last executing test programs: 2m39.82034012s ago: executing program 3 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) rename(&(0x7f0000000080)='.\x00', &(0x7f0000000280)='./file0\x00') sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2a, 0x0, {0x1b}}, 0x14}}, 0x0) syz_usb_connect(0x5, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) 2m37.599787033s ago: executing program 3 (id=690): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e0000002000000000000000000000000400000003300"], 0x13c}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fe01003f00000000000000008510000006000000851000000400000066080000000000009800000000000000950000000000000095000000000000009500"/80], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m37.511721013s ago: executing program 3 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\a', @ANYRES16=r4, @ANYBLOB="8b332abd700000000000150000000c009900c70000003a00000024001d80200000801c000d801800030014000300fbff08000600090003"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = fsopen(0x0, 0x1) r7 = fcntl$dupfd(r6, 0x406, r6) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_getattr(r0, &(0x7f0000000340)={0x38}, 0x38, 0x0) fanotify_init(0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r8 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f0000000040)={0x900, 0x32315842, 0x500, 0x438, 0x0, @discrete={0x6, 0x1044b873}}) timerfd_gettime(0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x4000004) 2m35.993548697s ago: executing program 3 (id=695): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x49ca, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000440)=0x4) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x8c, 0x42c780) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000000)=0x2d265528) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$link(0x8, 0x0, 0xfffffffffffffffb) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000091400078008001140000000000500150009000000050005000a000000050001000700000005000420000000000900020073797a3200000000"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000005000100070000002d1d1a5cc7a9e36886a8af781992c67d7d43740ddd8e41301cfa7513f1139d9cbce47dd6820da0b128d4be8aa95139eb0ef4f761d04d30aeebbbe932cf8fd3f0979c2331e42dc7202d365d5997169724340271cff0eb5c77b960502885486d578fc27ec6354e96de5db069a97800a5e255b3f2c2b8d2a81107dde0f7ae3f49026d1f2a862b78dce5529a151b9d0b355926ac55abc37c4934c4fc008b85cea7cd6c7d7e33297283f889a170e806773ea61042f200cfdc37df69bfce"], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x48, 0x3a, '\\*', 0x3a, '#^', 0x3a, './file0', 0x3a, [0x50]}, 0x2c) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000080)={0x28, 0x3, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.931613425s ago: executing program 3 (id=702): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa6181, 0x0) (async, rerun: 64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18) (async, rerun: 64) ioctl$FS_IOC_SETFLAGS(r3, 0x125f, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x25fa) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r10, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 2m31.964307799s ago: executing program 3 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x8000) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r0, 0x4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x2, 0x0, 0xffffffff, 0x400000, 'syz0\x00', 0x5}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x7, 0x40, &(0x7f0000000000)={0x0, 0x5, 0x8, 0x82}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r5 = getpid() ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173680400712c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000340), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 2m16.69484649s ago: executing program 32 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x8000) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r0, 0x4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x2, 0x0, 0xffffffff, 0x400000, 'syz0\x00', 0x5}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x7, 0x40, &(0x7f0000000000)={0x0, 0x5, 0x8, 0x82}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r5 = getpid() ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173680400712c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000340), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1m24.203622802s ago: executing program 2 (id=925): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x22, 0x2, 0x24) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461b007d444012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfdfe4f3a4745a8f762b9640000000900", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x2, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000300)="11b4d6a46012a2e7b9582401532e5e67f2fe87aa051622a88b2f903561e8328822ed741f4cadcaeb6fa33b3aa40d7d89a15cea648423a14f51ea0a9531c191cbd0f9ffffffff", 0x46, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1m23.063598492s ago: executing program 2 (id=931): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r1, 0x407, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000380), 0x0, 0x4180) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400010000000009042000010300220009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xf, "bf1f"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x3a, 0x4e, {0x4e, 0x23, "40bc27342185b2ba2f452d1571667fa0d0bdfbab2fc2d1b2f09e8e1531bfb1b46c58166ba89e29f9c2d29ce2a6e15d84f233161d34bd28097c7f4f191ad95badd9440bcf7c564004f184d7f6"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000000140)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "81a25d02c0a13c8d9a2f76cad606c885"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0xf9, 0x7, "e946bfc4", "5a2771ac"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7e, 0x8, 0x1, 0x40, 0x0, 0x9, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x0, 0x6, 0xea, "2de7664fe96f3232548ae27ab997705a9b7a40f65bc008214f612905a0dc9126f1c96fd71f4af325c40019893ad3159a35ef9b2da51aefa3ec41a9750abcd479cdd1af405499f4a4cc2375ee1c16844721c553d1aa060d9b939952c77af594d218040595692a30b4638a877af8015b3c90681e7287c552a09742e7f1f24aa54b39a86344fdc2ae5153e33ab3f486ae7c29770c9e070d87b7f46c4937bf7a1a941e41657382a8d07a25cf0181cf134183bae9b4a46987751d82ddd26d28567f02865d7fb2eff3716592987e5ff8fda245e8475d0c91727b3b54a65018bf3eb8e0069cec3fdcd3be093553"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x20, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8c}, &(0x7f0000000580)={0x40, 0xb, 0x2, "38b3"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "b556"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6c}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) 1m20.668020053s ago: executing program 2 (id=941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000040)=0xef) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r2, 0x1006367, 0xfffffffc, 0x4, 0x0, 0x0) 1m19.683580535s ago: executing program 2 (id=945): fsmount(0xffffffffffffffff, 0x0, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000180), 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) 1m18.641289214s ago: executing program 2 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000002000000000000000100000d800000000000000003000000000000800000000a05000000000000000000000a02000000000000000000000b00000000000000000000000d0000000000006f72d7c3dd5d3d87afe0580250b6696966ea13668e9207d0c0ee203cc044be3c976b"], 0x0, 0x5e}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000f04e3ec052b6de000000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000160000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) r5 = socket$unix(0x1, 0x2, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x7, 0x4) listen(r0, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xffffffffffffffff) add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r9) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000640)={0x30000000000, 0x0, 0x8, 0x0, 0x0, [{{r3}, 0x7fffffffffffffff}, {{r10}, 0x6}, {{r2}, 0xfff}, {{r5}, 0xb0}, {{r1}, 0x2}, {{r0}, 0x7}, {{r6}, 0x10000}, {{r6}, 0x8}]}) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 1m18.446509075s ago: executing program 2 (id=951): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000a80)={0xc0, 0x0, 0x14000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) r6 = socket(0x28, 0x803, 0x0) fstat(r5, &(0x7f00000004c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x5, 0x5, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0xac, [@remote]}, @ssrr={0x89, 0x17, 0xe9, [@dev={0xac, 0x14, 0x14, 0x3e}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @noop, @rr={0x7, 0x13, 0xd, [@loopback, @private=0xa010100, @broadcast, @empty]}]}}}}}) getsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000640)={@dev, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x29, 0x80000000, 0x58, @empty, @private1, 0x7, 0x10, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x80, 0x40, 0x1, 0x0, {{0x4a, 0x4, 0x1, 0x14, 0x128, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xff, 0x1, 0x5, [{@empty}, {@private=0xa010101, 0xb4}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}, @lsrr={0x83, 0x7, 0x82, [@broadcast]}, @ssrr={0x89, 0x17, 0xb7, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, @empty, @broadcast]}, @lsrr={0x83, 0x23, 0xea, [@empty, @loopback, @private=0xa010102, @local, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0xb}, @loopback]}, @timestamp_addr={0x44, 0x24, 0xf6, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x2}, {@local}, {@broadcast, 0xfff}, {@rand_addr=0x64010100, 0x401}]}, @timestamp={0x44, 0x2c, 0x62, 0x0, 0x4, [0x3, 0x7f, 0x7, 0x80000000, 0x9, 0x9, 0xfffffc00, 0x0, 0x0, 0x8]}, @end, @timestamp={0x44, 0x28, 0xec, 0x0, 0x4, [0x6, 0x0, 0x7, 0x0, 0x81, 0x10, 0x1ff, 0x3ff, 0x2]}, @timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0x7, [{@empty, 0x2}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x40}, {@rand_addr=0x64010100, 0x346cbb5a}, {@private=0xa010102, 0x81}, {@broadcast, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)={0x94, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x94}}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) mkdir(0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) 1m2.596535713s ago: executing program 33 (id=951): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000a80)={0xc0, 0x0, 0x14000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) r6 = socket(0x28, 0x803, 0x0) fstat(r5, &(0x7f00000004c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x5, 0x5, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0xac, [@remote]}, @ssrr={0x89, 0x17, 0xe9, [@dev={0xac, 0x14, 0x14, 0x3e}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @noop, @rr={0x7, 0x13, 0xd, [@loopback, @private=0xa010100, @broadcast, @empty]}]}}}}}) getsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000640)={@dev, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x29, 0x80000000, 0x58, @empty, @private1, 0x7, 0x10, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x80, 0x40, 0x1, 0x0, {{0x4a, 0x4, 0x1, 0x14, 0x128, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xff, 0x1, 0x5, [{@empty}, {@private=0xa010101, 0xb4}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}, @lsrr={0x83, 0x7, 0x82, [@broadcast]}, @ssrr={0x89, 0x17, 0xb7, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, @empty, @broadcast]}, @lsrr={0x83, 0x23, 0xea, [@empty, @loopback, @private=0xa010102, @local, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0xb}, @loopback]}, @timestamp_addr={0x44, 0x24, 0xf6, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x2}, {@local}, {@broadcast, 0xfff}, {@rand_addr=0x64010100, 0x401}]}, @timestamp={0x44, 0x2c, 0x62, 0x0, 0x4, [0x3, 0x7f, 0x7, 0x80000000, 0x9, 0x9, 0xfffffc00, 0x0, 0x0, 0x8]}, @end, @timestamp={0x44, 0x28, 0xec, 0x0, 0x4, [0x6, 0x0, 0x7, 0x0, 0x81, 0x10, 0x1ff, 0x3ff, 0x2]}, @timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0x7, [{@empty, 0x2}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x40}, {@rand_addr=0x64010100, 0x346cbb5a}, {@private=0xa010102, 0x81}, {@broadcast, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)={0x94, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x94}}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) mkdir(0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) 1m0.079378851s ago: executing program 4 (id=1001): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async, rerun: 32) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (rerun: 32) setuid(0xee00) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x77, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) (async, rerun: 32) r3 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x40084c0) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x880, 0x6c, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0xe, 0x2, 0x0, 0x0, "94271c90f4d379de958948271b848cb5f751bf808b6f86a9b4d443a94f8959fb17c566c566471965ce1bb4b0bb11f5895f5061b0f6eff93e4c64fc5f5498aacb"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x500}]}}}]}, 0x3c}}, 0x24008040) writev(r8, 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x20010, r11, 0x4000) 59.953405357s ago: executing program 4 (id=1002): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000020605000000000000000000070000030c000300686173683a6970000900020073797a32000000000500040000000000050005000800000005000100060000000c000780080006"], 0x50}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x2, 0x4, 0x7f, 0x0, 0x4, "cb945e6284fe9ac8a358d927d611865f113b94"}) write$UHID_INPUT(r0, &(0x7f0000000f00)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000020605000000000000000000070000030c000300686173683a6970000900020073797a32000000000500040000000000050005000800000005000100060000000c000780080006"], 0x50}}, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x2, 0x4, 0x7f, 0x0, 0x4, "cb945e6284fe9ac8a358d927d611865f113b94"}) (async) write$UHID_INPUT(r0, &(0x7f0000000f00)={0x8, {"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", 0x1000}}, 0x1006) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) 57.937383385s ago: executing program 4 (id=1007): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x80605414, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2a, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x31435750}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40043, @mcast1, 0xf}, {0x2, 0xfff8, 0xc00, @empty, 0x10000}, r1, 0x9dffffff}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 56.916808039s ago: executing program 4 (id=1009): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x3, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x8001}, &(0x7f00000002c0)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 56.651982075s ago: executing program 4 (id=1011): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489", 0xa}], 0x1) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) 56.119514477s ago: executing program 4 (id=1013): r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x10010, 0xffffffffffffffff, 0x2000) r4 = socket$unix(0x1, 0x5, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x2e) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r7, 0xfffa, 0xfff}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000000040)={'pim6reg1\x00', 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 40.522856072s ago: executing program 34 (id=1013): r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x10010, 0xffffffffffffffff, 0x2000) r4 = socket$unix(0x1, 0x5, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x2e) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r7, 0xfffa, 0xfff}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000000040)={'pim6reg1\x00', 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 10.607790567s ago: executing program 5 (id=1142): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) 9.635916699s ago: executing program 5 (id=1144): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) read$rfkill(r0, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r2, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x8}], 0x1, 0x140, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 8.214590113s ago: executing program 0 (id=1148): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) readv(r0, &(0x7f0000000000)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = epoll_create(0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580), 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000002c0)={0x5b, 0x4, 0x7, 0x1, "6d472ceb8cbcdba914cb67836f9ed18e8f2415fc886575c7106c6e50b1c5e9b058544426da63ce978e60de97637e92bbf960a0a729ef37383433f94fe20997e68750cc"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x60000001}) 8.202833273s ago: executing program 1 (id=1149): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_BMAP(r3, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0xd, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x20000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x5, 0x12) sendfile(r0, r5, 0x0, 0xffffffff000) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x5, 0x9}) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x40001023, 0x0) 7.923648312s ago: executing program 0 (id=1150): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x8}, 0x18) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) read$FUSE(r8, &(0x7f0000002900)={0x2020}, 0x2020) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00'/20, @ANYRES32=r7, @ANYBLOB="8000f2000a000200aaaaaaaaaa0c00000600050001000000"], 0x30}}, 0x0) (async, rerun: 64) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3c010000190001000000000000000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000840005"], 0x13c}}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 7.922233911s ago: executing program 5 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000100000000000005000000850000000f", @ANYRES32=r0, @ANYBLOB="00000000ec0836101f2400000000000000000000000080463142f746fea55e514e739f71d1aaf1d0214d53b348552cfa48a500c10d36d30da5505afbbfc32a32863e42dab07200000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x2c}, {@in=@loopback, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x7, 0x8, 0x2, 0x3, 0x40, 0x2, 0x77, 0x7fffffffffffffff}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x4, 0x2}, 0x70bd25, 0x3505, 0xa, 0x4, 0xac}, 0x2, 0x9}}, 0xf8}}, 0x10) 7.658604926s ago: executing program 1 (id=1153): sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) preadv(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)=""/34, 0x22}], 0x2, 0x583, 0x2) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x74}}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.575828846s ago: executing program 0 (id=1154): r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0xde1, &(0x7f0000002500)=0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, 0x0, 0x50, 0x4014}, 0x2c0408d0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000000)='\v', 0x1, 0x7fffffffffffffff}]) 7.431581638s ago: executing program 1 (id=1155): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x40002, 0x0) fcntl$setownex(r1, 0x11, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xb0, 0xa, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xaca}}, {{{0x9, 0x5, 0x81, 0x3, 0x1bf, 0x4, 0x86, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) 5.887112598s ago: executing program 7 (id=1159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x3, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r3, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x7, 0xa0000) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000013c0)={{0x3, 0x6, 0x4, 0x1000, 'syz0\x00', 0x3}, 0x1, 0x20000000, 0x9, r5, 0x4, 0xffff, 'syz0\x00', &(0x7f0000000200)=['][.\x00', 'pagemap\x00', '-\x00', '/dev/ttyS3\x00'], 0x19}) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x5, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 4.795685882s ago: executing program 7 (id=1160): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) (async) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcd, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) syz_open_dev$dri(0x0, 0x8, 0x200000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x803, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000140)=')', 0x1}], 0x2}}], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet(r2, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0107030109022400020000000009046f0000aad823000904"], 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000fcffffff0000000001010000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x803, 0x0) 4.510683587s ago: executing program 7 (id=1161): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000000}) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0x100, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) 4.34991976s ago: executing program 0 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000007d000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f000007d000/0x1000)=nil, 0x1000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e000004000280080005004114952255cce3302991fda1b9f65a75b758d9ea116d49fe011946b58fbb32bd51092a1416b64cc173d77906f46fd59ee3d75fbf9dc46bff1706a615a0322e704ca5469783ca9de4b3ad779878574e250df75f68bcef7c5f7c67a317bbcec4c5c42e13d1ce1aec1e2c4a24b82be75d1a7987ef14f64b1f623d987d10339c", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xb4c}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xb4c}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000180)={&(0x7f00004ca000/0x4000)=nil, 0x4, 0x5, 0x1}) 4.187857747s ago: executing program 1 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x33, 0x65, 0x30, 0x32, 0x36, 0x62, 0x32], 0x2d, [0x39, 0x36, 0x61, 0x66], 0x2d, [0x66, 0x39, 0x65, 0x64], 0x2d, [0x63, 0x37, 0x30, 0x31], 0x2d, [0x65, 0x34, 0x0, 0x34, 0x62, 0x61, 0x38, 0x61]}}}, {@hash}, {@fsname={'fsname', 0x3d, '^[@$,^)'}}, {@uid_lt={'uid<', r2}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') getdents64(r5, &(0x7f0000000100)=""/45, 0x2d) openat2(r5, &(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x8600, 0x188, 0x8}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) signalfd(r3, &(0x7f0000000100), 0x8) sendmmsg(r3, 0x0, 0x0, 0x0) 4.067709261s ago: executing program 0 (id=1164): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x4, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616ce773746174696328006ef5cf0bfa92de24f2a210089076d00bd151f8c1699132bf810bee3f65cb9b0101c8ccc06529f20b467fd7419a698853ab289b52"]) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0xb, 0x1, 0x0, "f85a03f073e22f000000780000000000000000000000000000000000ffff00", 0x36314d59}) syz_genetlink_get_family_id$ieee802154(0x0, r1) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3dffff}], 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004e101}, 0x0) close(r5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x150, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x110, 0x150, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x10}, {0x8000000000000001}]}}, @common=@frag={{0x30}, {[0x4, 0x7fffffff], 0x4, 0x10, 0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x80000000, 0x10001, 0xffff8000, 0x7f, 0x9, 0xeb8, 0x10000]}}}, {{@ipv6={@private1, @remote, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'geneve1\x00', 'netpci0\x00', {}, {0xff}, 0x32, 0x4, 0x4, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x7, 0x1, [0x9, 0x4, 0x13, 0x0, 0x6, 0x6, 0x8, 0x1fd, 0x2, 0x401, 0x800, 0x6, 0x6, 0x5fd8, 0x8000], 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86040, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.887599098s ago: executing program 5 (id=1165): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x80080) futex(0x0, 0x4, 0x3, 0x0, &(0x7f0000048000), 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r5 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x4000001) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29") ptrace$getregset(0x4205, 0x0, 0x200, 0x0) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) io_uring_setup(0x5e16, &(0x7f0000000240)={0x0, 0x7827, 0x8, 0x2, 0x14c, 0x0, r1}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x10}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xf0, @private2, 0xe}, @in6={0xa, 0x4e22, 0x5, @private0, 0x407c78}], 0x38) 3.834545092s ago: executing program 6 (id=1166): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000940)={0x40, 0x6, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.763869413s ago: executing program 1 (id=1167): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x7, &(0x7f00000001c0)={0x9883, 0xf93}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getrlimit(0x8, &(0x7f0000000040)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000100001800dd8d0000000000000000021000000000ff0900080000080010006f9fffff06001c004e23000008000f00010000000800070000000000ab000880d0c14ecaeec15fabb297101ddf7a432effb98dfb2b7dc8c54730578ba5a59f98736c16dac62449089a3134fe72e77ab32531925a1196c0c34fb525c942f0d4bd19b076686729b3a09cd25706e5ed7dd3de4cf928dd2fcb3766af66c0dcfaae1e0594d7c821144772a505d577d69d93659877c7c355423572230b3f4220056ff08dc0fa9d644fa7c5015d3d9bfd7bf88b25193b79f3d0b511f93a4dfdebfb80da873bca123271850006001d004e240000080005000a"], 0x100}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) accept4$rose(r0, 0x0, &(0x7f0000000100), 0x80000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) write$cgroup_int(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff000) 3.730159762s ago: executing program 7 (id=1168): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 3.190117156s ago: executing program 5 (id=1169): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x480}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x54}}, 0x0) 2.149706964s ago: executing program 1 (id=1170): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x40002, 0x0) fcntl$setownex(r1, 0x11, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xb0, 0xa, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xaca}}, {{{0x9, 0x5, 0x81, 0x3, 0x1bf, 0x4, 0x86, 0x2}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x25, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) 2.143444302s ago: executing program 7 (id=1171): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') socket$inet6(0xa, 0x2, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0xc88c4) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x4) (async) socket(0x400000000010, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @empty}], 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040084) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x40000001}) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e05, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x6, 0x7, 0x5}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e05, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x6, 0x7, 0x5}, 0x9c) 1.972921662s ago: executing program 5 (id=1172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}}, 0x4014) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000280)="c7a7df6177804d8b8b840aee2599c0ae986389bfc504053f8b14486114199ccdaf072d1513a942c593407c6cf08b62c21886cce0d736224b393108e576ce40649c9e6ee96601f7c195cd38b3d77b94aefe1617f272e62e740a1d9bf1b5ea27576052ff74164a6b03ea8ceb963bee2848a3ba0879d0d7ee404726994bf4d71a5169523b5372451e60372b55932cb7778836ff48e58a6f31547efa08adcb0628b3b09f015e555c03713b02782f2cc8a31c154b386c5e0f42d99d88d36e1b3ef7af77b9f0bf10559590bb1204b1ad98d7a69f07843626bebad91cad594d28048f8665304770ac84ac76ce3a2189c110", 0xee}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="18070000000000000000180000000000b7bcbc1134273eec0f3011e77a960b851000000200000026000000ffffff859500007b0000000085030000130000009500000000000000cfc07f2db4fdde3e5c3346470afe388cbf2eb86825f125f4796bda0c62a8e1b01e39870a891a4f3421cda76294f69937be0b72dd79adaf844f7c8da18733eeea487c56775dc1ccd68ac31ba63b10d4190fb9b7599244a03c6e4b704c1c5cec78facc437764583c233cc43f9b5d2a6160a559c1ace95e4de6851d66ba7bafdf074560400b39c3d09f4853cda7f6078c95b873559c156fc116bad9e111bf286b86aa56e11b7c79ef67dc0872785d8b540ef0a6d3f76af83a833832c81f415edad7353d6371af0b9bad"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) 1.783491821s ago: executing program 7 (id=1173): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000980)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x8, 0x6, 0x7, 0x10, 0xfc}, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="050f6100015c10014532b3cc72b92e1f1b6ddc1e3f691580562c223e139290d8bca21295fd8c5853bac93816559eb288c8b43e2c8f438a660ea4c0a8e03bd495b78d5f902ac31899dde515bd0665eeffe03c930d21c52df8ba773a1dd667fe068d13c9005c690978f0bb1ff600"], 0x1, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_connect$cdc_ecm(0x6, 0x5d, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0xfc, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x55, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0x7, 0x24, 0x6, 0x0, 0x0, "bcc4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0x0, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x2, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x4, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xfd, 0x6f}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x0, 0x9, 0x3, 0xff, 0x1}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1801}}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) ioctl$TCSETS(r6, 0x40384708, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000004c0)={'batadv_slave_1\x00', @random="6d345e6210cc"}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x800454cf, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x8000) r9 = syz_open_dev$evdev(&(0x7f0000000400), 0x4, 0x2000) ioctl$EVIOCGVERSION(r9, 0x80044501, &(0x7f0000000440)=""/93) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, 0x0) 1.083241168s ago: executing program 6 (id=1174): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x2, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 885.441586ms ago: executing program 6 (id=1175): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x52bf36cf, 0x37df, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) lseek(r0, 0x80000001, 0x4) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xf) writev(r2, &(0x7f0000001b80)=[{&(0x7f0000000a00)="835e02f5dd616e0c0f9f29058e17ff7bb36219698097482fbf66a332e0321c4c4f3035c4d79cb3c90e93f59ca59a055de4689a7c2c4751", 0x37}, {&(0x7f0000001b40)="37cc12650c541baa5211c69b297c203ac0d5ce4b07fe119b68504ba7aeaf7772", 0x20}], 0x2) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) fcntl$setflags(r4, 0x2, 0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000001c80)) read$FUSE(r3, &(0x7f0000001cc0)={0x2020}, 0x2020) rmdir(&(0x7f0000003d40)='./file0\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000003f80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003f40)={&(0x7f0000003e00)={0xd0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0xc900) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x8) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000004000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000004140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe}}, './file0\x00'}) 651.80378ms ago: executing program 6 (id=1176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x8, {{0xa, 0x4e22, 0x8, @loopback, 0x3}}, {{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20}}}, 0x108) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 453.391571ms ago: executing program 6 (id=1177): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}}, 0x50) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000540)={0x1, 0x0, 0x100, 0x6, {0x7, 0xc18b, 0x14fddfcb, 0x5}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0300000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010070696d7265673000000000000001040000feffffff797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 62.657278ms ago: executing program 6 (id=1178): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000180)={0x2, 0xfffffffffffffa5d, 0xca, &(0x7f0000000080)=""/202}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00001200"/20, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000400000000000000000000002e522bf3c804603be88aa67ec32b0f4f0f050200ac779384a129a91046d1873cb993c619ae15fb4c98ff283ce0000df968b140b9", @ANYRES32=0x0, @ANYBLOB="feffffffffffffff0000000000e5000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) memfd_secret(0x0) (async) r9 = memfd_secret(0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r9, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r11, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r7, 0x0, 0xf3c, 0x8) tee(0xffffffffffffffff, r7, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000180000007b2a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8) (async) r13 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8) close(r13) 0s ago: executing program 0 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) personality(0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): driver usbhid failed with error -71 [ 260.795305][ T5922] usb 2-1: USB disconnect, device number 17 [ 260.904400][ T8094] hfsplus: unable to find HFS+ superblock [ 260.922063][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 260.938822][ T8094] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 261.306572][ T24] video4linux radio48: keene_cmd_main failed (-110) [ 261.342662][ T24] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 261.382514][ T24] usb 5-1: USB disconnect, device number 21 [ 262.176380][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 262.748592][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 262.758479][ T8111] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 263.072020][ T8119] 9pnet_fd: Insufficient options for proto=fd [ 263.286255][ T8119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 263.293058][ T8119] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 263.300214][ T8119] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.306829][ T8119] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 263.313350][ T8119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 263.319914][ T8119] comedi comedi3: 8255: I/O port conflict (0x5c95239d,4) [ 263.327158][ T8119] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 263.333671][ T8119] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 263.340425][ T8119] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 263.346988][ T8119] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 264.698167][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 264.698181][ T30] audit: type=1326 audit(1755919682.739:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 264.744838][ T8140] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.557'. [ 264.825208][ T30] audit: type=1326 audit(1755919682.739:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 265.815539][ T30] audit: type=1326 audit(1755919682.739:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 265.815604][ T30] audit: type=1326 audit(1755919682.739:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 265.815646][ T30] audit: type=1326 audit(1755919682.739:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 265.894362][ T30] audit: type=1326 audit(1755919682.769:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 266.022086][ T30] audit: type=1326 audit(1755919682.769:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 267.569904][ T30] audit: type=1326 audit(1755919682.769:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 267.638192][ T30] audit: type=1326 audit(1755919682.769:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 267.672769][ T30] audit: type=1326 audit(1755919682.769:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8139 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 268.594094][ T8170] netlink: 148 bytes leftover after parsing attributes in process `syz.3.563'. [ 268.625830][ T8170] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 268.844772][ T5989] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 269.034767][ T5989] usb 2-1: Using ep0 maxpacket: 16 [ 269.052279][ T5989] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.071522][ T5989] usb 2-1: config 0 has no interface number 0 [ 269.120039][ T5989] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 269.368489][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.394469][ T5989] usb 2-1: Product: syz [ 269.398696][ T5989] usb 2-1: Manufacturer: syz [ 269.403299][ T5989] usb 2-1: SerialNumber: syz [ 270.016262][ T8206] hfsplus: unable to find HFS+ superblock [ 270.316688][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 270.387404][ T5989] usb 2-1: config 0 descriptor?? [ 270.409967][ T5989] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 270.461253][ T8206] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 271.079969][ T8208] wg1 speed is unknown, defaulting to 1000 [ 271.587034][ T5989] gspca_spca1528: reg_w err -71 [ 271.625298][ T5989] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 271.640034][ T5989] usb 2-1: USB disconnect, device number 18 [ 271.981522][ T8236] tmpfs: Bad value for 'mpol' [ 272.684843][ T5989] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 272.991134][ T5172] libceph: connect (1)[c::]:6789 error -101 [ 273.036065][ T5172] libceph: mon0 (1)[c::]:6789 connect error [ 273.329589][ T5908] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 273.354846][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 273.366639][ T24] libceph: connect (1)[c::]:6789 error -101 [ 273.372707][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 273.377497][ T5989] usb 2-1: config 9 has an invalid interface number: 245 but max is 3 [ 273.379297][ T5172] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 273.386886][ T5989] usb 2-1: config 9 has an invalid interface number: 45 but max is 3 [ 273.386909][ T5989] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 273.386929][ T5989] usb 2-1: config 9 has an invalid interface number: 126 but max is 3 [ 273.386949][ T5989] usb 2-1: config 9 has an invalid interface number: 5 but max is 3 [ 273.386970][ T5989] usb 2-1: config 9 has no interface number 0 [ 273.386987][ T5989] usb 2-1: config 9 has no interface number 1 [ 273.387004][ T5989] usb 2-1: config 9 has no interface number 2 [ 273.387021][ T5989] usb 2-1: config 9 has no interface number 3 [ 273.387094][ T5989] usb 2-1: config 9 interface 245 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 273.441885][ T8267] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 273.453900][ T5989] usb 2-1: config 9 interface 245 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 1024 [ 273.488307][ T8267] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 273.501011][ T5989] usb 2-1: config 9 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 273.512008][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 273.519736][ T5989] usb 2-1: config 9 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 273.531692][ T5989] usb 2-1: config 9 interface 245 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 273.543464][ T5989] usb 2-1: config 9 interface 245 altsetting 2 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 273.554537][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 273.559877][ T5989] usb 2-1: config 9 interface 245 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 273.570970][ T5989] usb 2-1: config 9 interface 245 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 273.577412][ T5172] usb 1-1: Using ep0 maxpacket: 8 [ 273.582276][ T5989] usb 2-1: config 9 interface 245 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 273.605500][ T5172] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 273.609319][ T5989] usb 2-1: too many endpoints for config 9 interface 45 altsetting 215: 243, using maximum allowed: 30 [ 273.628852][ T5908] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 273.639220][ T5172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 273.642287][ T5908] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 273.649576][ T5172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.671170][ T5908] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.738784][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.740520][ T5172] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.764574][ T5172] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 273.774188][ T5989] usb 2-1: config 9 interface 45 altsetting 215 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 273.786003][ T5172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.787087][ T5908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.809998][ T5989] usb 2-1: config 9 interface 45 altsetting 215 has a duplicate endpoint with address 0xC, skipping [ 273.821589][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 273.835631][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.843840][ T5989] usb 2-1: config 9 interface 45 altsetting 215 has a duplicate endpoint with address 0x3, skipping [ 273.856839][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.864908][ T9] usb 5-1: Product: syz [ 273.869183][ T9] usb 5-1: Manufacturer: syz [ 273.875347][ T5989] usb 2-1: config 9 interface 45 altsetting 215 has 4 endpoint descriptors, different from the interface descriptor's value: 243 [ 273.889821][ T9] usb 5-1: SerialNumber: syz [ 273.896423][ T5908] usbtmc 3-1:16.0: bulk endpoints not found [ 273.903267][ T5989] usb 2-1: config 9 interface 126 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 273.915124][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 273.919595][ T5989] usb 2-1: config 9 interface 126 altsetting 7 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 273.921641][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 273.934286][ T9] usb 5-1: config 0 descriptor?? [ 273.945049][ T5989] usb 2-1: config 9 interface 126 altsetting 7 has a duplicate endpoint with address 0x85, skipping [ 273.959352][ T5989] usb 2-1: config 9 interface 126 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 273.972066][ T9] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 273.980939][ T9] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 273.988300][ T9] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 273.997220][ T5989] usb 2-1: config 9 interface 126 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.018379][ T5989] usb 2-1: config 9 interface 5 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 274.029562][ T5172] usb 1-1: GET_CAPABILITIES returned 0 [ 274.037803][ T5172] usbtmc 1-1:16.0: can't read capabilities [ 274.047542][ T5989] usb 2-1: config 9 interface 5 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 274.062048][ T5989] usb 2-1: config 9 interface 5 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 274.073386][ T5989] usb 2-1: config 9 interface 245 has no altsetting 0 [ 274.080290][ T5989] usb 2-1: config 9 interface 45 has no altsetting 0 [ 274.087821][ T5989] usb 2-1: config 9 interface 126 has no altsetting 0 [ 274.094636][ T5989] usb 2-1: config 9 interface 5 has no altsetting 0 [ 274.107918][ T5989] usb 2-1: New USB device found, idVendor=093b, idProduct=a002, bcdDevice=ee.10 [ 274.117986][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.136087][ T5989] usb 2-1: Product: syz [ 274.142341][ T5989] usb 2-1: Manufacturer: syz [ 274.143219][ T5172] usb 3-1: USB disconnect, device number 28 [ 274.147138][ T5989] usb 2-1: SerialNumber: syz [ 274.162443][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.169836][ T8246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.180452][ T8246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.181698][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.215642][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.224357][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.247270][ T8262] ceph: No mds server is up or the cluster is laggy [ 274.258920][ T5922] usb 5-1: USB disconnect, device number 22 [ 274.290950][ T5922] garmin_gps 5-1:0.0: device disconnected [ 274.396697][ T5989] go7007-loader 2-1:9.245: loading firmware go7007/px-m402u.fw [ 274.422996][ T5989] usb 2-1: Direct firmware load for go7007/px-m402u.fw failed with error -2 [ 274.432483][ T5989] usb 2-1: Falling back to sysfs fallback for: go7007/px-m402u.fw [ 274.625471][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.592'. [ 274.634356][ T8276] netlink: 108 bytes leftover after parsing attributes in process `syz.3.592'. [ 274.665672][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.592'. [ 274.681227][ T8276] netlink: 108 bytes leftover after parsing attributes in process `syz.3.592'. [ 274.690646][ T8276] netlink: 84 bytes leftover after parsing attributes in process `syz.3.592'. [ 275.063131][ T8283] netlink: 'syz.4.594': attribute type 20 has an invalid length. [ 275.076760][ T8283] dvmrp17: entered allmulticast mode [ 275.528641][ T8293] hfsplus: unable to find HFS+ superblock [ 275.546676][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 275.560092][ T8293] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 276.006634][ T5172] usb 1-1: USB disconnect, device number 22 [ 276.303229][ T8302] mmap: syz.3.600 (8302) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 276.652117][ T8310] vivid-006: disconnect [ 277.819860][ T8309] vivid-006: reconnect [ 277.848183][ T8310] Invalid ELF header magic: != ELF [ 279.694942][ T5922] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 279.698228][ T5908] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 279.856158][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 279.871165][ T5922] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 279.887655][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.926490][ T5922] usb 5-1: config 0 descriptor?? [ 279.934877][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 279.942768][ T5908] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.956061][ T5908] usb 1-1: config 1 interface 0 has no altsetting 0 [ 279.968478][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40 [ 279.982533][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.004810][ T5908] usb 1-1: Product: à „ [ 280.009002][ T5908] usb 1-1: Manufacturer: á° [ 280.039409][ T5908] usb 1-1: SerialNumber: ⨢æ©ï€¸ä­„éžçŒ¥ï®œÜ®î¹Ÿá…¨ì€€ë‘袘•넟뀈ì‡àº…è»å¦±ë¬‡ê½¡é«’è¬ä°Žì†«ç ì»½è¡¤åš‡ï“‘뾂塾囿 [ 280.190944][ T5922] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 280.409104][ T5922] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 280.805994][ T5922] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 280.817228][ T5922] asix 5-1:0.0: probe with driver asix failed with error -71 [ 280.871990][ T5922] usb 5-1: USB disconnect, device number 23 [ 283.013255][ T5908] usbhid 1-1:1.0: can't add hid device: -71 [ 283.035083][ T5908] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 283.068400][ T5908] usb 1-1: USB disconnect, device number 23 [ 283.392666][ T8377] hfsplus: unable to find HFS+ superblock [ 283.415694][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 283.433490][ T8377] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 283.904834][ T5922] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 284.225010][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 284.258029][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 284.505061][ T5922] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 284.544534][ T5922] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 284.570442][ T5922] usb 4-1: Product: syz [ 284.585145][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 284.585154][ T30] audit: type=1326 audit(1755919702.629:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 284.623028][ T5922] usb 4-1: Manufacturer: syz [ 284.625507][ T30] audit: type=1326 audit(1755919702.649:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 284.649199][ T30] audit: type=1326 audit(1755919702.649:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 284.833214][ T30] audit: type=1326 audit(1755919702.649:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 285.440326][ T5922] usb 4-1: SerialNumber: syz [ 285.448491][ T30] audit: type=1326 audit(1755919702.649:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 285.451075][ T5922] usb 4-1: config 0 descriptor?? [ 285.478425][ T5922] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 285.497024][ T30] audit: type=1326 audit(1755919702.649:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 285.519818][ T30] audit: type=1326 audit(1755919702.649:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 285.542183][ T30] audit: type=1326 audit(1755919702.649:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 285.564477][ T30] audit: type=1326 audit(1755919702.659:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 285.586102][ T30] audit: type=1326 audit(1755919702.659:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8387 comm="syz.1.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 285.670579][ T8393] ipvlan2: entered allmulticast mode [ 285.690038][ T8393] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 285.878470][ T5922] gspca_zc3xx: reg_w_i err -71 [ 286.186337][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 286.474827][ T5922] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 286.481194][ T5922] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 286.916710][ T5922] usb 4-1: USB disconnect, device number 19 [ 287.326205][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 287.335181][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 287.469655][ T8432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.477567][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 287.486457][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 287.550155][ T8432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.437272][ T8446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.964274][ T8453] tipc: Started in network mode [ 290.012316][ T8453] tipc: Node identity a6cf2735c6ca, cluster identity 4711 [ 290.044528][ T8453] tipc: Enabled bearer , priority 0 [ 290.052733][ T8453] syzkaller0: entered promiscuous mode [ 290.074487][ T8453] syzkaller0: entered allmulticast mode [ 290.226836][ T8453] tipc: Resetting bearer [ 290.899825][ T8452] tipc: Resetting bearer [ 291.096323][ T5922] tipc: Node number set to 1610950453 [ 291.523937][ T8452] tipc: Disabling bearer [ 291.803845][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 291.803862][ T30] audit: type=1326 audit(1755919709.839:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8479 comm="syz.4.648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ef218ebe9 code=0x0 [ 292.660624][ T8491] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 292.682696][ T8492] wg1 speed is unknown, defaulting to 1000 [ 293.095363][ T5908] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 293.535261][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 293.689213][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 293.816457][ T5908] usb 5-1: config 1 interface 0 altsetting 210 bulk endpoint 0x1 has invalid maxpacket 1024 [ 293.978009][ T5908] usb 5-1: config 1 interface 0 altsetting 210 bulk endpoint 0x82 has invalid maxpacket 16 [ 293.989486][ T5908] usb 5-1: config 1 interface 0 has no altsetting 0 [ 294.001319][ T5908] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 294.012272][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.029293][ T5908] usb 5-1: Product: syz [ 294.033528][ T5908] usb 5-1: Manufacturer: syz [ 294.072093][ T5908] usb 5-1: SerialNumber: syz [ 294.223156][ T8503] ufs: You didn't specify the type of your ufs filesystem [ 294.223156][ T8503] [ 294.223156][ T8503] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 294.223156][ T8503] [ 294.223156][ T8503] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 294.254330][ T8503] ufs: ufstype=old is supported read-only [ 294.262472][ T8503] syz.0.653: attempt to access beyond end of device [ 294.262472][ T8503] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 295.005073][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 295.554405][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 295.569649][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.578759][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.587162][ T9] usb 4-1: Product: syz [ 295.591386][ T9] usb 4-1: Manufacturer: syz [ 295.602977][ T5908] usb 5-1: can't set config #1, error -71 [ 295.611217][ T5908] usb 5-1: USB disconnect, device number 24 [ 295.617550][ T9] usb 4-1: SerialNumber: syz [ 295.635372][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 295.669176][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 295.686653][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 295.926432][ T8508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.090338][ T8513] input: syz0 as /devices/virtual/input/input15 [ 296.336340][ T5922] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 297.106846][ T8527] ƒý€: renamed from bridge0 (while UP) [ 297.222009][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 298.700620][ T8543] overlayfs: workdir and upperdir must be separate subtrees [ 298.860099][ T8548] netlink: 'syz.3.665': attribute type 10 has an invalid length. [ 299.109437][ T8548] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.142542][ T8550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.263868][ T8557] kvm: pic: non byte read [ 299.283477][ T8557] kvm: pic: level sensitive irq not supported [ 299.283586][ T8557] kvm: pic: non byte read [ 299.445113][ T8557] kvm: pic: level sensitive irq not supported [ 299.446485][ T8557] kvm: pic: non byte read [ 299.498622][ T8561] 9pnet_fd: Insufficient options for proto=fd [ 299.962823][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'. [ 300.531275][ T8578] affs: No valid root block on device loop4 [ 301.935357][ T8589] program syz.4.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.735052][ T5922] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 302.907559][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.954970][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 302.964664][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.980457][ T5922] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 303.034758][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.062218][ T5922] usb 4-1: Product: syz [ 303.073213][ T5922] usb 4-1: Manufacturer: syz [ 303.083881][ T5922] usb 4-1: SerialNumber: syz [ 303.113633][ T5922] usb 4-1: config 0 descriptor?? [ 303.252981][ T8623] tipc: Failed to remove unknown binding: 66,1,1/0:1507561732/1507561734 [ 303.261889][ T5908] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 303.272966][ T8623] tipc: Failed to remove unknown binding: 66,1,1/0:1507561732/1507561734 [ 303.281739][ T8623] tipc: Failed to remove unknown binding: 66,1,1/0:1507561732/1507561734 [ 303.337197][ T5922] usb 4-1: USB disconnect, device number 21 [ 303.445163][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 303.653962][ T5908] usb 1-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 303.811285][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.389860][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.464835][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.494816][ T5908] usb 1-1: Product: syz [ 304.500959][ T5908] usb 1-1: Manufacturer: syz [ 304.529765][ T5908] usb 1-1: SerialNumber: syz [ 305.868594][ T5908] usb 1-1: 0:2 : does not exist [ 305.881287][ T5908] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 306.005273][ T5908] usb 1-1: USB disconnect, device number 24 [ 306.052734][ T8637] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.084553][ T8637] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 306.283711][ T8637] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 306.312811][ T8637] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 307.142291][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.367905][ T8637] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.374250][ T8637] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 308.073431][ T8637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.094748][ T8637] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 308.156843][ T8637] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.171302][ T8637] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 308.582515][ T8648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.592329][ T8648] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 308.923185][ T8673] hfsplus: unable to find HFS+ superblock [ 308.936437][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 308.946677][ T5950] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 308.955187][ T8669] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 309.436468][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 309.454135][ T5950] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 309.479727][ T5950] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 309.508492][ T5950] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 309.527002][ T5950] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 309.541750][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.622055][ T5950] usb 5-1: Product: syz [ 309.648205][ T5950] usb 5-1: Manufacturer: syz [ 309.659863][ T5950] usb 5-1: SerialNumber: syz [ 309.660797][ T8683] loop2: detected capacity change from 0 to 7 [ 309.674583][ T5966] loop2: [ 309.684253][ T5966] loop2: partition table partially beyond EOD, truncated [ 309.703572][ T8683] loop2: [ 309.714492][ T8683] loop2: partition table partially beyond EOD, truncated [ 310.634543][ T8692] snd_dummy snd_dummy.0: control 0:-1:4194304:syz0:5 is already present [ 311.787937][ T5950] adutux 5-1:168.0: interrupt endpoints not found [ 311.859447][ T5950] usb 5-1: USB disconnect, device number 25 [ 312.892660][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 313.175144][ T8704] vivid-003: disconnect [ 313.183679][ T8702] vivid-003: reconnect [ 314.169447][ T8717] netlink: 452 bytes leftover after parsing attributes in process `syz.4.711'. [ 314.357826][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 314.462433][ T8721] hfsplus: unable to find HFS+ superblock [ 314.471873][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 314.486699][ T8721] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 315.140046][ T24] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 315.166719][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.226470][ T24] usb 1-1: config 0 descriptor?? [ 315.248749][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 315.295047][ T8727] loop2: detected capacity change from 0 to 7 [ 315.309114][ T6779] loop2: [ 315.312128][ T6779] loop2: partition table partially beyond EOD, truncated [ 315.323703][ T8727] loop2: [ 315.327606][ T8727] loop2: partition table partially beyond EOD, truncated [ 315.666643][ T8731] futex_wake_op: syz.2.717 tries to shift op by 36; fix this program [ 315.717219][ T24] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 315.804809][ T5950] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 315.954836][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 315.961642][ T5950] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 315.970813][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.981870][ T5950] usb 5-1: config 0 descriptor?? [ 315.992020][ T5950] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 316.117629][ T24] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 316.339144][ T5908] usb 1-1: USB disconnect, device number 25 [ 316.403768][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.489265][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.062460][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.068962][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.234898][ T5915] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 317.407665][ T5950] gspca_vc032x: reg_w err -71 [ 317.412453][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.417853][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.428468][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.436711][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.442068][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.449141][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.459528][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.467461][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.472967][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.498534][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.506491][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.511900][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.518598][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.523965][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.529761][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.535302][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.540888][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.546340][ T5950] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.551895][ T5950] gspca_vc032x: Unknown sensor... [ 317.569445][ T5950] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 317.598998][ T5950] usb 5-1: USB disconnect, device number 26 [ 317.668452][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.678860][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.691886][ T5915] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 317.701096][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.711654][ T5915] usb 3-1: config 0 descriptor?? [ 317.724932][ T5915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 318.166744][ T5915] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 318.264834][ T5950] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 318.324808][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 318.332325][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.343451][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.353655][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.366561][ T5915] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.376543][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.386430][ T5915] usb 1-1: config 0 descriptor?? [ 318.420840][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 318.432064][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 318.441837][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 318.452039][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 318.461845][ T5950] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 318.470913][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.482233][ T5950] usb 5-1: config 0 descriptor?? [ 318.691005][ T5950] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 318.702630][ T5950] hdpvr 5-1:0.0: device init failed [ 318.710235][ T5950] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 318.729191][ T5950] usb 5-1: USB disconnect, device number 27 [ 318.899364][ T5915] microsoft 0003:045E:07DA.000C: unknown global tag 0xe [ 318.906533][ T5915] microsoft 0003:045E:07DA.000C: item 0 2 1 14 parsing failed [ 318.915350][ T5915] microsoft 0003:045E:07DA.000C: parse failed [ 318.921488][ T5915] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 319.839236][ T8771] loop2: detected capacity change from 0 to 7 [ 319.856932][ T5966] loop2: [ 319.862300][ T5966] loop2: partition table partially beyond EOD, truncated [ 319.875806][ T8771] loop2: [ 319.881273][ T8771] loop2: partition table partially beyond EOD, truncated [ 320.509132][ T8781] hfsplus: unable to find HFS+ superblock [ 320.517324][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 320.533798][ T8777] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 320.639697][ T5923] usb 3-1: USB disconnect, device number 29 [ 320.945895][ T5979] usb 1-1: USB disconnect, device number 26 [ 321.084764][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 321.224921][ T5923] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 321.249099][ T9] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 321.257352][ T9] usb 5-1: config 0 has no interface number 0 [ 321.263456][ T9] usb 5-1: config 0 interface 144 has no altsetting 0 [ 321.272599][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=fa.a9 [ 321.281706][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.290167][ T9] usb 5-1: Product: syz [ 321.294324][ T9] usb 5-1: Manufacturer: syz [ 321.298966][ T9] usb 5-1: SerialNumber: syz [ 321.305754][ T9] usb 5-1: config 0 descriptor?? [ 321.345322][ T5979] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 321.413562][ T5923] usb 3-1: device descriptor read/64, error -71 [ 321.507142][ T5979] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 321.516094][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.529413][ T5979] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 321.539539][ T5979] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 321.547613][ T5979] usb 1-1: Manufacturer: syz [ 321.557421][ T5979] usb 1-1: config 0 descriptor?? [ 321.643726][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.653197][ T5979] rc_core: IR keymap rc-hauppauge not found [ 321.658951][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.736'. [ 321.663893][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.675946][ T5979] Registered IR keymap rc-empty [ 321.683130][ T5979] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 321.703931][ T5979] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 321.719047][ T5923] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 321.874847][ T5923] usb 3-1: device descriptor read/64, error -71 [ 321.981532][ T8801] rc rc0: two consecutive events of type space [ 321.995322][ T5923] usb usb3-port1: attempt power cycle [ 322.023539][ T9] ir_toy 5-1:0.144: required endpoints not found [ 322.052113][ T9] usb 5-1: USB disconnect, device number 28 [ 322.189987][ T8794] 9pnet_fd: Insufficient options for proto=fd [ 322.198245][ T5979] usb 1-1: USB disconnect, device number 27 [ 322.344764][ T5923] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 322.366058][ T5923] usb 3-1: device descriptor read/8, error -71 [ 322.725823][ T8814] netlink: 104 bytes leftover after parsing attributes in process `syz.4.740'. [ 322.860013][ T5923] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 323.432271][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.445843][ T5923] usb 3-1: device descriptor read/8, error -71 [ 323.458746][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.555250][ T5923] usb usb3-port1: unable to enumerate USB device [ 323.789791][ T8821] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 323.800457][ T9] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 324.096419][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 324.173890][ T9] usb 1-1: config 0 has no interface number 0 [ 324.228135][ T3555] Bluetooth: hci5: Frame reassembly failed (-84) [ 324.233025][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.245646][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 324.257310][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 324.271150][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 324.282778][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 324.293964][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.323343][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 324.339030][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.399107][ T9] usb 1-1: config 0 descriptor?? [ 324.408161][ T8816] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 324.423377][ T8816] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 324.450441][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 324.633559][ T9] usb 1-1: USB disconnect, device number 28 [ 324.651445][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 324.898240][ T8832] hfsplus: unable to find HFS+ superblock [ 324.912866][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 324.926490][ T8832] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 325.626544][ T8843] netlink: 68 bytes leftover after parsing attributes in process `syz.0.749'. [ 325.656852][ T8843] netlink: 68 bytes leftover after parsing attributes in process `syz.0.749'. [ 325.787236][ T5158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.798183][ T5158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.807086][ T5158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.818823][ T5158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.826690][ T5158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.842663][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.853819][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.861010][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 325.887492][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.898184][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.906788][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.983532][ T8851] wg1 speed is unknown, defaulting to 1000 [ 326.987519][ T8851] chnl_net:caif_netlink_parms(): no params data found [ 327.273086][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.292415][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.303488][ T8851] bridge_slave_0: entered allmulticast mode [ 327.316369][ T8851] bridge_slave_0: entered promiscuous mode [ 327.326881][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.334164][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.342470][ T8851] bridge_slave_1: entered allmulticast mode [ 327.355827][ T8851] bridge_slave_1: entered promiscuous mode [ 327.462367][ T8883] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.474863][ T5979] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 327.499170][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.517414][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.592761][ T8851] team0: Port device team_slave_0 added [ 327.606045][ T8884] netlink: 'syz.4.757': attribute type 10 has an invalid length. [ 327.618847][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.625894][ T5979] usb 1-1: device descriptor read/64, error -71 [ 327.637377][ T8884] bond0: (slave team0): Enslaving as an active interface with an up link [ 327.680182][ T8851] team0: Port device team_slave_1 added [ 327.768985][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.785112][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.841453][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.868311][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.874922][ T5979] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 327.883320][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.936020][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.944765][ T51] Bluetooth: hci6: command tx timeout [ 328.015088][ T5979] usb 1-1: device descriptor read/64, error -71 [ 328.054579][ T8851] hsr_slave_0: entered promiscuous mode [ 328.068955][ T8851] hsr_slave_1: entered promiscuous mode [ 328.079530][ T8851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.090391][ T8851] Cannot create hsr debugfs directory [ 328.137539][ T5979] usb usb1-port1: attempt power cycle [ 328.341001][ T8851] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.363945][ T8851] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.395026][ T8851] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 328.417566][ T8851] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.435661][ T5950] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 328.484934][ T5979] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 328.521261][ T5979] usb 1-1: device descriptor read/8, error -71 [ 328.579876][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.596554][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 328.623991][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.801857][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.935091][ T5979] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 328.961791][ T5950] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 329.077210][ T5979] usb 1-1: device descriptor read/8, error -71 [ 329.102164][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.118362][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.129785][ T5950] usb 3-1: config 0 descriptor?? [ 329.154243][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.162524][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.188006][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.195210][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.235848][ T5979] usb usb1-port1: unable to enumerate USB device [ 329.594490][ T5950] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 329.681540][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.809010][ T8887] overlayfs: failed to resolve './bus': -2 [ 329.844364][ T8916] hfsplus: unable to find HFS+ superblock [ 329.861259][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 329.876246][ T8916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 329.928258][ T5950] ft260 0003:0403:6030.000D: chip code: 96fc ea29 [ 330.016223][ T51] Bluetooth: hci6: command tx timeout [ 330.128956][ T5950] ft260 0003:0403:6030.000D: failed to retrieve system status [ 330.164397][ T5950] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -5 [ 330.810827][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 330.833027][ T9] usb 3-1: USB disconnect, device number 34 [ 331.362265][ T8851] veth0_vlan: entered promiscuous mode [ 331.372732][ T8851] veth1_vlan: entered promiscuous mode [ 331.428583][ T8851] veth0_macvtap: entered promiscuous mode [ 331.443151][ T8851] veth1_macvtap: entered promiscuous mode [ 331.468351][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.487114][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.507672][ T8851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.524737][ T8851] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.533473][ T8851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.544319][ T8851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.632970][ T7319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.653426][ T7319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.695285][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.703600][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.882198][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 332.048720][ T5922] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 332.106510][ T51] Bluetooth: hci6: command tx timeout [ 332.214828][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 332.228994][ T5922] usb 1-1: config 211 has an invalid interface number: 98 but max is 0 [ 332.245360][ T5922] usb 1-1: config 211 has no interface number 0 [ 332.261840][ T5922] usb 1-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 332.273123][ T5922] usb 1-1: config 211 interface 98 has no altsetting 0 [ 332.292327][ T5922] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 332.316474][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.324865][ T5922] usb 1-1: Product: syz [ 332.333482][ T5922] usb 1-1: Manufacturer: syz [ 332.349781][ T5922] usb 1-1: SerialNumber: syz [ 332.379100][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.769'. [ 332.379925][ T8929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.749961][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 332.929572][ T8952] x_tables: duplicate underflow at hook 2 [ 332.980890][ T5922] mct_u232 1-1:211.98: MCT U232 converter detected [ 333.015049][ T5922] mct_u232 ttyUSB0: expected endpoint missing [ 333.034426][ T5922] usb 1-1: USB disconnect, device number 33 [ 333.391041][ T5922] mct_u232 1-1:211.98: device disconnected [ 333.699070][ T30] audit: type=1326 audit(1755919751.729:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8957 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 333.784858][ T30] audit: type=1326 audit(1755919751.759:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8957 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 333.876942][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 333.900792][ T9] usb 6-1: New USB device found, idVendor=05ad, idProduct=0247, bcdDevice=b0.23 [ 333.914949][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.959414][ T30] audit: type=1326 audit(1755919751.759:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8957 comm="syz.1.774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x0 [ 333.982056][ T9] usb 6-1: config 0 descriptor?? [ 334.032694][ T30] audit: type=1326 audit(1755919751.759:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8957 comm="syz.1.774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x0 [ 334.176761][ T51] Bluetooth: hci6: command tx timeout [ 334.420143][ T9] usb 6-1: string descriptor 0 read error: -71 [ 334.429163][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 334.830873][ T9] usb 6-1: USB disconnect, device number 2 [ 335.346915][ T8978] futex_wake_op: syz.2.779 tries to shift op by 32; fix this program [ 336.101259][ T8994] hfsplus: unable to find HFS+ superblock [ 336.109375][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 336.119698][ T8994] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 336.331204][ T8987] erspan0: entered promiscuous mode [ 336.352277][ T8987] erspan0: left promiscuous mode [ 336.367562][ T8996] netlink: 32 bytes leftover after parsing attributes in process `syz.5.782'. [ 336.452012][ T8996] netlink: 152 bytes leftover after parsing attributes in process `syz.5.782'. [ 336.468597][ T8996] netlink: 152 bytes leftover after parsing attributes in process `syz.5.782'. [ 336.768191][ T9009] overlayfs: missing 'lowerdir' [ 337.164871][ T5915] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 337.395857][ T5915] usb 1-1: device descriptor read/64, error -71 [ 337.633443][ T5989] go7007-loader 2-1:9.245: unable to load firmware from file "go7007/px-m402u.fw" [ 337.643039][ T5989] go7007-loader 2-1:9.245: probe failed [ 337.666547][ T5989] go7007-loader 2-1:9.45: loading firmware go7007/px-m402u.fw [ 338.439282][ T5989] usb 2-1: Direct firmware load for go7007/px-m402u.fw failed with error -2 [ 338.456974][ T5989] usb 2-1: Falling back to sysfs fallback for: go7007/px-m402u.fw [ 338.744054][ T5915] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 339.014775][ T5915] usb 1-1: device descriptor read/64, error -71 [ 339.112045][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 339.122243][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 339.760914][ T5915] usb usb1-port1: attempt power cycle [ 340.228063][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 340.374027][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.793'. [ 340.691953][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 341.324907][ T5923] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 342.176066][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 342.188933][ T5923] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 342.274110][ T5923] usb 3-1: config 0 has no interface number 0 [ 342.296748][ T5923] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 342.314785][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.327212][ T5923] usb 3-1: Product: syz [ 342.331407][ T5923] usb 3-1: Manufacturer: syz [ 342.341169][ T5923] usb 3-1: SerialNumber: syz [ 342.370993][ T5923] usb 3-1: config 0 descriptor?? [ 342.389484][ T5923] smsc95xx v2.0.0 [ 342.409204][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 342.899631][ T9065] sp0: Synchronizing with TNC [ 342.965067][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.138394][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.343476][ T5923] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 343.411172][ T5923] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 343.441790][ T5923] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 343.485800][ T5923] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 343.534409][ T5923] usb 3-1: USB disconnect, device number 35 [ 344.328551][ T9081] netlink: 44 bytes leftover after parsing attributes in process `syz.5.807'. [ 345.724924][ T9093] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 345.854072][ T3482] Bluetooth: hci5: Frame reassembly failed (-84) [ 346.437045][ T5979] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 346.610456][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.627333][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.639049][ T5979] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 346.649035][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.666152][ T5979] usb 1-1: config 0 descriptor?? [ 346.881118][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.898091][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.197194][ T9123] wg1 speed is unknown, defaulting to 1000 [ 347.859699][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 348.168574][ T9135] loop2: detected capacity change from 0 to 7 [ 348.200700][ T9135] loop2: [ 348.205797][ T9135] loop2: partition table partially beyond EOD, truncated [ 348.332949][ T5979] usbhid 1-1:0.0: can't add hid device: -71 [ 348.353497][ T5979] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 348.388753][ T5979] usb 1-1: USB disconnect, device number 37 [ 348.960646][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'. [ 349.021905][ T9147] netlink: 17 bytes leftover after parsing attributes in process `syz.2.827'. [ 349.040812][ T9144] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 349.050061][ T9144] netlink: 'syz.1.826': attribute type 4 has an invalid length. [ 349.070378][ T9144] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.826'. [ 349.087913][ T9144] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 349.101933][ T9144] netlink: 'syz.1.826': attribute type 4 has an invalid length. [ 349.111336][ T9144] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.826'. [ 349.121471][ T9147] netlink: zone id is out of range [ 349.139053][ T9147] netlink: zone id is out of range [ 349.149037][ T9147] netlink: zone id is out of range [ 349.154243][ T9147] netlink: zone id is out of range [ 349.165961][ T9147] netlink: zone id is out of range [ 349.175870][ T9147] netlink: zone id is out of range [ 349.305706][ T9147] netlink: zone id is out of range [ 349.310858][ T9147] netlink: zone id is out of range [ 349.322232][ T9147] netlink: zone id is out of range [ 349.333823][ T9147] netlink: zone id is out of range [ 349.696630][ T30] audit: type=1326 audit(1755919767.609:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 350.773715][ T9155] block device autoloading is deprecated and will be removed. [ 350.928336][ T30] audit: type=1326 audit(1755919767.609:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.101895][ T30] audit: type=1326 audit(1755919767.609:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.156129][ T30] audit: type=1326 audit(1755919767.609:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.223075][ T30] audit: type=1326 audit(1755919767.609:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.251146][ T30] audit: type=1326 audit(1755919767.609:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.277455][ T30] audit: type=1326 audit(1755919767.609:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.304071][ T30] audit: type=1326 audit(1755919767.609:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.429031][ T30] audit: type=1326 audit(1755919767.609:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 351.615087][ T30] audit: type=1326 audit(1755919767.609:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94c98ebe9 code=0x7ffc0000 [ 352.852782][ T9190] loop2: detected capacity change from 0 to 7 [ 352.883566][ T5966] loop2: [ 352.888611][ T5966] loop2: partition table partially beyond EOD, truncated [ 353.036587][ T9190] loop2: [ 353.069519][ T9190] loop2: partition table partially beyond EOD, truncated [ 353.924836][ T5979] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 354.756161][ T5979] usb 5-1: Using ep0 maxpacket: 32 [ 354.766204][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.794467][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.819416][ T5979] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.854839][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.916018][ T5979] usb 5-1: config 0 descriptor?? [ 354.948556][ T5979] hub 5-1:0.0: USB hub found [ 355.837998][ T5979] hub 5-1:0.0: 1 port detected [ 355.957897][ T9227] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 356.204981][ T5915] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 356.297711][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.553687][ T5915] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 356.554172][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.574236][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 356.894197][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.936811][ T5908] usb 5-1: USB disconnect, device number 29 [ 356.943925][ T5979] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 357.027411][ T5915] usb 3-1: config 0 descriptor?? [ 357.067571][ T5915] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 357.115488][ T9239] loop6: detected capacity change from 0 to 63 [ 357.154634][ T5966] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.168922][ T9239] loop2: detected capacity change from 0 to 7 [ 357.205401][ T9239] Dev loop2: unable to read RDB block 7 [ 357.210377][ T5966] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.211019][ T9239] loop2: unable to read partition table [ 357.229521][ T9239] loop2: partition table beyond EOD, truncated [ 357.254576][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.259649][ T9239] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.272012][ T5915] usb 3-1: Detected FT232B [ 357.312595][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.327991][ T5966] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.345508][ T5209] Dev loop2: unable to read RDB block 7 [ 357.348037][ T5966] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.351114][ T5209] loop2: unable to read partition table [ 357.372803][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.379868][ T5209] loop2: partition table beyond EOD, truncated [ 357.402878][ T5966] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.421503][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 357.446120][ T9248] netlink: 396 bytes leftover after parsing attributes in process `syz.0.853'. [ 357.485296][ T5915] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 358.136173][ T5915] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 358.176462][ T5915] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 358.212163][ T5915] usb 3-1: USB disconnect, device number 36 [ 358.254390][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 358.299106][ T5915] ftdi_sio 3-1:0.0: device disconnected [ 360.628941][ T9299] netlink: 500 bytes leftover after parsing attributes in process `syz.0.868'. [ 361.260407][ T9307] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 361.313820][ T9307] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 362.164836][ T5915] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 362.276654][ T9322] syz.0.870(9322): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 362.337053][ T5915] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 362.354576][ T5915] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 362.385046][ T5915] usb 3-1: config 220 has an invalid interface number: 36 but max is 2 [ 362.394983][ T5923] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 362.429302][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 362.453144][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 362.462023][ T5915] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 362.472442][ T5915] usb 3-1: config 220 has 4 interfaces, different from the descriptor's value: 3 [ 362.472521][ T5915] usb 3-1: config 220 has no interface number 2 [ 362.484959][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 362.534828][ T5915] usb 3-1: config 220 has no interface number 3 [ 362.542024][ T5915] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 362.555256][ T5915] usb 3-1: config 220 interface 36 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 362.568727][ T5915] usb 3-1: config 220 interface 0 has no altsetting 0 [ 362.575716][ T5915] usb 3-1: config 220 interface 76 has no altsetting 0 [ 362.582591][ T5915] usb 3-1: config 220 interface 1 has no altsetting 0 [ 362.583838][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 362.589548][ T5915] usb 3-1: config 220 interface 36 has no altsetting 0 [ 362.591825][ T5915] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 362.784769][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.794611][ T5915] usb 3-1: Product: syz [ 362.800021][ T5915] usb 3-1: Manufacturer: syz [ 362.805212][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 362.825034][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 362.843291][ T5915] usb 3-1: SerialNumber: syz [ 363.022959][ T5923] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 363.064860][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.074835][ T5923] usb 5-1: Product: syz [ 363.093553][ T5923] usb 5-1: Manufacturer: syz [ 363.098305][ T5923] usb 5-1: SerialNumber: syz [ 363.127889][ T5923] usb 5-1: config 0 descriptor?? [ 363.147551][ T5923] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 363.320715][ T9328] netlink: 'syz.5.875': attribute type 1 has an invalid length. [ 363.330869][ T9328] netlink: 232 bytes leftover after parsing attributes in process `syz.5.875'. [ 363.339950][ T5908] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 363.465028][ T5923] usb 5-1: USB disconnect, device number 30 [ 363.506916][ T5908] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 363.544253][ T6777] udevd[6777]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.564885][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.589406][ T5908] usb 1-1: config 0 descriptor?? [ 363.805426][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.822866][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.944126][ T9341] comedi comedi0: comedi_config --init_data is deprecated [ 363.979362][ T5908] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 364.008785][ T5908] [drm:udl_init] *ERROR* Selecting channel failed [ 364.104959][ T5908] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 364.129818][ T5908] [drm] Initialized udl on minor 2 [ 364.138953][ T5908] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 364.152394][ T5908] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 364.169660][ T5908] usb 1-1: USB disconnect, device number 38 [ 364.171847][ T5979] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 364.173734][ T5979] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 364.289487][ T9351] loop6: detected capacity change from 0 to 63 [ 364.302634][ T9351] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.302821][ T9351] Buffer I/O error on dev loop6, logical block 1, async page read [ 364.302913][ T9351] Buffer I/O error on dev loop6, logical block 2, async page read [ 364.330529][ T9351] Buffer I/O error on dev loop6, logical block 3, async page read [ 364.330703][ T9351] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.330819][ T9351] Buffer I/O error on dev loop6, logical block 1, async page read [ 364.330932][ T9351] Buffer I/O error on dev loop6, logical block 2, async page read [ 364.331041][ T9351] Buffer I/O error on dev loop6, logical block 3, async page read [ 364.331176][ T9351] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.331265][ T9351] Buffer I/O error on dev loop6, logical block 1, async page read [ 364.680789][ T9354] evm: overlay not supported [ 365.299773][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 365.675475][ T5915] usb 3-1: selecting invalid altsetting 0 [ 365.694321][ T5915] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 365.694356][ T5915] usb 3-1: No valid video chain found. [ 365.748157][ T5915] usb 3-1: selecting invalid altsetting 0 [ 365.748187][ T5915] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 365.802962][ T5915] usb 3-1: USB disconnect, device number 37 [ 366.324771][ T5979] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 366.564759][ T5979] usb 1-1: Using ep0 maxpacket: 16 [ 366.580723][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 366.592515][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.042152][ T5979] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 367.052245][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.070185][ T5979] usb 1-1: Product: syz [ 367.082801][ T5979] usb 1-1: Manufacturer: syz [ 367.643856][ T5979] usb 1-1: SerialNumber: syz [ 367.773557][ T5979] usb 1-1: config 0 descriptor?? [ 368.102721][ T5979] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 368.127210][ T5979] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 368.591512][ T5979] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 368.599188][ T5979] em28xx 1-1:0.0: Config register raw data: 0xbd [ 368.606046][ T5979] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 368.612521][ T5979] em28xx 1-1:0.0: No AC97 audio processor [ 369.627365][ T5979] usb 1-1: USB disconnect, device number 39 [ 372.649086][ T5950] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 372.658580][ T9442] netlink: 452 bytes leftover after parsing attributes in process `syz.4.907'. [ 372.710491][ T9443] netlink: 452 bytes leftover after parsing attributes in process `syz.2.908'. [ 372.897804][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.950148][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.975522][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.002515][ T5950] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.055841][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.089386][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 373.100860][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 373.135772][ T5950] usb 1-1: config 0 descriptor?? [ 373.601170][ T5950] usbhid 1-1:0.0: can't add hid device: -71 [ 373.678089][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.804547][ T5950] usb 1-1: USB disconnect, device number 40 [ 374.894974][ T5979] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 374.912114][ T9478] net_ratelimit: 74 callbacks suppressed [ 374.912130][ T9478] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 375.073239][ T5979] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 375.082468][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.090553][ T5979] usb 3-1: Product: syz [ 375.094824][ T5979] usb 3-1: Manufacturer: syz [ 375.099417][ T5979] usb 3-1: SerialNumber: syz [ 375.113597][ T5979] usb 3-1: config 0 descriptor?? [ 375.323544][ T5979] hso 3-1:0.0: Failed to find BULK IN ep [ 375.333816][ T5979] usb-storage 3-1:0.0: USB Mass Storage device detected [ 375.528525][ T5979] usb 3-1: USB disconnect, device number 38 [ 375.633477][ T9482] program syz.0.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.738108][ T9485] netlink: 452 bytes leftover after parsing attributes in process `syz.0.921'. [ 376.553772][ T9494] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 378.501232][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.507957][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.998738][ T9504] delete_channel: no stack [ 379.388471][ T9531] netlink: 452 bytes leftover after parsing attributes in process `syz.0.934'. [ 379.413410][ T5908] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 379.782873][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.803936][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.849321][ T5908] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 379.874931][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.882821][ T9532] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 379.908437][ T5908] usb 3-1: config 0 descriptor?? [ 379.917047][ T9534] random: crng reseeded on system resumption [ 380.462928][ T5908] hid-steam 0003:28DE:1142.000E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 380.529127][ T5908] hid-steam 0003:28DE:1142.000E: Steam wireless receiver connected [ 380.567978][ T5908] hid-steam 0003:28DE:1142.000F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 380.582514][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.933'. [ 380.645086][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.645488][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.648715][ T5908] usb 3-1: USB disconnect, device number 39 [ 380.705961][ T5908] hid-steam 0003:28DE:1142.000E: Steam wireless receiver disconnected [ 380.801566][ T9545] netlink: 204 bytes leftover after parsing attributes in process `syz.4.936'. [ 380.820273][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 380.865256][ T9543] fido_id[9543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 381.164760][ T9553] netlink: 452 bytes leftover after parsing attributes in process `syz.4.938'. [ 381.628564][ T9561] FAULT_INJECTION: forcing a failure. [ 381.628564][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 381.721999][ T9562] netlink: 452 bytes leftover after parsing attributes in process `syz.0.939'. [ 382.067551][ T9561] CPU: 0 UID: 0 PID: 9561 Comm: syz.1.940 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 382.067579][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.067595][ T9561] Call Trace: [ 382.067607][ T9561] [ 382.067616][ T9561] dump_stack_lvl+0x189/0x250 [ 382.067642][ T9561] ? __pfx____ratelimit+0x10/0x10 [ 382.067665][ T9561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.067685][ T9561] ? __pfx__printk+0x10/0x10 [ 382.067722][ T9561] should_fail_ex+0x414/0x560 [ 382.067748][ T9561] _copy_to_user+0x31/0xb0 [ 382.067776][ T9561] simple_read_from_buffer+0xe1/0x170 [ 382.067801][ T9561] proc_fail_nth_read+0x1df/0x250 [ 382.067827][ T9561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.067852][ T9561] ? rw_verify_area+0x258/0x650 [ 382.067879][ T9561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.067904][ T9561] vfs_read+0x200/0x980 [ 382.067938][ T9561] ? __pfx___mutex_lock+0x10/0x10 [ 382.067961][ T9561] ? __pfx_vfs_read+0x10/0x10 [ 382.067991][ T9561] ? __fget_files+0x2a/0x420 [ 382.068017][ T9561] ? __fget_files+0x3a0/0x420 [ 382.068037][ T9561] ? __fget_files+0x2a/0x420 [ 382.068068][ T9561] ksys_read+0x145/0x250 [ 382.068089][ T9561] ? __fget_files+0x3a0/0x420 [ 382.068112][ T9561] ? __pfx_ksys_read+0x10/0x10 [ 382.068135][ T9561] ? do_syscall_64+0xbe/0x3b0 [ 382.068159][ T9561] do_syscall_64+0xfa/0x3b0 [ 382.068179][ T9561] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.068199][ T9561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.068218][ T9561] ? clear_bhb_loop+0x60/0xb0 [ 382.068242][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.068259][ T9561] RIP: 0033:0x7ff94c98d5fc [ 382.068277][ T9561] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.068293][ T9561] RSP: 002b:00007ff94d836030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.068312][ T9561] RAX: ffffffffffffffda RBX: 00007ff94cbb6090 RCX: 00007ff94c98d5fc [ 382.068325][ T9561] RDX: 000000000000000f RSI: 00007ff94d8360a0 RDI: 0000000000000005 [ 382.068338][ T9561] RBP: 00007ff94d836090 R08: 0000000000000000 R09: 0000000000000000 [ 382.068349][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.068361][ T9561] R13: 00007ff94cbb6128 R14: 00007ff94cbb6090 R15: 00007ffc035dc028 [ 382.068393][ T9561] [ 383.464480][ T9578] netlink: 'syz.1.946': attribute type 10 has an invalid length. [ 383.472377][ T9578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.946'. [ 383.481935][ T9578] team0: entered promiscuous mode [ 383.508252][ T9580] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.947'. [ 383.520483][ T9578] team0: entered allmulticast mode [ 383.528951][ T9578] bridge0: port 1(team0) entered blocking state [ 383.538866][ T9582] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.947'. [ 383.548744][ T9578] bridge0: port 1(team0) entered disabled state [ 384.206974][ T9599] FAULT_INJECTION: forcing a failure. [ 384.206974][ T9599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.220731][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.1.952 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 384.220755][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.220767][ T9599] Call Trace: [ 384.220776][ T9599] [ 384.220784][ T9599] dump_stack_lvl+0x189/0x250 [ 384.220814][ T9599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.220836][ T9599] ? __pfx__printk+0x10/0x10 [ 384.220876][ T9599] should_fail_ex+0x414/0x560 [ 384.220902][ T9599] _copy_from_user+0x2d/0xb0 [ 384.220929][ T9599] __sys_bpf+0x1ed/0x860 [ 384.220959][ T9599] ? __pfx___sys_bpf+0x10/0x10 [ 384.220984][ T9599] ? preempt_schedule_irq+0xde/0x150 [ 384.221037][ T9599] __x64_sys_bpf+0x7c/0x90 [ 384.221062][ T9599] do_syscall_64+0xfa/0x3b0 [ 384.221085][ T9599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.221104][ T9599] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 384.221123][ T9599] ? clear_bhb_loop+0x60/0xb0 [ 384.221146][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.221165][ T9599] RIP: 0033:0x7ff94c98ebe9 [ 384.221183][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.221200][ T9599] RSP: 002b:00007ff94d815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.221221][ T9599] RAX: ffffffffffffffda RBX: 00007ff94cbb6180 RCX: 00007ff94c98ebe9 [ 384.221235][ T9599] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000011 [ 384.221248][ T9599] RBP: 00007ff94d815090 R08: 0000000000000000 R09: 0000000000000000 [ 384.221260][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.221272][ T9599] R13: 00007ff94cbb6218 R14: 00007ff94cbb6180 R15: 00007ffc035dc028 [ 384.221304][ T9599] [ 384.990249][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 384.990266][ T30] audit: type=1800 audit(1755920058.608:201): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.953" name="/" dev="fuse" ino=1 res=0 errno=0 [ 386.709399][ T9619] smb3: Bad value for 'source' [ 386.764307][ T9619] binder: Unknown parameter 'ctats' [ 387.023582][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 388.554991][ T9648] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 388.562680][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 388.854381][ T9652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.956'. [ 388.871978][ T9652] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.881155][ T9652] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.889990][ T9652] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.898767][ T9652] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.021183][ T9657] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.967' sets config #0 [ 389.499389][ T9657] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.967' sets config #1 [ 389.620876][ T9662] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 390.326875][ T9677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.971'. [ 390.555166][ T5979] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 390.717821][ T5979] usb 1-1: Using ep0 maxpacket: 16 [ 390.735552][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.754954][ T5979] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 390.764026][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.817828][ T5979] usb 1-1: config 0 descriptor?? [ 390.910762][ T9693] tipc: Started in network mode [ 390.920730][ T9693] tipc: Node identity 080211000001, cluster identity 4711 [ 390.941160][ T9693] tipc: Enabled bearer , priority 0 [ 390.964901][ T9694] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 390.987287][ T9694] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 391.449561][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.458648][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.503673][ T5979] usbhid 1-1:0.0: can't add hid device: -71 [ 391.509736][ T5979] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 391.523351][ T5979] usb 1-1: USB disconnect, device number 41 [ 392.054869][ T5923] tipc: Node number set to 134418688 [ 392.457551][ T9710] wg1 speed is unknown, defaulting to 1000 [ 392.965089][ T5922] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 393.237224][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 393.374496][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 393.395725][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.982'. [ 394.446173][ T5922] usb 5-1: config 0 has no interface number 0 [ 395.616855][ T5922] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.657258][ T5922] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.691775][ T5922] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.744920][ T5922] usb 5-1: config 0 interface 2 has no altsetting 0 [ 395.768252][ T5922] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 395.807287][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.890706][ T5922] usb 5-1: config 0 descriptor?? [ 395.956619][ T5922] usb 5-1: can't set config #0, error -71 [ 396.208551][ T9737] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 396.930337][ T5922] usb 5-1: USB disconnect, device number 31 [ 398.685036][ T9739] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 398.950188][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 399.224586][ T5989] go7007-loader 2-1:9.45: unable to load firmware from file "go7007/px-m402u.fw" [ 399.237967][ T5989] go7007-loader 2-1:9.45: probe failed [ 399.501956][ T5989] go7007-loader 2-1:9.126: loading firmware go7007/px-m402u.fw [ 399.602527][ T5989] usb 2-1: Direct firmware load for go7007/px-m402u.fw failed with error -2 [ 399.656930][ T5989] usb 2-1: Falling back to sysfs fallback for: go7007/px-m402u.fw [ 400.885413][ T9753] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.993'. [ 400.975510][ T5843] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 401.063174][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.089385][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.097459][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.116481][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.138767][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.439454][ T3572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.462752][ T5922] wg1 speed is unknown, defaulting to 1000 [ 401.471440][ T5922] syz0: Port: 1 Link DOWN [ 401.502160][ T9755] wg1 speed is unknown, defaulting to 1000 [ 401.554403][ T3572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.898991][ T3572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.073766][ T3572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.116167][ T9779] netlink: 'syz.0.1000': attribute type 11 has an invalid length. [ 402.329977][ T9755] chnl_net:caif_netlink_parms(): no params data found [ 402.551117][ T3572] bridge_slave_1: left allmulticast mode [ 402.554774][ T5979] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 402.570956][ T3572] bridge_slave_1: left promiscuous mode [ 402.583999][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.606155][ T3572] bridge_slave_0: left allmulticast mode [ 402.611889][ T3572] bridge_slave_0: left promiscuous mode [ 402.623993][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.714745][ T5979] usb 5-1: Using ep0 maxpacket: 8 [ 402.743163][ T5979] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 402.774309][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.791208][ T5979] usb 5-1: Product: syz [ 402.798461][ T5979] usb 5-1: Manufacturer: syz [ 402.803075][ T5979] usb 5-1: SerialNumber: syz [ 402.826005][ T5979] usb 5-1: config 0 descriptor?? [ 402.837992][ T5979] gspca_main: se401-2.14.0 probing 047d:5003 [ 403.259991][ T5979] gspca_se401: Frame size: 0x0 1/16th janggu [ 403.287133][ T5979] gspca_se401: Frame size: 0x0 1/16th janggu [ 403.309250][ T5979] gspca_se401: Frame size: 0x0 1/16th janggu [ 403.320304][ T5979] gspca_se401: Frame size: 1x0 bayer [ 403.340508][ T5979] gspca_se401: Frame size: 0x0 1/16th janggu [ 403.360048][ T5979] gspca_se401: Frame size: 0x0 1/16th janggu [ 403.375008][ T5843] Bluetooth: hci5: command tx timeout [ 404.153655][ T5979] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 404.274884][ T5979] usb 5-1: USB disconnect, device number 32 [ 404.505601][ T3572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.643589][ T9818] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 404.651517][ T9818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1007'. [ 405.251537][ T3572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.287894][ T3572] bond0 (unregistering): Released all slaves [ 405.341018][ T3572] bond1 (unregistering): Released all slaves [ 405.371140][ T3572] bond2 (unregistering): Released all slaves [ 405.402759][ T3572] bond3 (unregistering): Released all slaves [ 405.441320][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.453964][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.461153][ T5158] Bluetooth: hci5: command tx timeout [ 405.477977][ T9755] bridge_slave_0: entered allmulticast mode [ 405.508482][ T9755] bridge_slave_0: entered promiscuous mode [ 405.534099][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.545882][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.559406][ T9755] bridge_slave_1: entered allmulticast mode [ 405.561556][ T9827] program syz.4.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.568947][ T9755] bridge_slave_1: entered promiscuous mode [ 405.949391][ T9755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.032836][ T9837] hfsplus: unable to find HFS+ superblock [ 406.046528][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'. [ 406.162876][ T9837] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.327507][ T9755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.751148][ T9755] team0: Port device team_slave_0 added [ 406.766663][ T9755] team0: Port device team_slave_1 added [ 406.881334][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.916386][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.974612][ T9755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.107052][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.122472][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.178066][ T9755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.254460][ T3572] hsr_slave_0: left promiscuous mode [ 407.272067][ T3572] hsr_slave_1: left promiscuous mode [ 407.285239][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.301126][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.379945][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.395737][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.469275][ T3572] team_slave_0: left promiscuous mode [ 407.475029][ T3572] team_slave_1: left promiscuous mode [ 407.483932][ T3572] veth1_macvtap: left promiscuous mode [ 407.493235][ T3572] veth0_macvtap: left promiscuous mode [ 407.498951][ T3572] veth1_vlan: left promiscuous mode [ 407.504468][ T3572] veth0_vlan: left promiscuous mode [ 407.536656][ T5158] Bluetooth: hci5: command tx timeout [ 408.286539][ T3572] pimreg (unregistering): left allmulticast mode [ 408.737536][ T9864] netlink: 'syz.0.1016': attribute type 21 has an invalid length. [ 408.745805][ T9864] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1016'. [ 408.793464][ T9867] input: syz0 as /devices/virtual/input/input18 [ 409.615021][ T5158] Bluetooth: hci5: command tx timeout [ 409.913231][ T3572] team0 (unregistering): Port device team_slave_1 removed [ 409.951138][ T3572] team0 (unregistering): Port device team_slave_0 removed [ 410.363286][ T9864] netlink: 'syz.0.1016': attribute type 4 has an invalid length. [ 410.371294][ T9864] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1016'. [ 410.438351][ T9874] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1019'. [ 410.585415][ T9874] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1019'. [ 410.753934][ T9755] hsr_slave_0: entered promiscuous mode [ 410.785070][ T9755] hsr_slave_1: entered promiscuous mode [ 410.791592][ T9755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.812016][ T9755] Cannot create hsr debugfs directory [ 411.934351][ T9895] netlink: 'syz.1.1024': attribute type 2 has an invalid length. [ 413.020920][ T9755] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 413.155300][ T9755] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 413.246250][ T9926] hfsplus: unable to find HFS+ superblock [ 413.256032][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 413.274861][ T5915] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 413.391177][ T9926] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 413.422770][ T9755] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 413.565076][ T5915] usb 1-1: device descriptor read/64, error -71 [ 413.692267][ T9755] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 413.915183][ T5915] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 413.919014][ T9755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.981835][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.023292][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.030559][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.085036][ T5915] usb 1-1: device descriptor read/64, error -71 [ 414.099793][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.107003][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.209006][ T5915] usb usb1-port1: attempt power cycle [ 414.722002][ T9755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.834769][ T5915] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 414.872420][ T5915] usb 1-1: device descriptor read/8, error -71 [ 415.135855][ T5915] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 415.185683][ T5915] usb 1-1: device descriptor read/8, error -71 [ 415.306825][ T5915] usb usb1-port1: unable to enumerate USB device [ 415.340306][ T9755] veth0_vlan: entered promiscuous mode [ 415.389523][ T9755] veth1_vlan: entered promiscuous mode [ 415.472627][ T9755] veth0_macvtap: entered promiscuous mode [ 415.491221][ T9755] veth1_macvtap: entered promiscuous mode [ 415.531077][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.573649][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.593574][ T9755] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.608600][ T9755] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.621097][ T9755] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.638531][ T9755] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.634556][ T7319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.670478][ T7319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.750705][ T9985] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1037'. [ 416.859980][ T7319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.879096][ T7319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.964953][ T9991] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.1035'. [ 416.975167][ T9991] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.1035'. [ 418.180120][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1040'. [ 418.253808][ T5922] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 418.315829][ T5922] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 418.614862][ T5908] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 418.815645][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 418.886071][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.898168][ T5897] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 419.016074][ T5908] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 419.115427][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.132281][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 419.197785][ T5897] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 419.299219][ T5897] usb 1-1: config 0 has no interface number 0 [ 419.310886][ T5908] usb 7-1: config 0 descriptor?? [ 419.508366][ T5897] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 419.764463][ T5897] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 420.030280][ T5897] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 420.060315][T10026] program syz.5.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.182066][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 420.397110][ T5897] usb 1-1: Product: syz [ 420.451195][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.480812][ T5897] usb 1-1: SerialNumber: syz [ 420.529541][T10029] program syz.5.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.701282][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.770324][ T5897] usb 1-1: config 0 descriptor?? [ 421.339166][ T5897] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 421.431862][ T5908] usbhid 7-1:0.0: can't add hid device: -71 [ 421.440808][ T5897] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input19 [ 421.499639][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 421.529271][ T5908] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 421.541359][T10019] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1044'. [ 421.551977][T10034] loop2: detected capacity change from 0 to 7 [ 421.574935][T10034] loop2: [ 421.577958][T10034] loop2: partition table partially beyond EOD, truncated [ 421.620884][ T5908] usb 7-1: USB disconnect, device number 2 [ 422.901693][T10044] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1049'. [ 423.169867][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.178049][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.185697][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.192918][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.201203][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.208399][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.215496][ T5908] usb 1-1: USB disconnect, device number 46 [ 423.215582][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.228422][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 423.275567][ T5908] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 423.410786][T10057] vlan2: entered promiscuous mode [ 423.419843][T10057] macvtap0: entered promiscuous mode [ 423.855215][ T5922] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 423.963708][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.985860][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.998799][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.008292][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.019001][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.074836][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 424.117267][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.184847][ T5922] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 424.234278][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.314448][ T5922] usb 1-1: config 0 descriptor?? [ 424.454823][ T5908] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 424.472535][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.609979][ T5922] usbhid 1-1:0.0: can't add hid device: -71 [ 424.646562][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 424.658022][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 424.674621][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 424.685915][ T5908] usb 7-1: config 56 has an invalid interface number: 216 but max is 0 [ 424.698623][ T5908] usb 7-1: config 56 has no interface number 0 [ 424.713273][ T5908] usb 7-1: config 56 interface 216 has no altsetting 0 [ 424.722199][ T5922] usb 1-1: USB disconnect, device number 47 [ 424.745177][ T5908] usb 7-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 424.774523][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.776334][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.799064][ T5908] usb 7-1: Product: syz [ 424.803305][ T5908] usb 7-1: Manufacturer: syz [ 424.809339][ T5908] usb 7-1: SerialNumber: syz [ 424.902792][T10077] tipc: Enabled bearer , priority 0 [ 424.950694][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.997426][T10077] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 425.031166][T10077] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 425.086187][ T5908] hub 7-1:56.216: bad descriptor, ignoring hub [ 425.109549][ T5908] hub 7-1:56.216: probe with driver hub failed with error -5 [ 425.126966][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.138734][ T5908] option 7-1:56.216: GSM modem (1-port) converter detected [ 425.216304][ T5908] usb 7-1: USB disconnect, device number 3 [ 425.273093][ T5908] option 7-1:56.216: device disconnected [ 426.094925][ T5843] Bluetooth: hci2: command tx timeout [ 426.861803][T10090] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1061'. [ 427.031600][T10100] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1062'. [ 427.571208][T10066] chnl_net:caif_netlink_parms(): no params data found [ 428.179126][ T5843] Bluetooth: hci2: command tx timeout [ 428.280106][ T43] bridge_slave_1: left allmulticast mode [ 428.286042][ T43] bridge_slave_1: left promiscuous mode [ 428.291810][ T43] ƒý€: port 2(bridge_slave_1) entered disabled state [ 428.347222][ T43] bridge_slave_0: left allmulticast mode [ 428.376112][ T43] bridge_slave_0: left promiscuous mode [ 428.383665][ T43] ƒý€: port 1(bridge_slave_0) entered disabled state [ 428.548793][T10105] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 428.605272][ T5923] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 428.674841][ T5922] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 428.755404][ T5923] usb 7-1: device descriptor read/64, error -71 [ 428.840907][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.861817][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.872897][ T43] dvmrp17 (unregistering): left allmulticast mode [ 428.881698][ T5922] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 428.915565][ T5922] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.931705][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.948290][ T5922] usb 1-1: Product: syz [ 428.962697][ T5922] usb 1-1: Manufacturer: syz [ 428.968954][ T5922] usb 1-1: SerialNumber: syz [ 428.982505][T10119] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 429.035052][ T5923] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 429.148153][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.159992][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.173493][ T43] bond0 (unregistering): (slave team0): Releasing backup interface [ 429.183644][ T43] bond0 (unregistering): Released all slaves [ 429.192297][ T5923] usb 7-1: device descriptor read/64, error -71 [ 429.303747][ T43] bond1 (unregistering): Released all slaves [ 429.315322][ T5923] usb usb7-port1: attempt power cycle [ 429.319546][ T43] bond2 (unregistering): Released all slaves [ 429.339572][ T43] bond3 (unregistering): Released all slaves [ 429.539861][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.548358][T10066] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.556984][T10066] bridge_slave_0: entered allmulticast mode [ 429.564428][T10066] bridge_slave_0: entered promiscuous mode [ 429.589318][T10066] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.597159][T10066] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.606332][T10066] bridge_slave_1: entered allmulticast mode [ 429.611898][ T5922] usb 1-1: 0:2 : does not exist [ 429.614165][T10066] bridge_slave_1: entered promiscuous mode [ 429.674826][ T5923] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 429.697138][ T5923] usb 7-1: device descriptor read/8, error -71 [ 429.781990][T10066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.802690][T10066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.817552][ T5922] usb 1-1: USB disconnect, device number 48 [ 429.965497][ T5923] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 430.005815][ T5923] usb 7-1: device descriptor read/8, error -71 [ 430.072345][T10066] team0: Port device team_slave_0 added [ 430.125190][ T5923] usb usb7-port1: unable to enumerate USB device [ 430.187253][T10066] team0: Port device team_slave_1 added [ 430.244618][T10151] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1074'. [ 430.255037][ T5843] Bluetooth: hci2: command tx timeout [ 430.313264][ T43] hsr_slave_0: left promiscuous mode [ 430.329704][ T43] hsr_slave_1: left promiscuous mode [ 430.355542][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.369713][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.388792][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.406990][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.458033][ T43] veth1_macvtap: left promiscuous mode [ 430.470719][ T43] veth0_macvtap: left promiscuous mode [ 430.483111][ T43] veth1_vlan: left promiscuous mode [ 430.494050][ T43] veth0_vlan: left promiscuous mode [ 431.730304][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1080'. [ 431.756070][T10181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1080'. [ 432.345057][ T5843] Bluetooth: hci2: command tx timeout [ 432.781551][T10181] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1080'. [ 433.012771][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 433.406408][ T43] team0 (unregistering): Port device team_slave_1 removed [ 433.448211][ T43] team0 (unregistering): Port device team_slave_0 removed [ 433.802533][T10066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.809780][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.837387][T10066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.850016][T10066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.858898][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.885614][T10066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.419574][T10195] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1084'. [ 435.653418][T10066] hsr_slave_0: entered promiscuous mode [ 435.665753][T10066] hsr_slave_1: entered promiscuous mode [ 435.684221][T10066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.696940][T10066] Cannot create hsr debugfs directory [ 436.370322][T10066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.400139][T10066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.458400][T10066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.527632][T10066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.986548][T10066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.990571][T10240] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1090'. [ 437.039799][T10240] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1090'. [ 437.069896][T10066] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.087569][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.094783][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.124588][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.131813][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.600025][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 438.958600][T10066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.980329][T10276] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1098'. [ 439.240528][T10288] netlink: 'syz.5.1101': attribute type 15 has an invalid length. [ 439.941541][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.958224][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.241252][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1104'. [ 440.917535][T10316] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 440.958044][T10315] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 441.002491][T10321] tipc: Enabling of bearer rejected, already enabled [ 441.204550][T10066] veth0_vlan: entered promiscuous mode [ 441.322444][T10066] veth1_vlan: entered promiscuous mode [ 441.940066][T10333] netlink: 'syz.5.1109': attribute type 1 has an invalid length. [ 442.004628][T10066] veth0_macvtap: entered promiscuous mode [ 442.118619][T10066] veth1_macvtap: entered promiscuous mode [ 442.183921][T10343] netlink: 'syz.6.1111': attribute type 83 has an invalid length. [ 442.334431][T10066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.788043][T10066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.858310][T10066] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.895190][T10066] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.103007][T10066] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.112287][T10066] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.157737][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.193610][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.298255][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.309327][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.591968][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1117'. [ 445.238621][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1047'. [ 445.324462][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1047'. [ 445.365763][T10382] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1047'. [ 445.592177][T10389] syz.6.1118: attempt to access beyond end of device [ 445.592177][T10389] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 445.634877][T10389] EXT4-fs (loop6): unable to read superblock [ 446.861592][T10410] xt_bpf: check failed: parse error [ 448.457542][T10446] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1129'. [ 448.820218][T10447] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 448.861332][T10447] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 448.917533][T10447] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 449.019751][T10450] netlink: 'syz.6.1132': attribute type 1 has an invalid length. [ 449.050906][T10450] netlink: 'syz.6.1132': attribute type 2 has an invalid length. [ 449.075190][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1132'. [ 450.079885][ T5915] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 450.632053][ T5915] usb 7-1: config 9 has an invalid interface number: 1 but max is 0 [ 450.697737][ T5915] usb 7-1: config 9 has no interface number 0 [ 450.703867][ T5915] usb 7-1: config 9 interface 1 has no altsetting 0 [ 450.780531][ T5915] usb 7-1: string descriptor 0 read error: -22 [ 450.799703][ T5915] usb 7-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 450.829485][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.898112][ T5915] cx231xx 7-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 450.911985][ T5915] cx231xx 7-1:9.1: Not found matching IAD interface [ 451.175031][T10024] usb 7-1: USB disconnect, device number 8 [ 451.328492][T10492] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1139'. [ 451.581529][T10503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.665143][ T5915] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 452.328428][ T5158] Bluetooth: hci6: command 0x0405 tx timeout [ 452.474852][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 452.504455][ T5915] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 452.523770][ T5915] usb 1-1: config 0 has no interface number 0 [ 452.531651][ T5915] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.672598][ T5915] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 452.706310][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 452.714426][ T5915] usb 1-1: Product: syz [ 452.774773][ T5915] usb 1-1: SerialNumber: syz [ 452.801517][ T5915] usb 1-1: config 0 descriptor?? [ 452.840843][ T5915] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 452.892351][ T5915] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input20 [ 452.955975][T10024] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 452.996452][ T30] audit: type=1326 audit(1755920577.042:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10519 comm="syz.1.1147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff94c98ebe9 code=0x0 [ 453.124900][T10024] usb 7-1: Using ep0 maxpacket: 8 [ 453.153934][T10024] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 453.192895][T10024] usb 7-1: config 0 has no interface number 0 [ 453.215675][T10024] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.256578][T10024] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 453.305877][T10024] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 453.335338][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 453.342705][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.345117][ T9] usb 1-1: USB disconnect, device number 49 [ 453.349655][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 453.358574][T10024] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 453.413214][T10024] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 453.431149][T10024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.446621][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 453.495921][T10024] usb 7-1: config 0 descriptor?? [ 453.548510][T10024] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 453.819952][ T9] usb 7-1: USB disconnect, device number 9 [ 453.825842][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 454.039970][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 454.047082][T10516] ldusb: No device or device unplugged -19 [ 454.644060][T10561] lo: entered allmulticast mode [ 454.673093][T10561] tunl0: entered allmulticast mode [ 454.688073][T10561] gre0: entered allmulticast mode [ 454.706517][T10561] gretap0: entered allmulticast mode [ 454.731977][T10561] erspan0: entered allmulticast mode [ 454.762042][T10561] ip_vti0: entered allmulticast mode [ 454.793409][T10561] ip6_vti0: entered allmulticast mode [ 454.813503][T10561] sit0: entered allmulticast mode [ 454.834357][T10561] ip6tnl0: entered allmulticast mode [ 454.850663][T10561] ip6gre0: entered allmulticast mode [ 454.985068][T10561] syz_tun: entered allmulticast mode [ 455.013782][T10561] ip6gretap0: entered allmulticast mode [ 455.176332][T10561] bridge0: entered allmulticast mode [ 455.671786][T10561] vcan0: entered allmulticast mode [ 455.699492][T10561] bond0: entered allmulticast mode [ 455.710388][T10561] bond_slave_0: entered allmulticast mode [ 455.716496][T10561] bond_slave_1: entered allmulticast mode [ 455.723911][T10561] team0: entered allmulticast mode [ 455.732533][T10561] team_slave_0: entered allmulticast mode [ 455.754667][T10561] team_slave_1: entered allmulticast mode [ 455.763438][T10561] dummy0: entered allmulticast mode [ 455.775511][T10561] nlmon0: entered allmulticast mode [ 455.782169][T10561] caif0: entered allmulticast mode [ 455.790554][T10561] batadv0: entered allmulticast mode [ 455.798787][T10561] vxcan0: entered allmulticast mode [ 455.805971][T10561] vxcan1: entered allmulticast mode [ 455.812232][T10561] veth0: entered allmulticast mode [ 455.820283][T10561] veth1: entered allmulticast mode [ 455.828250][T10561] wg0: entered allmulticast mode [ 455.835153][T10561] wg1: entered allmulticast mode [ 455.840435][T10574] netlink: 'syz.6.1158': attribute type 1 has an invalid length. [ 455.850754][T10574] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1158'. [ 455.880413][T10561] wg2: entered allmulticast mode [ 455.892148][T10561] veth0_to_bridge: entered allmulticast mode [ 455.910671][T10561] veth1_to_bridge: entered allmulticast mode [ 455.950038][T10561] veth0_to_bond: entered allmulticast mode [ 455.963823][T10561] veth1_to_bond: entered allmulticast mode [ 455.977778][T10561] veth0_to_team: entered allmulticast mode [ 456.056460][T10561] veth1_to_team: entered allmulticast mode [ 456.088137][T10561] veth0_to_batadv: entered allmulticast mode [ 456.119446][T10561] batadv_slave_0: entered allmulticast mode [ 456.133323][T10561] veth1_to_batadv: entered allmulticast mode [ 456.141504][T10561] batadv_slave_1: entered allmulticast mode [ 456.152081][T10561] xfrm0: entered allmulticast mode [ 456.159367][T10561] veth0_to_hsr: entered allmulticast mode [ 456.170984][T10561] hsr_slave_0: entered allmulticast mode [ 456.180551][T10561] veth1_to_hsr: entered allmulticast mode [ 456.191054][T10561] hsr_slave_1: entered allmulticast mode [ 456.212769][T10561] hsr0: entered allmulticast mode [ 456.376637][T10561] veth1_virt_wifi: entered allmulticast mode [ 456.548038][T10561] veth0_virt_wifi: entered allmulticast mode [ 456.696735][T10561] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 456.723096][T10561] veth1_vlan: entered allmulticast mode [ 456.756074][T10561] veth0_vlan: entered allmulticast mode [ 456.778233][T10561] vlan0: entered allmulticast mode [ 456.837088][T10561] vlan1: entered allmulticast mode [ 456.844055][T10561] macvlan0: entered allmulticast mode [ 457.235057][T10561] macvlan1: entered allmulticast mode [ 457.243931][T10561] ipvlan0: entered allmulticast mode [ 457.264030][T10561] ipvlan1: entered allmulticast mode [ 457.311037][T10561] veth1_macvtap: entered allmulticast mode [ 457.322294][T10561] veth0_macvtap: entered allmulticast mode [ 457.335507][T10561] macvtap0: entered allmulticast mode [ 457.342554][T10561] macsec0: entered allmulticast mode [ 457.353580][T10561] geneve0: entered allmulticast mode [ 457.364581][T10561] geneve1: entered allmulticast mode [ 457.376152][T10561] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 457.387380][T10561] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 457.399241][T10561] bond1: entered allmulticast mode [ 457.406302][T10561] bond2: entered allmulticast mode [ 457.412664][T10561] bond3: entered allmulticast mode [ 457.431672][T10561] bond4: entered allmulticast mode [ 457.462044][T10561] netdevsim netdevsim0 eth0: entered allmulticast mode [ 457.532908][T10561] netdevsim netdevsim0 eth1: entered allmulticast mode [ 457.540603][T10561] netdevsim netdevsim0 eth2: entered allmulticast mode [ 457.547960][T10561] netdevsim netdevsim0 eth3: entered allmulticast mode [ 457.555198][T10561] tipc: Resetting bearer [ 457.594100][T10561] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 457.609807][T10561] syztnl1: entered allmulticast mode [ 457.851502][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 458.236712][T10600] overlay: Unknown parameter 'fowner' [ 458.960174][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 459.294873][ T9] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 459.995902][T10618] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1169'. [ 460.079512][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 460.098814][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.129025][ T9] usb 7-1: config 0 descriptor?? [ 460.483636][ T5989] go7007-loader 2-1:9.126: unable to load firmware from file "go7007/px-m402u.fw" [ 460.557249][ T5989] go7007-loader 2-1:9.126: probe failed [ 460.590230][ T5908] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 460.870754][ T5908] usb 8-1: Using ep0 maxpacket: 16 [ 460.981978][ T5989] go7007-loader 2-1:9.5: loading firmware go7007/px-m402u.fw [ 460.994107][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.011713][ T5989] usb 2-1: Direct firmware load for go7007/px-m402u.fw failed with error -2 [ 461.021005][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 461.031804][ T5908] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 461.041200][ T5989] usb 2-1: Falling back to sysfs fallback for: go7007/px-m402u.fw [ 461.055610][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 461.065433][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.104982][ T9] usb 7-1: USB disconnect, device number 10 [ 461.116618][ T5908] usb 8-1: config 0 descriptor?? [ 461.545257][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.568160][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.770208][ T5908] usbhid 8-1:0.0: can't add hid device: -71 [ 461.783736][T10652] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1177'. [ 461.814435][ T5908] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 461.866793][ T5908] usb 8-1: USB disconnect, device number 2 [ 461.898652][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1177'. [ 462.335555][ T31] INFO: task syz.3.706:8692 blocked for more than 143 seconds. [ 462.367752][ T31] Not tainted 6.16.0-syzkaller #0 [ 462.375302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.384127][ T31] task:syz.3.706 state:D stack:26104 pid:8692 tgid:8691 ppid:5839 task_flags:0x400140 flags:0x00004004 [ 462.400525][ T31] Call Trace: [ 462.425570][ T31] [ 462.448917][ T31] __schedule+0x16aa/0x4c90 [ 462.540149][ T31] ? __lock_acquire+0x9c0/0xd20 [ 462.700218][ T31] ? schedule+0x165/0x360 [ 462.837620][ T31] ? __pfx___schedule+0x10/0x10 [ 462.944497][ T31] ? schedule+0x91/0x360 [ 463.072953][ T31] schedule+0x165/0x360 [ 463.084594][ T31] schedule_preempt_disabled+0x13/0x30 [ 463.094976][ T31] __mutex_lock+0x724/0xe80 [ 463.099520][ T31] ? __mutex_lock+0x51b/0xe80 [ 463.104230][ T31] ? usbdev_open+0x16e/0x760 [ 463.163450][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 463.173949][ T31] ? bus_find_device+0x273/0x2b0 [ 463.183708][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 463.193885][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 463.203070][ T31] ? usbdev_open+0xa7/0x760 [ 463.211755][ T31] usbdev_open+0x16e/0x760 [ 463.221759][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 463.233461][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 463.250176][ T31] chrdev_open+0x4c9/0x5e0 [ 463.254642][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 463.313335][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 463.330820][ T31] do_dentry_open+0xdf0/0x1970 [ 463.345560][ T31] vfs_open+0x3b/0x340 [ 463.349671][ T31] ? path_openat+0x2ecd/0x3830 [ 463.366433][ T31] path_openat+0x2ee5/0x3830 [ 463.371061][ T31] ? arch_stack_walk+0xfc/0x150 [ 463.388781][ T31] ? __pfx_path_openat+0x10/0x10 [ 463.393769][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.425975][ T31] do_filp_open+0x1fa/0x410 [ 463.440870][ T31] ? __lock_acquire+0xab9/0xd20 [ 463.454131][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 463.470366][ T31] ? _raw_spin_unlock+0x28/0x50 [ 463.484181][ T31] ? alloc_fd+0x64c/0x6c0 [ 463.493090][ T31] do_sys_openat2+0x121/0x1c0 [ 463.503641][ T31] ? __se_sys_futex+0x36f/0x400 [ 463.513764][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 463.526538][ T31] ? rcu_is_watching+0x15/0xb0 [ 463.537505][ T31] __x64_sys_openat+0x138/0x170 [ 463.552545][ T31] do_syscall_64+0xfa/0x3b0 [ 463.557363][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.562583][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.594126][ T31] ? clear_bhb_loop+0x60/0xb0 [ 463.610088][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.624715][ T31] RIP: 0033:0x7f924918d550 [ 463.629161][ T31] RSP: 002b:00007f924a05eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 463.644736][ T31] RAX: ffffffffffffffda RBX: 0000000000000301 RCX: 00007f924918d550 [ 463.652739][ T31] RDX: 0000000000000301 RSI: 00007f924a05ec10 RDI: 00000000ffffff9c [ 463.674715][ T31] RBP: 00007f924a05ec10 R08: 0000000000000000 R09: 0000000000000000 [ 463.683125][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 463.704728][ T31] R13: 00007f92493b6038 R14: 00007f92493b5fa0 R15: 00007fff306772a8 [ 463.712748][ T31] [ 463.715865][ T31] [ 463.715865][ T31] Showing all locks held in the system: [ 463.723723][ T31] 4 locks held by rcu_exp_gp_kthr/18: [ 463.803206][ T31] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 463.834727][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 463.854716][ T31] #2: ffff888026bde428 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 463.864007][ T31] #3: ffff8880b8739e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 463.894733][ T31] 1 lock held by khungtaskd/31: [ 463.899616][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 463.929786][ T31] 2 locks held by getty/5597: [ 463.934955][ T31] #0: ffff88814c59a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 463.965272][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 463.984760][ T31] 6 locks held by kworker/0:8/5989: [ 463.990385][ T31] #0: ffff8880216ef548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.017743][ T31] #1: ffffc90005397bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.044772][ T31] #2: ffff8881443ba198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 464.053712][ T31] #3: ffff88805634f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 464.074763][ T31] #4: ffff88802625d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 464.084048][ T31] #5: ffffffff8dfe4850 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 464.114731][ T31] 4 locks held by udevd/6004: [ 464.119442][ T31] #0: ffff888071d98d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 464.140282][ T31] #1: ffff888059024488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 464.159152][ T31] #2: ffff8880342865a8 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 464.180465][ T31] #3: ffff88805634f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 464.199864][ T31] 1 lock held by syz.3.706/8692: [ 464.210438][ T31] #0: ffff8881443ba198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 464.228409][ T31] 1 lock held by sed/10687: [ 464.238895][ T31] [ 464.243119][ T31] ============================================= [ 464.243119][ T31] [ 464.294148][ T31] NMI backtrace for cpu 1 [ 464.294165][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 464.294193][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.294205][ T31] Call Trace: [ 464.294213][ T31] [ 464.294221][ T31] dump_stack_lvl+0x189/0x250 [ 464.294245][ T31] ? __wake_up_klogd+0xd9/0x110 [ 464.294272][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.294293][ T31] ? __pfx__printk+0x10/0x10 [ 464.294331][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 464.294362][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 464.294387][ T31] ? _printk+0xcf/0x120 [ 464.294415][ T31] ? __pfx__printk+0x10/0x10 [ 464.294441][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.294472][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 464.294503][ T31] watchdog+0xfee/0x1030 [ 464.294533][ T31] ? watchdog+0x1de/0x1030 [ 464.294568][ T31] kthread+0x70e/0x8a0 [ 464.294596][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.294621][ T31] ? __pfx_kthread+0x10/0x10 [ 464.294647][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.294666][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.294686][ T31] ? __pfx_kthread+0x10/0x10 [ 464.294711][ T31] ret_from_fork+0x3fc/0x770 [ 464.294733][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 464.294758][ T31] ? __switch_to_asm+0x39/0x70 [ 464.294779][ T31] ? __switch_to_asm+0x33/0x70 [ 464.294800][ T31] ? __pfx_kthread+0x10/0x10 [ 464.294826][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.294865][ T31] [ 464.444537][ T31] Sending NMI from CPU 1 to CPUs 0: [ 464.450374][ C0] NMI backtrace for cpu 0 [ 464.450388][ C0] CPU: 0 UID: 0 PID: 10687 Comm: sed Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 464.450407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.450424][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 464.450448][ C0] Code: e0 b9 e1 8b 48 c7 c6 20 ba e1 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 ee ed 35 07 48 89 44 24 08 [ 464.450464][ C0] RSP: 0018:ffffc900033974c0 EFLAGS: 00000287 [ 464.450478][ C0] RAX: 0000000000000000 RBX: ffffffff822b406a RCX: ffff88802614bc00 [ 464.450491][ C0] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 464.450503][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822b406a [ 464.450514][ C0] R10: dffffc0000000000 R11: fffff940009ff581 R12: dffffc0000000000 [ 464.450527][ C0] R13: ffffffff822b406a R14: ffffffff8e13f1a0 R15: ffff88813fffb060 [ 464.450540][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 464.450553][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.450565][ C0] CR2: 00007fdf86c5b6b0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 464.450580][ C0] Call Trace: [ 464.450586][ C0] [ 464.450593][ C0] rcu_is_watching+0x15/0xb0 [ 464.450611][ C0] ? pfn_valid+0xba/0x490 [ 464.450628][ C0] lock_release+0x4b/0x3e0 [ 464.450645][ C0] ? pfn_valid+0xba/0x490 [ 464.450660][ C0] ? pfn_valid+0xba/0x490 [ 464.450676][ C0] pfn_valid+0x3b2/0x490 [ 464.450694][ C0] page_table_check_clear+0x21/0x700 [ 464.450711][ C0] ? vm_normal_page+0xb7/0x230 [ 464.450732][ C0] unmap_page_range+0x3249/0x41c0 [ 464.450775][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 464.450800][ C0] ? unmap_vmas+0x144/0x580 [ 464.450821][ C0] unmap_vmas+0x399/0x580 [ 464.450845][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 464.450876][ C0] exit_mmap+0x248/0xb50 [ 464.450893][ C0] ? uprobe_clear_state+0x20f/0x290 [ 464.450911][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 464.450926][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 464.450951][ C0] ? __pfx_exit_aio+0x10/0x10 [ 464.450971][ C0] ? uprobe_clear_state+0x274/0x290 [ 464.450987][ C0] ? mm_update_next_owner+0xa7/0x870 [ 464.451010][ C0] __mmput+0x118/0x410 [ 464.451028][ C0] exit_mm+0x1da/0x2c0 [ 464.451049][ C0] ? __pfx_exit_mm+0x10/0x10 [ 464.451068][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 464.451085][ C0] ? rcu_is_watching+0x15/0xb0 [ 464.451104][ C0] do_exit+0x648/0x22e0 [ 464.451127][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 464.451150][ C0] ? __pfx_do_exit+0x10/0x10 [ 464.451175][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.451190][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.451208][ C0] do_group_exit+0x21c/0x2d0 [ 464.451231][ C0] __x64_sys_exit_group+0x3f/0x40 [ 464.451253][ C0] x64_sys_call+0x21ba/0x21c0 [ 464.451273][ C0] do_syscall_64+0xfa/0x3b0 [ 464.451291][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.451307][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.451323][ C0] ? clear_bhb_loop+0x60/0xb0 [ 464.451342][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.451357][ C0] RIP: 0033:0x7fdf86c5b6c5 [ 464.451370][ C0] Code: Unable to access opcode bytes at 0x7fdf86c5b69b. [ 464.451379][ C0] RSP: 002b:00007fff2dcd4108 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 464.451394][ C0] RAX: ffffffffffffffda RBX: 00007fdf86d5cfe8 RCX: 00007fdf86c5b6c5 [ 464.451407][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 464.451423][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 464.451433][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 464.451443][ C0] R13: 0000000000000000 R14: 00007fdf86d5b680 R15: 00007fdf86d5d000 [ 464.451463][ C0] [ 464.840297][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 464.847192][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 464.856922][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.866991][ T31] Call Trace: [ 464.870278][ T31] [ 464.873221][ T31] dump_stack_lvl+0x99/0x250 [ 464.877837][ T31] ? __asan_memcpy+0x40/0x70 [ 464.882451][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.887670][ T31] ? __pfx__printk+0x10/0x10 [ 464.892290][ T31] panic+0x2db/0x790 [ 464.896217][ T31] ? __pfx_panic+0x10/0x10 [ 464.900650][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 464.906474][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 464.911872][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 464.918056][ T31] watchdog+0x102d/0x1030 [ 464.922416][ T31] ? watchdog+0x1de/0x1030 [ 464.926864][ T31] kthread+0x70e/0x8a0 [ 464.930961][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.935664][ T31] ? __pfx_kthread+0x10/0x10 [ 464.940279][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.945490][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.950698][ T31] ? __pfx_kthread+0x10/0x10 [ 464.955304][ T31] ret_from_fork+0x3fc/0x770 [ 464.959910][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 464.965040][ T31] ? __switch_to_asm+0x39/0x70 [ 464.969819][ T31] ? __switch_to_asm+0x33/0x70 [ 464.974596][ T31] ? __pfx_kthread+0x10/0x10 [ 464.979209][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.984007][ T31] [ 464.987349][ T31] Kernel Offset: disabled [ 464.991728][ T31] Rebooting in 86400 seconds..