last executing test programs: 14m4.131998009s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x3c}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(r6, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000400000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/26], 0x0, 0x0, 0x0}) r7 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x8000) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x7}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14m1.326512217s ago: executing program 0 (id=10): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200970300000000", @ANYRES32, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r2, 0x1, 0x27, 0x0, &(0x7f0000006540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001140)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002d00010026bd7000fcdbdf250400000085ba85f6de1a19c7b2d3de0bb52cc64f7f14b06fc24bccfff297d36f313b2958d77da9f83075a91cf0fc"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x8000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x68, 0x2, 0x6, 0xf9916fd562a60eb9, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x480000}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc10}, 0x20000004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r8, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r9, r8, 0x0, 0x578410eb) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bff000/0x400000)=nil) 13m56.239814056s ago: executing program 0 (id=13): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0xd0, 0x30, 0x216822a75a8bdd29, 0xffffffff, 0x0, {}, [{0xbc, 0x1, [@m_skbmod={0xb8, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x8c, 0x6, "eed6873f2981611ecb395b8716e117716864532f5465722919225448bbf6ed8357f76bf1fa9b55291316eb1809fcd4600358cdd945d387bd97c729258624b869b3ec525874365044249128c92c13f801e6fed8b7988ebfccfd15c08b07e85451a3df562d217b2010aeac8dbef98e6cbbb363bf1bff633baa160e0fd89d93f14810b030488376ad9f"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66ddccccb3b7d59d649973f756dcc67b8269b77d1b2f1b9300c4ac5a275a6c4a695205187987cdcd7e0d9b41cc3fb0730f78fcaee057e27d620c20ddb170b9f373bbae2c37811b5580807a9f9fcd8c3fa89701006e07d7e6bb0ac4bece3d7fed58fa392146813bb30fae31f9a1fcd70af66142c32740a78b39d2061a5c878a6f0eec9d6794317253ff7fcd9dff23c5986fb6dd53cd0e97434cd5a887052f3055c2f823127dd21b4c36dec4e267f3c7ad9a4585f64dc27e7791c3b4a6a7fe000000000000", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004880) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x5) connect$bt_rfcomm(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) socket$netlink(0x10, 0x3, 0x4) 13m54.888328354s ago: executing program 0 (id=16): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x34, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x34}}, 0x20008000) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40}]) io_getevents(r7, 0x4, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x989680}) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4658}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) 13m51.467978696s ago: executing program 0 (id=18): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0x6, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x5, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x7, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0x10, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x7695, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x400, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x8, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x80000002, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x0, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x8, 0x0, 0x60000000, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x800], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x7f, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x4c400000, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000943480f00000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) ioctl$TCGETS2(r0, 0x5434, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000280)=0x200000) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f2091b080410aa61b4d2010203010902120001000000000904000000020640"], 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x2}, 0x52, 0x0) 13m35.570736745s ago: executing program 32 (id=18): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0x6, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x5, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x7, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0x10, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x7695, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x400, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x8, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x80000002, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x0, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x8, 0x0, 0x60000000, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x800], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x7f, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x4c400000, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000943480f00000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) ioctl$TCGETS2(r0, 0x5434, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000280)=0x200000) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f2091b080410aa61b4d2010203010902120001000000000904000000020640"], 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x2}, 0x52, 0x0) 3m57.906972523s ago: executing program 3 (id=1962): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x1000000, 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x655, 0xffffffff802a6081, 0x2, 0x2, 0x1, 0x3, 0x0, 0x0, 0x40, 0x101}}, 0x50) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00', @ANYRES32=r1], 0x2b) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x11e, 0x36, 0x0, 0x28) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) 3m56.414978769s ago: executing program 3 (id=1966): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x134}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x8184c, 0x0, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3m55.247652743s ago: executing program 3 (id=1973): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x40000, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x47, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m54.918340282s ago: executing program 3 (id=1974): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 3m54.001031029s ago: executing program 3 (id=1978): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000023}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 3m53.544380138s ago: executing program 3 (id=1983): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@'], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m52.070274676s ago: executing program 33 (id=1983): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@'], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m52.047452185s ago: executing program 4 (id=1987): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x48810, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 3m50.842215674s ago: executing program 4 (id=1989): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x29}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a94, 0x8, '\x00', @p_u8=0x0}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m50.282915539s ago: executing program 4 (id=1991): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x700000000000000, &(0x7f0000000540)="826c"}) 3m50.11104849s ago: executing program 4 (id=1992): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x1005}}}, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m49.682309473s ago: executing program 4 (id=1993): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) 3m49.480450174s ago: executing program 4 (id=1994): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m32.606062183s ago: executing program 34 (id=1994): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m28.200059895s ago: executing program 5 (id=2043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat(r3, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00222b00fc020000000000000000000000000008fe8000000000000000000000000000aa00000200000a1c3099000000"], 0x0) recvmsg(r5, 0x0, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x12a) fanotify_mark(0xffffffffffffffff, 0x61, 0x40001002, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3m27.38872918s ago: executing program 5 (id=2045): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4004) r1 = open(0x0, 0x183142, 0x2f) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x80) ftruncate(r1, 0x2007ffc) 3m25.88414821s ago: executing program 5 (id=2050): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) syz_socket_connect_nvme_tcp() 3m24.032462166s ago: executing program 5 (id=2052): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x25, {"4831ff48c7c6000004004881c60001000048893e"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x3d}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0xaaaa) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0xffffffffffffffff) 3m20.680036328s ago: executing program 5 (id=2057): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00032e0000002e0311e6428f0317806ce42152808562295179524bf7f300c8212aa13c87dad587b1a5a6a3ac2f0b5d4ca56694", @ANYRES16=0x0], 0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x2, 0x63, {0x63, 0xe, "a345231d180bbeaf3bfb72dd0249c64001d162f3f069f0184cbb23cfe149b68b6aa9f55bac80252bc8457e67627ea649e038ca5cd46fed350e954175f3dea0bfd20fc3ecd9a656de46f30722fc6ab91069cbb7c3f78d54e516eb5b88676cd29384"}}, &(0x7f0000000140)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "8509dea6a240a5901c8ac5cc9234d363fac079315001ae23dd367bf66dcf9a3dbd17c1c736dfdd9cc3"}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x10, 0x79, "23681c9c11fd39c79fe86a73bff0d9bf3fc29ef718356afa2711804b7a784ef618dd8e0488edd7951908b49757a790b0e0942bec18e38d25f302454e4b62292ae4df09a6e745f8fcc90e1d72091d798c4a8bb1f4e7d6550fb4d0897a355eac537d87efe1b7164016cd00b4de8e88c07315bba5a18eb4453e4f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xb1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x1, 'l'}, &(0x7f0000000300)={0x20, 0x82, 0x2, 'W]'}, &(0x7f0000000340)={0x20, 0x83, 0x1, 'V'}, &(0x7f0000000380)={0x20, 0x84, 0x3, "6fc962"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "cc4823"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x2) socket(0x10, 0x80002, 0x4) 2m44.574024537s ago: executing program 5 (id=2057): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00032e0000002e0311e6428f0317806ce42152808562295179524bf7f300c8212aa13c87dad587b1a5a6a3ac2f0b5d4ca56694", @ANYRES16=0x0], 0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x2, 0x63, {0x63, 0xe, "a345231d180bbeaf3bfb72dd0249c64001d162f3f069f0184cbb23cfe149b68b6aa9f55bac80252bc8457e67627ea649e038ca5cd46fed350e954175f3dea0bfd20fc3ecd9a656de46f30722fc6ab91069cbb7c3f78d54e516eb5b88676cd29384"}}, &(0x7f0000000140)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "8509dea6a240a5901c8ac5cc9234d363fac079315001ae23dd367bf66dcf9a3dbd17c1c736dfdd9cc3"}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x10, 0x79, "23681c9c11fd39c79fe86a73bff0d9bf3fc29ef718356afa2711804b7a784ef618dd8e0488edd7951908b49757a790b0e0942bec18e38d25f302454e4b62292ae4df09a6e745f8fcc90e1d72091d798c4a8bb1f4e7d6550fb4d0897a355eac537d87efe1b7164016cd00b4de8e88c07315bba5a18eb4453e4f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xb1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x1, 'l'}, &(0x7f0000000300)={0x20, 0x82, 0x2, 'W]'}, &(0x7f0000000340)={0x20, 0x83, 0x1, 'V'}, &(0x7f0000000380)={0x20, 0x84, 0x3, "6fc962"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "cc4823"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x2) socket(0x10, 0x80002, 0x4) 21.414272335s ago: executing program 2 (id=2406): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x700, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 18.757649924s ago: executing program 2 (id=2411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x100) 18.719666876s ago: executing program 1 (id=2412): r0 = socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x4000804) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x801) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$VIDIOC_S_CROP(r13, 0x4014563c, &(0x7f0000000040)={0x2, {0xc, 0xfd5e4cf, 0x1613, 0x5}}) 17.171591823s ago: executing program 2 (id=2414): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x0, 0x6, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 15.894533621s ago: executing program 6 (id=2415): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) inotify_init1(0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "ff8dda77", "a3b581000001015e"}, 0x4e) socket(0x15, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) memfd_create(&(0x7f00000001c0)='\b\x9dF\xd8\b\xb3~u\x06\x00\xdc\xddq\xf6c\r;\xfcO\x8c=\x81\xb1\x17\xbb\xed\xf6b\x84\xb7\'\x8aSpA\xd4\x98\x85D\x7f]N\x8ar\x17O\x0fKR\"\xf68Fx(\xbd\xa8\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x15\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8S5\x11HS\xe0\x87N\x82/\x93\xb9\x9f\x0e\'O\x88v?b\xbf\xbc\xe6\xfd$\x8e\xc2B\x96U7\x84\x91\x8d\xa9\x90s^\xee3\xa93\xe3\v\x86\xa9R\x1a\xc7-\'E\xf2q\x9c\x00\x00~\x81\b\x87XwX\xe1\xa4d\x90\xfdt\xae\x04g\x16\xb2\xab\x00\x00\x00\x00\x00\x00', 0x6) socket$inet6(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r1, 0x5d62, 0x0, 0x0, 0x0, 0x0) 15.834642567s ago: executing program 2 (id=2416): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xd804, 0x100) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$key(0xf, 0x3, 0x2) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 14.730966352s ago: executing program 1 (id=2418): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 13.590166323s ago: executing program 6 (id=2419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85", @ANYRES32], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13.317906083s ago: executing program 2 (id=2421): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 12.355612174s ago: executing program 1 (id=2422): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 11.16842702s ago: executing program 6 (id=2424): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 9.721309734s ago: executing program 1 (id=2425): bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000b40)={0x77359400}) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 7.8952802s ago: executing program 6 (id=2426): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 7.217695169s ago: executing program 7 (id=2427): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a0101010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.833507225s ago: executing program 1 (id=2428): r0 = socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x4000804) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x801) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$VIDIOC_S_CROP(r13, 0x4014563c, &(0x7f0000000040)={0x2, {0xc, 0xfd5e4cf, 0x1613, 0x5}}) 5.65421096s ago: executing program 6 (id=2429): socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5.653692048s ago: executing program 7 (id=2430): socket(0x2, 0x80805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x79, 0x0, 0x419}}}, 0x7) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x14, 0x2, 0x3, 0x801}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) 4.288753901s ago: executing program 7 (id=2431): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) socketpair(0x22, 0x5, 0xfffffff7, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640)="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", 0x12e) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) read$ptp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) 3.23967439s ago: executing program 7 (id=2432): socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r1 = syz_io_uring_setup(0x823, &(0x7f0000000480)={0x0, 0x98b8, 0x80, 0x1, 0x5d}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1fffffffffffffaa, &(0x7f0000000200)=[{0x30, 0x9, 0x0, 0x6}]}, 0xfffffffffffffdf1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.706333685s ago: executing program 7 (id=2433): socket(0x29, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.280202738s ago: executing program 7 (id=2434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 57.012074ms ago: executing program 1 (id=2435): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0/../file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) keyctl$set_timeout(0xf, 0x0, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x31) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r1 = syz_open_procfs(r0, &(0x7f00000002c0)='fdinfo/3\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 54.61126ms ago: executing program 6 (id=2436): io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x404142, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 0s ago: executing program 2 (id=2437): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x2, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000340)=0x3) kernel console output (not intermixed with test programs): 605.103856][ T5869] playstation 0003:054C:05C4.0016: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 605.475573][ T5869] playstation 0003:054C:05C4.0016: Failed to retrieve feature with reportID 163: -32 [ 605.494575][ T5869] playstation 0003:054C:05C4.0016: Failed to retrieve DualShock4 firmware info: -32 [ 605.515704][ T5869] playstation 0003:054C:05C4.0016: Failed to get firmware info from DualShock4 [ 605.525350][ T5869] playstation 0003:054C:05C4.0016: HW/FW version data in sysfs will be invalid. [ 605.557239][ T5869] input: HID 054c:05c4 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0016/input/input29 [ 605.662879][ T5869] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0016/input/input30 [ 605.827674][ T5869] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0016/input/input31 [ 606.309785][T11203] UHID_CREATE from different security context by process 1003 (syz.2.1552), this is not allowed. [ 606.341779][ T5869] playstation 0003:054C:05C4.0016: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 606.363855][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.392502][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.420468][ T5869] usb 6-1: USB disconnect, device number 20 [ 606.428982][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.450548][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.478471][ T5897] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 606.499759][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.507305][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.527039][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.540360][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.564660][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.580763][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.599460][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.625835][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.648397][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.681181][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.688973][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.709171][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 606.909753][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.919027][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.929695][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.939115][ T5897] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 606.952774][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.960738][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.969855][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 606.977395][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.003372][ T5897] usb 2-1: config 0 descriptor?? [ 607.012389][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.020417][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.028988][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.037163][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.152503][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.174367][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.182954][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.192141][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.201524][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.210348][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.382042][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.479454][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.497248][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.505803][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.516598][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.524449][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.534136][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.542311][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.550921][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.558845][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.566669][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.574666][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.583155][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.590926][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.598587][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.611432][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.619024][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.627025][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.635127][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.642823][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.650490][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.658185][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.666253][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.673780][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.692789][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.705308][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.714403][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.723372][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.737738][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.751966][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.769544][ T5897] apple 0003:05AC:0264.0018: hidraw0: USB HID vff.ff Device [HID 05ac:0264] on usb-dummy_hcd.1-1/input0 [ 607.786349][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.799539][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.820362][ T5869] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 607.828145][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828201][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828229][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828256][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828283][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828310][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828345][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828372][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828398][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828424][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828463][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.828488][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.890254][ T973] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 607.929453][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.937095][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.944804][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.952909][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.960750][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.968415][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.985755][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 607.993408][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 608.005375][ T5897] usb 2-1: USB disconnect, device number 31 [ 608.018996][T10042] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 608.035481][T10042] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.03 Device [syz1] on syz1 [ 608.049992][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 608.060073][ T973] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.080594][ T973] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.097779][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.107265][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.119812][ T973] usb 6-1: Product: syz [ 608.124154][ T973] usb 6-1: Manufacturer: syz [ 608.129429][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.139928][ T973] usb 6-1: SerialNumber: syz [ 608.151378][ T5869] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 608.171614][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.199892][ T5869] usb 4-1: config 0 descriptor?? [ 608.677537][ T5869] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 608.983391][ T5869] usb 4-1: USB disconnect, device number 18 [ 609.119106][ T5897] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 609.135195][T11242] kvm: user requested TSC rate below hardware speed [ 609.248996][ T973] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 609.255701][ T973] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 609.271173][ T973] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 609.319753][ T5897] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 609.519252][ T5897] usb 5-1: config 0 has no interface number 0 [ 609.544811][ T5897] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 609.578310][ T5897] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 609.612260][ T5897] usb 5-1: config 0 interface 230 has no altsetting 0 [ 609.624871][ T5897] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 609.644389][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.652726][ T5897] usb 5-1: Product: syz [ 609.684758][ T5897] usb 5-1: Manufacturer: syz [ 609.693558][ T973] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 609.695964][ T5897] usb 5-1: SerialNumber: syz [ 609.733044][ T5897] usb 5-1: config 0 descriptor?? [ 609.740407][T11238] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.749200][T11238] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.771810][ T973] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 609.778823][ T5897] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 609.814106][ T5897] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 609.827647][ T973] usb 6-1: USB disconnect, device number 21 [ 609.881075][ T973] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 610.583675][T10042] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 610.658575][ T47] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 610.754305][T10042] usb 2-1: Using ep0 maxpacket: 16 [ 610.761942][T10042] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 610.770496][T10042] usb 2-1: config 0 has no interface number 0 [ 610.777209][T10042] usb 2-1: config 0 interface 6 has no altsetting 0 [ 610.789770][T10042] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=84.99 [ 610.799394][T10042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.807523][T10042] usb 2-1: Product: syz [ 610.812885][T10042] usb 2-1: Manufacturer: syz [ 610.817686][T10042] usb 2-1: SerialNumber: syz [ 610.825428][T10042] usb 2-1: config 0 descriptor?? [ 610.830718][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 610.841449][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.854921][T10042] ums-sddr09 2-1:0.6: USB Mass Storage device detected [ 610.862457][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.873740][ T47] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 610.886269][T10042] ums-sddr09 2-1:0.6: This device (04e6,0003,8499 S 06 P 2e) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc) [ 610.886269][T10042] Please send a copy of this message to and [ 610.917818][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.929414][ T47] usb 4-1: config 0 descriptor?? [ 611.147347][ T973] usb 2-1: USB disconnect, device number 32 [ 611.185294][T11267] loop9: detected capacity change from 0 to 7 [ 611.202196][T11267] Dev loop9: unable to read RDB block 7 [ 611.211239][T11267] loop9: unable to read partition table [ 611.217752][T11267] loop9: partition table beyond EOD, truncated [ 611.235385][T11267] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.268286][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 611.291635][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 611.321932][ T47] usb 4-1: USB disconnect, device number 19 [ 611.488872][T11284] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 611.871527][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 611.883282][T11296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.895572][T11296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.913457][T11296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.923961][T11296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.272533][ T5897] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 612.448962][T11310] netlink: 'syz.3.1593': attribute type 1 has an invalid length. [ 612.493745][ T973] usb 5-1: USB disconnect, device number 22 [ 612.605793][T11310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 612.722725][T11313] bridge0: port 3(vlan2) entered blocking state [ 612.729559][T11313] bridge0: port 3(vlan2) entered forwarding state [ 612.812579][T11313] bond2: (slave dummy0): making interface the new active one [ 612.856647][T11313] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 613.277282][ T47] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 613.394573][ T5836] block nbd5: Receive control failed (result -107) [ 613.448914][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 613.454312][T11337] nbd5: detected capacity change from 0 to 12 [ 613.459502][ T47] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 613.470146][T11337] block nbd5: Dead connection, failed to find a fallback [ 613.470205][T11337] block nbd5: shutting down sockets [ 613.470230][T11337] blk_print_req_error: 27 callbacks suppressed [ 613.470243][T11337] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 613.470999][T11337] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.484348][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.497221][T11337] buffer_io_error: 27 callbacks suppressed [ 613.497320][T11337] Buffer I/O error on dev nbd5, logical block 0, async page read [ 613.500715][ T47] usb 4-1: Product: syz [ 613.511743][T11337] I/O error, dev nbd5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.518353][ T47] usb 4-1: Manufacturer: syz [ 613.531689][T11337] Buffer I/O error on dev nbd5, logical block 1, async page read [ 613.532461][ T47] usb 4-1: SerialNumber: syz [ 613.570805][ T9898] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.580597][ T9898] Buffer I/O error on dev nbd5, logical block 0, async page read [ 613.590572][ T9898] I/O error, dev nbd5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.600915][ T47] usb 4-1: config 0 descriptor?? [ 613.614891][ T9898] Buffer I/O error on dev nbd5, logical block 1, async page read [ 613.623965][ T9898] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.633442][ T9898] Buffer I/O error on dev nbd5, logical block 0, async page read [ 613.642099][ T9898] I/O error, dev nbd5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.651283][ T9898] Buffer I/O error on dev nbd5, logical block 1, async page read [ 613.661568][ T9898] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.670986][ T9898] Buffer I/O error on dev nbd5, logical block 0, async page read [ 613.679700][ T9898] I/O error, dev nbd5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.689635][ T9898] Buffer I/O error on dev nbd5, logical block 1, async page read [ 613.698433][ T9898] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.708418][ T9898] Buffer I/O error on dev nbd5, logical block 0, async page read [ 613.716679][ T9898] Buffer I/O error on dev nbd5, logical block 1, async page read [ 613.727658][ T9898] ldm_validate_partition_table(): Disk read failed. [ 613.747835][ T9898] Dev nbd5: unable to read RDB block 0 [ 613.754589][ T9898] nbd5: unable to read partition table [ 613.763806][ T9898] nbd5: partition table beyond EOD, truncated [ 613.810893][ T9898] ldm_validate_partition_table(): Disk read failed. [ 613.818652][ T9898] Dev nbd5: unable to read RDB block 0 [ 613.824937][ T9898] nbd5: unable to read partition table [ 613.830986][ T9898] nbd5: partition table beyond EOD, truncated [ 613.848910][ T47] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 614.184124][ T30] audit: type=1326 audit(1746374214.610:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11345 comm="syz.4.1605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc51038e969 code=0x0 [ 614.399902][ T5897] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 614.607373][ T5897] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.622063][ T5897] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.640367][ T5897] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 614.703325][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.969212][ T5897] usb 6-1: usb_control_msg returned -32 [ 614.980716][ T5897] usbtmc 6-1:16.0: can't read capabilities [ 615.207336][T11358] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1607'. [ 615.267842][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 615.635434][ T47] usb write operation failed. (-71) [ 615.683781][ T47] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 615.695426][ T47] dvbdev: DVB: registering new adapter (Terratec H7) [ 615.703667][ T47] usb 4-1: media controller created [ 615.727901][ T47] usb read operation failed. (-71) [ 615.745577][ T47] usb write operation failed. (-71) [ 615.769075][ T9] usb 6-1: USB disconnect, device number 22 [ 615.796734][ T47] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 615.945946][ T47] usb 4-1: USB disconnect, device number 20 [ 617.428132][T11400] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1621'. [ 617.489104][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 619.211492][T11411] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 619.221523][T11411] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 619.759074][T11415] pim6reg1: entered promiscuous mode [ 619.765027][T11415] pim6reg1: entered allmulticast mode [ 620.189982][T11426] syzkaller0: entered promiscuous mode [ 620.205450][ T5875] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 620.215695][T11426] syzkaller0: entered allmulticast mode [ 620.293242][T11423] netlink: 'syz.1.1630': attribute type 5 has an invalid length. [ 620.393413][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.418861][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.439733][ T5875] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 620.471064][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.508953][ T5875] usb 3-1: config 0 descriptor?? [ 620.666704][T11440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.060981][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 621.382951][ T5875] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 621.390525][ T5875] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 621.474421][ T5875] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001A/input/input33 [ 621.540599][ T5875] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 621.612775][ T5875] usb 3-1: USB disconnect, device number 20 [ 622.177309][T11449] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 622.186796][T11449] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 622.926777][T11458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.265482][T11465] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 623.325411][T11465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 623.379227][T10042] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 623.541907][T10042] usb 2-1: Using ep0 maxpacket: 8 [ 623.566171][T10042] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.581185][T10042] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.594410][T10042] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.605958][T10042] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.619704][T10042] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 623.630609][T10042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.903832][T10042] usb 2-1: GET_CAPABILITIES returned 0 [ 623.920740][T10042] usbtmc 2-1:16.0: can't read capabilities [ 624.140652][T10042] usb 2-1: USB disconnect, device number 33 [ 625.822370][T11492] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 625.831577][T11492] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 627.641695][T11533] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 627.650965][T11533] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 629.196255][T10042] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 629.422539][T10042] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.469140][T10042] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.497724][T10042] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 630.521678][T10042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.999823][T10042] usb 6-1: config 0 descriptor?? [ 631.551049][T11561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.549232][T10042] uclogic 0003:256C:006D.001B: v1 frame probing failed: -71 [ 632.549342][T10042] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 632.549455][T10042] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 632.564059][T10042] usb 6-1: USB disconnect, device number 23 [ 632.686292][T11581] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 632.695923][T11581] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 636.403246][T11586] ip6erspan0: entered allmulticast mode [ 640.433563][T11622] Bluetooth: (null): Too short H5 packet [ 640.458798][T11624] loop9: detected capacity change from 0 to 7 [ 640.489470][T11624] Dev loop9: unable to read RDB block 7 [ 640.517831][T11624] loop9: AHDI p1 p2 [ 640.543560][T11624] loop9: partition table partially beyond EOD, truncated [ 640.630902][T11624] loop9: p1 start 118489088 is beyond EOD, truncated [ 642.812194][T11647] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 642.821224][T11647] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 643.443905][T11656] only policy match revision 0 supported [ 643.443935][T11656] unable to load match [ 643.798808][T11672] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 643.885535][ T1139] batman_adv: batadv1: IGMP Querier disappeared - multicast optimizations disabled [ 644.046821][T11678] bond1: (slave gretap1): making interface the new active one [ 644.092930][T11678] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 644.104025][T11683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.653789][T11693] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 644.663038][T11693] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 646.183049][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 646.362035][T11737] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 646.371618][T11737] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 646.899323][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 647.028908][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.098577][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.121805][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 647.146372][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.187537][ T9] usb 6-1: config 0 descriptor?? [ 647.508637][ T5875] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 647.570105][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 647.612365][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.681507][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.694808][ T9] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 647.723415][ T5875] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 647.732621][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.789473][ T5875] usb 2-1: config 0 descriptor?? [ 647.804163][ T5875] pwc: Askey VC010 type 2 USB webcam detected. [ 647.817361][T11752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.949457][ T5897] usb 6-1: USB disconnect, device number 24 [ 648.232602][ T5875] pwc: recv_control_msg error -32 req 02 val 2b00 [ 648.244881][ T5875] pwc: recv_control_msg error -32 req 02 val 2700 [ 648.269164][ T5875] pwc: recv_control_msg error -32 req 02 val 2c00 [ 648.297179][ T5875] pwc: recv_control_msg error -32 req 04 val 1000 [ 648.311746][ T5875] pwc: recv_control_msg error -32 req 04 val 1300 [ 648.623321][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 648.840620][ T5875] pwc: recv_control_msg error -71 req 02 val 2000 [ 648.852866][ T5875] pwc: recv_control_msg error -71 req 02 val 2100 [ 648.864418][ T5875] pwc: recv_control_msg error -71 req 04 val 1500 [ 648.872231][ T5875] pwc: recv_control_msg error -71 req 02 val 2500 [ 648.879702][ T5875] pwc: recv_control_msg error -71 req 02 val 2400 [ 648.888301][ T5875] pwc: recv_control_msg error -71 req 02 val 2600 [ 648.898849][ T5875] pwc: recv_control_msg error -71 req 02 val 2900 [ 648.908546][ T5875] pwc: recv_control_msg error -71 req 02 val 2800 [ 648.916492][ T5875] pwc: recv_control_msg error -71 req 04 val 1100 [ 648.934979][ T5875] pwc: recv_control_msg error -71 req 04 val 1200 [ 648.952021][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 648.982163][ T5836] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 648.991577][ T5875] pwc: Registered as video103. [ 649.011299][ T5875] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 649.111055][ T5875] usb 2-1: USB disconnect, device number 34 [ 649.373873][T11774] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 651.175823][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 651.206936][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 651.347282][T11802] syzkaller0: entered promiscuous mode [ 651.352845][T11802] syzkaller0: entered allmulticast mode [ 654.914155][T11831] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1755'. [ 655.511191][T11837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.518308][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 655.567404][T11836] syz_tun: entered promiscuous mode [ 655.583185][T11836] syz_tun: left promiscuous mode [ 655.668172][T11843] bond2: (slave dummy0): Releasing active interface [ 655.711143][T11843] bridge0: port 3(vlan2) entered disabled state [ 655.731704][T11843] bridge_slave_0: left allmulticast mode [ 655.747561][T11843] bridge_slave_0: left promiscuous mode [ 655.756668][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.965943][T11850] netlink: 'syz.3.1759': attribute type 10 has an invalid length. [ 656.962516][T11843] bridge_slave_1: left allmulticast mode [ 656.968327][T11843] bridge_slave_1: left promiscuous mode [ 656.979106][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.007948][T11843] bond0: (slave bond_slave_0): Releasing backup interface [ 657.034292][T11843] bond0: (slave bond_slave_1): Releasing backup interface [ 657.074160][T11843] team0: Port device team_slave_0 removed [ 657.095995][T11843] team0: Port device team_slave_1 removed [ 657.105829][T11843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.116803][T11843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.127937][T11843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.136405][T11843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.162020][T11843] team0: Port device geneve0 removed [ 657.243833][T11843] bond0: (slave wlan1): Releasing backup interface [ 657.326169][T11843] vlan2: left allmulticast mode [ 657.331975][T11843] dummy0: left allmulticast mode [ 657.340142][T11843] vlan2: left promiscuous mode [ 657.346479][T11843] dummy0: left promiscuous mode [ 657.355809][T11843] bridge0: port 3(vlan2) entered disabled state [ 657.409624][T11843] bond1: (slave ip6tnl2): Releasing backup interface [ 657.911930][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.926199][T11850] team0: Port device bond0 added [ 658.434490][ T47] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 658.771836][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 658.852149][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 658.870707][ T47] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 658.881075][ T47] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 658.898085][ T47] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 658.909355][ T47] usb 5-1: config 250 has no interface number 0 [ 658.920797][ T47] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 658.935392][T11879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 658.940792][ T47] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 658.978759][T11881] macsec1: entered promiscuous mode [ 658.995732][T11881] bond2: entered promiscuous mode [ 659.013115][T11881] bond2: left promiscuous mode [ 659.080775][ T47] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 659.092183][ T47] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 659.103933][ T47] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 659.117890][ T47] usb 5-1: config 250 interface 228 has no altsetting 0 [ 659.128531][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 659.142683][ T47] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 659.151489][ T47] usb 5-1: Product: syz [ 659.155815][ T47] usb 5-1: SerialNumber: syz [ 659.196219][ T47] hub 5-1:250.228: bad descriptor, ignoring hub [ 659.235423][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1769'. [ 659.237672][ T47] hub 5-1:250.228: probe with driver hub failed with error -5 [ 659.428132][ T47] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 660.132675][T11866] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 661.113332][ T5875] usb 5-1: USB disconnect, device number 23 [ 661.155875][ T5875] usblp0: removed [ 661.525085][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1779'. [ 661.673820][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1779'. [ 661.874266][T11925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.901360][ T5875] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 667.076092][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 667.086724][ T5875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 667.113617][ T5875] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 667.136078][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.144610][ T5875] usb 3-1: Product: syz [ 667.161046][ T5875] usb 3-1: Manufacturer: syz [ 667.165946][ T5875] usb 3-1: SerialNumber: syz [ 667.252891][ T5875] usb 3-1: config 0 descriptor?? [ 667.262444][ T5875] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 668.466420][ T5875] gspca_zc3xx: reg_w_i err -71 [ 669.103685][ T5875] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 669.110281][ T5875] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 669.147649][ T5875] usb 3-1: USB disconnect, device number 21 [ 669.510011][T12002] binder_alloc: 12001: binder_alloc_buf, no vma [ 671.578346][T12030] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 671.730449][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 671.870364][T12038] Bluetooth: hci5: Frame reassembly failed (-90) [ 671.889120][ T7236] Bluetooth: hci5: Frame reassembly failed (-84) [ 672.245429][T12051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 674.097456][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 674.834128][T12069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.196937][T10042] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 676.867098][T10042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.897981][T10042] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 676.919003][T10042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.938210][T10042] usb 2-1: config 0 descriptor?? [ 677.215300][T10042] usbhid 2-1:0.0: can't add hid device: -71 [ 677.229038][T10042] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 677.298787][T10042] usb 2-1: USB disconnect, device number 35 [ 678.294242][T10042] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 678.651445][T10042] usb 2-1: Using ep0 maxpacket: 32 [ 678.659408][T10042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.682341][T10042] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 678.715287][T10042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.723891][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 678.741634][T10042] usb 2-1: config 0 descriptor?? [ 678.750593][T10042] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 678.771132][T10042] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 679.044649][T10042] usb 2-1: USB disconnect, device number 36 [ 679.054922][T10042] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 679.200518][T12129] binder: 12127:12129 ioctl c0306201 2000000003c0 returned -14 [ 679.580479][ T3075] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 679.666038][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 679.764508][ T3075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 679.782104][ T3075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.796817][ T3075] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 679.810009][ T3075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.825837][ T3075] usb 5-1: config 0 descriptor?? [ 679.844072][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1859'. [ 679.881846][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 679.917284][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 679.933320][ T9] usb 4-1: too many configurations: 22, using maximum allowed: 8 [ 679.954327][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 679.987255][ T9] usb 4-1: config 5 has no interface number 0 [ 679.993533][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.033612][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.042046][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 680.050297][ T9] usb 4-1: config 5 has no interface number 0 [ 680.078026][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.103253][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.123235][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 680.132008][ T9] usb 4-1: config 5 has no interface number 0 [ 680.152063][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.167623][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.206596][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 680.215477][ T9] usb 4-1: config 5 has no interface number 0 [ 680.221674][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.235517][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.244228][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 680.256270][ T9] usb 4-1: config 5 has no interface number 0 [ 680.262931][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.281115][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.292091][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 680.304261][ T9] usb 4-1: config 5 has no interface number 0 [ 680.310899][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.336445][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.358125][ T3075] elan 0003:04F3:0755.001D: failed to start in urb: -90 [ 680.371022][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 680.381708][ T9] usb 4-1: config 5 has no interface number 0 [ 680.389636][ T3075] elan 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 680.391384][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.421068][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.429745][ T9] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 680.443470][ T9] usb 4-1: config 5 has no interface number 0 [ 680.450478][ T9] usb 4-1: config 5 interface 215 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.468546][ T9] usb 4-1: config 5 interface 215 has no altsetting 0 [ 680.478932][ T9] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 680.488091][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=225 [ 680.497467][ T9] usb 4-1: Product: syz [ 680.505625][ T9] usb 4-1: Manufacturer: syz [ 680.513855][ T9] usb 4-1: SerialNumber: syz [ 680.588586][ T3075] usb 5-1: USB disconnect, device number 24 [ 680.756576][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.765829][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.217343][ T9] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected [ 684.257519][ T9] earthmate ttyUSB0: required endpoint is missing [ 684.301020][T12166] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 684.337278][ T9] usb 4-1: USB disconnect, device number 21 [ 684.362801][ T9] cypress_m8 4-1:5.215: device disconnected [ 684.397403][T12170] kvm: pic: level sensitive irq not supported [ 684.397911][T12170] kvm: pic: non byte read [ 684.448021][T12170] kvm: pic: level sensitive irq not supported [ 684.448521][T12170] kvm: pic: non byte read [ 684.501863][T12170] kvm: pic: level sensitive irq not supported [ 684.501952][T12170] kvm: pic: non byte read [ 685.417517][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 685.633160][ T30] audit: type=1800 audit(1746374281.435:260): pid=12189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1873" name="/" dev="fuse" ino=0 res=0 errno=0 [ 685.642104][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 685.721129][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.756981][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 685.773037][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 685.801128][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.831911][ T9] usb 3-1: Product: syz [ 685.840135][T12203] batman_adv: batadv0: Adding interface: dummy0 [ 685.850060][ T9] usb 3-1: Manufacturer: syz [ 685.850551][T12203] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.855502][ T9] usb 3-1: SerialNumber: syz [ 685.885243][T12203] batman_adv: batadv0: Interface activated: dummy0 [ 685.917238][T12206] batadv0: mtu less than device minimum [ 685.934075][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 685.947437][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 685.948475][ T9] usb 3-1: config 0 descriptor?? [ 685.960498][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 685.976089][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 685.988215][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.000303][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.012748][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.025051][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.037745][T12206] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 686.127424][T10042] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 686.205912][T12209] kvm: emulating exchange as write [ 686.296390][T10042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.315813][T10042] usb 4-1: config 0 has no interfaces? [ 686.328618][T10042] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 686.355293][T10042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.461041][T12216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.600171][T10042] usb 4-1: config 0 descriptor?? [ 687.069271][ T3075] usb 4-1: USB disconnect, device number 22 [ 687.170408][T10042] usb 3-1: USB disconnect, device number 22 [ 687.385940][T12226] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.713096][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 688.165480][ T5875] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 688.389519][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 688.472975][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 688.580238][ T5875] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 688.682537][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 688.789736][ T5875] usb 3-1: Product: syz [ 688.801027][ T5875] usb 3-1: Manufacturer: syz [ 688.819905][ T5875] usb 3-1: SerialNumber: syz [ 688.851031][ T5875] usb 3-1: config 0 descriptor?? [ 688.876330][T12235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 689.056930][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.259720][ T9] usb 3-1: USB disconnect, device number 23 [ 689.322704][T12257] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 689.377859][T12257] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 689.387050][T12257] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 689.396579][T12257] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 689.404800][T12257] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 689.413239][T12257] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 689.422016][T12257] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 689.430495][T12257] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 689.439173][T12257] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 689.447596][T12257] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 690.570602][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 690.755838][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 690.766235][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 690.801906][ T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 690.826945][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.835092][ T9] usb 4-1: Product: syz [ 690.849624][ T9] usb 4-1: Manufacturer: syz [ 690.854594][ T9] usb 4-1: SerialNumber: syz [ 690.872708][ T9] usb 4-1: config 0 descriptor?? [ 690.878900][T12276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 690.891892][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 690.897920][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 690.911122][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 691.019855][T10042] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 691.152284][ T5897] usb 4-1: USB disconnect, device number 23 [ 691.152347][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 691.204581][T10042] usb 5-1: Using ep0 maxpacket: 32 [ 691.237317][T10042] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 691.246781][T10042] usb 5-1: config 0 has no interface number 0 [ 691.262113][T10042] usb 5-1: config 0 interface 12 has no altsetting 0 [ 691.273083][T10042] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 691.294553][T10042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.305244][T10042] usb 5-1: Product: syz [ 691.310613][T10042] usb 5-1: Manufacturer: syz [ 691.315316][T10042] usb 5-1: SerialNumber: syz [ 691.325850][T10042] usb 5-1: config 0 descriptor?? [ 692.953181][T12303] syzkaller0: entered promiscuous mode [ 692.995564][T12303] syzkaller0: entered allmulticast mode [ 693.399765][T10042] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 693.435928][T10042] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 693.483267][T10042] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 693.548153][T10042] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 693.575988][T10042] usb 5-1: USB disconnect, device number 25 [ 693.678796][T12316] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1905'. [ 693.767748][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 695.060687][T12331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.442013][T12352] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 698.450348][ T5897] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 698.513593][T10042] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 698.647847][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 698.655554][ T5897] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 698.669159][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.684587][T10042] usb 6-1: Using ep0 maxpacket: 8 [ 698.713280][T10042] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 698.742600][ T5897] usb 5-1: config 0 descriptor?? [ 698.799713][T10042] usb 6-1: config 179 has no interface number 0 [ 698.865194][T10042] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 698.931856][T10042] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 698.996013][T10042] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 699.092241][T10042] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 699.167332][T10042] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 699.277698][T10042] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 699.296797][ T47] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 699.313528][T10042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.340195][ T47] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 699.362335][T12373] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 699.379619][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 699.388193][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 699.442243][ T5897] usb 5-1: USB disconnect, device number 26 [ 699.708834][T10042] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input36 [ 699.909754][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.934268][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.954902][ T5869] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 700.164112][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 700.206580][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.215389][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 700.223764][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 700.233062][ T5897] usb 6-1: USB disconnect, device number 25 [ 700.288662][ T5869] usb 3-1: config 0 descriptor?? [ 700.821570][ T5869] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 701.336177][ T5897] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 701.550337][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.586787][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.614755][ T5897] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 701.635221][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.669789][ T5897] usb 2-1: config 0 descriptor?? [ 702.526651][ T5897] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0 [ 702.547582][ T5869] gspca_stv06xx: HDCS-1020 sensor detected [ 702.558523][ T5897] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0 [ 702.592631][ T5897] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0 [ 702.623960][ T5897] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0 [ 702.650384][ T5897] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0 [ 702.672774][T12424] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1944'. [ 702.677457][T12423] kvm: pic: single mode not supported [ 702.684449][T12423] kvm: pic: level sensitive irq not supported [ 702.691315][T12423] kvm: pic: single mode not supported [ 702.694224][ T5897] lenovo 0003:17EF:6047.001F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 702.697613][T12423] kvm: pic: level sensitive irq not supported [ 702.824024][ T5869] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 702.842280][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 702.850093][ T5869] usb 3-1: USB disconnect, device number 24 [ 702.942627][ T5897] lenovo 0003:17EF:6047.001F: Failed to switch middle button: -71 [ 702.990929][ T5897] lenovo 0003:17EF:6047.001F: Fn-lock setting failed: -71 [ 703.029583][ T5897] lenovo 0003:17EF:6047.001F: Sensitivity setting failed: -71 [ 703.034756][T12428] evm: overlay not supported [ 703.073667][ T5897] usb 2-1: USB disconnect, device number 37 [ 703.730777][ T5869] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 703.849280][ T5897] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 703.901590][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 703.915261][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.944244][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 703.965623][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 703.987036][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 703.996406][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.019660][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 704.029678][ T5897] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 704.032839][ T5869] usb 3-1: config 0 descriptor?? [ 704.053592][T12439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 704.063416][ T5869] hub 3-1:0.0: USB hub found [ 704.071242][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.096340][ T5897] usb 2-1: config 0 descriptor?? [ 704.305425][ T5869] hub 3-1:0.0: 2 ports detected [ 704.339128][ T5897] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 704.906530][ T47] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 705.105067][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.118304][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 705.134231][ T47] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 705.147828][ T47] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 705.156678][ T47] usb 6-1: Manufacturer: syz [ 705.177533][ T47] usb 6-1: config 0 descriptor?? [ 705.344810][ T5875] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 705.429790][ T9] usb 6-1: USB disconnect, device number 26 [ 705.516088][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 705.524283][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 705.527023][ T47] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 705.539647][ T5875] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 705.552734][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.561017][ T5875] usb 4-1: Product: syz [ 705.565265][ T5875] usb 4-1: Manufacturer: syz [ 705.569963][ T5875] usb 4-1: SerialNumber: syz [ 705.578653][ T5875] usb 4-1: config 0 descriptor?? [ 705.597151][ T5875] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 705.735884][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.747483][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.762011][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 705.771864][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.842633][ T12] usb 4-1: Failed to submit usb control message: -71 [ 705.843156][ T3075] usb 4-1: USB disconnect, device number 24 [ 705.851740][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 705.867212][ T12] usb 4-1: unable to get target info from device [ 705.877953][ T12] usb 4-1: could not get target info (-71) [ 705.884755][ T12] usb 4-1: could not probe fw (-71) [ 706.012465][ T47] usb 5-1: GET_CAPABILITIES returned 0 [ 706.018767][ T47] usbtmc 5-1:16.0: can't read capabilities [ 706.230233][ T47] usb 5-1: USB disconnect, device number 27 [ 706.336650][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 706.354646][ T9] usb 3-1: Failed to suspend device, error -71 [ 706.393166][ T3075] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 706.412656][T10042] usb 3-1: USB disconnect, device number 25 [ 706.541185][ T5897] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 706.552036][ T5897] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 706.564298][ T5897] asix 2-1:0.0: probe with driver asix failed with error -71 [ 706.575784][ T3075] usb 6-1: Using ep0 maxpacket: 8 [ 706.584394][ T3075] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 706.592747][ T5897] usb 2-1: USB disconnect, device number 38 [ 706.599443][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 706.616576][ T3075] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.629065][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.640336][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 706.654241][ T3075] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 706.664452][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 706.678955][ T3075] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.692920][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.704426][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 706.717268][ T3075] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 706.725237][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 706.736976][ T3075] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.748930][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.760807][ T3075] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 706.776572][ T3075] usb 6-1: string descriptor 0 read error: -22 [ 706.784794][ T3075] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 706.794643][ T3075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.826499][ T3075] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 707.999466][T12498] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1970'. [ 708.059706][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 708.616332][ T5897] usb 6-1: USB disconnect, device number 27 [ 709.315084][T12513] netlink: 'syz.2.1981': attribute type 5 has an invalid length. [ 709.333105][T12513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1981'. [ 710.659681][ T1159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.873718][ T1159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.208081][ T1159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.951959][ T5869] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 712.130649][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 712.171066][T10230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 712.185310][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.197657][T10230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 712.217677][T10230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 712.237994][T10230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 712.247350][T10230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 712.255527][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 712.369599][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.456503][ T5869] usb 2-1: config 0 descriptor?? [ 712.681511][T12555] binder: 12554:12555 ioctl c0306201 200000000640 returned -14 [ 712.922813][ T5869] logitech-djreceiver 0003:046D:C52F.0020: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0 [ 713.134383][ T5869] usb 2-1: USB disconnect, device number 39 [ 713.697084][ T1159] team0: Port device bond0 removed [ 713.704030][ T1159] bond0 (unregistering): Released all slaves [ 713.720092][ T1159] bond1 (unregistering): Released all slaves [ 713.893400][ T1159] bond2 (unregistering): Released all slaves [ 714.030571][ T1159] tipc: Left network mode [ 714.453302][T10230] Bluetooth: hci1: command tx timeout [ 714.635834][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.244608][T12594] netlink: 'syz.1.1996': attribute type 5 has an invalid length. [ 715.265860][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 715.296983][T12543] chnl_net:caif_netlink_parms(): no params data found [ 715.586800][ T3075] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 715.778263][ T30] audit: type=1800 audit(1746374309.638:261): pid=12557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1990" name="/" dev="fuse" ino=1 res=0 errno=0 [ 715.934178][ T3075] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.953710][ T3075] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.013404][ T3075] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 716.054637][ T3075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 716.096950][ T3075] usb 3-1: SerialNumber: syz [ 716.390227][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.416782][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.430574][ T3075] usb 3-1: 0:2 : does not exist [ 716.435195][T12543] bridge_slave_0: entered allmulticast mode [ 716.445623][ T3075] usb 3-1: unit 255 not found! [ 716.454102][T12543] bridge_slave_0: entered promiscuous mode [ 716.467105][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.475889][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.483400][T12543] bridge_slave_1: entered allmulticast mode [ 716.494762][T12543] bridge_slave_1: entered promiscuous mode [ 716.499059][ T3075] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 716.502920][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1999'. [ 716.522095][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1999'. [ 716.573304][ T3075] usb 3-1: USB disconnect, device number 26 [ 716.678957][ T5836] Bluetooth: hci1: command tx timeout [ 717.161387][T11867] udevd[11867]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.846370][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.907170][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.087253][T12543] team0: Port device team_slave_0 added [ 718.182899][T12543] team0: Port device team_slave_1 added [ 718.290046][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.309408][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.368830][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.453285][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.453306][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.453334][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.540550][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.791875][T12543] hsr_slave_0: entered promiscuous mode [ 718.803516][T12543] hsr_slave_1: entered promiscuous mode [ 718.810982][T12543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.830949][T12543] Cannot create hsr debugfs directory [ 718.874157][ T1159] hsr_slave_0: left promiscuous mode [ 718.886512][ T1159] hsr_slave_1: left promiscuous mode [ 718.900514][T10230] Bluetooth: hci1: command tx timeout [ 718.925645][ T1159] veth1_macvtap: left promiscuous mode [ 718.931251][ T1159] veth0_macvtap: left promiscuous mode [ 718.957344][ T1159] veth1_vlan: left promiscuous mode [ 718.962802][ T1159] veth0_vlan: left promiscuous mode [ 719.124723][T12639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 719.140663][T12639] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 719.164057][T12639] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 719.186509][T12639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 719.204878][T12639] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 719.227691][T12639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 719.248057][T12639] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 719.277381][T12639] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 719.294940][T12639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 719.307215][T12639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 719.330062][T12639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 719.809201][ T30] audit: type=1326 audit(1746374313.407:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12661 comm="syz.1.2010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7478d8e969 code=0x0 [ 720.867600][T10230] Bluetooth: hci0: command 0x0406 tx timeout [ 721.428713][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 721.443295][T10230] Bluetooth: hci3: command 0x0406 tx timeout [ 721.466283][T10230] Bluetooth: hci1: command 0x0c1a tx timeout [ 722.524379][ T3075] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 722.720464][ T3075] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 722.764207][ T3075] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 722.800069][ T3075] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 722.844081][ T3075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.898423][T12685] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 722.912339][ T3075] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 723.091498][T10230] Bluetooth: hci0: command 0x0406 tx timeout [ 723.461937][T12677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2013'. [ 723.491274][T12677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2013'. [ 723.502953][T12677] net_ratelimit: 10 callbacks suppressed [ 723.502973][T12677] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 723.550039][ T5869] usb 6-1: USB disconnect, device number 28 [ 723.616295][T10230] Bluetooth: hci3: command 0x0406 tx timeout [ 723.624026][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 723.690365][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 725.319139][T12708] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 725.328725][T12708] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 725.338366][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 725.789545][T12543] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 725.860083][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 725.924328][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 726.474354][T12543] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 726.511593][T12543] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 726.572796][T12543] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 726.829389][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.974147][T12732] 9pnet_fd: Insufficient options for proto=fd [ 726.980532][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.992448][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.999691][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.023915][T12732] loop6: detected capacity change from 0 to 524287999 [ 727.038654][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.046045][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.114788][ T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 727.192894][T12543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.303859][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 727.318604][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.397462][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.479725][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.537089][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 727.567056][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.614272][ T47] usb 3-1: config 0 descriptor?? [ 727.956119][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.100360][ T47] apple 0003:05AC:0245.0021: unknown main item tag 0x1 [ 728.135093][ T47] apple 0003:05AC:0245.0021: unknown global tag 0xe [ 728.153851][ T47] apple 0003:05AC:0245.0021: item 0 0 1 14 parsing failed [ 728.183956][ T47] apple 0003:05AC:0245.0021: parse failed [ 728.209801][ T47] apple 0003:05AC:0245.0021: probe with driver apple failed with error -22 [ 728.342014][ T3075] usb 3-1: USB disconnect, device number 27 [ 728.865713][T12543] veth0_vlan: entered promiscuous mode [ 728.902831][T12543] veth1_vlan: entered promiscuous mode [ 729.022908][T12543] veth0_macvtap: entered promiscuous mode [ 729.061173][T12543] veth1_macvtap: entered promiscuous mode [ 729.182191][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.195118][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.213696][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.224799][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.254691][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.296870][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.317213][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.352117][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.384804][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.411869][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.434326][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.451822][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.503299][T12543] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.529002][T12543] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.539269][T12543] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.560275][T12543] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.312747][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.345573][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.718413][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.829864][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.353958][T12795] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 731.364202][T12795] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 731.489270][ T5897] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 731.701152][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 731.723096][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 731.782667][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.824306][ T5897] usb 3-1: Product: syz [ 731.855751][ T5897] usb 3-1: Manufacturer: syz [ 731.890077][ T5897] usb 3-1: SerialNumber: syz [ 731.959142][ T5897] usb 3-1: config 0 descriptor?? [ 733.006740][ T5897] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 734.340700][T10230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.359462][T10230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.373004][T10230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.384037][T10230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.392513][T10230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.646246][ T5897] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 734.701040][ T5897] usb 3-1: USB disconnect, device number 28 [ 736.621914][T10230] Bluetooth: hci2: command tx timeout [ 738.493575][T12820] chnl_net:caif_netlink_parms(): no params data found [ 738.828854][T10230] Bluetooth: hci2: command tx timeout [ 739.811394][ T30] audit: type=1804 audit(1746374332.087:263): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2053" name="/newroot/4/bus/file1" dev="overlay" ino=47 res=1 errno=0 [ 741.051496][T10230] Bluetooth: hci2: command tx timeout [ 742.493929][T12820] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.526491][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.559299][T12820] bridge_slave_0: entered allmulticast mode [ 742.604100][T12820] bridge_slave_0: entered promiscuous mode [ 742.696742][T12820] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.734050][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.782027][T12820] bridge_slave_1: entered allmulticast mode [ 742.817134][T12820] bridge_slave_1: entered promiscuous mode [ 742.957693][T12820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.000907][T12820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.066637][T12907] input: syz0 as /devices/virtual/input/input37 [ 743.204597][T12820] team0: Port device team_slave_0 added [ 743.224638][T12820] team0: Port device team_slave_1 added [ 743.275576][T10230] Bluetooth: hci2: command tx timeout [ 743.444258][T12820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.468347][T12820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.526416][T12820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.603710][T12820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.626667][T12820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.684598][T12820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.866912][T12820] hsr_slave_0: entered promiscuous mode [ 743.908900][T12820] hsr_slave_1: entered promiscuous mode [ 743.922780][T12820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.950788][T12820] Cannot create hsr debugfs directory [ 744.062188][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 744.077382][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 744.089007][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 744.110211][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 744.123594][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.855307][T12932] netlink: 'syz.1.2064': attribute type 10 has an invalid length. [ 745.995240][T12932] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.031173][T12932] bond0: (slave team0): Enslaving as an active interface with an up link [ 746.358164][ T5836] Bluetooth: hci4: command tx timeout [ 746.813387][T12946] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 746.823618][T12946] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 747.286169][T12820] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 747.301245][T12820] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 747.349031][T12959] tipc: Started in network mode [ 747.362244][T12959] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 747.396640][T12959] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 747.413493][T12959] tipc: Enabled bearer , priority 10 [ 747.437844][T12820] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 747.494093][T12820] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 747.551610][T12966] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 747.559596][T12966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2072'. [ 747.586987][T12964] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2071'. [ 748.578286][ T5836] Bluetooth: hci4: command tx timeout [ 748.611994][ T5897] tipc: Node number set to 1 [ 749.056702][T12820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.151539][T12820] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.292356][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.299814][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.350401][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.358000][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.427562][T12920] chnl_net:caif_netlink_parms(): no params data found [ 750.403377][T12996] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 750.409286][T12820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.413782][T12996] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 750.801325][ T5836] Bluetooth: hci4: command tx timeout [ 751.752773][T13021] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2082'. [ 751.814100][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 752.616743][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.649088][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.777801][T12920] bridge_slave_0: entered allmulticast mode [ 753.025409][ T5836] Bluetooth: hci4: command tx timeout [ 753.291208][T12920] bridge_slave_0: entered promiscuous mode [ 753.318265][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.333154][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.357098][T12920] bridge_slave_1: entered allmulticast mode [ 753.365118][T12920] bridge_slave_1: entered promiscuous mode [ 754.959587][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2089'. [ 755.007170][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.043105][T13047] dummy0: entered promiscuous mode [ 755.056691][T13047] dummy0: left promiscuous mode [ 755.241250][ T5869] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 755.291034][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.306569][T12820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.548027][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 755.609987][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.091237][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 756.103552][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 756.129983][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 756.140771][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.220519][ T5869] usb 2-1: config 0 descriptor?? [ 756.236025][T12920] team0: Port device team_slave_0 added [ 756.271162][T13043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.290543][T12920] team0: Port device team_slave_1 added [ 756.298981][ T5869] hub 2-1:0.0: USB hub found [ 756.485009][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2093'. [ 756.573100][ T5869] hub 2-1:0.0: 2 ports detected [ 757.275948][T13066] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 757.277268][T12920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.285149][T13066] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 757.292310][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.292373][T12920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.295775][T12920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.362371][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.394749][T12920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.578086][T12920] hsr_slave_0: entered promiscuous mode [ 757.629026][T12920] hsr_slave_1: entered promiscuous mode [ 757.659886][T12920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.673045][T12920] Cannot create hsr debugfs directory [ 758.226608][T12920] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.396875][T12920] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.516587][T12820] veth0_vlan: entered promiscuous mode [ 758.582084][T12920] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.671135][T12820] veth1_vlan: entered promiscuous mode [ 758.716263][ T5869] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 758.838668][T12820] veth0_macvtap: entered promiscuous mode [ 758.876395][T12820] veth1_macvtap: entered promiscuous mode [ 758.963177][T12820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.973896][T12820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.001026][T12820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.032754][T12820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.050621][T12820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.062404][T12820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.073439][T12820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.089660][T12820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.114520][T12820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.129541][ T9] usb 2-1: USB disconnect, device number 40 [ 759.351559][T12820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.369715][T12820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.408912][T12820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.419796][T12820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.431272][T12820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.457316][T12820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.483485][T12820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.500110][T12820] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.509703][T12820] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.518469][T12820] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.527865][T12820] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.592079][T12920] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 760.690001][T12920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 760.746691][T12920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 761.572806][T12920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 761.870238][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.899041][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.031858][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.078274][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.232719][T13115] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 766.236567][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.242244][T13115] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 766.345182][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.402398][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.409665][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.444297][T13121] kvm: pic: non byte read [ 766.449012][T13121] kvm: pic: non byte read [ 766.475637][T13121] kvm: pic: non byte read [ 766.489190][T13121] kvm: pic: non byte read [ 766.497338][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.504656][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.126266][ T3075] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 768.323831][ T3075] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 768.334767][ T3075] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 768.403475][ T3075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 768.467322][T13146] netlink: zone id is out of range [ 768.492824][ T3075] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 768.496368][T13146] netlink: zone id is out of range [ 768.505957][ T3075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.523782][ T3075] usb 3-1: Product: syz [ 768.534874][ T3075] usb 3-1: Manufacturer: syz [ 768.557567][T13146] netlink: zone id is out of range [ 768.563941][ T3075] usb 3-1: SerialNumber: syz [ 768.580170][T13146] netlink: zone id is out of range [ 768.585359][T13146] netlink: zone id is out of range [ 768.595729][ T3075] usb 3-1: config 0 descriptor?? [ 768.621599][T13133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 768.623637][T13146] netlink: set zone limit has 8 unknown bytes [ 768.641646][ T3075] hub 3-1:0.0: bad descriptor, ignoring hub [ 768.664424][ T3075] hub 3-1:0.0: probe with driver hub failed with error -5 [ 768.703434][ T3075] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 768.715109][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.904403][ T9] usb 3-1: USB disconnect, device number 29 [ 768.904593][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 771.905642][T12920] veth0_vlan: entered promiscuous mode [ 771.950275][T12920] veth1_vlan: entered promiscuous mode [ 772.093545][T12920] veth0_macvtap: entered promiscuous mode [ 772.161749][T12920] veth1_macvtap: entered promiscuous mode [ 772.249824][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.262455][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.288228][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.319966][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.341340][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.385604][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.428073][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.475019][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.504239][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.549262][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.587208][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.768109][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.837988][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.053634][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.319965][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.363693][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.394170][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.408872][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.424797][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.447907][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.482832][T12920] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.517158][T12920] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.547323][T12920] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.621466][T12920] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.203601][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.265216][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.506037][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.528672][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.724028][T13242] fuse: Bad value for 'fd' [ 780.699436][ T7236] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.888628][ T7236] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.777517][ T7236] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.306182][T13278] team_slave_0: entered promiscuous mode [ 784.313971][T13278] team_slave_1: entered promiscuous mode [ 784.375817][T13278] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 784.447034][T13278] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 786.500761][ T7236] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.561580][T13323] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input39 [ 792.788668][ T7236] bridge_slave_1: left allmulticast mode [ 792.826324][ T7236] bridge_slave_1: left promiscuous mode [ 792.874601][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.980707][T10230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.012507][T10230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.025992][ T7236] bridge_slave_0: left allmulticast mode [ 793.039592][T10230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 793.048964][ T7236] bridge_slave_0: left promiscuous mode [ 793.224739][T10230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 793.244628][T10230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.883674][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.131662][T10230] Bluetooth: hci4: command tx timeout [ 798.361563][T10230] Bluetooth: hci4: command tx timeout [ 798.994953][ T47] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 799.552329][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 799.599090][ T47] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 799.670007][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.685146][ T47] usb 3-1: Product: syz [ 799.711087][ T47] usb 3-1: Manufacturer: syz [ 799.715823][ T47] usb 3-1: SerialNumber: syz [ 799.773597][ T47] usb 3-1: config 0 descriptor?? [ 799.796173][ T47] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 800.618941][T10230] Bluetooth: hci4: command tx timeout [ 801.090169][ T47] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 801.139524][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.206624][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.246112][ T7236] bond0 (unregistering): Released all slaves [ 802.802078][T10230] Bluetooth: hci4: command tx timeout [ 803.477270][ T5869] usb 3-1: USB disconnect, device number 30 [ 807.585123][ T7236] hsr_slave_0: left promiscuous mode [ 807.664742][ T7236] hsr_slave_1: left promiscuous mode [ 807.674437][T13460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.697560][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.723728][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.810516][ T7236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.830012][ T7236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.941346][ T7236] veth1_macvtap: left promiscuous mode [ 807.951861][ T7236] veth0_macvtap: left promiscuous mode [ 807.962425][ T7236] veth1_vlan: left promiscuous mode [ 807.986764][ T7236] veth0_vlan: left promiscuous mode [ 808.872627][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.807384][T13490] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2181'. [ 814.889563][ T7236] team0 (unregistering): Port device team_slave_1 removed [ 815.047340][ T7236] team0 (unregistering): Port device team_slave_0 removed [ 815.123742][T13522] x_tables: ip_tables: osf match: only valid for protocol 6 [ 820.330219][T13343] chnl_net:caif_netlink_parms(): no params data found [ 821.594907][ T5897] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 822.498183][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 822.510053][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 822.535210][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.543726][ T5897] usb 3-1: Product: syz [ 822.569401][ T5897] usb 3-1: Manufacturer: syz [ 822.574930][ T5897] usb 3-1: SerialNumber: syz [ 822.645200][T13343] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.675593][ T5897] usb 3-1: config 0 descriptor?? [ 822.692715][T13343] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.712258][T13343] bridge_slave_0: entered allmulticast mode [ 822.745448][T13343] bridge_slave_0: entered promiscuous mode [ 822.794031][T13343] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.825316][T13343] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.833615][T13343] bridge_slave_1: entered allmulticast mode [ 822.873394][T13343] bridge_slave_1: entered promiscuous mode [ 822.931595][ T5897] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 823.310970][T13343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.418142][T13600] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 823.427399][T13600] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 823.437471][T13600] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 823.445505][T13600] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 823.849714][T13343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.070021][T13343] team0: Port device team_slave_0 added [ 824.121826][T13343] team0: Port device team_slave_1 added [ 824.408192][T13343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.443192][T13343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.517055][T13343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.541879][T13343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.560991][T13343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.592858][ T47] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 824.623961][T13343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.673537][T10042] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 824.787597][ T47] usb 8-1: config index 0 descriptor too short (expected 6800, got 2448) [ 824.798123][T13343] hsr_slave_0: entered promiscuous mode [ 824.801989][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 824.805098][ T47] usb 8-1: config 148 has too many interfaces: 58, using maximum allowed: 32 [ 824.826436][T13343] hsr_slave_1: entered promiscuous mode [ 824.833882][T10042] usb 2-1: Using ep0 maxpacket: 32 [ 824.841506][ T5897] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 824.841722][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 824.852873][ T47] usb 8-1: config 148 contains an unexpected descriptor of type 0x2, skipping [ 824.871292][ T47] usb 8-1: config 148 has an invalid descriptor of length 0, skipping remainder of the config [ 824.882356][T10042] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 824.891730][T13343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.899644][T10042] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.912634][ T5897] usb 3-1: USB disconnect, device number 31 [ 824.919766][ T47] usb 8-1: config 148 has 0 interfaces, different from the descriptor's value: 58 [ 824.929522][ T47] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 824.938849][T13343] Cannot create hsr debugfs directory [ 824.944615][T10042] usb 2-1: config 0 has no interface number 0 [ 824.962009][T10042] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 824.972334][T10042] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 824.990442][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.012976][T13602] ceph: No mds server is up or the cluster is laggy [ 825.013835][T10042] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 825.032135][T10042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.057360][T10042] usb 2-1: Product: syz [ 825.089293][T10042] usb 2-1: Manufacturer: syz [ 825.112096][T10042] usb 2-1: SerialNumber: syz [ 825.136212][T10042] usb 2-1: config 0 descriptor?? [ 825.144667][T13610] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 825.160531][T10042] usb-storage 2-1:0.231: USB Mass Storage device detected [ 825.479920][ T5897] usb 2-1: USB disconnect, device number 41 [ 826.069005][ T47] usb 8-1: string descriptor 0 read error: -71 [ 826.106205][ T47] usb 8-1: USB disconnect, device number 2 [ 826.362707][T13648] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2211'. [ 826.591212][T10042] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 826.864975][T10042] usb 3-1: Using ep0 maxpacket: 8 [ 826.874595][T10042] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 826.896605][T10042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.936889][T10042] usb 3-1: Product: syz [ 826.984510][T10042] usb 3-1: Manufacturer: syz [ 826.989252][T10042] usb 3-1: SerialNumber: syz [ 827.045019][T10042] usb 3-1: config 0 descriptor?? [ 827.341075][T10042] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 827.613341][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 828.367318][T13343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 828.792108][T13343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 829.065011][T13343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 829.192617][T13343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 829.440749][T10042] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 829.551839][T10042] usb 3-1: USB disconnect, device number 32 [ 829.779368][T13343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.938797][T13683] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2219'. [ 830.386786][T13343] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.600098][T13689] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2221'. [ 831.864881][T13686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.977601][T13686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.013070][T13686] bond0 (unregistering): (slave team0): Releasing backup interface [ 832.082360][T13686] bond0 (unregistering): Released all slaves [ 832.223999][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.231227][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.321209][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.329002][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.594658][T13343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 832.610746][T13343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 832.729933][T13720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 836.464477][T13343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.973106][T13766] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2235'. [ 837.063421][T13766] netlink: zone id is out of range [ 837.071528][T13766] netlink: zone id is out of range [ 837.078159][T13766] netlink: get zone limit has 8 unknown bytes [ 837.439431][T13775] ip_vti0: left promiscuous mode [ 837.445890][T13775] ip_vti0: left allmulticast mode [ 840.858463][T13775] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.867769][T13775] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.297834][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.349491][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.603117][T13775] veth1_macvtap: left allmulticast mode [ 841.621698][T13775] macsec0: left promiscuous mode [ 841.626729][T13775] macsec0: left allmulticast mode [ 841.692345][T13775] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.706329][T13775] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.717321][T13775] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.728589][T13775] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.906177][T13775] macvtap1: left promiscuous mode [ 841.931174][T13775] ip6erspan0: left allmulticast mode [ 844.678129][T13343] veth0_vlan: entered promiscuous mode [ 844.744050][T13343] veth1_vlan: entered promiscuous mode [ 847.144305][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.157137][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.167384][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 847.178790][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 847.187493][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 849.668533][T10230] Bluetooth: hci5: command tx timeout [ 850.748070][T13924] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 850.773693][T13924] cramfs: wrong magic [ 851.406695][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 851.469673][ T24] kworker/1:0 (24) used greatest stack depth: 16392 bytes left [ 851.892680][T10230] Bluetooth: hci5: command tx timeout [ 852.030880][ T5875] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 852.321601][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.479931][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.587256][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 852.661205][ T5875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 852.706281][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.742083][ T5875] usb 3-1: config 0 descriptor?? [ 853.365051][ T5875] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 854.183164][T10230] Bluetooth: hci5: command tx timeout [ 854.300014][ T5875] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 854.433794][ T5875] usb 3-1: USB disconnect, device number 33 [ 855.484206][T13889] chnl_net:caif_netlink_parms(): no params data found [ 856.366469][T10230] Bluetooth: hci5: command tx timeout [ 856.426083][ T6034] bridge_slave_1: left allmulticast mode [ 856.475628][ T6034] bridge_slave_1: left promiscuous mode [ 856.626124][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.728985][ T6034] bridge_slave_0: left allmulticast mode [ 856.771638][ T6034] bridge_slave_0: left promiscuous mode [ 856.791839][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.244906][T13999] syz.2.2282: attempt to access beyond end of device [ 858.244906][T13999] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 858.851260][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.864639][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.877010][ T6034] bond0 (unregistering): Released all slaves [ 860.711673][ T6034] hsr_slave_0: left promiscuous mode [ 860.938817][ T6034] hsr_slave_1: left promiscuous mode [ 861.125472][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.357736][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.742849][ T6034] veth1_vlan: left promiscuous mode [ 862.768442][ T6034] veth0_vlan: left promiscuous mode [ 866.375172][T14062] xt_TCPMSS: Only works on TCP SYN packets [ 866.903548][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xc6df [ 866.915464][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa60c [ 866.926746][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5176 [ 866.937249][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x79aa [ 866.950756][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xdb06 [ 866.979225][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xba78 [ 866.990914][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5176 [ 867.031203][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x79aa [ 867.083615][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xdb06 [ 867.110001][T14063] kvm: kvm [14060]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xba78 [ 867.261620][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 867.368635][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 871.185114][T13889] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.196594][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.205926][T13889] bridge_slave_0: entered allmulticast mode [ 871.214014][T13889] bridge_slave_0: entered promiscuous mode [ 871.222857][T14047] bridge0: port 3(syz_tun) entered blocking state [ 871.229975][T14047] bridge0: port 3(syz_tun) entered disabled state [ 871.253297][T14047] syz_tun: entered allmulticast mode [ 871.269653][T14047] syz_tun: entered promiscuous mode [ 871.297034][T14047] bridge0: port 3(syz_tun) entered blocking state [ 871.305588][T14047] bridge0: port 3(syz_tun) entered forwarding state [ 871.469072][T13889] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.476296][T13889] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.712270][T13889] bridge_slave_1: entered allmulticast mode [ 871.735324][T13889] bridge_slave_1: entered promiscuous mode [ 873.164585][T13889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.240533][T14102] ipvlan2: entered promiscuous mode [ 873.269318][T14102] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 873.300160][T14102] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 873.503336][T13889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.034411][T13889] team0: Port device team_slave_0 added [ 874.985904][T14114] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2312'. [ 875.098725][T13889] team0: Port device team_slave_1 added [ 876.619512][T14139] fuse: Bad value for 'fd' [ 878.032027][T13889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.096641][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.208515][T13889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.246436][T13889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.275683][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.389844][T13889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.734699][T13889] hsr_slave_0: entered promiscuous mode [ 878.790740][T13889] hsr_slave_1: entered promiscuous mode [ 878.802767][T13889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.817200][T13889] Cannot create hsr debugfs directory [ 880.084477][ T62] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 881.924004][T14187] overlayfs: failed to clone upperpath [ 882.392242][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2328'. [ 882.406022][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2328'. [ 884.628773][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 886.218714][T14219] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 886.231389][T14219] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 890.842059][T13889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 891.037315][T13889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 891.114656][T13889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 891.176896][T13889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 891.266848][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2342'. [ 891.302073][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2342'. [ 892.375729][T14272] Can't find a SQUASHFS superblock on nullb0 [ 892.411241][T13889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.929974][T14282] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 892.939761][T14282] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 893.522583][T13889] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.729598][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.736939][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.785833][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.793117][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.281735][T13889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.543598][T14302] kvm: pic: non byte write [ 897.709462][T13889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.790085][T14332] vivid-000: ================= START STATUS ================= [ 897.823190][T14332] vivid-000: Generate PTS: true [ 897.844036][T14332] vivid-000: Generate SCR: true [ 897.852651][T14332] tpg source WxH: 1280x720 (Y'CbCr) [ 897.865046][T14332] tpg field: 1 [ 897.874108][T14332] tpg crop: (0,0)/1280x720 [ 897.880200][T14332] tpg compose: (0,0)/1280x720 [ 897.887375][T14332] tpg colorspace: 3 [ 897.916829][T14332] tpg transfer function: 0/2 [ 897.930336][T14332] tpg Y'CbCr encoding: 0/1 [ 897.936433][T14332] tpg quantization: 0/2 [ 897.948466][T14332] tpg RGB range: 0/1 [ 897.954397][T14332] vivid-000: ================== END STATUS ================== [ 899.524482][T13889] veth0_vlan: entered promiscuous mode [ 900.347344][T13889] veth1_vlan: entered promiscuous mode [ 900.592273][T13889] veth0_macvtap: entered promiscuous mode [ 901.285349][T13889] veth1_macvtap: entered promiscuous mode [ 901.844591][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.898213][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.921720][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.992393][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.194770][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.853788][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.066675][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.099144][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.493674][T13889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.824524][T14407] 9pnet_fd: Insufficient options for proto=fd [ 904.254359][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.300729][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.364772][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.678339][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.927800][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.960081][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.985607][T14413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'. [ 905.004595][T13889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.135944][T13889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.165116][T13889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.266073][T13889] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.328009][T13889] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.736905][T14427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2377'. [ 906.959696][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.967805][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.129677][T14435] Unsupported ieee802154 address type: 0 [ 908.800610][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.841160][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.660263][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 915.670128][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 915.678773][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 915.688491][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 915.696602][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 916.163635][ T6448] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.690983][ T6448] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.991543][T14515] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 917.711701][T14515] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 917.768659][T14504] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 917.858248][ T6448] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.916882][ T5836] Bluetooth: hci4: command tx timeout [ 918.014337][ T6448] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.999117][T14534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2399'. [ 919.647073][T14539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 920.151302][ T5836] Bluetooth: hci4: command tx timeout [ 921.272969][ T6448] bridge_slave_1: left allmulticast mode [ 921.301689][ T6448] bridge_slave_1: left promiscuous mode [ 921.333180][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.372874][ T6448] bridge_slave_0: left allmulticast mode [ 921.413783][ T6448] bridge_slave_0: left promiscuous mode [ 921.430229][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.382590][ T5836] Bluetooth: hci4: command tx timeout [ 924.657305][T14580] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2412'. [ 924.702677][ T5836] Bluetooth: hci4: command tx timeout [ 925.460683][ T30] audit: type=1800 audit(1746374505.529:264): pid=14582 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2411" name="bus" dev="tmpfs" ino=2779 res=0 errno=0 [ 926.711121][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.757799][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.792578][ T6448] bond0 (unregistering): Released all slaves [ 930.581251][T14613] Bluetooth: MGMT ver 1.23 [ 931.311454][T14618] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[14618] [ 933.950194][ T6448] hsr_slave_0: left promiscuous mode [ 934.013547][ T6448] hsr_slave_1: left promiscuous mode [ 934.033785][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.053590][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.089262][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.109393][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.238451][ T6448] veth1_macvtap: left promiscuous mode [ 934.258657][ T6448] veth0_macvtap: left promiscuous mode [ 934.338208][ T6448] veth1_vlan: left promiscuous mode [ 934.366656][ T6448] veth0_vlan: left promiscuous mode [ 935.059771][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2421'. [ 935.069222][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 935.962998][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 937.541561][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 937.720124][T14659] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2428'. [ 938.877338][ T6448] team0 (unregistering): Port device team_slave_1 removed [ 939.380903][ T6448] team0 (unregistering): Port device team_slave_0 removed [ 939.787823][T14677] SET target dimension over the limit! [ 941.876445][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 941.890057][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 941.911813][ T5836] Bluetooth: hci2: hardware error 0x00 [ 942.848169][T14492] chnl_net:caif_netlink_parms(): no params data found [ 943.145662][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802de0e000: rx timeout, send abort [ 943.159179][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802de0e000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1055.141433][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1055.148494][ C1] rcu: 0-...!: (1 GPs behind) idle=d684/1/0x4000000000000000 softirq=82968/82972 fqs=1 [ 1055.159702][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12543/1:b..l [ 1055.167921][ C1] rcu: (detected by 1, t=10502 jiffies, g=71785, q=457 ncpus=2) [ 1055.175950][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1055.175992][ C0] NMI backtrace for cpu 0 [ 1055.176018][ C0] CPU: 0 UID: 0 PID: 14686 Comm: syz.1.2435 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 1055.176040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1055.176053][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x8c/0xf0 [ 1055.176077][ C0] Code: 44 24 20 00 00 00 00 9c 8f 44 24 20 4c 8b 74 24 20 fa 41 f7 c6 00 02 00 00 74 05 e8 ee b6 75 f6 bf 01 00 00 00 e8 a4 35 3f f6 <48> 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 75 08 [ 1055.176092][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00000002 [ 1055.176107][ C0] RAX: 0000000000010002 RBX: ffffffff99a42190 RCX: ffffffff997d3603 [ 1055.176120][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1055.176130][ C0] RBP: ffffc90000007c78 R08: ffffc90000007caf R09: 0000000000000000 [ 1055.176142][ C0] R10: ffffc90000007ca0 R11: fffff52000000f96 R12: dffffc0000000000 [ 1055.176154][ C0] R13: dffffc0000000000 R14: 0000000000000802 R15: 1ffff92000000f7c [ 1055.176167][ C0] FS: 00007f7479b866c0(0000) GS:ffff8881260ff000(0000) knlGS:0000000000000000 [ 1055.176182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1055.176193][ C0] CR2: 00007f7478d74420 CR3: 000000006809e000 CR4: 00000000003526f0 [ 1055.176208][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1055.176218][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1055.176228][ C0] Call Trace: [ 1055.176237][ C0] [ 1055.176251][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1055.176269][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1055.176292][ C0] debug_object_activate+0xbb/0x420 [ 1055.176323][ C0] enqueue_hrtimer+0x30/0x3a0 [ 1055.176352][ C0] __hrtimer_run_queues+0x656/0xc60 [ 1055.176387][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1055.176409][ C0] ? read_tsc+0x9/0x20 [ 1055.176442][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1055.176481][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1055.176503][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1055.176521][ C0] [ 1055.176527][ C0] [ 1055.176533][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1055.176551][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1055.176573][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b 02 d4 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1055.176588][ C0] RSP: 0018:ffffc900047e75b8 EFLAGS: 00000206 [ 1055.176601][ C0] RAX: b9e4ff8def4d6400 RBX: 0000000000000000 RCX: b9e4ff8def4d6400 [ 1055.176613][ C0] RDX: 0000000000000001 RSI: ffffffff8d921256 RDI: ffffffff8bc0fea0 [ 1055.176624][ C0] RBP: ffffffff817199f5 R08: 0000000000000000 R09: 0000000000000000 [ 1055.176635][ C0] R10: 0000000000000000 R11: ffffffff817199f5 R12: 0000000000000002 [ 1055.176646][ C0] R13: ffffffff8df3b860 R14: 0000000000000000 R15: 0000000000000246 [ 1055.176659][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1055.176678][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1055.176712][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 1055.176731][ C0] ? stack_trace_save+0x9c/0xe0 [ 1055.176747][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1055.176765][ C0] unwind_next_frame+0xc2/0x2390 [ 1055.176782][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1055.176799][ C0] ? arch_stack_walk+0xe4/0x150 [ 1055.176823][ C0] ? __unwind_start+0x5b9/0x760 [ 1055.176844][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1055.176861][ C0] arch_stack_walk+0x11c/0x150 [ 1055.176884][ C0] ? stack_trace_save+0x9c/0xe0 [ 1055.176902][ C0] stack_trace_save+0x9c/0xe0 [ 1055.176917][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1055.176937][ C0] ? kasan_save_stack+0x4d/0x60 [ 1055.176957][ C0] ? kasan_save_stack+0x3e/0x60 [ 1055.176980][ C0] kasan_save_stack+0x3e/0x60 [ 1055.177030][ C0] ? __phys_addr+0xba/0x170 [ 1055.177052][ C0] kasan_record_aux_stack+0xbc/0xd0 [ 1055.177071][ C0] ? __pfx_i_callback+0x10/0x10 [ 1055.177093][ C0] call_rcu+0x142/0x990 [ 1055.177117][ C0] ? fsnotify_grab_connector+0x42/0x240 [ 1055.177145][ C0] ? fsnotify_grab_connector+0x42/0x240 [ 1055.177169][ C0] ? fsnotify_grab_connector+0x42/0x240 [ 1055.177193][ C0] ? fsnotify_grab_connector+0x194/0x240 [ 1055.177219][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1055.177242][ C0] ? fsnotify_destroy_marks+0x81/0x330 [ 1055.177269][ C0] ? locks_free_lock_context+0x42/0x70 [ 1055.177287][ C0] ? __destroy_inode+0x487/0x670 [ 1055.177309][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1055.177324][ C0] ? __pfx_sock_free_inode+0x10/0x10 [ 1055.177352][ C0] evict+0x847/0x9c0 [ 1055.177376][ C0] ? __pfx_evict+0x10/0x10 [ 1055.177394][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1055.177413][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1055.177445][ C0] ? iput+0x6d8/0x9d0 [ 1055.177474][ C0] __dentry_kill+0x209/0x660 [ 1055.177489][ C0] ? dput+0x37/0x2b0 [ 1055.177516][ C0] dput+0x19f/0x2b0 [ 1055.177540][ C0] __fput+0x68e/0xa70 [ 1055.177565][ C0] fput_close_sync+0x119/0x200 [ 1055.177584][ C0] ? dnotify_flush+0x1db/0x5e0 [ 1055.177598][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1055.177616][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1055.177638][ C0] __x64_sys_close+0x7f/0x110 [ 1055.177658][ C0] do_syscall_64+0xf6/0x210 [ 1055.177679][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1055.177773][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.177793][ C0] RIP: 0033:0x7f7478d8d5ca [ 1055.177826][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 1055.177841][ C0] RSP: 002b:00007f7479b84f90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1055.177860][ C0] RAX: ffffffffffffffda RBX: 000000000000003a RCX: 00007f7478d8d5ca [ 1055.177873][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1055.177883][ C0] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 1055.177893][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1055.177904][ C0] R13: 0000000000000000 R14: 00007f7478fb5fa0 R15: 00007ffd437332d8 [ 1055.177927][ C0] [ 1055.177989][ C1] task:syz-executor state:R running task stack:21848 pid:12543 tgid:12543 ppid:12527 task_flags:0x400140 flags:0x00004000 [ 1055.789748][ C1] Call Trace: [ 1055.793051][ C1] [ 1055.796006][ C1] __schedule+0x168f/0x4c70 [ 1055.800629][ C1] ? copy_pmd_range+0x6903/0x7000 [ 1055.805792][ C1] ? rcu_is_watching+0x15/0xb0 [ 1055.810591][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1055.816076][ C1] ? __pfx___schedule+0x10/0x10 [ 1055.820962][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1055.826023][ C1] ? preempt_schedule+0xae/0xc0 [ 1055.830991][ C1] preempt_schedule_common+0x83/0xd0 [ 1055.836395][ C1] preempt_schedule+0xae/0xc0 [ 1055.841104][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1055.846509][ C1] preempt_schedule_thunk+0x16/0x30 [ 1055.851824][ C1] _raw_spin_unlock+0x3f/0x50 [ 1055.856519][ C1] ? copy_pmd_range+0x6706/0x7000 [ 1055.861663][ C1] copy_pmd_range+0x673c/0x7000 [ 1055.866579][ C1] ? __pfx_mas_destroy+0x10/0x10 [ 1055.871754][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1055.877010][ C1] copy_page_range+0x95c/0xd40 [ 1055.881821][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1055.887136][ C1] ? copy_mm+0x11d3/0x2100 [ 1055.891577][ C1] ? up_write+0x1c4/0x420 [ 1055.895948][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1055.902770][ C1] copy_mm+0x121c/0x2100 [ 1055.907076][ C1] ? __pfx_copy_mm+0x10/0x10 [ 1055.911687][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1055.916966][ C1] ? __init_rwsem+0x122/0x160 [ 1055.921950][ C1] ? copy_signal+0x50b/0x630 [ 1055.926570][ C1] ? copy_process+0x978/0x3b80 [ 1055.931368][ C1] copy_process+0x16d3/0x3b80 [ 1055.936094][ C1] ? copy_process+0x978/0x3b80 [ 1055.940935][ C1] ? __pfx_copy_process+0x10/0x10 [ 1055.946047][ C1] kernel_clone+0x224/0x7f0 [ 1055.950681][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1055.955862][ C1] ? count_memcg_event_mm+0x35b/0x3b0 [ 1055.961298][ C1] ? count_memcg_event_mm+0x92/0x3b0 [ 1055.966722][ C1] __x64_sys_clone+0x18b/0x1e0 [ 1055.971543][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1055.976990][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 1055.982411][ C1] ? do_syscall_64+0xba/0x210 [ 1055.987151][ C1] do_syscall_64+0xf6/0x210 [ 1055.991710][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1055.996700][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.002629][ C1] RIP: 0033:0x7fb25cb851d3 [ 1056.007070][ C1] RSP: 002b:00007ffdc0d8ea28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1056.015529][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb25cb851d3 [ 1056.023649][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1056.031712][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1056.039711][ C1] R10: 000055556c24b7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1056.047743][ C1] R13: 000055556c25e590 R14: 00000000000daabd R15: 00007ffdc0d8ebc0 [ 1056.055779][ C1] [ 1056.058839][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g71785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1056.070084][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1056.080368][ C1] rcu: RCU grace-period kthread stack dump: [ 1056.086292][ C1] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1056.099859][ C1] Call Trace: [ 1056.103173][ C1] [ 1056.106136][ C1] __schedule+0x168f/0x4c70 [ 1056.110833][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1056.116278][ C1] ? schedule+0x165/0x360 [ 1056.120657][ C1] ? __pfx___schedule+0x10/0x10 [ 1056.125664][ C1] ? schedule+0x91/0x360 [ 1056.130049][ C1] schedule+0x165/0x360 [ 1056.134334][ C1] schedule_timeout+0x12b/0x270 [ 1056.139221][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1056.144711][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1056.150644][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1056.156063][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1056.161731][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1056.166617][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1056.171856][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1056.177773][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1056.183256][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1056.188498][ C1] ? finish_swait+0xcd/0x1f0 [ 1056.193112][ C1] rcu_gp_kthread+0x99/0x390 [ 1056.197812][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.203037][ C1] ? __kthread_parkme+0x7b/0x200 [ 1056.207989][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1056.213039][ C1] kthread+0x70e/0x8a0 [ 1056.217163][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.222524][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.227246][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.231887][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1056.237304][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1056.242650][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.247401][ C1] ret_from_fork+0x4b/0x80 [ 1056.251862][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.256486][ C1] ret_from_fork_asm+0x1a/0x30 [ 1056.261315][ C1] [ 1056.264374][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1056.270752][ C1] CPU: 1 UID: 0 PID: 5817 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 1056.282946][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1056.293315][ C1] RIP: 0010:smp_call_function_many_cond+0xe72/0x11c0 [ 1056.300230][ C1] Code: 01 31 ff e8 10 6d 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 bb 68 0b 00 eb 37 f3 90 43 0f b6 04 2c 84 c0 75 10 <41> f7 07 01 00 00 00 74 1e e8 a0 68 0b 00 eb e5 44 89 f9 80 e1 07 [ 1056.320055][ C1] RSP: 0018:ffffc900041975e0 EFLAGS: 00000246 [ 1056.326154][ C1] RAX: 0000000000000000 RBX: ffff8880b893abc0 RCX: ffff888062ef9e00 [ 1056.334231][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1056.342226][ C1] RBP: ffffc90004197740 R08: ffffffff8f7daf77 R09: 1ffffffff1efb5ee [ 1056.350308][ C1] R10: dffffc0000000000 R11: fffffbfff1efb5ef R12: 1ffff11017108221 [ 1056.358300][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8841108 [ 1056.366357][ C1] FS: 0000555574a2c500(0000) GS:ffff8881261ff000(0000) knlGS:0000000000000000 [ 1056.375305][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1056.381927][ C1] CR2: 00007f25da0e56c0 CR3: 00000000683b6000 CR4: 00000000003526f0 [ 1056.390024][ C1] Call Trace: [ 1056.393326][ C1] [ 1056.396314][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1056.401830][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1056.408209][ C1] ? rcu_is_watching+0x15/0xb0 [ 1056.413019][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1056.418245][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1056.423437][ C1] flush_tlb_mm_range+0x6ae/0x12b0 [ 1056.428602][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1056.434177][ C1] ? up_write+0x1c4/0x420 [ 1056.438531][ C1] copy_mm+0x1882/0x2100 [ 1056.442819][ C1] ? __pfx_copy_mm+0x10/0x10 [ 1056.447426][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1056.452580][ C1] ? __init_rwsem+0x122/0x160 [ 1056.457278][ C1] ? copy_signal+0x50b/0x630 [ 1056.461906][ C1] ? copy_process+0x978/0x3b80 [ 1056.466719][ C1] copy_process+0x16d3/0x3b80 [ 1056.471452][ C1] ? copy_process+0x978/0x3b80 [ 1056.476284][ C1] ? __pfx_copy_process+0x10/0x10 [ 1056.481356][ C1] kernel_clone+0x224/0x7f0 [ 1056.485890][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1056.490973][ C1] ? count_memcg_event_mm+0x35b/0x3b0 [ 1056.496410][ C1] ? count_memcg_event_mm+0x92/0x3b0 [ 1056.501772][ C1] __x64_sys_clone+0x18b/0x1e0 [ 1056.506588][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1056.512014][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 1056.517352][ C1] ? do_syscall_64+0xba/0x210 [ 1056.522060][ C1] do_syscall_64+0xf6/0x210 [ 1056.526675][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1056.531381][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.537310][ C1] RIP: 0033:0x7f25d93851d3 [ 1056.541745][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1056.561371][ C1] RSP: 002b:00007ffd63003f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1056.569811][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f25d93851d3 [ 1056.577812][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1056.585801][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1056.593792][ C1] R10: 0000555574a2c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1056.601815][ C1] R13: 0000555574a3f590 R14: 00000000000da025 R15: 00007ffd630040e0 [ 1056.609826][ C1]