last executing test programs: 2m3.026892637s ago: executing program 3 (id=694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r6 = syz_open_pts(r5, 0x2000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x3) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x295c3e750d7bf054) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b6a, 0x0) 1m58.922444145s ago: executing program 3 (id=703): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r5 = syz_open_pts(r4, 0x2000) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x295c3e750d7bf054) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b6a, 0x0) 1m55.685351965s ago: executing program 3 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x6, 0x0, &(0x7f0000000300)="882f1242a03c", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001c3c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000001c380)={&(0x7f000001aa40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x34bc9843cb54b4c2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130a0142000000000000000007000001"], 0x14}}, 0x800) 1m51.907723957s ago: executing program 3 (id=714): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m49.779795482s ago: executing program 3 (id=718): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) 1m47.421817124s ago: executing program 3 (id=723): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x68, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c5", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 1m29.93163247s ago: executing program 32 (id=723): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x68, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c5", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 26.586254246s ago: executing program 1 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa2", 0x1b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e", 0x1d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581", 0x20}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23.776718487s ago: executing program 1 (id=860): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x80001, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa4242, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 21.700147982s ago: executing program 4 (id=865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = syz_open_pts(r5, 0x2000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x3) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x295c3e750d7bf054) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b6a, 0x0) 19.828569472s ago: executing program 5 (id=867): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 19.827837812s ago: executing program 4 (id=868): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 19.581149427s ago: executing program 1 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x6, 0x0, &(0x7f0000000300)="882f1242a03c", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001c3c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000001c380)={&(0x7f000001aa40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x34bc9843cb54b4c2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130a0142000000000000000007000001"], 0x14}}, 0x800) 17.812585295s ago: executing program 5 (id=872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x52, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) writev(r0, &(0x7f0000000680)=[{&(0x7f00000001c0)="79f96d1b9bb6214874a4753f2858d9128ed660045094e05d1b336ed0004e44bf43336b1474741b0890e289bac9fbdc0256a2ce9bcc19b19676a5fb5b1696e01e23bfbfef596ed02786257b98c5eb6dccbf436ca08ba0fd6ffb452343ac32057f510729bf9928ce25172aff657734edb0244f879801fb3ae8a00365781a451b946f81ae086c4fcf99253e08bb9df13d0d27e26ded229d6e8c5ba34a6f6d482af78230a31196", 0xa5}, {&(0x7f0000000300)="f08b3e3bb6b2cb8de7aff66058a9391173fcd503cfef9d845dc5c3a6e3fbde6abc44f66ff53afca1bed1175a8ddbc2ab82365685f111d7b2d9138255444eb9778f3b938699f69beceb70e6a5853e4b4854c5c1d947c64673e9ccc5f64dc16aa1a02b9fd40334427fad902e7da1b774", 0x6f}, {&(0x7f0000000480)="5bdc78d8e913a8fb1f4b40489be93b83cb5950019648e68702755e2f9a189928d0938e8f9f36e305f06c5c191c893bdbf22878996541edf50b81cae06c53cbe25df89f5f5724cf6b247c5596e1b58d6340c8871e49e701c2633dda6c057ecfbbd20df856fceb817531b9a915a5b9267a0c0f3598c204eab823ec151dc0402bf556ba4825ad428561c6fccbfd732f81b2b1dc2201cc634b26cd151f5bec3336c9cdbb4aa05ee72a1e55fee37721c8c1f9e7b829716ecfa7a54e6075a4d2f9a8303a1d1c", 0xc3}, {&(0x7f0000000580)="ac5a7477a5bb8b959cd3ab014caad2d0e5fd0b07df269bedd0ef3c564515793abc27e52d767ac6734201b0234cb36d5df1ec1722c5aef94776570d5f78f20e0e7403be9a5376fc218597dfe1b975d0", 0x4f}, {&(0x7f0000000600)="73564873436c3d6fbc3d83cf9b4bf0cd328aac4fa1e655863825f2fd3a9c1c0fa46a46cf1d0fa14171a45fc3ba13d2ce27241db0e4bf8801f62a017e495869a704b0fc9e65947d3ba14ae96c68849d51580218564fdc68d59513944b34965b135bc9d525efab588960cbccf2", 0x6c}], 0x5) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 16.249463969s ago: executing program 0 (id=876): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 16.244828669s ago: executing program 5 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffe6, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, 0x0, &(0x7f0000000140), &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r2 = epoll_create(0xaf2) syz_usb_connect$uac2(0x2, 0xad, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x384, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0xff, 0xd0, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x101, 0xa, 0x23, 0x1}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x306, 0x3, 0x2, 0x40, 0x8}, @multiply_unit={0x7, 0x24, 0xc, 0xf, 0x4, 0x8, 0x40}, @multiply_unit={0x7, 0x24, 0xc, 0x1, 0xd6, 0x59, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x62}, @as_header={0x10, 0x24, 0x1, 0x5, 0xdf, 0x3, 0x1002, 0x5, 0x1, 0xac}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x7, 0x1, {0x8, 0x25, 0x1, 0x80, 0x3, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x9, 0x6, {0x8, 0x25, 0x1, 0x87, 0xf, 0x4, 0x4}}}}}}}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x0, 0x9, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa40964, 0x1, '\x00', @ptr=0xd}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000033afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x30) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000580)={0xe000200f}) 15.680759882s ago: executing program 0 (id=878): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(0x0, 0xfff, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x768, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) 14.512576266s ago: executing program 0 (id=879): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) 14.240240842s ago: executing program 2 (id=880): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@newtaction={0x190, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x17c, 0x1, [@m_nat={0x140, 0x1b, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x1, 0xb38, 0xe}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x1, 0xd}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x6, 0x6, 0x0, 0x1}, @broadcast, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff47, 0x5, 0x5, 0x2, 0x2}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x10000000, 0x49, 0xc}, @empty, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x7, 0xffff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}]}, {0x25, 0x6, "1a98ee263f539524341fbe5305bfb4b027ce8e0e7a16ba2cac544469a09399152a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x190}}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/mnt\x00') socket$nl_generic(0x10, 0x3, 0x10) 10.19724475s ago: executing program 5 (id=881): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)={0x0, 0x192, 0xa}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v1={0x2, @aes128, 0x1, @auto='\t\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xe, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40d8}, 0xe5) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000ac0), 0x0, 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000540)={0x5, 0xa47, &(0x7f0000000400)="ff0b9dd7687f043fe59eacebfd52a08677a93c00a949efe3fcf6eb0d24359c1b78775c4820e1beabd0bc7a01e23a263d4b3d98d21834e5a57229aeb0e915dd568269ae68bab5d77d4c2678e4ef59bd548fb6c1cf0ebb10e055ad4052456a9121899f23bc38a40f49e874a1bfff47ff528171e2dffa186e4d0fc33c488532", &(0x7f00000004c0)="2e4b58c99318947fdb695f57025f8d218fde9e3bd9913210ac4a19b4f024351291be69ad47a4e41ec53f35886f1eba6c746675757a37fa0a6fa8cb9db9b4155b3dbf1f5c7b04a2f0fbe07cd89afeb86c83862c33e1c43a720eafab45ccb70d0e876e6d60b2cc1bcb5356", 0x7e, 0x6a}) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) setuid(0xee00) socket$pptp(0x18, 0x1, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3010e38, &(0x7f00000007c0), 0x6, 0x623, &(0x7f0000001440)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x908432, 0x0, 0xfe, 0x0, &(0x7f00000002c0)) 10.181071s ago: executing program 4 (id=882): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x1000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r6 = msgget$private(0x0, 0x351) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgsnd(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.082180872s ago: executing program 2 (id=883): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.625154523s ago: executing program 0 (id=884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d", 0x1d}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e", 0x1d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581", 0x20}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.178451423s ago: executing program 2 (id=885): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.999732627s ago: executing program 4 (id=886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x6, 0x0, &(0x7f0000000300)="882f1242a03c", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001c3c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000001c380)={&(0x7f000001aa40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x34bc9843cb54b4c2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130a0142000000000000000007000001"], 0x14}}, 0x800) 7.996104827s ago: executing program 5 (id=887): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.38391765s ago: executing program 1 (id=888): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 7.325130982s ago: executing program 0 (id=889): syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003c03b6310c016df05402b0102030109021200010406100409047f070003"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000070c0)='./file1\x00', &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x800000}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33887813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6c892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebbf7c5d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422371de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e15e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e4a3deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c989b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3718587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf82d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb04cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c74844ed762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b000", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000004c0)="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", 0x2000, &(0x7f00000072c0)={&(0x7f00000024c0)={0x50, 0x0, 0x8001, {0x7, 0x2d, 0xffff0000, 0x801900, 0x101, 0x1, 0x40, 0x400, 0x0, 0x0, 0x80, 0xfbdb}}, &(0x7f0000002540)={0x18, 0xfffffffffffffffe, 0x1fc3, {0x6}}, &(0x7f0000002580)={0x18, 0xfffffffffffffffe, 0xe5, {0xfffffffffffffffb}}, &(0x7f00000025c0)={0x18, 0x0, 0x51, {0xfffffbff}}, 0x0, &(0x7f0000002640)={0x28, 0x0, 0x81, {{0x0, 0x51, 0x1, r1}}}, 0x0, &(0x7f0000002700)={0x18, 0x0, 0x0, {0x10000}}, &(0x7f0000002740)={0x19, 0x0, 0xffffffff80000000, {'pim6reg1\x00'}}, &(0x7f0000002780)={0x20, 0x0, 0x5, {0x0, 0x2}}, &(0x7f0000002800)={0x78, 0x0, 0x8000, {0x800, 0x5, 0x0, {0xac, 0xf57, 0x4f, 0x6, 0x869, 0x6, 0x1, 0x3, 0x4b, 0x2000, 0xd, 0x0, 0x0, 0x3, 0x46}}}, &(0x7f0000004900)={0x90, 0xfffffffffffffff5, 0x24000, {0x2, 0x3, 0x7, 0x86, 0x9, 0x6, {0x0, 0x0, 0x4, 0x81, 0x0, 0xf, 0x81, 0x5, 0x9, 0x2000, 0x5, 0x0, 0x0, 0x4a8, 0x800}}}, &(0x7f00000049c0)={0xc8, 0x0, 0x0, [{0x6, 0x6, 0x3, 0xd, '&}\''}, {0x4, 0x0, 0x9, 0xfffff001, 'fdinfo/3\x00'}, {0x0, 0x7, 0x9, 0x6, 'fdinfo/3\x00'}, {0x1, 0x8, 0x5, 0xa694, '\x06\'\xb2#{'}, {0x1, 0x4, 0x9, 0x8, 'fdinfo/3\x00'}]}, &(0x7f0000004d00)={0x10, 0x0, 0xe}, &(0x7f0000006fc0)={0xa0, 0x0, 0x6c, {{0x6, 0x1, 0x4d, 0x8001, 0x8, 0x6, {0x5, 0x6, 0xffffffffffffffff, 0x7, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2000, 0x64, 0x0, 0x0, 0x8, 0x3ff}}, {0x0, 0x6}}}, &(0x7f0000007080)={0x20, 0x0, 0x3, {0xb96, 0x4, 0x3, 0xe921}}, &(0x7f0000007180)={0x130, 0xffffffffffffffda, 0x100, {0x5, 0x830, 0x0, '\x00', {0x401831c15ad8e05d, 0xa, 0x8000, 0x800, r5, 0x0, 0x6000, '\x00', 0x0, 0x521, 0x6, 0x2a800000000000, {0x5, 0x9}, {0x0, 0x3}, {0x3, 0xfffffffa}, {0x1, 0x1}, 0x2, 0x8, 0x9a21, 0xf}}}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'pim6reg1\x00', 0x4}, 0x18) getsockopt$packet_int(r7, 0x107, 0xb, 0x0, &(0x7f0000000080)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x9, 0x7fff, 0x5b}, 0x2c) 6.681300965s ago: executing program 2 (id=890): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000003000/0x2000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0xe4ffffff}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x2000004, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xf}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x3}, {0x7}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x80000001, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe5fc, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x8, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x31d, &(0x7f00000000c0)={0x0, 0x1073, 0x8, 0x2, 0x152}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000200)={0x4, 0x8c9, 0x4}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') 6.622898317s ago: executing program 4 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffe6, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, 0x0, &(0x7f0000000140), &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r2 = epoll_create(0xaf2) syz_usb_connect$uac2(0x2, 0xad, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x384, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0xff, 0xd0, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x101, 0xa, 0x23, 0x1}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x306, 0x3, 0x2, 0x40, 0x8}, @multiply_unit={0x7, 0x24, 0xc, 0xf, 0x4, 0x8, 0x40}, @multiply_unit={0x7, 0x24, 0xc, 0x1, 0xd6, 0x59, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x62}, @as_header={0x10, 0x24, 0x1, 0x5, 0xdf, 0x3, 0x1002, 0x5, 0x1, 0xac}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x7, 0x1, {0x8, 0x25, 0x1, 0x80, 0x3, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x9, 0x6, {0x8, 0x25, 0x1, 0x87, 0xf, 0x4, 0x4}}}}}}}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x0, 0x9, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa40964, 0x1, '\x00', @ptr=0xd}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000033afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000019080)=0x30) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000580)={0xe000200f}) 5.732660456s ago: executing program 5 (id=892): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x0) 5.294351475s ago: executing program 1 (id=893): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x80001, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa4242, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 5.199093417s ago: executing program 2 (id=894): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) 756.130013ms ago: executing program 0 (id=895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x52, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) writev(r0, &(0x7f0000000680)=[{&(0x7f00000001c0)="79f96d1b9bb6214874a4753f2858d9128ed660045094e05d1b336ed0004e44bf43336b1474741b0890e289bac9fbdc0256a2ce9bcc19b19676a5fb5b1696e01e23bfbfef596ed02786257b98c5eb6dccbf436ca08ba0fd6ffb452343ac32057f510729bf9928ce25172aff657734edb0244f879801fb3ae8a00365781a451b946f81ae086c4fcf99253e08bb9df13d0d27e26ded229d6e8c5ba34a6f6d482af78230a311961b0187bcd4076ba4d2faf5", 0xb0}, {&(0x7f0000000300)="f08b3e3bb6b2cb8de7aff66058a9391173fcd503cfef9d845dc5c3a6e3fbde6abc44f66ff53afca1bed1175a8ddbc2ab82365685f111d7b2d9138255444eb9778f3b938699f69beceb70e6a5853e4b4854c5c1d947c64673e9ccc5f64dc16aa1a02b9fd40334427fad", 0x69}, {&(0x7f0000000480)="5bdc78d8e913a8fb1f4b40489be93b83cb5950019648e68702755e2f9a189928d0938e8f9f36e305f06c5c191c893bdbf22878996541edf50b81cae06c53cbe25df89f5f5724cf6b247c5596e1b58d6340c8871e49e701c2633dda6c057ecfbbd20df856fceb817531b9a915a5b9267a0c0f3598c204eab823ec151dc0402bf556ba4825ad428561c6fccbfd732f81b2b1dc2201cc634b26cd151f5bec3336c9cdbb4aa05ee72a1e55fee37721c8c1f9e7b829716ecfa7a54e6075a4d2f9a8303a1d1c", 0xc3}, {&(0x7f0000000580)="ac5a7477a5bb8b959cd3ab014caad2d0e5fd0b07df269bedd0ef3c564515793abc27e52d767ac6734201b0234cb36d5df1ec1722c5aef94776570d5f78f20e0e7403be9a5376fc218597dfe1b975d0", 0x4f}, {&(0x7f0000000600)="73564873436c3d6fbc3d83cf9b4bf0cd328aac4fa1e655863825f2fd3a9c1c0fa46a46cf1d0fa14171a45fc3ba13d2ce27241db0e4bf8801f62a017e495869a704b0fc9e65947d3ba14ae96c68849d51580218564fdc68d59513944b34965b135bc9d525efab588960cbccf2", 0x6c}], 0x5) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/47], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 453.21956ms ago: executing program 4 (id=896): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 452.86986ms ago: executing program 1 (id=897): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x1000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r7 = msgget$private(0x0, 0x351) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgsnd(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 2 (id=898): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): packet: 16 [ 134.008766][ T4610] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.019611][ T4610] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.041025][ T4610] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.092481][ T4610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.112133][ T4610] usb 2-1: Product: syz [ 134.116603][ T4610] usb 2-1: Manufacturer: syz [ 134.124714][ T4610] usb 2-1: SerialNumber: syz [ 134.165334][ T4319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.190011][ T4319] usb 5-1: not running at top speed; connect to a high speed hub [ 134.212599][ T4319] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 133, changing to 4 [ 134.265518][ T4319] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 134.275907][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.286241][ T4319] usb 5-1: Product: syz [ 134.290575][ T4319] usb 5-1: Manufacturer: syz [ 134.298295][ T4319] usb 5-1: SerialNumber: syz [ 134.364645][ T4610] usb 2-1: 0:2 : does not exist [ 134.430669][ T4610] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 134.479941][ T4610] usb 2-1: USB disconnect, device number 5 [ 134.548211][ T4319] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 134.576678][ T4319] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 134.593728][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.609007][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.641689][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.678574][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.712296][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.721664][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.752094][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.792053][ T4319] usb 5-1: unable to issue vendor read request (ret = -71) [ 134.870323][ T4968] loop3: detected capacity change from 0 to 64 [ 134.881605][ T4319] usb 5-1: USB disconnect, device number 3 [ 135.111973][ T4471] udevd[4471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 136.275647][ T4975] loop4: detected capacity change from 0 to 32768 [ 136.332972][ T4975] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.157 (4975) [ 136.356395][ T4975] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.366761][ T4975] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 136.375507][ T4975] BTRFS info (device loop4): turning on sync discard [ 136.382422][ T4975] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.392156][ T4975] BTRFS info (device loop4): use zstd compression, level 3 [ 136.399423][ T4975] BTRFS info (device loop4): turning on async discard [ 136.406427][ T4975] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.417092][ T4975] BTRFS info (device loop4): trying to use backup root at mount time [ 136.425465][ T4975] BTRFS info (device loop4): enabling auto defrag [ 136.432026][ T4975] BTRFS info (device loop4): using free space tree [ 137.293176][ T34] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 137.311643][ T4975] BTRFS error (device loop4): failed to load root extent [ 137.318780][ T4975] BTRFS warning (device loop4): try to load backup roots slot 1 [ 137.327942][ T4399] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 137.362285][ T4975] BTRFS warning (device loop4): couldn't read tree root [ 137.369282][ T4975] BTRFS warning (device loop4): try to load backup roots slot 2 [ 137.380730][ T4975] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 137.392280][ T4975] BTRFS warning (device loop4): couldn't read tree root [ 137.399236][ T4975] BTRFS warning (device loop4): try to load backup roots slot 3 [ 137.484365][ T4975] BTRFS info (device loop4): enabling ssd optimizations [ 137.493067][ T4975] BTRFS info (device loop4): rebuilding free space tree [ 137.565837][ T4975] BTRFS info (device loop4): checking UUID tree [ 137.901614][ T41] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.914021][ T4277] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.091532][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 138.110976][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.267088][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.414143][ T41] usb 2-1: too many endpoints for config 1 interface 0 altsetting 39: 62, using maximum allowed: 30 [ 138.595874][ T41] usb 2-1: config 1 interface 0 altsetting 39 has an invalid endpoint with address 0xC8, skipping [ 138.761884][ T41] usb 2-1: config 1 interface 0 altsetting 39 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 138.947963][ T41] usb 2-1: config 1 interface 0 has no altsetting 0 [ 139.046255][ T41] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 139.154468][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.254628][ T41] usb 2-1: Product: syz [ 139.301631][ T41] usb 2-1: Manufacturer: syz [ 139.364180][ T41] usb 2-1: SerialNumber: syz [ 139.721768][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.776542][ T41] usb 2-1: USB disconnect, device number 6 [ 140.021569][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 140.030200][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.166738][ T22] usb 1-1: config 3 has an invalid interface number: 55 but max is 0 [ 140.325907][ T22] usb 1-1: config 3 has no interface number 0 [ 140.473875][ T22] usb 1-1: config 3 interface 55 has no altsetting 0 [ 140.609949][ T22] usb 1-1: New USB device found, idVendor=0ccd, idProduct=004f, bcdDevice=ed.32 [ 140.797826][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.982919][ T22] usb 1-1: Product: syz [ 140.987127][ T22] usb 1-1: Manufacturer: syz [ 141.019905][ T22] usb 1-1: SerialNumber: syz [ 141.058386][ T4369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4369) [ 141.071573][ T22] usb 1-1: can't set config #3, error -71 [ 141.360317][ T5036] usb 1-1: USB disconnect, device number 5 [ 141.658747][ T5046] IPv6: sit1: Disabled Multicast RS [ 141.949796][ T127] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.146104][ T5037] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.051392][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 144.056655][ T5037] usb 2-1: Using ep0 maxpacket: 16 [ 144.192969][ T5060] process 'syz.2.171' launched '/dev/fd/5' with NULL argv: empty string added [ 144.231559][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.231588][ T5045] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 144.469073][ T5045] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.478939][ T127] usb 4-1: device descriptor read/all, error -71 [ 144.516810][ T5037] usb 2-1: device descriptor read/all, error -71 [ 144.553928][ T5045] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 144.561691][ T5045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.595112][ T5045] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.644654][ T5045] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 144.662028][ T5045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.675940][ T5045] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.695502][ T5045] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 144.718996][ T5045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.752168][ T5045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.797410][ T5045] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 144.840898][ T5045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.000368][ T5045] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.016977][ T5045] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 145.915529][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 145.971677][ T4323] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.025880][ T5081] loop3: detected capacity change from 0 to 256 [ 146.048882][ T5081] FAT-fs (loop3): Directory bread(block 1285) failed [ 146.072353][ T5080] netlink: 256 bytes leftover after parsing attributes in process `syz.4.179'. [ 146.092796][ T5080] netlink: 72 bytes leftover after parsing attributes in process `syz.4.179'. [ 146.121551][ T5081] FAT-fs (loop3): Directory bread(block 1286) failed [ 146.128336][ T5081] FAT-fs (loop3): Directory bread(block 1287) failed [ 146.193083][ T4323] usb 3-1: config 0 has no interfaces? [ 146.198838][ T4323] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 146.209749][ T5081] FAT-fs (loop3): Directory bread(block 1288) failed [ 146.250091][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.280624][ T4323] usb 3-1: config 0 descriptor?? [ 146.301446][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 146.361573][ T5037] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.523059][ T4323] usb 3-1: USB disconnect, device number 7 [ 146.569362][ T5037] usb 2-1: Using ep0 maxpacket: 8 [ 146.586137][ T5037] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.596374][ T5037] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.607685][ T5037] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.622889][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.636531][ T5037] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 146.648366][ T5037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.660656][ T5037] usb 2-1: Product: syz [ 146.667851][ T5037] usb 2-1: Manufacturer: syz [ 146.676347][ T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.686928][ T5037] usb 2-1: SerialNumber: syz [ 146.704624][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.728774][ T5037] usb 2-1: config 0 descriptor?? [ 146.791530][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.821492][ T4326] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.871635][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.881434][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 146.892584][ T127] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 146.911056][ T127] usb 5-1: config 179 has no interface number 0 [ 146.918873][ T127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 146.934659][ T127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 146.960787][ T127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.981415][ T127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 147.001422][ T127] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.018108][ T127] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.024520][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 147.027316][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.032269][ T5037] usb 2-1: USB disconnect, device number 9 [ 147.062358][ T4326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.082214][ T4326] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 147.097048][ T5089] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 147.107485][ T4326] usb 4-1: config 4 has no interface number 0 [ 147.139784][ T4326] usb 4-1: config 4 interface 127 has no altsetting 0 [ 147.189686][ T4326] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 147.220457][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.239744][ T4326] usb 4-1: Product: syz [ 147.249564][ T4326] usb 4-1: Manufacturer: syz [ 147.257433][ T4326] usb 4-1: SerialNumber: syz [ 147.380826][ T14] usb 5-1: USB disconnect, device number 4 [ 147.380855][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 147.396752][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 147.561597][ T954] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.075729][ T5104] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.531689][ T954] usb 3-1: Using ep0 maxpacket: 16 [ 148.541130][ T954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.583020][ T954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.644616][ T954] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.678117][ T954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.695735][ T954] usb 3-1: Product: syz [ 148.701623][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 148.714234][ T954] usb 3-1: Manufacturer: syz [ 148.718984][ T954] usb 3-1: SerialNumber: syz [ 148.788654][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 148.871651][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 148.939572][ T954] usb 3-1: 0:2 : does not exist [ 148.945132][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 148.974984][ T954] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 149.108299][ T5118] IPv6: sit1: Disabled Multicast RS [ 149.500642][ T954] usb 3-1: USB disconnect, device number 8 [ 150.220356][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.030672][ T5129] binder: BINDER_SET_CONTEXT_MGR already set [ 152.037350][ T5129] binder: 5126:5129 ioctl 4018620d 200000004a80 returned -16 [ 152.149104][ T4326] usbhid 4-1:4.127: couldn't find an input interrupt endpoint [ 152.532824][ T5116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.542565][ T4326] usb 4-1: USB disconnect, device number 4 [ 152.582063][ T5116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.601954][ T5116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.608261][ T5116] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.699135][ T5116] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.981598][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.541452][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.573431][ T5142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.198'. [ 154.621960][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.628043][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.701496][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.885627][ T5149] loop4: detected capacity change from 0 to 256 [ 155.052234][ T4326] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.471474][ T5037] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.632370][ T4326] usb 3-1: Using ep0 maxpacket: 8 [ 156.659135][ T4326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.714633][ T5037] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.772626][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.669231][ T4326] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.887958][ T4326] usb 3-1: string descriptor 0 read error: -71 [ 158.932232][ T4326] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 158.995638][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.996333][ T5037] usb 1-1: string descriptor 0 read error: -71 [ 159.010558][ T5040] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.033102][ T5037] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.042356][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.053343][ T5037] usb 1-1: can't set config #1, error -71 [ 159.060252][ T5037] usb 1-1: USB disconnect, device number 6 [ 159.085170][ T4326] usb 3-1: config 0 descriptor?? [ 159.122018][ T4326] usb 3-1: can't set config #0, error -71 [ 159.129452][ T4326] usb 3-1: USB disconnect, device number 9 [ 159.201532][ T5040] usb 4-1: Using ep0 maxpacket: 16 [ 159.210015][ T5040] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.691393][ T5184] IPv6: sit1: Disabled Multicast RS [ 163.752870][ T5183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.799138][ T5183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.831790][ T5040] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 163.839444][ T5040] usb 4-1: can't read configurations, error -71 [ 163.857059][ T5183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.864604][ T5183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.873053][ T5183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.224054][ T5201] loop4: detected capacity change from 0 to 256 [ 165.341451][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.358900][ T5211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 165.682845][ T4326] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.821823][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.861491][ T4261] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.891397][ T4326] usb 5-1: Using ep0 maxpacket: 8 [ 165.899025][ T4326] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.913808][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.919905][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.921956][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.963504][ T4326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.984571][ T4326] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.005053][ T4326] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 166.014859][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.023450][ T4326] usb 5-1: Product: syz [ 166.027800][ T4326] usb 5-1: Manufacturer: syz [ 166.037045][ T4326] usb 5-1: SerialNumber: syz [ 166.059482][ T4326] usb 5-1: config 0 descriptor?? [ 166.064919][ T4261] usb 2-1: Using ep0 maxpacket: 16 [ 166.072751][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.093794][ T4261] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 166.103620][ T4261] usb 2-1: config 4 has no interface number 0 [ 166.109766][ T4261] usb 2-1: config 4 interface 127 has no altsetting 0 [ 166.134091][ T4261] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 166.160270][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.209619][ T4261] usb 2-1: Product: syz [ 166.219781][ T4261] usb 2-1: Manufacturer: syz [ 166.225298][ T4261] usb 2-1: SerialNumber: syz [ 166.291851][ T4322] usb 5-1: USB disconnect, device number 5 [ 166.381769][ T4326] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.661814][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 167.513541][ T5234] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.368442][ T4326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.475701][ T4326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.593717][ T4326] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.653836][ T5244] loop0: detected capacity change from 0 to 256 [ 168.690177][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.741462][ T4326] usb 4-1: Product: syz [ 168.745758][ T4326] usb 4-1: Manufacturer: syz [ 168.750543][ T4326] usb 4-1: SerialNumber: syz [ 171.140333][ T4261] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 171.150148][ T4326] usb 4-1: can't set config #1, error -71 [ 171.162648][ T4261] usb 2-1: USB disconnect, device number 10 [ 171.171347][ T4326] usb 4-1: USB disconnect, device number 7 [ 172.066438][ T5264] netlink: 'syz.1.236': attribute type 4 has an invalid length. [ 172.206889][ T5264] netlink: 'syz.1.236': attribute type 5 has an invalid length. [ 172.244027][ T5264] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.236'. [ 172.466360][ T5271] binder: 5267:5271 ioctl 4018620d 0 returned -22 [ 173.145926][ T5270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.239'. [ 173.413154][ T5280] loop0: detected capacity change from 0 to 512 [ 173.501703][ T127] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.537764][ T5280] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 173.581553][ T5280] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 173.593553][ T5280] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.241: Corrupt directory, running e2fsck is recommended [ 173.632814][ T5280] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 173.646697][ T5280] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.241: corrupted in-inode xattr [ 173.660136][ T5280] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.241: couldn't read orphan inode 15 (err -117) [ 173.681563][ T5280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 173.721459][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 173.731131][ T127] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.745688][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 173.756305][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.761534][ T4326] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.795034][ T127] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.821468][ T4323] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.839903][ T127] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 173.860628][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.870038][ T127] usb 4-1: Product: syz [ 173.878666][ T127] usb 4-1: Manufacturer: syz [ 173.884661][ T127] usb 4-1: SerialNumber: syz [ 173.920987][ T127] usb 4-1: config 0 descriptor?? [ 173.961437][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 173.968519][ T4326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.997728][ T4326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.011434][ T4323] usb 5-1: Using ep0 maxpacket: 16 [ 174.019668][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.029225][ T4326] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.045764][ T4323] usb 5-1: config 4 has an invalid interface number: 127 but max is 0 [ 174.056455][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.064666][ T4323] usb 5-1: config 4 has no interface number 0 [ 174.071216][ T4323] usb 5-1: config 4 interface 127 has no altsetting 0 [ 174.078489][ T4326] usb 3-1: Product: syz [ 174.083021][ T4326] usb 3-1: Manufacturer: syz [ 174.087707][ T4326] usb 3-1: SerialNumber: syz [ 174.095779][ T4323] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 174.125928][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.135976][ T4323] usb 5-1: Product: syz [ 174.140414][ T4323] usb 5-1: Manufacturer: syz [ 174.146691][ T4323] usb 5-1: SerialNumber: syz [ 174.158403][ T127] usb 4-1: USB disconnect, device number 8 [ 174.421609][ T4326] usb 3-1: 0:2 : does not exist [ 174.445445][ T4326] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 175.169761][ T4326] usb 3-1: USB disconnect, device number 10 [ 175.462394][ T5188] udevd[5188]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.474964][ T5311] loop2: detected capacity change from 0 to 256 [ 177.805341][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 177.805379][ T26] audit: type=1326 audit(1782773355.185:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486359ce59 code=0x7ffc0000 [ 178.508157][ T5311] FAT-fs (loop2): unable to read block(17179869180) for building NFS inode [ 178.641448][ T26] audit: type=1326 audit(1782773355.185:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486359ce59 code=0x7ffc0000 [ 178.741586][ T26] audit: type=1326 audit(1782773355.185:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f486355d68e code=0x7ffc0000 [ 178.896335][ T26] audit: type=1326 audit(1782773355.185:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f486359e157 code=0x7ffc0000 [ 178.920197][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.056541][ T26] audit: type=1326 audit(1782773355.185:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f486359ce59 code=0x7ffc0000 [ 179.266802][ T4323] usbhid 5-1:4.127: couldn't find an input interrupt endpoint [ 179.284625][ T26] audit: type=1326 audit(1782773355.185:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f486359e157 code=0x7ffc0000 [ 181.478404][ T26] audit: type=1326 audit(1782773355.185:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f486355d68e code=0x7ffc0000 [ 181.502277][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.509835][ T26] audit: type=1326 audit(1782773355.185:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486359ce59 code=0x7ffc0000 [ 181.533809][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.540529][ T26] audit: type=1326 audit(1782773355.185:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5315 comm="syz.3.255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486359ce59 code=0x7ffc0000 [ 181.593080][ T5335] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 181.769138][ T5037] usb 5-1: USB disconnect, device number 6 [ 182.001872][ T5335] team0: Port device netdevsim0 added [ 182.022234][ T5337] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 182.842111][ T5337] team0: Port device netdevsim0 removed [ 182.952607][ T5337] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 183.381861][ T127] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 183.595505][ T5037] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.641570][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 183.666323][ T127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.715620][ T127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.768458][ T127] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.791495][ T5037] usb 4-1: Using ep0 maxpacket: 32 [ 183.799758][ T5037] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 183.940424][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.947777][ T5362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 183.949512][ T5037] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 183.968408][ T127] usb 5-1: Product: syz [ 183.972896][ T127] usb 5-1: Manufacturer: syz [ 183.977543][ T127] usb 5-1: SerialNumber: syz [ 183.985057][ T5037] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 184.641356][ T4323] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.687882][ T5037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.781169][ T5037] usb 4-1: Product: syz [ 184.786087][ T5037] usb 4-1: Manufacturer: syz [ 184.790766][ T5037] usb 4-1: SerialNumber: syz [ 184.814576][ T5355] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.838761][ T4323] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 184.850528][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.866089][ T4323] usb 2-1: Product: syz [ 184.870603][ T4323] usb 2-1: Manufacturer: syz [ 184.881010][ T127] usb 5-1: 0:2 : does not exist [ 184.890958][ T4323] usb 2-1: SerialNumber: syz [ 184.901636][ T127] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 184.941564][ T4322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 185.019202][ T127] usb 5-1: USB disconnect, device number 7 [ 185.353276][ T5037] usb 4-1: MIDIStreaming interface descriptor not found [ 185.656045][ T5188] udevd[5188]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.773604][ T4323] usb 2-1: config 0 descriptor?? [ 185.792056][ T4323] ch341 2-1:0.0: ch341-uart converter detected [ 185.803959][ T5037] usb 4-1: USB disconnect, device number 9 [ 185.961421][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 185.971161][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.000121][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.032805][ T4322] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.071283][ T4322] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 186.098863][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.126991][ T4322] usb 1-1: Product: syz [ 186.134396][ T4322] usb 1-1: Manufacturer: syz [ 186.139170][ T4322] usb 1-1: SerialNumber: syz [ 186.150502][ T4322] usb 1-1: config 0 descriptor?? [ 186.329179][ T5373] udevd[5373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.361948][ T4388] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.106946][ T4323] ch341-uart ttyUSB0: failed to read break control: -71 [ 187.114577][ T4323] ch341-uart: probe of ttyUSB0 failed with error -71 [ 187.127881][ T4323] usb 2-1: USB disconnect, device number 11 [ 187.135676][ T4323] ch341 2-1:0.0: device disconnected [ 187.171693][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.181953][ T5040] usb 1-1: USB disconnect, device number 7 [ 187.191103][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.254545][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.291685][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.352684][ T5378] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.362305][ T5378] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.371100][ T5378] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.379887][ T5378] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.434008][ T5378] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 187.534462][ T4388] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.548417][ T5393] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 187.556358][ T4388] usb 5-1: no configurations [ 187.556378][ T4388] usb 5-1: can't read configurations, error -22 [ 187.591199][ T5393] bond0: (slave netdevsim0): Releasing backup interface [ 187.605194][ T5393] team0: Port device netdevsim0 added [ 187.617694][ T5395] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 187.696060][ T5395] team0: Port device netdevsim0 removed [ 187.730958][ T5395] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 191.461594][ T26] audit: type=1326 audit(1782773368.555:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 191.807459][ T26] audit: type=1326 audit(1782773368.555:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 191.902253][ T26] audit: type=1326 audit(1782773368.565:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 192.011419][ T26] audit: type=1326 audit(1782773368.565:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 192.074650][ T26] audit: type=1326 audit(1782773368.565:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 192.099150][ T26] audit: type=1326 audit(1782773368.565:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 192.188431][ T26] audit: type=1326 audit(1782773368.565:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 192.647293][ T5435] loop2: detected capacity change from 0 to 32768 [ 192.689514][ T5040] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.259896][ T26] audit: type=1326 audit(1782773368.565:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 193.286672][ T5040] usb 4-1: Using ep0 maxpacket: 16 [ 193.296049][ T26] audit: type=1326 audit(1782773368.565:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 193.887685][ T5040] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.899539][ T5040] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.912312][ T5040] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.921518][ T5040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.929650][ T5040] usb 4-1: Product: syz [ 193.956779][ T5040] usb 4-1: Manufacturer: syz [ 193.961680][ T5040] usb 4-1: SerialNumber: syz [ 194.042060][ T26] audit: type=1326 audit(1782773368.565:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.2.284" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05b915d68e code=0x7ffc0000 [ 194.069217][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.069386][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.225808][ T5040] usb 4-1: 0:2 : does not exist [ 194.249843][ T5040] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 194.472550][ T5040] usb 4-1: USB disconnect, device number 10 [ 194.546205][ T5443] siw: device registration error -23 [ 195.305571][ T5448] loop2: detected capacity change from 0 to 1024 [ 195.318759][ T5188] udevd[5188]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.373224][ T5448] EXT4-fs (loop2): filesystem is read-only [ 195.418078][ T5448] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 195.462073][ T5448] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 195.497602][ T5448] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: comm syz.2.290: inode #1: comm syz.2.290: iget: illegal inode # [ 195.616608][ T5454] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 195.624790][ T5448] EXT4-fs (loop2): no journal found [ 195.640270][ T5448] EXT4-fs (loop2): can't get journal size [ 195.659295][ T5448] EXT4-fs error (device loop2): __ext4_fill_super:5465: inode #2: comm syz.2.290: iget: special inode unallocated [ 195.712929][ T5448] EXT4-fs (loop2): get root inode failed [ 195.721521][ T5448] EXT4-fs (loop2): mount failed [ 195.771854][ T5454] bond0: (slave netdevsim0): Releasing backup interface [ 195.791185][ T5457] loop4: detected capacity change from 0 to 764 [ 195.831530][ T4261] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 195.880632][ T5454] team0: Port device netdevsim0 added [ 195.918791][ T5458] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 196.035425][ T4261] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 196.193820][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.250561][ T5461] Symlink component flag not implemented [ 196.257284][ T5461] Symlink component flag not implemented [ 196.263942][ T5461] Symlink component flag not implemented (129) [ 196.270191][ T5461] Symlink component flag not implemented (6) [ 196.835158][ T4261] usb 2-1: Product: syz [ 196.839410][ T4261] usb 2-1: Manufacturer: syz [ 196.894432][ T4261] usb 2-1: SerialNumber: syz [ 196.969842][ T5458] team0: Port device netdevsim0 removed [ 197.302413][ T5458] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 197.473898][ T5472] IPv6: sit1: Disabled Multicast RS [ 198.943004][ T5470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.200675][ T5470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.902055][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.502385][ T5470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.508766][ T5470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.516674][ T5470] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.561086][ T4261] usb 2-1: 1:1 : unsupported format bits 0x2004 [ 200.641507][ T4261] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 200.690981][ T4261] usb 2-1: failed to enable PITCH for EP 0x1 [ 200.761456][ T4261] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 200.777108][ T4261] usb 2-1: unit 2 not found! [ 200.808925][ T4261] usb 2-1: unit 64 not found! [ 202.616803][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.617024][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.629418][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.635514][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.991690][ T5040] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.021292][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 203.201548][ T5040] usb 3-1: device descriptor read/64, error -32 [ 203.481650][ T5040] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.504337][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 203.661973][ T5040] usb 3-1: device descriptor read/64, error -32 [ 203.802063][ T5040] usb usb3-port1: attempt power cycle [ 204.271647][ T5040] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 204.332922][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 204.340189][ T5040] usb 3-1: device descriptor read/8, error -32 [ 204.631694][ T5040] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.672265][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 204.680294][ T5040] usb 3-1: device descriptor read/8, error -32 [ 204.741541][ T5036] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 204.765801][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 204.846457][ T5040] usb usb3-port1: unable to enumerate USB device [ 204.878175][ T4261] usb 2-1: USB disconnect, device number 12 [ 205.041398][ T5036] usb 5-1: device descriptor read/64, error -32 [ 205.103436][ T5386] udevd[5386]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.321689][ T5036] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 205.373290][ T5503] loop3: detected capacity change from 0 to 8192 [ 205.396113][ T5503] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.440958][ T5503] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 205.491226][ T5503] REISERFS (device loop3): using ordered data mode [ 205.498251][ T5503] reiserfs: using flush barriers [ 205.571572][ T5036] usb 5-1: Using ep0 maxpacket: 16 [ 205.581783][ T5036] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 205.592139][ T5503] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.621409][ T5036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.653269][ T5036] usb 5-1: config 0 descriptor?? [ 205.669530][ T5036] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 205.685548][ T5503] REISERFS (device loop3): checking transaction log (loop3) [ 205.718024][ T5503] REISERFS (device loop3): Using r5 hash to sort names [ 205.749739][ T5503] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 205.870490][ T5516] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 205.879758][ T5516] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 205.923008][ T5516] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 205.954217][ T5503] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 207.219167][ T5525] IPv6: sit1: Disabled Multicast RS [ 208.071733][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 208.071752][ T26] audit: type=1326 audit(1782773384.875:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 208.448178][ T26] audit: type=1326 audit(1782773384.875:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 209.437151][ T5524] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 209.486915][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.493263][ T5036] gspca_sonixj: reg_r err -71 [ 209.608292][ T26] audit: type=1326 audit(1782773384.875:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 210.266377][ T26] audit: type=1326 audit(1782773384.875:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 211.003938][ T5036] sonixj: probe of 5-1:0.0 failed with error -71 [ 211.441893][ T5524] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 211.448438][ T5524] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.463052][ T5524] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.469595][ T5524] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.563933][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.583239][ T5036] usb 5-1: USB disconnect, device number 11 [ 211.701434][ T26] audit: type=1326 audit(1782773384.875:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 211.725298][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.854823][ T26] audit: type=1326 audit(1782773384.875:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 212.176763][ T5550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.314'. [ 212.871720][ T5551] binder: BINDER_SET_CONTEXT_MGR already set [ 212.877798][ T5551] binder: 5540:5551 ioctl 4018620d 200000004a80 returned -16 [ 213.109555][ T26] audit: type=1326 audit(1782773384.875:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 213.134057][ T26] audit: type=1326 audit(1782773384.875:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 213.158800][ T26] audit: type=1326 audit(1782773384.885:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 213.182796][ T26] audit: type=1326 audit(1782773384.885:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f324b95d68e code=0x7ffc0000 [ 213.207018][ T26] audit: type=1326 audit(1782773384.885:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f324b99e157 code=0x7ffc0000 [ 213.230942][ T26] audit: type=1326 audit(1782773384.885:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 213.255481][ T26] audit: type=1326 audit(1782773384.885:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f324b99e157 code=0x7ffc0000 [ 213.299475][ T26] audit: type=1326 audit(1782773384.885:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f324b95d68e code=0x7ffc0000 [ 213.501664][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 213.507813][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.513894][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.566143][ T4326] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 213.943278][ T26] audit: type=1326 audit(1782773384.895:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 214.090219][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 214.217758][ T4326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.228177][ T4326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.241724][ T26] audit: type=1326 audit(1782773384.895:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5522 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 214.271881][ T4326] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.281905][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.289945][ T4326] usb 3-1: Product: syz [ 214.294273][ T4326] usb 3-1: Manufacturer: syz [ 214.298891][ T4326] usb 3-1: SerialNumber: syz [ 214.518789][ T4326] usb 3-1: 0:2 : does not exist [ 214.530864][ T4326] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 214.661612][ T4326] usb 3-1: USB disconnect, device number 15 [ 214.912931][ T5510] udevd[5510]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.008666][ T5570] loop3: detected capacity change from 0 to 8192 [ 215.216424][ T5570] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 216.232380][ T5570] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 216.320326][ T5570] REISERFS (device loop3): using ordered data mode [ 216.369314][ T5581] loop2: detected capacity change from 0 to 4096 [ 216.376070][ T5570] reiserfs: using flush barriers [ 216.462244][ T5570] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.523141][ T5570] REISERFS (device loop3): checking transaction log (loop3) [ 216.585461][ T5570] REISERFS (device loop3): Using r5 hash to sort names [ 216.621454][ T4326] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 216.629514][ T5570] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 216.684900][ T5570] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 216.737700][ T5585] loop4: detected capacity change from 0 to 4096 [ 216.891487][ T4326] usb 2-1: Using ep0 maxpacket: 16 [ 216.900870][ T4326] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 217.547470][ T5588] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.564312][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.572774][ T5587] ntfs3: loop2: failed to convert "0080" to cp775 [ 217.669660][ T4326] usb 2-1: config 0 descriptor?? [ 217.694214][ T4326] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 217.721987][ T5570] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.781889][ T5570] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.853861][ T5589] ntfs3: loop4: failed to convert "0080" to cp775 [ 218.834380][ T5594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.915842][ T5594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 219.039582][ T5594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.047649][ T5594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.056119][ T5594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 219.301521][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 220.180764][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.553264][ T4326] gspca_sonixj: i2c_w8 err -71 [ 220.821995][ T4326] sonixj: probe of 2-1:0.0 failed with error -71 [ 220.834484][ T4326] usb 2-1: USB disconnect, device number 13 [ 220.942092][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.146110][ T5617] loop3: detected capacity change from 0 to 256 [ 221.156678][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 221.162884][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.168932][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.703492][ T5627] loop0: detected capacity change from 0 to 4096 [ 227.054337][ T5635] loop2: detected capacity change from 0 to 1024 [ 227.490444][ T5635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.540840][ T5646] [U]  [ 227.888154][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 228.249517][ T5653] loop3: detected capacity change from 0 to 32768 [ 230.131492][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 230.152782][ T5665] block device autoloading is deprecated and will be removed. [ 230.271814][ T5670] loop4: detected capacity change from 0 to 512 [ 230.321398][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 230.330690][ T14] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 230.346788][ T5670] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.349: corrupted inode contents [ 230.361719][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.369630][ T5670] EXT4-fs (loop4): Remounting filesystem read-only [ 230.369805][ T5670] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 230.387493][ T14] usb 1-1: config 0 descriptor?? [ 230.395728][ T14] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 230.437014][ T5670] EXT4-fs (loop4): Remounting filesystem read-only [ 230.481991][ T5670] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.349: corrupted inode contents [ 230.548244][ T5670] EXT4-fs (loop4): Remounting filesystem read-only [ 230.630673][ T5670] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.349: mark_inode_dirty error [ 230.714650][ T5670] EXT4-fs (loop4): Remounting filesystem read-only [ 230.825780][ T5678] IPv6: sit1: Disabled Multicast RS [ 230.971534][ T4321] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 231.951605][ T14] gspca_sonixj: reg_w1 err -110 [ 232.017550][ T14] sonixj: probe of 1-1:0.0 failed with error -110 [ 232.255825][ T5670] EXT4-fs (loop4): 1 orphan inode deleted [ 232.329566][ T5670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 232.342379][ T5677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.371643][ T5677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.431583][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 232.449120][ T4321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.474095][ T5677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.492764][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 232.507767][ T4321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.519052][ T5677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.526633][ T4321] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.572783][ T5677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.610348][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.671954][ T4321] usb 4-1: Product: syz [ 232.676204][ T4321] usb 4-1: Manufacturer: syz [ 232.749008][ T4321] usb 4-1: SerialNumber: syz [ 233.004541][ T4321] usb 4-1: 0:2 : does not exist [ 233.026342][ T4321] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 233.172443][ T4321] usb 4-1: USB disconnect, device number 11 [ 233.490225][ T4322] usb 1-1: USB disconnect, device number 8 [ 233.502537][ T5510] udevd[5510]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.645277][ T5697] loop4: detected capacity change from 0 to 512 [ 233.769337][ T5697] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.357: corrupted inode contents [ 233.792278][ T5697] EXT4-fs (loop4): Remounting filesystem read-only [ 233.798883][ T5697] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 233.869077][ T5697] EXT4-fs (loop4): Remounting filesystem read-only [ 233.889140][ T5697] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.357: corrupted inode contents [ 233.923860][ T5697] EXT4-fs (loop4): Remounting filesystem read-only [ 233.965355][ T5697] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.357: mark_inode_dirty error [ 234.002737][ T5697] EXT4-fs (loop4): Remounting filesystem read-only [ 234.040084][ T5697] EXT4-fs (loop4): 1 orphan inode deleted [ 234.050152][ T5697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.205174][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 234.301522][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.341469][ T4321] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.381500][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.541578][ T4280] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.541584][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.561487][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 234.704268][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.713340][ T4321] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 234.721725][ T4321] usb 2-1: config 4 has no interface number 0 [ 234.727887][ T4321] usb 2-1: config 4 interface 127 has no altsetting 0 [ 234.737134][ T4321] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 234.758719][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.807058][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.541229][ T4321] usb 2-1: Product: syz [ 235.545552][ T4321] usb 2-1: Manufacturer: syz [ 235.550197][ T4321] usb 2-1: SerialNumber: syz [ 236.099328][ T5734] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.231835][ T5039] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.441758][ T5039] usb 1-1: Using ep0 maxpacket: 16 [ 236.456917][ T5039] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 236.480304][ T5039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.749162][ T5039] usb 1-1: config 0 descriptor?? [ 236.778667][ T5039] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 237.312018][ T5039] gspca_sonixj: reg_w1 err -110 [ 237.332039][ T5039] sonixj: probe of 1-1:0.0 failed with error -110 [ 237.800201][ T4321] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 237.938858][ T4321] usb 2-1: USB disconnect, device number 14 [ 238.681597][ T4321] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 239.610692][ T4326] usb 1-1: USB disconnect, device number 9 [ 239.681563][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 239.690217][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.732361][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.770702][ T4321] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.813632][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.834302][ T4321] usb 2-1: Product: syz [ 239.838582][ T4321] usb 2-1: Manufacturer: syz [ 239.863488][ T4321] usb 2-1: SerialNumber: syz [ 240.091833][ T4321] usb 2-1: 0:2 : does not exist [ 240.114364][ T4321] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 240.164016][ T4321] usb 2-1: USB disconnect, device number 15 [ 240.171409][ T5040] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 240.355775][ T5040] usb 3-1: Using ep0 maxpacket: 16 [ 240.363705][ T5040] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.389584][ T5040] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 240.414701][ T5040] usb 3-1: config 4 has no interface number 0 [ 240.427685][ T5040] usb 3-1: config 4 interface 127 has no altsetting 0 [ 240.439124][ T5510] udevd[5510]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.473520][ T5040] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 240.506749][ T5040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.524184][ T5040] usb 3-1: Product: syz [ 240.528471][ T5040] usb 3-1: Manufacturer: syz [ 240.551417][ T5040] usb 3-1: SerialNumber: syz [ 241.931423][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 242.121526][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 242.129941][ T14] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 242.181439][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.237452][ T14] usb 4-1: config 0 descriptor?? [ 242.312549][ T5814] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.347438][ T5820] capability: warning: `syz.1.396' uses deprecated v2 capabilities in a way that may be insecure [ 242.386566][ T14] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 243.147719][ T14] gspca_sonixj: reg_r err -32 [ 243.155084][ T14] sonixj: probe of 4-1:0.0 failed with error -32 [ 244.325851][ T5040] usbhid 3-1:4.127: couldn't find an input interrupt endpoint [ 244.382449][ T5040] usb 3-1: USB disconnect, device number 16 [ 244.648874][ T5040] usb 4-1: USB disconnect, device number 12 [ 245.870818][ T4288] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 246.707184][ T14] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 247.771453][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 247.778963][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.804260][ T14] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 247.838172][ T14] usb 2-1: config 4 has no interface number 0 [ 247.861549][ T5040] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.861587][ T14] usb 2-1: config 4 interface 127 has no altsetting 0 [ 247.937104][ T14] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 247.997229][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.038790][ T14] usb 2-1: Product: syz [ 248.051418][ T14] usb 2-1: Manufacturer: syz [ 248.056157][ T14] usb 2-1: SerialNumber: syz [ 248.071473][ T5040] usb 3-1: Using ep0 maxpacket: 16 [ 248.078778][ T5040] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 248.106748][ T5040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.299443][ T5040] usb 3-1: config 0 descriptor?? [ 248.321138][ T5040] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 248.921228][ T5897] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 249.591804][ T5040] gspca_sonixj: reg_w1 err -110 [ 249.597172][ T5040] sonixj: probe of 3-1:0.0 failed with error -110 [ 249.950393][ T5900] loop0: detected capacity change from 0 to 32768 [ 249.958547][ T5900] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 250.105155][ T5386] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.939998][ T14] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 251.032580][ T14] usb 2-1: USB disconnect, device number 16 [ 251.078370][ T5040] usb 3-1: USB disconnect, device number 17 [ 255.326331][ T4323] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 255.503639][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.510090][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.921392][ T4323] usb 1-1: Using ep0 maxpacket: 16 [ 255.945636][ T5957] capability: warning: `syz.2.433' uses 32-bit capabilities (legacy support in use) [ 256.700753][ T4323] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 256.710087][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.720802][ T4323] usb 1-1: config 0 descriptor?? [ 256.730835][ T4323] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 257.889861][ T4323] gspca_sonixj: reg_r err -32 [ 257.894831][ T4323] sonixj: probe of 1-1:0.0 failed with error -32 [ 258.261473][ T4323] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 258.386966][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'. [ 258.486684][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.524648][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.565284][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.616044][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.783774][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.808039][ T4323] usb 2-1: no configurations [ 258.818369][ T4323] usb 2-1: can't read configurations, error -22 [ 259.362627][ T4322] usb 1-1: USB disconnect, device number 10 [ 259.574791][ T5995] loop0: detected capacity change from 0 to 1764 [ 260.087858][ T5995] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 261.508752][ T6016] loop4: detected capacity change from 0 to 512 [ 261.582589][ T6016] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.450: corrupted inode contents [ 262.009112][ T6016] EXT4-fs (loop4): Remounting filesystem read-only [ 262.018892][ T6016] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 262.034871][ T6016] EXT4-fs (loop4): Remounting filesystem read-only [ 262.044931][ T6016] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.450: corrupted inode contents [ 262.891618][ T6016] EXT4-fs (loop4): Remounting filesystem read-only [ 262.906553][ T6016] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.450: mark_inode_dirty error [ 263.011013][ T6016] EXT4-fs (loop4): Remounting filesystem read-only [ 263.041703][ T6016] EXT4-fs (loop4): 1 orphan inode deleted [ 263.081750][ T6016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 264.045352][ T6042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.138027][ T6042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.163315][ T6042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.265798][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 265.421388][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.714349][ T6042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.801601][ T6042] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.141440][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 266.221914][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.951212][ T6082] loop2: detected capacity change from 0 to 512 [ 266.992668][ T6082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.089181][ T6082] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 267.116059][ T6082] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.472: corrupted in-inode xattr [ 267.234257][ T6082] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.472: couldn't read orphan inode 15 (err -117) [ 267.274977][ T6082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.741490][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.821650][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.312495][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 269.831647][ T6098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.861607][ T6098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.629276][ T6098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.720490][ T6098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.782579][ T6098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.941458][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.947843][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.621388][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.781502][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.861427][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 274.622555][ T6140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.651719][ T6140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.658171][ T6140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.864757][ T6140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.886497][ T6140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.706006][ T6151] fuse: Bad value for 'fd' [ 276.495982][ T4322] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 276.691393][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 276.701587][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 276.707694][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.713787][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.721144][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.775673][ T4322] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 276.848088][ T4322] usb 2-1: config 4 has no interface number 0 [ 276.877288][ T4322] usb 2-1: config 4 interface 127 has no altsetting 0 [ 276.928123][ T4322] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 276.941552][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 276.948164][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 276.973100][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.039904][ T4322] usb 2-1: Product: syz [ 277.069373][ T4322] usb 2-1: Manufacturer: syz [ 277.111359][ T4322] usb 2-1: SerialNumber: syz [ 277.765234][ T6161] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.441105][ T6192] loop0: detected capacity change from 0 to 256 [ 279.614714][ T6197] fuse: Bad value for 'fd' [ 279.985814][ T4322] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 280.120592][ T4322] usb 2-1: USB disconnect, device number 19 [ 280.710495][ T6216] loop0: detected capacity change from 0 to 64 [ 281.196658][ T6227] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 281.275860][ T4285] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 282.651294][ C0] sched: RT throttling activated [ 283.389793][ T6230] fuse: Bad value for 'fd' [ 283.631675][ T4323] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 283.871913][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 284.224011][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.249335][ T4323] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 284.268181][ T4323] usb 2-1: config 4 has no interface number 0 [ 284.281001][ T4323] usb 2-1: config 4 interface 127 has no altsetting 0 [ 284.312971][ T4323] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 284.349931][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.389435][ T4323] usb 2-1: Product: syz [ 284.413481][ T4323] usb 2-1: Manufacturer: syz [ 284.418160][ T4323] usb 2-1: SerialNumber: syz [ 285.771649][ T6254] input: syz0 as /devices/virtual/input/input6 [ 285.959401][ T6256] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.477605][ T4323] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 288.569213][ T4323] usb 2-1: USB disconnect, device number 20 [ 288.847344][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 289.321659][ T4323] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 289.961467][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 289.968505][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 289.988071][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.024061][ T4323] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.050748][ T4323] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 290.105678][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.135803][ T4323] usb 2-1: Product: syz [ 290.140040][ T4323] usb 2-1: Manufacturer: syz [ 290.146299][ T4323] usb 2-1: SerialNumber: syz [ 290.183242][ T4323] usb 2-1: config 0 descriptor?? [ 291.266670][ T954] usb 2-1: USB disconnect, device number 21 [ 293.861452][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 293.861501][ T26] audit: type=1326 audit(1782773471.095:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.1.541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 294.341397][ T26] audit: type=1326 audit(1782773471.095:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.1.541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324b99ce59 code=0x7ffc0000 [ 294.941412][ T4326] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 295.129336][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 295.149532][ T4326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.162788][ T4326] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 295.175363][ T4326] usb 3-1: config 4 has no interface number 0 [ 295.183967][ T4326] usb 3-1: config 4 interface 127 has no altsetting 0 [ 295.196838][ T4326] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 295.209467][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.220821][ T4326] usb 3-1: Product: syz [ 295.234879][ T4326] usb 3-1: Manufacturer: syz [ 295.239540][ T4326] usb 3-1: SerialNumber: syz [ 296.472430][ T6323] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.628583][ T4326] usbhid 3-1:4.127: couldn't find an input interrupt endpoint [ 299.680739][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 299.714219][ T4326] usb 3-1: USB disconnect, device number 18 [ 300.951660][ T954] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 301.511372][ T954] usb 5-1: Using ep0 maxpacket: 8 [ 303.192417][ T954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.211476][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.231346][ T954] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.570627][ T954] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 303.596832][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.627790][ T954] usb 5-1: Product: syz [ 303.644393][ T954] usb 5-1: Manufacturer: syz [ 303.653144][ T954] usb 5-1: SerialNumber: syz [ 303.677314][ T954] usb 5-1: config 0 descriptor?? [ 303.920426][ T4376] usb 5-1: USB disconnect, device number 12 [ 304.508645][ T6378] loop2: detected capacity change from 0 to 64 [ 305.531331][ T4376] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 305.741771][ T26] audit: type=1326 audit(1782773482.925:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 305.829207][ T26] audit: type=1326 audit(1782773482.925:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 306.241414][ T4376] usb 1-1: Using ep0 maxpacket: 16 [ 306.248770][ T4376] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.282747][ T4376] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 306.323249][ T26] audit: type=1326 audit(1782773482.925:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 306.354522][ T4376] usb 1-1: config 4 has no interface number 0 [ 306.405210][ T4376] usb 1-1: config 4 interface 127 has no altsetting 0 [ 306.423285][ T26] audit: type=1326 audit(1782773482.925:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 306.480324][ T4376] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 306.511463][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.528633][ T26] audit: type=1326 audit(1782773482.925:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 306.552893][ T4376] usb 1-1: Product: syz [ 306.552915][ T4376] usb 1-1: Manufacturer: syz [ 306.552934][ T4376] usb 1-1: SerialNumber: syz [ 306.694142][ T26] audit: type=1326 audit(1782773482.925:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 306.717998][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.797655][ T26] audit: type=1326 audit(1782773482.925:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 306.827880][ T26] audit: type=1326 audit(1782773482.925:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 306.851798][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.998036][ T26] audit: type=1326 audit(1782773482.925:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b919ce59 code=0x7ffc0000 [ 307.416228][ T6406] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.184414][ T26] audit: type=1326 audit(1782773482.925:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.2.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05b915d68e code=0x7ffc0000 [ 309.371971][ T4376] usbhid 1-1:4.127: couldn't find an input interrupt endpoint [ 309.473177][ T4376] usb 1-1: USB disconnect, device number 11 [ 309.821807][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 310.445832][ T6404] loop2: detected capacity change from 0 to 1024 [ 310.712193][ T5040] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 311.331402][ T5040] usb 5-1: Using ep0 maxpacket: 8 [ 311.438091][ T5040] usb 5-1: unable to get BOS descriptor or descriptor too short [ 311.461093][ T5040] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.541340][ T5040] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.617345][ T5040] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 311.647083][ T5040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.671059][ T5040] usb 5-1: Product: syz [ 311.697719][ T5040] usb 5-1: Manufacturer: syz [ 311.717733][ T5040] usb 5-1: SerialNumber: syz [ 311.740437][ T5040] usb 5-1: config 0 descriptor?? [ 312.694122][ T4536] wlan0: Trigger new scan to find an IBSS to join [ 312.836421][ T4322] usb 5-1: USB disconnect, device number 13 [ 313.121588][ T4319] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 313.311438][ T4319] usb 1-1: Using ep0 maxpacket: 16 [ 313.328818][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 313.344751][ T4319] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 313.353791][ T4319] usb 1-1: config 4 has no interface number 0 [ 313.361088][ T4319] usb 1-1: config 4 interface 127 has no altsetting 0 [ 313.383740][ T4319] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 313.393677][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.432439][ T4319] usb 1-1: Product: syz [ 313.437114][ T4319] usb 1-1: Manufacturer: syz [ 313.444504][ T4319] usb 1-1: SerialNumber: syz [ 314.030515][ T6464] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.702100][ T4932] wlan0: Trigger new scan to find an IBSS to join [ 315.893475][ T4319] usbhid 1-1:4.127: couldn't find an input interrupt endpoint [ 316.003198][ T4319] usb 1-1: USB disconnect, device number 12 [ 316.944482][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.959820][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.150696][ T6482] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 317.160559][ T4285] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 318.758365][ T4361] wlan0: Trigger new scan to find an IBSS to join [ 318.765016][ T4536] wlan0: Trigger new scan to find an IBSS to join [ 318.771576][ T6052] wlan0: Trigger new scan to find an IBSS to join [ 319.049412][ T6490] binder: BINDER_SET_CONTEXT_MGR already set [ 319.055767][ T6490] binder: 6483:6490 ioctl 4018620d 200000004a80 returned -16 [ 319.904011][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 319.915236][ T4932] wlan0: Creating new IBSS network, BSSID 26:2c:74:b1:1c:35 [ 319.934334][ T6052] wlan0: Creating new IBSS network, BSSID 2e:73:cb:46:49:b4 [ 320.391513][ T4326] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 321.039242][ T6503] binder: BINDER_SET_CONTEXT_MGR already set [ 321.045510][ T6503] binder: 6497:6503 ioctl 4018620d 200000004a80 returned -16 [ 321.101519][ T4326] usb 3-1: Using ep0 maxpacket: 8 [ 321.303537][ T4326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 321.630177][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.661467][ T4326] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.550478][ T4326] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 322.560104][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.569047][ T4326] usb 3-1: Product: syz [ 322.573909][ T4326] usb 3-1: Manufacturer: syz [ 322.578619][ T4326] usb 3-1: SerialNumber: syz [ 322.591183][ T4326] usb 3-1: config 0 descriptor?? [ 323.138718][ T9] wlan0: Trigger new scan to find an IBSS to join [ 323.451079][ T5040] usb 3-1: USB disconnect, device number 19 [ 323.475232][ T6512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.502306][ T6512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.538123][ T6512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.589296][ T6512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.620510][ T6512] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.783647][ T4483] wlan0: Creating new IBSS network, BSSID 76:3a:1c:9b:a5:2e [ 325.501552][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 326.268160][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.274329][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.287150][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.293464][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.621700][ T34] wlan0: Trigger new scan to find an IBSS to join [ 329.214879][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 330.901432][ T4322] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 331.474254][ T4483] wlan0: Trigger new scan to find an IBSS to join [ 331.891603][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 331.900060][ T4322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.101764][ T6613] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 333.110716][ T4285] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 333.663362][ T34] wlan0: Creating new IBSS network, BSSID 2a:13:2f:35:63:3a [ 334.653019][ T4322] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 334.664401][ T4322] usb 1-1: can't read configurations, error -71 [ 335.276411][ T4396] wlan0: Creating new IBSS network, BSSID 02:22:47:ea:99:c5 [ 335.560617][ T6622] binder: BINDER_SET_CONTEXT_MGR already set [ 335.566794][ T6622] binder: 6618:6622 ioctl 4018620d 200000004a80 returned -16 [ 342.773138][ T6660] loop0: detected capacity change from 0 to 64 [ 344.280045][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 344.348902][ T6668] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 344.363146][ T4285] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 346.601359][ T4401] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 347.301556][ T4401] usb 2-1: Using ep0 maxpacket: 8 [ 347.399629][ T4401] usb 2-1: device descriptor read/all, error -71 [ 347.411406][ T4376] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 347.702281][ T4376] usb 3-1: Using ep0 maxpacket: 16 [ 348.620441][ T4376] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.631222][ T4376] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.642938][ T4376] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.652184][ T4376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.660188][ T4376] usb 3-1: Product: syz [ 348.664492][ T4376] usb 3-1: Manufacturer: syz [ 348.669123][ T4376] usb 3-1: SerialNumber: syz [ 349.048816][ T4376] usb 3-1: 0:2 : does not exist [ 349.072275][ T4376] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 349.194721][ T4376] usb 3-1: USB disconnect, device number 20 [ 350.114857][ T6709] loop2: detected capacity change from 0 to 64 [ 350.269478][ T4932] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.281211][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.702435][ T5510] udevd[5510]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.109870][ T6723] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 351.118781][ T4285] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 353.471486][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 354.601337][ T4319] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 355.891588][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 356.339038][ T4319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.351138][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.382704][ T4319] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.404386][ T4319] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 356.428608][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.032732][ T4319] usb 4-1: Product: syz [ 357.061858][ T4319] usb 4-1: Manufacturer: syz [ 357.106167][ T4319] usb 4-1: SerialNumber: syz [ 357.143168][ T4319] usb 4-1: config 0 descriptor?? [ 358.432524][ T4319] usb 4-1: can't set config #0, error -71 [ 358.473264][ T4319] usb 4-1: USB disconnect, device number 13 [ 361.261842][ T954] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 361.739869][ T6052] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 362.391576][ T954] usb 5-1: Using ep0 maxpacket: 16 [ 362.701420][ T56] wlan0: Trigger new scan to find an IBSS to join [ 363.212173][ T954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.231351][ T954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.260802][ T954] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.281190][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.301484][ T954] usb 5-1: Product: syz [ 363.305718][ T954] usb 5-1: Manufacturer: syz [ 363.310409][ T954] usb 5-1: SerialNumber: syz [ 363.540194][ T954] usb 5-1: 0:2 : does not exist [ 363.617784][ T954] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 364.076188][ T954] usb 5-1: USB disconnect, device number 14 [ 366.983403][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 367.104490][ T4324] wlan0: Trigger new scan to find an IBSS to join [ 367.737534][ T6819] binder: 6814:6819 ioctl c0306201 0 returned -14 [ 368.332841][ T5510] udevd[5510]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.716029][ T4326] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 369.025904][ T4563] wlan0: Creating new IBSS network, BSSID 42:21:19:d0:c8:33 [ 369.138738][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.170534][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.217582][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.231767][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.397263][ T6834] binder: BINDER_SET_CONTEXT_MGR already set [ 369.403532][ T6834] binder: 6831:6834 ioctl 4018620d 200000004a80 returned -16 [ 370.652070][ T4326] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.659870][ T4326] usb 2-1: no configurations [ 370.706154][ T4326] usb 2-1: can't read configurations, error -22 [ 374.091810][ T5036] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 374.098173][ T6856] loop3: detected capacity change from 0 to 512 [ 374.149093][ T6856] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 374.331451][ T5036] usb 3-1: Using ep0 maxpacket: 16 [ 374.349732][ T5036] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.366317][ T5036] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.392079][ T5036] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.401731][ T5036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.414350][ T5036] usb 3-1: Product: syz [ 374.421390][ T5036] usb 3-1: Manufacturer: syz [ 374.426493][ T5036] usb 3-1: SerialNumber: syz [ 374.761789][ T5036] usb 3-1: 0:2 : does not exist [ 374.781038][ T5036] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 375.751546][ T5036] usb 3-1: USB disconnect, device number 21 [ 376.049129][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 376.137519][ T5386] udevd[5386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.199721][ T6880] netlink: 'syz.0.690': attribute type 10 has an invalid length. [ 376.631449][ T4396] wlan0: Trigger new scan to find an IBSS to join [ 377.742178][ T5036] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 378.092136][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.100883][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.177056][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.193609][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.336217][ T5036] usb 5-1: unable to get BOS descriptor or descriptor too short [ 378.354999][ T5036] usb 5-1: no configurations [ 378.394242][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.400619][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.410687][ T5036] usb 5-1: can't read configurations, error -22 [ 379.662054][ T34] wlan0: Trigger new scan to find an IBSS to join [ 380.701506][ T6052] wlan0: Trigger new scan to find an IBSS to join [ 381.471365][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 381.664945][ T4563] wlan0: Trigger new scan to find an IBSS to join [ 383.904388][ T6950] netlink: 'syz.4.707': attribute type 10 has an invalid length. [ 384.703118][ T34] wlan0: Trigger new scan to find an IBSS to join [ 385.461686][ T56] wlan0: Creating new IBSS network, BSSID 3a:ba:67:41:bb:94 [ 385.723379][ T4536] wlan0: Trigger new scan to find an IBSS to join [ 385.838667][ T6971] loop2: detected capacity change from 0 to 1024 [ 387.431552][ T4325] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 387.636238][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.659951][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.750082][ T5510] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 388.109321][ T6979] loop0: detected capacity change from 0 to 64 [ 388.122554][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.099426][ T6985] loop2: detected capacity change from 0 to 512 [ 389.106156][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.113426][ T5510] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.643176][ T6985] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 389.706576][ T5510] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 390.004308][ T4325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.449377][ T4325] usb 2-1: no configurations [ 390.495345][ T4325] usb 2-1: can't read configurations, error -22 [ 390.646595][ T6998] input: syz0 as /devices/virtual/input/input9 [ 390.777139][ T6052] wlan0: Trigger new scan to find an IBSS to join [ 390.783713][ T4396] wlan0: Trigger new scan to find an IBSS to join [ 391.679034][ T11] wlan0: Trigger new scan to find an IBSS to join [ 392.221508][ T4325] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 392.401687][ T4325] usb 2-1: Using ep0 maxpacket: 16 [ 392.483465][ T4325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.512681][ T4325] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 392.897641][ T4325] usb 2-1: config 4 has no interface number 0 [ 392.909984][ T4325] usb 2-1: config 4 interface 127 has no altsetting 0 [ 392.994371][ T4325] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 393.042603][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.120224][ T4325] usb 2-1: Product: syz [ 393.126500][ T4325] usb 2-1: Manufacturer: syz [ 393.137560][ T4325] usb 2-1: SerialNumber: syz [ 393.332827][ T4361] wlan0: Creating new IBSS network, BSSID 8a:af:2f:cb:d1:f2 [ 393.762322][ T7022] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.609017][ T7014] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 394.825304][ T11] wlan0: Trigger new scan to find an IBSS to join [ 395.630496][ T4325] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 395.677097][ T4457] wlan0: Trigger new scan to find an IBSS to join [ 395.680570][ T4396] wlan0: Trigger new scan to find an IBSS to join [ 397.361795][ T7032] loop0: detected capacity change from 0 to 1024 [ 398.824341][ T4325] usb 2-1: USB disconnect, device number 27 [ 399.256085][ T4456] wlan0: Creating new IBSS network, BSSID 5a:14:51:c0:f4:27 [ 399.302828][ T5386] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.671351][ T4319] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 399.965467][ T7044] input: syz0 as /devices/virtual/input/input10 [ 400.242000][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.671580][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.688957][ T4457] wlan0: Creating new IBSS network, BSSID 46:c5:d9:d3:5f:cf [ 400.711628][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.853160][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.899448][ T4457] wlan0: Creating new IBSS network, BSSID ea:7c:7c:f4:31:d1 [ 400.950003][ T4319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 400.969322][ T4319] usb 5-1: no configurations [ 400.994278][ T4319] usb 5-1: can't read configurations, error -22 [ 401.991318][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 401.991401][ T26] audit: type=1326 audit(1782773578.745:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 402.215842][ T26] audit: type=1326 audit(1782773578.745:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 402.587846][ T26] audit: type=1326 audit(1782773578.745:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 402.656254][ T26] audit: type=1326 audit(1782773578.745:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 402.685411][ T26] audit: type=1326 audit(1782773578.745:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 402.771464][ T26] audit: type=1326 audit(1782773578.745:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 403.350672][ T26] audit: type=1326 audit(1782773578.745:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 403.621372][ T26] audit: type=1326 audit(1782773578.745:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f396855d68e code=0x7ffc0000 [ 403.739234][ T7067] loop2: detected capacity change from 0 to 512 [ 403.765794][ T26] audit: type=1326 audit(1782773578.755:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f396859e157 code=0x7ffc0000 [ 403.800753][ T26] audit: type=1326 audit(1782773578.755:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7049 comm="syz.0.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 404.194302][ T7067] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 404.701799][ T4399] wlan0: Trigger new scan to find an IBSS to join [ 405.675012][ T4341] wlan0: Trigger new scan to find an IBSS to join [ 409.199781][ T7093] loop2: detected capacity change from 0 to 64 [ 409.364656][ T4563] wlan0: Trigger new scan to find an IBSS to join [ 409.473928][ T56] wlan0: Trigger new scan to find an IBSS to join [ 412.742783][ T4563] wlan0: Creating new IBSS network, BSSID 2e:a1:f8:94:36:65 [ 412.753805][ T7108] loop2: detected capacity change from 0 to 512 [ 412.845980][ T7108] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 412.864068][ T4341] wlan0: Creating new IBSS network, BSSID 9a:58:ce:f9:6d:c2 [ 412.878606][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.881513][ T4326] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 412.893725][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.910212][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.922767][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.930390][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 412.938276][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.664769][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.729300][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.791708][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.800316][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.022474][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 415.386886][ T6052] wlan0: Trigger new scan to find an IBSS to join [ 415.621122][ T4326] usb 5-1: unable to get BOS descriptor or descriptor too short [ 416.071348][ T4326] usb 5-1: no configurations [ 416.076045][ T4326] usb 5-1: can't read configurations, error -22 [ 417.112357][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 417.502748][ T4932] wlan0: Creating new IBSS network, BSSID 1e:a2:60:e1:d4:e1 [ 418.427119][ T7151] loop2: detected capacity change from 0 to 64 [ 419.182091][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 419.250959][ T4396] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.979078][ T6052] wlan0: Trigger new scan to find an IBSS to join [ 420.981416][ T4361] wlan0: Trigger new scan to find an IBSS to join [ 421.119418][ T4396] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.262371][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 421.453781][ T7114] chnl_net:caif_netlink_parms(): no params data found [ 421.793580][ T4396] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.432368][ T4325] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 423.664018][ T4361] wlan0: Trigger new scan to find an IBSS to join [ 424.796699][ T4456] wlan0: Trigger new scan to find an IBSS to join [ 425.134363][ T4396] bond0: (slave netdevsim0): Releasing backup interface [ 426.740614][ T4361] wlan0: Trigger new scan to find an IBSS to join [ 426.855899][ T4396] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.878918][ T4325] usb 2-1: device descriptor read/all, error -71 [ 427.262801][ T7114] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.312049][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.332198][ T7114] device bridge_slave_0 entered promiscuous mode [ 428.463278][ T4361] wlan0: Creating new IBSS network, BSSID ae:29:4e:bd:13:10 [ 428.975300][ T7114] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.996280][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.007212][ T7114] device bridge_slave_1 entered promiscuous mode [ 429.075019][ T7114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.095208][ T4361] wlan0: Creating new IBSS network, BSSID 32:df:7c:69:fc:f0 [ 429.113176][ T7114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.131903][ T6052] wlan0: Creating new IBSS network, BSSID 16:25:37:3b:a0:ac [ 429.341548][ T7193] loop0: detected capacity change from 0 to 64 [ 430.196546][ T7114] team0: Port device team_slave_0 added [ 430.279186][ T7114] team0: Port device team_slave_1 added [ 430.449379][ T7114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.456539][ T7114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.617476][ T7114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.797571][ T4361] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.330020][ T7204] loop2: detected capacity change from 0 to 512 [ 431.403090][ T7114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.410066][ T7114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.529762][ T7204] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 431.741607][ T7114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.493182][ T7114] device hsr_slave_0 entered promiscuous mode [ 432.499863][ T7213] loop4: detected capacity change from 0 to 512 [ 432.582016][ T7213] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 432.601716][ T7114] device hsr_slave_1 entered promiscuous mode [ 432.611507][ T7114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.780958][ T7114] Cannot create hsr debugfs directory [ 434.381291][ T4319] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 434.610993][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.619952][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.627984][ T4341] wlan0: Trigger new scan to find an IBSS to join [ 434.634015][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.654466][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.165909][ T4319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.181435][ T4319] usb 3-1: no configurations [ 436.191477][ T4319] usb 3-1: can't read configurations, error -22 [ 437.618326][ T7257] loop4: detected capacity change from 0 to 512 [ 438.022382][ T7257] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 438.701446][ T11] wlan0: Trigger new scan to find an IBSS to join [ 438.708041][ T11] wlan0: Trigger new scan to find an IBSS to join [ 439.708385][ T4457] wlan0: Trigger new scan to find an IBSS to join [ 439.928597][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.935204][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.673882][ T7114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 440.701422][ T4456] wlan0: Trigger new scan to find an IBSS to join [ 440.937506][ T7114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.105861][ T7114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.220271][ T7296] binder: BINDER_SET_CONTEXT_MGR already set [ 442.226492][ T7296] binder: 7294:7296 ioctl 4018620d 200000004a80 returned -16 [ 442.631541][ T6052] wlan0: Trigger new scan to find an IBSS to join [ 442.701461][ T4483] wlan0: Trigger new scan to find an IBSS to join [ 443.279871][ T7114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.507036][ T4396] device hsr_slave_0 left promiscuous mode [ 444.240444][ T4396] device hsr_slave_1 left promiscuous mode [ 444.260946][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.271764][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.320587][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.328585][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.344716][ T4396] device bridge_slave_1 left promiscuous mode [ 444.354725][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.431788][ T4396] device bridge_slave_0 left promiscuous mode [ 444.443361][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.548878][ T4396] device veth1_macvtap left promiscuous mode [ 444.555802][ T4396] device veth0_macvtap left promiscuous mode [ 444.562859][ T4396] device veth1_vlan left promiscuous mode [ 444.569850][ T4396] device veth0_vlan left promiscuous mode [ 444.681707][ T4456] wlan0: Creating new IBSS network, BSSID e6:21:14:21:ee:f0 [ 444.717168][ T46] wlan0: Trigger new scan to find an IBSS to join [ 445.687618][ T4483] wlan0: Trigger new scan to find an IBSS to join [ 446.501870][ T4341] wlan0: Creating new IBSS network, BSSID 32:cd:c3:fe:d0:f5 [ 446.720158][ T4341] wlan0: Trigger new scan to find an IBSS to join [ 447.466956][ T4341] wlan0: Creating new IBSS network, BSSID aa:bb:f1:99:c6:82 [ 447.720796][ T4361] wlan0: Creating new IBSS network, BSSID 1a:b9:3f:96:b5:85 [ 447.856402][ T4396] team0 (unregistering): Port device team_slave_1 removed [ 447.897867][ T4396] team0 (unregistering): Port device team_slave_0 removed [ 447.935937][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.977357][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.273570][ T4396] bond0 (unregistering): Released all slaves [ 448.682662][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.918353][ T7114] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.095867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.216086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.322062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.330657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.432106][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.439332][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.540813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.591160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.621593][ T4579] wlan0: Trigger new scan to find an IBSS to join [ 450.624593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.631452][ T4341] wlan0: Trigger new scan to find an IBSS to join [ 450.637326][ T46] wlan0: Trigger new scan to find an IBSS to join [ 450.684223][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.691432][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.754379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.790481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.820996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.862627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.902254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.930212][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.982731][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.039448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.052746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.105816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.168249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.213981][ T7114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.621416][ T4396] wlan0: Trigger new scan to find an IBSS to join [ 454.702256][ T4396] wlan0: Trigger new scan to find an IBSS to join [ 455.661818][ T4324] wlan0: Trigger new scan to find an IBSS to join [ 456.408427][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.470309][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.651438][ T46] wlan0: Creating new IBSS network, BSSID ae:b5:50:60:67:b2 [ 456.742527][ T7114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.844052][ T4456] wlan0: Trigger new scan to find an IBSS to join [ 459.381724][ T954] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 459.793194][ T4579] wlan0: Trigger new scan to find an IBSS to join [ 459.797245][ T954] usb 1-1: device descriptor read/64, error -71 [ 459.800140][ T56] wlan0: Trigger new scan to find an IBSS to join [ 459.890707][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.974276][ T4456] wlan0: Creating new IBSS network, BSSID ea:79:79:93:f9:b5 [ 460.060159][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.353087][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.368273][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.431343][ T954] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 460.466178][ T7114] device veth0_vlan entered promiscuous mode [ 460.500628][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.525596][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.562391][ T7114] device veth1_vlan entered promiscuous mode [ 460.632239][ T954] usb 1-1: device descriptor read/64, error -71 [ 460.661878][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.687657][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.722425][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.752730][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.761590][ T954] usb usb1-port1: attempt power cycle [ 460.779032][ T7114] device veth0_macvtap entered promiscuous mode [ 460.799421][ T7114] device veth1_macvtap entered promiscuous mode [ 460.891807][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.944874][ T4341] wlan0: Creating new IBSS network, BSSID fa:f3:17:75:db:35 [ 461.171416][ T954] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 461.635678][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.704271][ T954] usb 1-1: device descriptor read/8, error -71 [ 461.838179][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.873639][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.921810][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.954927][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.992069][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.010491][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.022393][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.100152][ T954] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 462.103927][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.133975][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.362044][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.392299][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.419039][ T954] usb 1-1: device descriptor read/8, error -71 [ 462.458739][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.487477][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.519061][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.542170][ T954] usb usb1-port1: unable to enumerate USB device [ 462.566582][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.600425][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.619894][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.630017][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.647100][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.659891][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.688907][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.711975][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.756608][ T7114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.802126][ T7114] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.810926][ T7114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.846528][ T7114] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.619019][ T4483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.650110][ T4483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.673714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.662071][ T4932] wlan0: Trigger new scan to find an IBSS to join [ 465.662119][ T4341] wlan0: Trigger new scan to find an IBSS to join [ 466.037324][ T4932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.077668][ T4932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.108500][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 468.704036][ T6052] wlan0: Trigger new scan to find an IBSS to join [ 469.261303][ T5036] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 469.662272][ T46] wlan0: Trigger new scan to find an IBSS to join [ 469.662279][ T4932] wlan0: Trigger new scan to find an IBSS to join [ 470.051445][ T5036] usb 6-1: device descriptor read/64, error -71 [ 470.341331][ T5036] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 470.635733][ T4483] wlan0: Creating new IBSS network, BSSID ba:6b:08:52:61:b8 [ 470.807547][ T4932] wlan0: Creating new IBSS network, BSSID da:d1:a7:02:14:05 [ 471.081266][ T5036] usb 6-1: device descriptor read/64, error -71 [ 471.211446][ T5036] usb usb6-port1: attempt power cycle [ 471.505511][ T7575] binder: BINDER_SET_CONTEXT_MGR already set [ 471.511756][ T7575] binder: 7572:7575 ioctl 4018620d 200000004a80 returned -16 [ 471.661355][ T5036] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 471.669327][ T56] wlan0: Trigger new scan to find an IBSS to join [ 472.581082][ T5036] usb 6-1: device descriptor read/8, error -71 [ 474.247851][ T7598] binder: BINDER_SET_CONTEXT_MGR already set [ 474.254065][ T7598] binder: 7593:7598 ioctl 4018620d 200000004a80 returned -16 [ 474.713440][ T4457] wlan0: Trigger new scan to find an IBSS to join [ 474.815673][ T7610] binder: BINDER_SET_CONTEXT_MGR already set [ 474.821854][ T7610] binder: 7602:7610 ioctl 4018620d 200000004a80 returned -16 [ 476.421496][ T5036] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 476.701551][ T4361] wlan0: Trigger new scan to find an IBSS to join [ 476.708258][ T4932] wlan0: Trigger new scan to find an IBSS to join [ 477.187789][ T7630] binder: BINDER_SET_CONTEXT_MGR already set [ 477.194051][ T7630] binder: 7626:7630 ioctl 4018620d 200000004a80 returned -16 [ 477.631480][ T5036] usb 2-1: Using ep0 maxpacket: 16 [ 477.642556][ T5036] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.670971][ T5036] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.750504][ T5036] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.773872][ T5036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.790551][ T5036] usb 2-1: Product: syz [ 477.816815][ T5036] usb 2-1: Manufacturer: syz [ 477.832435][ T5036] usb 2-1: SerialNumber: syz [ 478.051078][ T5036] usb 2-1: 0:2 : does not exist [ 479.575310][ T11] wlan0: Trigger new scan to find an IBSS to join [ 479.660389][ T5036] usb 2-1: USB disconnect, device number 30 [ 480.609459][ T7330] udevd[7330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.832578][ T4932] wlan0: Creating new IBSS network, BSSID 8a:20:e1:6f:8e:31 [ 481.703801][ T4361] wlan0: Creating new IBSS network, BSSID ee:d7:f9:32:79:35 [ 483.668482][ T46] wlan0: Trigger new scan to find an IBSS to join [ 484.174462][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 484.174584][ T26] audit: type=1326 audit(1782773661.545:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 484.704865][ T4932] wlan0: Trigger new scan to find an IBSS to join [ 484.755740][ T26] audit: type=1326 audit(1782773661.545:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 484.941289][ T5037] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 484.993410][ T26] audit: type=1326 audit(1782773661.545:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 485.109161][ T26] audit: type=1326 audit(1782773661.545:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 485.271938][ T5037] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 485.391676][ T4285] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 488.888717][ T4579] wlan0: Trigger new scan to find an IBSS to join [ 488.921548][ T5037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.950442][ T5037] usb 6-1: Product: syz [ 488.954686][ T26] audit: type=1326 audit(1782773661.545:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 488.954743][ T26] audit: type=1326 audit(1782773661.545:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 488.954781][ T26] audit: type=1326 audit(1782773661.545:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 488.954818][ T26] audit: type=1326 audit(1782773661.545:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 488.954856][ T26] audit: type=1326 audit(1782773661.545:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 488.954894][ T26] audit: type=1326 audit(1782773661.545:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396859ce59 code=0x7ffc0000 [ 490.467839][ T5037] usb 6-1: Manufacturer: syz [ 490.472719][ T5037] usb 6-1: SerialNumber: syz [ 490.497865][ T5037] usb 6-1: can't set config #1, error -71 [ 491.152056][ T4932] wlan0: Creating new IBSS network, BSSID a6:23:06:70:bf:82 [ 491.218765][ T5037] usb 6-1: USB disconnect, device number 6 [ 491.409173][ T4361] wlan0: Creating new IBSS network, BSSID a2:49:77:3a:8e:9d [ 492.921269][ T4376] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 493.791394][ T4376] usb 1-1: Using ep0 maxpacket: 16 [ 494.014142][ T4376] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.042724][ T4376] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 494.072062][ T4376] usb 1-1: config 4 has no interface number 0 [ 494.078524][ T4376] usb 1-1: config 4 interface 127 has no altsetting 0 [ 494.133616][ T4376] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 494.169768][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.210584][ T4376] usb 1-1: Product: syz [ 494.218820][ T4376] usb 1-1: Manufacturer: syz [ 494.234254][ T4376] usb 1-1: SerialNumber: syz [ 494.567179][ T4323] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 494.762842][ T4341] wlan0: Trigger new scan to find an IBSS to join [ 494.770952][ T4361] wlan0: Trigger new scan to find an IBSS to join [ 494.814852][ T4285] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 496.854231][ T7774] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.521335][ T5036] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 498.596416][ T4376] usbhid 1-1:4.127: couldn't find an input interrupt endpoint [ 498.698306][ T4376] usb 1-1: USB disconnect, device number 19 [ 499.621568][ T4323] usb 2-1: device not accepting address 31, error -71 [ 500.001251][ T4579] wlan0: Creating new IBSS network, BSSID c2:fe:0e:c7:d0:d2 [ 500.330978][ T7791] input: syz0 as /devices/virtual/input/input13 [ 500.986003][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.008303][ T4579] wlan0: Creating new IBSS network, BSSID ba:a3:d6:42:08:e6 [ 501.286950][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.367850][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.386759][ T4457] ------------[ cut here ]------------ [ 501.392633][ T4457] WARNING: CPU: 1 PID: 4457 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 501.402747][ T4457] Modules linked in: [ 501.406809][ T4457] CPU: 1 PID: 4457 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 501.414646][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.424824][ T4457] Workqueue: cfg80211 cfg80211_event_work [ 501.430680][ T4457] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 501.436943][ T4457] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f [ 501.456755][ T4457] RSP: 0018:ffffc90004cafac0 EFLAGS: 00010293 [ 501.462963][ T4457] RAX: ffffffff89924969 RBX: 1ffff92000995f5c RCX: ffff88802e870000 [ 501.470972][ T4457] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 501.479114][ T4457] RBP: ffffc90004cafb70 R08: ffffffff90af22af R09: 1ffffffff215e455 [ 501.487141][ T4457] R10: dffffc0000000000 R11: fffffbfff215e456 R12: ffff888074da35b8 [ 501.495184][ T4457] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888054af0c90 [ 501.503189][ T4457] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 501.512185][ T4457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.518803][ T4457] CR2: 00007f4b5f8c6a90 CR3: 0000000019a89000 CR4: 00000000003506e0 [ 501.526809][ T4457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 501.534870][ T4457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 501.542896][ T4457] Call Trace: [ 501.546232][ T4457] [ 501.549205][ T4457] ? trace_rdev_return_void+0x240/0x240 [ 501.554841][ T4457] cfg80211_process_wdev_events+0x359/0x4d0 [ 501.560756][ T4457] ? process_one_work+0x7b4/0x1160 [ 501.565950][ T4457] cfg80211_process_rdev_events+0x9d/0x110 [ 501.571787][ T4457] cfg80211_event_work+0x2b/0x40 [ 501.576728][ T4457] process_one_work+0x8ab/0x1160 [ 501.582052][ T4457] ? worker_detach_from_pool+0x240/0x240 [ 501.587699][ T4457] ? _raw_spin_lock_irq+0xb7/0xf0 [ 501.592809][ T4457] ? _raw_spin_lock_irqsave+0x100/0x100 [ 501.598375][ T4457] ? wq_worker_running+0x97/0x190 [ 501.603423][ T4457] worker_thread+0xaf5/0x12a0 [ 501.608119][ T4457] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 501.614058][ T4457] kthread+0x29d/0x330 [ 501.618170][ T4457] ? worker_clr_flags+0x1a0/0x1a0 [ 501.623218][ T4457] ? kthread_blkcg+0xd0/0xd0 [ 501.627839][ T4457] ret_from_fork+0x1f/0x30 [ 501.632321][ T4457] [ 501.635354][ T4457] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 501.642630][ T4457] CPU: 1 PID: 4457 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 501.650308][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.660388][ T4457] Workqueue: cfg80211 cfg80211_event_work [ 501.666117][ T4457] Call Trace: [ 501.669395][ T4457] [ 501.672338][ T4457] dump_stack_lvl+0x188/0x24e [ 501.677039][ T4457] ? memcpy+0x3c/0x60 [ 501.681067][ T4457] ? show_regs_print_info+0x12/0x12 [ 501.686271][ T4457] ? load_image+0x410/0x410 [ 501.690805][ T4457] panic+0x2d3/0x710 [ 501.694716][ T4457] ? bpf_jit_dump+0xd0/0xd0 [ 501.699272][ T4457] ? ret_from_fork+0x1f/0x30 [ 501.703932][ T4457] __warn+0x2f8/0x4f0 [ 501.707956][ T4457] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 501.713565][ T4457] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 501.719142][ T4457] report_bug+0x2ba/0x4f0 [ 501.723507][ T4457] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 501.729132][ T4457] handle_bug+0x3a/0x70 [ 501.733295][ T4457] exc_invalid_op+0x16/0x40 [ 501.737795][ T4457] asm_exc_invalid_op+0x16/0x20 [ 501.742722][ T4457] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 501.748897][ T4457] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f [ 501.768503][ T4457] RSP: 0018:ffffc90004cafac0 EFLAGS: 00010293 [ 501.774637][ T4457] RAX: ffffffff89924969 RBX: 1ffff92000995f5c RCX: ffff88802e870000 [ 501.782614][ T4457] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 501.790590][ T4457] RBP: ffffc90004cafb70 R08: ffffffff90af22af R09: 1ffffffff215e455 [ 501.798568][ T4457] R10: dffffc0000000000 R11: fffffbfff215e456 R12: ffff888074da35b8 [ 501.806546][ T4457] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888054af0c90 [ 501.814531][ T4457] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 501.820147][ T4457] ? trace_rdev_return_void+0x240/0x240 [ 501.825750][ T4457] cfg80211_process_wdev_events+0x359/0x4d0 [ 501.831661][ T4457] ? process_one_work+0x7b4/0x1160 [ 501.836781][ T4457] cfg80211_process_rdev_events+0x9d/0x110 [ 501.842607][ T4457] cfg80211_event_work+0x2b/0x40 [ 501.847548][ T4457] process_one_work+0x8ab/0x1160 [ 501.852520][ T4457] ? worker_detach_from_pool+0x240/0x240 [ 501.858166][ T4457] ? _raw_spin_lock_irq+0xb7/0xf0 [ 501.863207][ T4457] ? _raw_spin_lock_irqsave+0x100/0x100 [ 501.868775][ T4457] ? wq_worker_running+0x97/0x190 [ 501.873824][ T4457] worker_thread+0xaf5/0x12a0 [ 501.878520][ T4457] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 501.884435][ T4457] kthread+0x29d/0x330 [ 501.888678][ T4457] ? worker_clr_flags+0x1a0/0x1a0 [ 501.893711][ T4457] ? kthread_blkcg+0xd0/0xd0 [ 501.898310][ T4457] ret_from_fork+0x1f/0x30 [ 501.902746][ T4457] [ 501.906401][ T4457] Kernel Offset: disabled [ 501.910840][ T4457] Rebooting in 86400 seconds..