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1654'. [ 955.530195][T12541] loop9: detected capacity change from 0 to 256 [ 955.912203][T12350] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 956.045035][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1657'. [ 956.117741][T12552] loop8: detected capacity change from 0 to 256 [ 956.136164][T12350] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 956.145492][T12350] usb 10-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 956.156166][T12350] usb 10-1: config 0 has no interface number 0 [ 956.246220][T12350] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 956.255845][T12350] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.264426][T12350] usb 10-1: Product: syz [ 956.268883][T12350] usb 10-1: Manufacturer: syz [ 956.273990][T12350] usb 10-1: SerialNumber: syz [ 956.325118][T12552] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 255103877513218) [ 956.435814][T12350] usb 10-1: config 0 descriptor?? [ 956.694192][T12350] usb 10-1: USB disconnect, device number 30 [ 957.072800][T12561] usb usb1: check_ctrlrecip: process 12561 (syz.5.1659) requesting ep 01 but needs 81 [ 957.192463][ T7490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.200582][ T7490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.310786][ T3832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.319535][ T3832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.550274][T12350] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 957.835720][T12350] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 957.844223][T12350] usb 9-1: config 0 has no interface number 0 [ 957.850601][T12350] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 957.860171][T12350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.947571][T12350] usb 9-1: config 0 descriptor?? [ 958.006307][T12350] usb 9-1: selecting invalid altsetting 1 [ 958.013030][T12350] dvb_ttusb_budget: ttusb_init_controller: error [ 958.019572][T12350] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 958.553405][T12350] DVB: Unable to find symbol cx22700_attach() [ 958.672511][T12577] loop5: detected capacity change from 0 to 8 [ 958.863478][T12577] SQUASHFS error: Unable to read inode 0x127 [ 959.112074][T12350] DVB: Unable to find symbol tda10046_attach() [ 959.118588][T12350] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 959.269079][T12350] usb 9-1: USB disconnect, device number 29 [ 959.722953][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 959.729737][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 960.368592][T12588] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1666'. [ 960.905411][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1667'. [ 962.900688][T12592] siw: device registration error -23 [ 963.369324][T12599] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1669'. [ 964.319213][T12613] loop8: detected capacity change from 0 to 128 [ 964.393237][T12613] EXT4-fs (loop8): Test dummy encryption mode enabled [ 964.446477][T12613] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 964.467037][T12613] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 964.631852][ T42] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 964.938377][ T42] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.949118][ T42] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 965.051870][ T42] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 965.061568][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 965.069940][ T42] usb 10-1: SerialNumber: syz [ 965.395859][ T42] usb 10-1: 0:2 : does not exist [ 965.401167][ T42] usb 10-1: unit 5 not found! [ 965.622977][ T42] usb 10-1: USB disconnect, device number 31 [ 965.835420][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.120629][T12648] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1682'. [ 968.342404][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1683'. [ 968.556875][T12651] siw: device registration error -23 [ 968.689602][ T8226] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 969.250416][T12659] loop8: detected capacity change from 0 to 256 [ 969.652110][ T1630] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 969.888970][ T1630] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 969.897553][ T1630] usb 9-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 969.909763][ T1630] usb 9-1: config 0 has no interface number 0 [ 969.966343][ T1630] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 969.976022][ T1630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.984516][ T1630] usb 9-1: Product: syz [ 969.988903][ T1630] usb 9-1: Manufacturer: syz [ 969.993851][ T1630] usb 9-1: SerialNumber: syz [ 970.059277][ T1630] usb 9-1: config 0 descriptor?? [ 970.297903][ T42] usb 9-1: USB disconnect, device number 30 [ 971.589076][T12687] loop9: detected capacity change from 0 to 128 [ 971.757779][T12691] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1694'. [ 971.914008][T12687] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 971.999549][T12687] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.032182][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 972.296933][T12698] loop1: detected capacity change from 0 to 256 [ 972.479537][T12698] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 255103877513218) [ 972.735470][ T8635] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 973.650123][T12716] usb usb1: check_ctrlrecip: process 12716 (syz.9.1700) requesting ep 01 but needs 81 [ 974.982449][T12739] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1708'. [ 975.261217][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1709'. [ 975.647371][T12748] siw: device registration error -23 [ 975.729322][T12748] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1709'. [ 977.225069][T12761] lo speed is unknown, defaulting to 1000 [ 979.099598][T12784] usb usb1: check_ctrlrecip: process 12784 (syz.9.1719) requesting ep 01 but needs 81 [ 979.975562][T12795] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1722'. [ 980.786558][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1725'. [ 981.116597][T12803] siw: device registration error -23 [ 981.213505][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1725'. [ 983.234924][T12826] loop9: detected capacity change from 0 to 1024 [ 983.704292][T12826] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.896350][ T30] audit: type=1800 audit(1752479028.486:75): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1732" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 985.941544][ T30] audit: type=1800 audit(1752479030.516:76): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1732" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 986.437403][ T8635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.904919][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1738'. [ 987.285253][T12861] siw: device registration error -23 [ 987.381199][T12861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1738'. [ 988.619633][ T1630] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 988.825892][ T1630] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 988.835467][ T1630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.882018][ T1630] usb 9-1: config 0 descriptor?? [ 989.400273][ T1630] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 990.142818][ T42] usb 9-1: USB disconnect, device number 31 [ 990.340729][T12897] fido_id[12897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 993.220007][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 993.448087][T12910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1753'. [ 995.142514][T12936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 995.153174][T12936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 995.168324][T12936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 995.194013][T12936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 995.218483][T12936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 995.359300][T12936] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 995.438405][T12935] lo speed is unknown, defaulting to 1000 [ 995.575291][T12941] process 'syz.5.1761' launched '/dev/fd/5' with NULL argv: empty string added [ 996.341692][ T42] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 996.612004][ T42] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 996.621531][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.659530][T12935] chnl_net:caif_netlink_parms(): no params data found [ 996.712899][ T42] usb 9-1: config 0 descriptor?? [ 997.120366][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1767'. [ 997.238500][ T42] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 997.292958][T12936] Bluetooth: hci0: command tx timeout [ 997.534555][T12960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'. [ 997.916887][ T1630] usb 9-1: USB disconnect, device number 32 [ 998.221572][T12967] fido_id[12967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 998.815427][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.824851][T12935] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.832815][T12935] bridge_slave_0: entered allmulticast mode [ 998.843013][T12935] bridge_slave_0: entered promiscuous mode [ 998.923965][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.932385][T12935] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.940252][T12935] bridge_slave_1: entered allmulticast mode [ 998.950149][T12935] bridge_slave_1: entered promiscuous mode [ 999.119324][T11871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.363159][T12936] Bluetooth: hci0: command tx timeout [ 999.509415][T11871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.614471][T12935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.730109][T11871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.838146][T12935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.252753][T11871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.334414][T12935] team0: Port device team_slave_0 added [ 1000.397621][T12935] team0: Port device team_slave_1 added [ 1000.722280][T12935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.734236][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.763490][T12935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.077318][T12935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.084804][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.111480][T12935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.132498][T11871] bridge_slave_1: left allmulticast mode [ 1001.138608][T11871] bridge_slave_1: left promiscuous mode [ 1001.148609][T11871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.300675][T11871] bridge_slave_0: left allmulticast mode [ 1001.308380][T11871] bridge_slave_0: left promiscuous mode [ 1001.315222][T11871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.450099][T12936] Bluetooth: hci0: command tx timeout [ 1001.661738][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1779'. [ 1001.977961][T13003] siw: device registration error -23 [ 1001.985497][T11871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.006255][T11871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.050556][T11871] bond0 (unregistering): Released all slaves [ 1002.083354][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1779'. [ 1002.754757][T12935] hsr_slave_0: entered promiscuous mode [ 1002.765304][T12935] hsr_slave_1: entered promiscuous mode [ 1002.774258][T12935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.786280][T12935] Cannot create hsr debugfs directory [ 1003.373931][T11871] hsr_slave_0: left promiscuous mode [ 1003.425237][T11871] hsr_slave_1: left promiscuous mode [ 1003.434607][T11871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.442542][T11871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.479635][T11871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.487855][T11871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.521661][T12936] Bluetooth: hci0: command tx timeout [ 1003.681929][T11871] veth1_macvtap: left promiscuous mode [ 1003.687728][T11871] veth0_macvtap: left promiscuous mode [ 1003.694259][T11871] veth1_vlan: left promiscuous mode [ 1003.703730][T11871] veth0_vlan: left promiscuous mode [ 1004.639662][T11871] team0 (unregistering): Port device team_slave_1 removed [ 1004.783266][T11871] team0 (unregistering): Port device team_slave_0 removed [ 1006.224792][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1790'. [ 1006.543956][T13046] siw: device registration error -23 [ 1006.714146][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1790'. [ 1008.050696][T12935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1008.171977][T13064] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1796'. [ 1008.188881][T12935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1008.283191][T12935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1008.343224][T12935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1009.523461][T12935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.715512][T12935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.800055][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.807763][T11872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.902619][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.910145][T11872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.159732][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.853456][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1805'. [ 1012.094092][T12935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.194927][T13103] siw: device registration error -23 [ 1012.323317][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1805'. [ 1012.685326][T12935] veth0_vlan: entered promiscuous mode [ 1012.809535][T12935] veth1_vlan: entered promiscuous mode [ 1013.063753][T12935] veth0_macvtap: entered promiscuous mode [ 1013.166030][T12935] veth1_macvtap: entered promiscuous mode [ 1013.372506][T12935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.417326][T12935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.513484][T12935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.523067][T12935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.533110][T12935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.542286][T12935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.098771][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1811'. [ 1015.337159][T13148] overlay: Bad value for 'upperdir' [ 1015.816191][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1818'. [ 1015.936836][T13148] loop9: detected capacity change from 0 to 4096 [ 1016.325274][T13154] siw: device registration error -23 [ 1016.452046][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1818'. [ 1020.408031][ T8121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.416419][ T8121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.519914][ T7473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.528442][ T7473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.159751][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1021.693357][T13208] loop2: detected capacity change from 0 to 512 [ 1021.964428][T13208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.977751][T13208] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.505950][T12935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.877889][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1830'. [ 1023.178889][T13222] loop2: detected capacity change from 0 to 512 [ 1023.199501][T13221] siw: device registration error -23 [ 1023.248398][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1830'. [ 1023.298201][T13222] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1023.322667][T13222] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1023.336842][T13222] EXT4-fs (loop2): 1 truncate cleaned up [ 1023.344159][T13222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.525284][T12935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.084414][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 1028.310455][T13270] siw: device registration error -23 [ 1028.421824][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 1033.053917][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1858'. [ 1033.318624][T13310] siw: device registration error -23 [ 1033.402380][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1858'. [ 1034.635086][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1862'. [ 1036.842919][T12936] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 1036.885836][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 1041.044392][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1885'. [ 1041.399436][T13405] siw: device registration error -23 [ 1043.641855][T12350] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1044.192509][T12350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1044.259351][T12350] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1044.268142][T12350] usb 3-1: can't read configurations, error -71 [ 1046.242106][T12350] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1046.466175][T12350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.477658][T12350] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.605783][T12350] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1046.615264][T12350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1046.623611][T12350] usb 3-1: SerialNumber: syz [ 1046.945488][T12350] usb 3-1: 0:2 : does not exist [ 1046.950754][T12350] usb 3-1: unit 5: unexpected type 0x09 [ 1047.159634][T12350] usb 3-1: USB disconnect, device number 5 [ 1047.373111][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.540371][T13471] loop2: detected capacity change from 0 to 128 [ 1051.251072][T12350] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1051.470357][T12350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1051.522019][T12350] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1051.530018][T12350] usb 3-1: can't read configurations, error -71 [ 1053.038176][T13511] loop2: detected capacity change from 0 to 128 [ 1054.706446][ T9884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1054.722770][ T9884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1054.749130][ T9884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1054.770445][ T9884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1054.784901][ T9884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1055.078840][T13524] lo speed is unknown, defaulting to 1000 [ 1055.285544][T13528] loop2: detected capacity change from 0 to 128 [ 1055.594182][T13528] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1055.703027][T13528] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.447665][T12935] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1056.719897][T13524] chnl_net:caif_netlink_parms(): no params data found [ 1056.908911][ T9884] Bluetooth: hci3: command tx timeout [ 1057.341209][ T9884] Bluetooth: hci6: unexpected event for opcode 0x0402 [ 1058.655475][T13524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.663477][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.671017][T13524] bridge_slave_0: entered allmulticast mode [ 1058.679393][T13524] bridge_slave_0: entered promiscuous mode [ 1058.702537][T12350] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1058.902043][T13524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.909635][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.917768][T13524] bridge_slave_1: entered allmulticast mode [ 1058.927113][T13524] bridge_slave_1: entered promiscuous mode [ 1058.953676][T12350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.964425][T12350] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1058.989753][ T9884] Bluetooth: hci3: command tx timeout [ 1059.154034][T12350] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1059.163739][T12350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.172492][T12350] usb 3-1: Product: syz [ 1059.176891][T12350] usb 3-1: Manufacturer: syz [ 1059.181841][T12350] usb 3-1: SerialNumber: syz [ 1059.344476][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.438108][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.302198][T13524] team0: Port device team_slave_0 added [ 1060.462405][T13524] team0: Port device team_slave_1 added [ 1060.580383][T12350] usb 3-1: 0:2 : does not exist [ 1060.742674][T12350] usb 3-1: USB disconnect, device number 8 [ 1061.046948][ T9884] Bluetooth: hci3: command tx timeout [ 1061.053111][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.060387][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.087065][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.293836][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.398275][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.405989][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.432681][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.033571][ T9884] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 1062.488682][T13524] hsr_slave_0: entered promiscuous mode [ 1062.498610][T13524] hsr_slave_1: entered promiscuous mode [ 1062.507610][T13524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.515474][T13524] Cannot create hsr debugfs directory [ 1062.951763][T12350] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1063.122110][ T9884] Bluetooth: hci3: command tx timeout [ 1063.374730][T12350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1063.406323][T12350] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1063.414462][T12350] usb 3-1: can't read configurations, error -71 [ 1064.015626][T13609] loop9: detected capacity change from 0 to 128 [ 1064.323275][ T3832] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.725926][ T3832] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.156532][ T3832] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.604009][ T3832] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.714126][ T30] audit: type=1326 audit(1752479110.306:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1065.743098][ T30] audit: type=1326 audit(1752479110.326:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.2.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1066.325209][ T9884] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 1066.734231][ T3832] bridge_slave_1: left allmulticast mode [ 1066.740152][ T3832] bridge_slave_1: left promiscuous mode [ 1066.749799][ T3832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.846788][ T3832] bridge_slave_0: left allmulticast mode [ 1066.853174][ T3832] bridge_slave_0: left promiscuous mode [ 1066.859851][ T3832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.771041][T13651] loop9: detected capacity change from 0 to 128 [ 1068.081809][ T3832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.173414][ T3832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.233896][ T3832] bond0 (unregistering): Released all slaves [ 1068.353976][T13524] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1068.462888][T13524] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1068.512591][T13524] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1068.639129][T13524] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1069.308349][ T3832] hsr_slave_0: left promiscuous mode [ 1069.327614][ T3832] hsr_slave_1: left promiscuous mode [ 1069.339640][ T3832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.347555][ T3832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.524500][ T3832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.532804][ T3832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.603034][ T3832] veth1_macvtap: left promiscuous mode [ 1069.608723][ T3832] veth0_macvtap: left promiscuous mode [ 1069.614646][ T3832] veth1_vlan: left promiscuous mode [ 1069.620107][ T3832] veth0_vlan: left promiscuous mode [ 1070.594805][ T3832] team0 (unregistering): Port device team_slave_1 removed [ 1070.714816][ T3832] team0 (unregistering): Port device team_slave_0 removed [ 1071.802587][T13524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.905553][T13524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.065294][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.072998][ T7473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.123011][ T5858] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1072.136456][ T9884] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1072.165659][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.173292][ T7473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.390781][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.401484][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.523685][ T5858] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1072.532293][T13524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.533190][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1072.552043][ T5858] usb 3-1: SerialNumber: syz [ 1072.894322][ T5858] usb 3-1: 0:2 : does not exist [ 1073.098352][ T5858] usb 3-1: USB disconnect, device number 11 [ 1073.285335][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1074.511575][T13693] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1074.647267][T13524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.738645][T13693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.749265][T13693] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.840688][T13693] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1074.850316][T13693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.858757][T13693] usb 3-1: Product: syz [ 1074.863498][T13693] usb 3-1: Manufacturer: syz [ 1074.872740][T13693] usb 3-1: SerialNumber: syz [ 1075.697650][ T9884] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1077.880540][T13524] veth0_vlan: entered promiscuous mode [ 1078.048753][T13524] veth1_vlan: entered promiscuous mode [ 1078.114082][T13693] usb 3-1: 0:2 : does not exist [ 1078.372461][T13693] usb 3-1: USB disconnect, device number 12 [ 1078.503142][T13524] veth0_macvtap: entered promiscuous mode [ 1078.624913][T13524] veth1_macvtap: entered promiscuous mode [ 1078.700265][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.956119][T13524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.102552][T13760] trusted_key: encrypted_key: keyword 'upd' not recognized [ 1079.117425][T13524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.209881][T13524] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.219396][T13524] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.228397][T13524] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.237619][T13524] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.447850][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 1081.457677][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1993'. [ 1081.467011][T13790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1993'. [ 1081.476296][T13790] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1993'. [ 1081.487094][T13790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1993'. [ 1082.598165][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1086.664289][ T4038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.673058][ T4038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.790047][ T7490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.798942][ T7490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.409190][T13922] loop6: detected capacity change from 0 to 64 [ 1093.591572][ T5858] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1093.823014][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.833746][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1093.878386][ T5858] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1093.887938][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.896334][ T5858] usb 3-1: Product: syz [ 1093.900725][ T5858] usb 3-1: Manufacturer: syz [ 1093.905651][ T5858] usb 3-1: SerialNumber: syz [ 1094.240291][ T5858] usb 3-1: 0:2 : does not exist [ 1094.317090][ T5858] usb 3-1: USB disconnect, device number 13 [ 1094.517628][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.201561][T13976] overlayfs: failed to clone lowerpath [ 1095.498194][T13982] loop2: detected capacity change from 0 to 512 [ 1095.578277][T13982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1095.804120][T13982] EXT4-fs (loop2): 1 truncate cleaned up [ 1095.812400][T13982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.692211][T12935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.340638][T14004] loop2: detected capacity change from 0 to 256 [ 1097.503783][T14004] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 255103877513218) [ 1098.423926][T14013] loop2: detected capacity change from 0 to 512 [ 1098.515473][T14013] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1098.681775][T14013] EXT4-fs (loop2): 1 truncate cleaned up [ 1098.689071][T14013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.568929][T14022] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.2.2051: corrupted xattr block 33: invalid header [ 1100.425586][T14022] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.2051: corrupted xattr block 33: invalid header [ 1100.451753][T14022] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 1101.130904][T12935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.094598][ T5858] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1102.400318][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.412757][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.534169][ T5858] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1102.543651][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.552011][ T5858] usb 3-1: Product: syz [ 1102.556350][ T5858] usb 3-1: Manufacturer: syz [ 1102.561091][ T5858] usb 3-1: SerialNumber: syz [ 1103.457135][ T5858] usb 3-1: 0:2 : does not exist [ 1103.657085][ T5858] usb 3-1: USB disconnect, device number 14 [ 1104.047404][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1107.063188][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 1108.620624][T14100] loop6: detected capacity change from 0 to 256 [ 1108.757601][T14100] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 255103877513218) [ 1110.148868][T14114] loop6: detected capacity change from 0 to 128 [ 1110.495379][T14114] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1110.555850][T14114] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.432714][T13524] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1111.554123][T12936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1111.571869][T12936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1111.662178][T12936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.763666][T12936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.780639][T12936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1111.962463][T14131] lo speed is unknown, defaulting to 1000 [ 1113.519375][T14131] chnl_net:caif_netlink_parms(): no params data found [ 1113.846025][ T9884] Bluetooth: hci1: command tx timeout [ 1114.155062][ T5858] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1114.407271][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.417980][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.532419][ T5858] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1114.541993][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.550290][ T5858] usb 3-1: Product: syz [ 1114.555355][ T5858] usb 3-1: Manufacturer: syz [ 1114.560176][ T5858] usb 3-1: SerialNumber: syz [ 1115.396340][ T5858] usb 3-1: 0:2 : does not exist [ 1115.554114][ T5858] usb 3-1: USB disconnect, device number 15 [ 1115.775298][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1115.819266][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.834114][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.842035][T14131] bridge_slave_0: entered allmulticast mode [ 1115.851372][T14131] bridge_slave_0: entered promiscuous mode [ 1115.927434][ T9884] Bluetooth: hci1: command tx timeout [ 1115.984657][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.992621][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.000200][T14131] bridge_slave_1: entered allmulticast mode [ 1116.008577][T14131] bridge_slave_1: entered promiscuous mode [ 1116.384626][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.472374][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.744314][T14131] team0: Port device team_slave_0 added [ 1116.856707][T14131] team0: Port device team_slave_1 added [ 1117.171987][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.179136][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.205507][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.516623][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.525012][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.552314][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.021095][ T9884] Bluetooth: hci1: command tx timeout [ 1118.115734][T14131] hsr_slave_0: entered promiscuous mode [ 1118.126297][T14131] hsr_slave_1: entered promiscuous mode [ 1118.135318][T14131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.143171][T14131] Cannot create hsr debugfs directory [ 1118.444286][ T9884] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1118.897948][T14195] syz_tun: entered allmulticast mode [ 1118.945284][T14194] syz_tun: left allmulticast mode [ 1120.084194][T12936] Bluetooth: hci1: command tx timeout [ 1120.482487][T12936] Bluetooth: hci0: command 0x0406 tx timeout [ 1121.889408][T14131] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1121.993270][T14131] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1122.065752][T14131] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1122.483228][T12936] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1122.492025][T12936] Bluetooth: hci5: Injecting HCI hardware error event [ 1122.499570][ T9884] Bluetooth: hci5: hardware error 0x00 [ 1122.693544][T14131] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1124.542561][ T7473] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.643555][ T9884] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1124.657800][T14131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.728756][ T7473] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.897129][ T7473] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.068771][ T7473] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.150565][T14131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.230944][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.238515][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.570135][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.577745][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.624875][ T7473] bridge_slave_1: left allmulticast mode [ 1125.630855][ T7473] bridge_slave_1: left promiscuous mode [ 1125.637567][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.740574][ T7473] bridge_slave_0: left allmulticast mode [ 1125.746768][ T7473] bridge_slave_0: left promiscuous mode [ 1125.753556][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.053399][ T9884] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 1127.272034][ T7473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.463378][ T7473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.527249][ T7473] bond0 (unregistering): Released all slaves [ 1128.051773][T12350] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1128.268252][T12350] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.278895][T12350] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.394168][T12350] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.405650][T12350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.414650][T12350] usb 7-1: Product: syz [ 1128.420237][T12350] usb 7-1: Manufacturer: syz [ 1128.425693][T12350] usb 7-1: SerialNumber: syz [ 1128.859694][ T7473] hsr_slave_0: left promiscuous mode [ 1128.928685][ T7473] hsr_slave_1: left promiscuous mode [ 1128.942495][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.950278][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.096288][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.107954][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.311836][T12350] usb 7-1: 0:2 : does not exist [ 1129.324522][ T7473] veth1_macvtap: left promiscuous mode [ 1129.330316][ T7473] veth0_macvtap: left promiscuous mode [ 1129.337174][ T7473] veth1_vlan: left promiscuous mode [ 1129.342798][ T7473] veth0_vlan: left promiscuous mode [ 1129.559916][T12350] usb 7-1: USB disconnect, device number 2 [ 1129.913982][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.925661][T14274] overlayfs: failed to clone upperpath [ 1130.924739][T14284] usb usb1: check_ctrlrecip: process 14284 (syz.2.2117) requesting ep 01 but needs 81 [ 1131.628385][ T7473] team0 (unregistering): Port device team_slave_1 removed [ 1131.670216][ T7473] team0 (unregistering): Port device team_slave_0 removed [ 1133.250931][T14131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.787596][T14319] overlayfs: failed to clone upperpath [ 1133.937813][T12350] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1134.154299][T12350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.165383][T12350] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1134.238385][T12350] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.248070][T12350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.256449][T12350] usb 3-1: Product: syz [ 1134.261386][T12350] usb 3-1: Manufacturer: syz [ 1134.266237][T12350] usb 3-1: SerialNumber: syz [ 1134.932561][T12350] usb 3-1: 0:2 : does not exist [ 1135.080959][T12350] usb 3-1: USB disconnect, device number 16 [ 1135.651357][T12270] udevd[12270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1136.780649][T14131] veth0_vlan: entered promiscuous mode [ 1136.933113][T14131] veth1_vlan: entered promiscuous mode [ 1137.292603][T14131] veth0_macvtap: entered promiscuous mode [ 1137.383672][T14131] veth1_macvtap: entered promiscuous mode [ 1137.558445][T14131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.663980][T14131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.765352][T14131] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.774564][T14131] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.783679][T14131] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.792848][T14131] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.995154][T14365] overlayfs: failed to clone upperpath [ 1139.095502][ T11] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1139.358967][ T11] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1139.371822][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1139.383331][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1139.394822][ T11] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.408427][ T11] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.417851][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.485031][T14382] ===================================================== [ 1139.492727][T14382] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1139.500407][T14382] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1139.505902][T14382] sctp_inq_push+0x2a3/0x350 [ 1139.510745][T14382] sctp_backlog_rcv+0x3c7/0xda0 [ 1139.516578][T14382] sk_backlog_rcv+0x142/0x420 [ 1139.526332][T14382] __release_sock+0x1d3/0x330 [ 1139.532418][T14382] release_sock+0x6b/0x270 [ 1139.537635][T14382] sctp_wait_for_connect+0x458/0x820 [ 1139.543454][T14382] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1139.549065][T14382] sctp_sendmsg+0x3910/0x49f0 [ 1139.554123][T14382] inet_sendmsg+0x269/0x2a0 [ 1139.558870][T14382] __sock_sendmsg+0x278/0x3d0 [ 1139.563987][T14382] __sys_sendto+0x593/0x720 [ 1139.568709][T14382] __ia32_sys_sendto+0x12f/0x200 [ 1139.574021][T14382] ia32_sys_call+0x1397/0x42c0 [ 1139.578994][T14382] __do_fast_syscall_32+0xb0/0x150 [ 1139.586806][T14382] do_fast_syscall_32+0x38/0x80 [ 1139.592230][T14382] do_SYSENTER_32+0x1f/0x30 [ 1139.596980][T14382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.604365][T14382] [ 1139.606826][T14382] Uninit was created at: [ 1139.611494][T14382] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1139.618235][T14382] kmalloc_reserve+0x22f/0x4b0 [ 1139.623331][T14382] __alloc_skb+0x347/0x7d0 [ 1139.627972][T14382] sctp_packet_transmit+0x18a1/0x46d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1139.633793][T14382] sctp_outq_flush+0x1c7d/0x67c0 [ 1139.638940][T14382] sctp_outq_uncork+0x9e/0xc0 [ 1139.643970][T14382] sctp_do_sm+0x8c8e/0x9720 [ 1139.650359][T14382] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 1139.655643][T14382] sctp_inq_push+0x2a3/0x350 [ 1139.660440][T14382] sctp_backlog_rcv+0x3c7/0xda0 [ 1139.665649][T14382] sk_backlog_rcv+0x142/0x420 [ 1139.670546][T14382] __release_sock+0x1d3/0x330 [ 1139.675607][T14382] release_sock+0x6b/0x270 [ 1139.680279][T14382] sctp_wait_for_connect+0x458/0x820 [ 1139.687211][T14382] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1139.693312][T14382] sctp_sendmsg+0x3910/0x49f0 [ 1139.698178][T14382] inet_sendmsg+0x269/0x2a0 [ 1139.703098][T14382] __sock_sendmsg+0x278/0x3d0 [ 1139.707987][T14382] __sys_sendto+0x593/0x720 [ 1139.712844][T14382] __ia32_sys_sendto+0x12f/0x200 [ 1139.717997][T14382] ia32_sys_call+0x1397/0x42c0 [ 1139.723290][T14382] __do_fast_syscall_32+0xb0/0x150 [ 1139.728620][T14382] do_fast_syscall_32+0x38/0x80 [ 1139.733744][T14382] do_SYSENTER_32+0x1f/0x30 [ 1139.738388][T14382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.744993][T14382] [ 1139.747435][T14382] CPU: 0 UID: 0 PID: 14382 Comm: syz.2.2144 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(undef) [ 1139.759854][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1139.770144][T14382] ===================================================== [ 1139.777404][T14382] Disabling lock debugging due to kernel taint [ 1139.784058][T14382] Kernel panic - not syncing: kmsan.panic set ... [ 1139.790682][T14382] CPU: 0 UID: 0 PID: 14382 Comm: syz.2.2144 Tainted: G B 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(undef) [ 1139.804683][T14382] Tainted: [B]=BAD_PAGE [ 1139.808987][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1139.819250][T14382] Call Trace: [ 1139.822686][T14382] [ 1139.825770][T14382] __dump_stack+0x26/0x30 [ 1139.830361][T14382] dump_stack_lvl+0x53/0x270 [ 1139.835215][T14382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1139.841335][T14382] dump_stack+0x1e/0x25 [ 1139.845753][T14382] panic+0x4bd/0xd50 [ 1139.849968][T14382] kmsan_report+0x31c/0x320 [ 1139.854757][T14382] ? __msan_warning+0x1b/0x30 [ 1139.859689][T14382] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1139.865063][T14382] ? sctp_inq_push+0x2a3/0x350 [ 1139.870069][T14382] ? sctp_backlog_rcv+0x3c7/0xda0 [ 1139.875346][T14382] ? sk_backlog_rcv+0x142/0x420 [ 1139.880487][T14382] ? __release_sock+0x1d3/0x330 [ 1139.885574][T14382] ? release_sock+0x6b/0x270 [ 1139.890405][T14382] ? sctp_wait_for_connect+0x458/0x820 [ 1139.896105][T14382] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1139.901884][T14382] ? sctp_sendmsg+0x3910/0x49f0 [ 1139.906950][T14382] ? inet_sendmsg+0x269/0x2a0 [ 1139.911833][T14382] ? __sock_sendmsg+0x278/0x3d0 [ 1139.916931][T14382] ? __sys_sendto+0x593/0x720 [ 1139.921793][T14382] ? __ia32_sys_sendto+0x12f/0x200 [ 1139.927114][T14382] ? ia32_sys_call+0x1397/0x42c0 [ 1139.932275][T14382] ? __do_fast_syscall_32+0xb0/0x150 [ 1139.937803][T14382] ? do_fast_syscall_32+0x38/0x80 [ 1139.943040][T14382] ? do_SYSENTER_32+0x1f/0x30 [ 1139.947936][T14382] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.954706][T14382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1139.960785][T14382] ? load_gs_index+0x41/0x100 [ 1139.965718][T14382] ? kmsan_get_metadata+0xfb/0x160 [ 1139.971078][T14382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1139.977156][T14382] ? kmsan_get_metadata+0xfb/0x160 [ 1139.982535][T14382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1139.988644][T14382] ? sctp_inq_pop+0x13d8/0x19e0 [ 1139.993734][T14382] ? kmsan_get_metadata+0xfb/0x160 [ 1139.999104][T14382] __msan_warning+0x1b/0x30 [ 1140.003839][T14382] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1140.009055][T14382] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 1140.014744][T14382] sctp_inq_push+0x2a3/0x350 [ 1140.019575][T14382] sctp_backlog_rcv+0x3c7/0xda0 [ 1140.024648][T14382] ? kmsan_get_metadata+0xfb/0x160 [ 1140.030016][T14382] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1140.035601][T14382] sk_backlog_rcv+0x142/0x420 [ 1140.040515][T14382] __release_sock+0x1d3/0x330 [ 1140.045427][T14382] release_sock+0x6b/0x270 [ 1140.050085][T14382] sctp_wait_for_connect+0x458/0x820 [ 1140.055599][T14382] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1140.061952][T14382] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1140.067567][T14382] ? kmsan_get_metadata+0xfb/0x160 [ 1140.072923][T14382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1140.079068][T14382] sctp_sendmsg+0x3910/0x49f0 [ 1140.083977][T14382] ? kmsan_internal_set_shadow_origin+0x10/0x110 [ 1140.090658][T14382] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1140.095932][T14382] inet_sendmsg+0x269/0x2a0 [ 1140.100693][T14382] __sock_sendmsg+0x278/0x3d0 [ 1140.105651][T14382] __sys_sendto+0x593/0x720 [ 1140.110388][T14382] ? do_futex+0x3a1/0x480 [ 1140.114984][T14382] ? kmsan_get_metadata+0xfb/0x160 [ 1140.120398][T14382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1140.126543][T14382] __ia32_sys_sendto+0x12f/0x200 [ 1140.131739][T14382] ia32_sys_call+0x1397/0x42c0 [ 1140.136735][T14382] __do_fast_syscall_32+0xb0/0x150 [ 1140.142113][T14382] do_fast_syscall_32+0x38/0x80 [ 1140.147213][T14382] do_SYSENTER_32+0x1f/0x30 [ 1140.151961][T14382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1140.158584][T14382] RIP: 0023:0xf7f62539 [ 1140.162832][T14382] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1140.182690][T14382] RSP: 002b:00000000f506555c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1140.191329][T14382] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000900 [ 1140.199513][T14382] RDX: 000000000000843e RSI: 0000000000000800 RDI: 0000000080000240 [ 1140.207670][T14382] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1140.215813][T14382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1140.223969][T14382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1140.232133][T14382] [ 1140.235693][T14382] Kernel Offset: disabled [ 1140.240108][T14382] Rebooting in 86400 seconds..