last executing test programs: 18m17.229601085s ago: executing program 32 (id=422): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 17m25.98042788s ago: executing program 33 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0xd, 0x2, 0x5, 0x44}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x260508f4}, 0x20000000) 16m49.082402469s ago: executing program 34 (id=649): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) 12m9.877888121s ago: executing program 35 (id=1875): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x627d}, 0x8) sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 10m36.548471602s ago: executing program 36 (id=2172): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000980)="894b6f4ac7b7b3d597c4744780cc4ddd518abc61b4b6f961c71663f53876989d81828e3e87ecf75781e8bd1953d71e38e27b94d41bfadf513ef5b09000000000000000000000b524ff99269238d331df4f236c3a0252494e3a7af13f1bc052e0e61503f7a3b32fa060c693212e21b97bc3bac1cc553af298cb3695", 0x7b, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r0}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={'sha384\x00'}}) 8m24.661164632s ago: executing program 37 (id=2637): mkdirat(0xffffffffffffff9c, 0x0, 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/169, 0xa9) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x600000, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000100)={0x72, 0xfffffffffffffffe, 0x0, 0x2}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x4, 0x1fd, 0x16, 0x2, 0x100, &(0x7f0000000440)="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"}) 8m22.617289232s ago: executing program 5 (id=2681): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b7ed4f7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a7890814529440000004e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8046d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x4, 0x7fffffffffffffff, 0x0, 0x400, 0xd, 0xfffffffffffffffd, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 8m22.300917573s ago: executing program 5 (id=2683): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57) 8m21.825465073s ago: executing program 5 (id=2684): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450", 0x121}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)="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", 0x151}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="04", 0x3a98, 0x10008095, 0x0, 0x0) 8m20.009259044s ago: executing program 5 (id=2689): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400e800}, 0x4) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8m3.09082741s ago: executing program 38 (id=2688): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) r1 = open(&(0x7f0000000100)='.\x00', 0x100080, 0x4) flock(r1, 0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffc000, 0x0) 8m2.637668531s ago: executing program 39 (id=2687): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r0, &(0x7f00000004c0)="a0a3", 0x2, 0x200080d1, 0x0, 0x0) clock_gettime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8m1.898283453s ago: executing program 40 (id=2676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) 8m1.356721629s ago: executing program 41 (id=2689): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400e800}, 0x4) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m4.371779331s ago: executing program 4 (id=2773): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0xa003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x3d, 0x7, &(0x7f00000001c0)={0x1d, "0fd62f5244b23de763e6acba8d11e6daa6c4ee99000000000000040200"}}) 7m3.053924028s ago: executing program 42 (id=2739): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0x800, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x80800, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000006280)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xffffffff90110400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, [0x3, 0x8000, 0x9, 0x0, 0x4, 0x7, 0x2, 0x3, 0xffffffffffffff0f, 0x2bb, 0x1000, 0xb3ac, 0x8001, 0x5, 0xa000]}, &(0x7f0000000180)=0x100) socket$nl_xfrm(0x10, 0x3, 0x6) 7m0.272017167s ago: executing program 4 (id=2782): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 6m58.844689247s ago: executing program 4 (id=2787): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = dup(r0) fallocate(r1, 0x41, 0x0, 0x73ffe) 6m58.223787862s ago: executing program 4 (id=2790): r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x0, &(0x7f00000005c0)) fsmount(0xffffffffffffffff, 0x0, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x440000, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4041030}, 0xc, &(0x7f0000002780)={&(0x7f0000002540)={0x220, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "79ab5a38da457c202bf4bb783af1e9be484650c525ec70099878ef8c265a79b3c477c5f382be550f558358812dc228587ef98e25f12833aa972266fa3a434f423f2b0dcd032ccc539bbea2570dd884f24378ddbd625e8acfdd7887a313a03cec35bd5d400282ef1d96d34a14a72963b358333454147709eeebc1d9aadf600cd5f32fc29cf092d72c9461fe7038dd25f6c24fb2f6b9270061a672da9ad07b"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8fdac659be83088f082907143ce433395896deb3e728a4887a17d78ee5e8615eef9d4f183f5876606d38efda852197530bb462b2cb68b306316e1543317dccc34f2e9eff6cad53133730d161e8f45811924dc6ac2b9629d8cd5412e481e6d3275304ac52c7733586d22f39cdc8"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "13ab9b0f44c281245fd5df32fe5e6f50fddb8de5fc1863f690be35b620539ec4de38c7aeb683fd38980d7ace190c8ee195832ef417cdb0abf503da23aae1ce6ac8a43daab74f5c76965a46da9710ae65d400aab7ea1ce607b5c2e07f4e9a913eb4be04eef0f870f6a48e4bc9cd64ecd0a9c820e6e18c2567f4c0881326a0e5f4257920df59b31900f951bfd8fb6908e794955033df8a5e89d97ddce5000c93a711ef379f43b01eadf320d1ca998ff9c172a96fa223d49582809e9173f963aeb32f0d7fc5d0a017d887f617001325278210ed7003c878d72338"}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000080}, 0x4091) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x36, [0x7, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffffffffffb], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000380)) 6m48.764849383s ago: executing program 43 (id=2775): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000f00)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x101200) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0xae, 0x10, &(0x7f0000000040)="46c7f6f845aa8e852e3d5623f4d63a736f1877c6c29302824f8d56903dbe1d708f45732e8c682504591f5eaee6617ab1915818ddaa27d60b75a08899790a6101f360972843c60d901d0a71b2279fcfb06012e8bbed90dbb4491b44d0e8055dff025d3ae87200f5da1b1ead16831c74ac25e206d3a182a81e8ecc2f23080c8b4a0f341fe4138081329535f95aa10f64b057da0b69af20e14eaf86c2a236a934c15dd2d985dc8ad41899fbab8a9f28da529f0c4ee3057b75a68934579dbfe93f711d3bc701d19a3469e116c0199887e49d605a30"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}], 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6m43.03263622s ago: executing program 44 (id=2790): r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x0, &(0x7f00000005c0)) fsmount(0xffffffffffffffff, 0x0, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x440000, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4041030}, 0xc, &(0x7f0000002780)={&(0x7f0000002540)={0x220, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "79ab5a38da457c202bf4bb783af1e9be484650c525ec70099878ef8c265a79b3c477c5f382be550f558358812dc228587ef98e25f12833aa972266fa3a434f423f2b0dcd032ccc539bbea2570dd884f24378ddbd625e8acfdd7887a313a03cec35bd5d400282ef1d96d34a14a72963b358333454147709eeebc1d9aadf600cd5f32fc29cf092d72c9461fe7038dd25f6c24fb2f6b9270061a672da9ad07b"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8fdac659be83088f082907143ce433395896deb3e728a4887a17d78ee5e8615eef9d4f183f5876606d38efda852197530bb462b2cb68b306316e1543317dccc34f2e9eff6cad53133730d161e8f45811924dc6ac2b9629d8cd5412e481e6d3275304ac52c7733586d22f39cdc8"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "13ab9b0f44c281245fd5df32fe5e6f50fddb8de5fc1863f690be35b620539ec4de38c7aeb683fd38980d7ace190c8ee195832ef417cdb0abf503da23aae1ce6ac8a43daab74f5c76965a46da9710ae65d400aab7ea1ce607b5c2e07f4e9a913eb4be04eef0f870f6a48e4bc9cd64ecd0a9c820e6e18c2567f4c0881326a0e5f4257920df59b31900f951bfd8fb6908e794955033df8a5e89d97ddce5000c93a711ef379f43b01eadf320d1ca998ff9c172a96fa223d49582809e9173f963aeb32f0d7fc5d0a017d887f617001325278210ed7003c878d72338"}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000080}, 0x4091) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x36, [0x7, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffffffffffb], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000380)) 5m48.406529541s ago: executing program 45 (id=2872): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3m56.709320482s ago: executing program 46 (id=3073): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x15, 0x4, 0x20100) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r2) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r2, 0x1, 0x4002) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000000)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m35.472138242s ago: executing program 47 (id=3126): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x1003, r5}, 0x38) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) close_range(r6, 0xffffffffffffffff, 0x0) 3m15.895108519s ago: executing program 5 (id=3121): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x4b70, 0x10100, 0x2, 0x40003, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x10000000}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) 3m13.401885597s ago: executing program 5 (id=3194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open(0x0, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000700)='./file1\x00', 0x2000775) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 2m57.354841046s ago: executing program 48 (id=3194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open(0x0, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xd}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000700)='./file1\x00', 0x2000775) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 2m19.060713717s ago: executing program 9 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x4040000) 2m18.969908059s ago: executing program 0 (id=3307): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000e00000095"], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000140)={0x1, 0x1, 0x2, 0x10, 0x4, 0x7e, 0x100, 0x7, 0x40, 0xc193, 0x4, 0x8, 0x0, 0x0, 0x0}) 2m18.48382135s ago: executing program 9 (id=3309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) 2m18.273834036s ago: executing program 0 (id=3310): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x800) 2m17.983165806s ago: executing program 9 (id=3312): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8000, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x1, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xda, 0x0, 0x0) 2m10.560155556s ago: executing program 9 (id=3316): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'ip6gre0\x00'}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc2}) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 2m10.50186799s ago: executing program 0 (id=3317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01f92cbd7000fcdbdf25030000000500020003000000180001801400020073797a5f74756e00000000000000000005000300"], 0x3c}, 0x1, 0x0, 0x0, 0x20005811}, 0x4000080) 2m8.193843813s ago: executing program 9 (id=3320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000e00000095"], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000140)={0x1, 0x1, 0x2, 0x10, 0x4, 0x7e, 0x100, 0x7, 0x40, 0xc193, 0x4, 0x8, 0x0, 0x0, 0x0}) 2m8.193366255s ago: executing program 0 (id=3321): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1068, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0xca, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m7.90211808s ago: executing program 9 (id=3322): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="26a3124e367f1b1aba14bbef96f18155b9e056cfbd570c90a41d2352ebb9b9447cab9fdd0a3a765929c525dbdf1494395ba2e6e5da4ea2c90929"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4c044) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r7 = syz_open_dev$swradio(0x0, 0x0, 0x2) r8 = dup(r7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x3c, 0x100000, 0x0, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3}, 0x8) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x8024115) recvmmsg(r6, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) 2m7.824366827s ago: executing program 0 (id=3324): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$ax25(0x3, 0x5, 0x6) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0xfc, 0xfe, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xe) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x6, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m6.382220857s ago: executing program 0 (id=3326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x7, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_io_uring_setup(0x269, 0x0, &(0x7f0000000280), 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = signalfd4(r2, 0x0, 0x0, 0x80800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$video(&(0x7f0000000140), 0x100000001, 0x80000) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x9, 0x101, 0x4, {0x2, 0x0, 0x7, 0xc}}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = syz_clone(0x2046a00, &(0x7f00000000c0)="4b549681d11459d784c7d5dfd3215dac5f2bf9994a8d393d5e00ee9b534edfc41f3657af51e4bc22019756c37eb9031cfd5b195bb429100c8577bce710bee2cb", 0x48, &(0x7f0000001840), 0x0, 0x0) wait4(r9, 0x0, 0x40000000, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000840)={0x2, r9}) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00"], 0x0) 1m51.509999448s ago: executing program 49 (id=3322): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="26a3124e367f1b1aba14bbef96f18155b9e056cfbd570c90a41d2352ebb9b9447cab9fdd0a3a765929c525dbdf1494395ba2e6e5da4ea2c90929"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4c044) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r7 = syz_open_dev$swradio(0x0, 0x0, 0x2) r8 = dup(r7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x3c, 0x100000, 0x0, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3}, 0x8) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x8024115) recvmmsg(r6, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) 1m51.016414428s ago: executing program 50 (id=3326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x7, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_io_uring_setup(0x269, 0x0, &(0x7f0000000280), 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = signalfd4(r2, 0x0, 0x0, 0x80800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$video(&(0x7f0000000140), 0x100000001, 0x80000) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x9, 0x101, 0x4, {0x2, 0x0, 0x7, 0xc}}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = syz_clone(0x2046a00, &(0x7f00000000c0)="4b549681d11459d784c7d5dfd3215dac5f2bf9994a8d393d5e00ee9b534edfc41f3657af51e4bc22019756c37eb9031cfd5b195bb429100c8577bce710bee2cb", 0x48, &(0x7f0000001840), 0x0, 0x0) wait4(r9, 0x0, 0x40000000, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000840)={0x2, r9}) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00"], 0x0) 1m39.002095008s ago: executing program 8 (id=3356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 1m38.193069415s ago: executing program 8 (id=3358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}}, 0x4040000) 1m37.428309978s ago: executing program 8 (id=3361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f0000000340)="cc", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 1m36.784437012s ago: executing program 8 (id=3363): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x121}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e79936490023788174b7af0c760ea8723eed6912bd85156d534474c9e5629951d6e4287bd996f0f801217b1567d0a160a44f5c122d4512a0c8cde478f738110e", 0xa9}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="04", 0x3a98, 0x10008095, 0x0, 0x0) 1m35.487699004s ago: executing program 8 (id=3366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 1m34.436392508s ago: executing program 8 (id=3368): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m19.214548401s ago: executing program 51 (id=3368): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m14.264009051s ago: executing program 4 (id=3338): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101080, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) 1m13.91506602s ago: executing program 4 (id=3404): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) 58.47999841s ago: executing program 52 (id=3404): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) 31.843110641s ago: executing program 1 (id=3452): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, &(0x7f0000003540)) 30.70457059s ago: executing program 1 (id=3453): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) io_setup(0x59f7, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x82, 0x0, &(0x7f00000001c0)) 27.963888073s ago: executing program 1 (id=3456): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 26.564035245s ago: executing program 1 (id=3459): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x3f8, 0x51680085, 0xe1b, 0xe2f, 0xae57}}]}) 26.186836333s ago: executing program 1 (id=3460): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 24.75078486s ago: executing program 1 (id=3462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x18c) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) shutdown(r2, 0x1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) 21.828525968s ago: executing program 7 (id=3465): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x88a0}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 20.493496538s ago: executing program 7 (id=3469): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x3f8, 0x51680085, 0xe1b, 0xe2f, 0xae57}}]}) 19.844013061s ago: executing program 7 (id=3470): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) 19.348453952s ago: executing program 6 (id=3472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0xb, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 17.22037774s ago: executing program 7 (id=3473): openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b30010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000400)=0x1) 16.098867396s ago: executing program 6 (id=3475): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r2}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) 10.619621469s ago: executing program 7 (id=3477): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_timedreceive(r1, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) 10.528703799s ago: executing program 6 (id=3478): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x88a0}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 10.157749765s ago: executing program 3 (id=3480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') r7 = fanotify_init(0x20, 0x400) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x8) readv(r7, &(0x7f00000001c0)=[{0x0}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x42}, 0x28) 9.922898196s ago: executing program 7 (id=3482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount(0x0, 0x0, 0x0, 0x200011, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) socket$nl_crypto(0x10, 0x3, 0x15) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 7.128125271s ago: executing program 53 (id=3462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x18c) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) shutdown(r2, 0x1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) 6.980923044s ago: executing program 3 (id=3484): r0 = fanotify_init(0x200, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x7, 0x1, 0x4100, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0xac5) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000100)={0x23800080, &(0x7f0000000040), 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x37303250}) read$FUSE(r3, 0x0, 0x0) 6.978058497s ago: executing program 6 (id=3485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0xb, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 6.975253478s ago: executing program 2 (id=3486): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) 6.119856067s ago: executing program 6 (id=3487): openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b30010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000400)=0x1) 5.988245004s ago: executing program 3 (id=3488): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 5.987936079s ago: executing program 2 (id=3489): r0 = userfaultfd(0x801) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) close_range(r0, 0xffffffffffffffff, 0x0) 5.227026776s ago: executing program 2 (id=3490): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4.450490315s ago: executing program 2 (id=3491): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x3f8, 0x51680085, 0xe1b, 0xe2f, 0xae57}}]}) 4.143689997s ago: executing program 3 (id=3492): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_timedreceive(r1, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) 3.561493582s ago: executing program 3 (id=3493): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000040), 0x0, 0x1, 0x30bc6288) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) pwritev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="9e", 0x1}], 0x2, 0x9, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) 3.482521852s ago: executing program 2 (id=3494): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x88a0}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 2.818991603s ago: executing program 6 (id=3495): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 367.392501ms ago: executing program 3 (id=3496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0xb, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 0s ago: executing program 2 (id=3497): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000000)={&(0x7f0000000100)}) sendmsg$802154_dgram(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) kernel console output (not intermixed with test programs): terface 0 has no altsetting 0 [ 1097.542662][T11915] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1097.552348][T11915] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1097.560815][T11915] usb 1-1: Product: syz [ 1097.565074][T11915] usb 1-1: Manufacturer: syz [ 1097.569742][T11915] usb 1-1: SerialNumber: syz [ 1097.664017][T11915] usb 1-1: config 0 descriptor?? [ 1097.718133][T11915] usb 1-1: selecting invalid altsetting 0 [ 1097.760655][T14585] nbd0: detected capacity change from 0 to 127 [ 1097.779610][T14587] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2884'. [ 1097.879291][T12447] block nbd0: Receive control failed (result -32) [ 1097.903565][T11886] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1097.912377][T11886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.923128][T11886] usb 9-1: config 0 has no interfaces? [ 1097.929331][T11886] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1097.942406][T11886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.153767][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.172090][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.186382][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.204697][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.225324][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.256501][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.274752][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.293418][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.315127][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.333590][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.364513][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.383100][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.403915][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.421918][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.440784][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.473445][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.490978][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.509026][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.527730][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.555416][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.572561][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.590618][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.608669][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.627206][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.645687][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.682673][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.701087][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.719258][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.737353][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.764071][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.782221][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.804092][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.822600][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.840453][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.868882][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.903911][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.922784][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.940881][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.964423][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.976187][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1098.993669][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1099.012278][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1099.029831][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1099.046182][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1101.968362][T14588] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1102.106755][T11888] usb 1-1: USB disconnect, device number 15 [ 1102.421068][T11886] usb 9-1: config 0 descriptor?? [ 1103.101427][T11886] usb 9-1: can't set config #0, error -71 [ 1103.114512][T11886] usb 9-1: USB disconnect, device number 9 [ 1103.416447][T13789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1105.172250][T13789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1105.183316][T13789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1106.666502][T13789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1106.687767][T13789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1108.743508][T14617] binder: 14616:14617 unknown command 0 [ 1108.749187][T14617] binder: 14616:14617 ioctl c0306201 200000000080 returned -22 [ 1108.791733][T12447] Bluetooth: hci4: command tx timeout [ 1108.872780][T14617] binder: 14616:14617 ioctl c0306201 2000000003c0 returned -14 [ 1108.969606][T14596] chnl_net:caif_netlink_parms(): no params data found [ 1109.640699][T14612] GUP no longer grows the stack in syz.0.2891 (14612): 200000004000-20000000a000 (200000002000) [ 1109.651551][T14612] CPU: 0 UID: 0 PID: 14612 Comm: syz.0.2891 Not tainted syzkaller #0 PREEMPT(none) [ 1109.651641][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1109.651701][T14612] Call Trace: [ 1109.651733][T14612] [ 1109.651765][T14612] __dump_stack+0x26/0x30 [ 1109.651989][T14612] dump_stack_lvl+0x1df/0x270 [ 1109.652090][T14612] dump_stack+0x1e/0x25 [ 1109.652176][T14612] __get_user_pages+0x49e9/0x5e00 [ 1109.652329][T14612] ? __msan_warning+0x1b/0x30 [ 1109.652516][T14612] ? filter_irq_stacks+0x13f/0x190 [ 1109.652703][T14612] get_user_pages_remote+0x468/0x13a0 [ 1109.652794][T14612] ? kmsan_get_metadata+0xfb/0x160 [ 1109.652907][T14612] ? access_remote_vm+0x4e/0x70 [ 1109.653018][T14612] __access_remote_vm+0x2f8/0xff0 [ 1109.653131][T14612] access_remote_vm+0x4e/0x70 [ 1109.653223][T14612] proc_pid_cmdline_read+0xa75/0x19e0 [ 1109.653379][T14612] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1109.653464][T14612] vfs_readv+0x931/0xf30 [ 1109.653631][T14612] ? kmsan_get_metadata+0xfb/0x160 [ 1109.653733][T14612] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1109.653841][T14612] __x64_sys_preadv+0x2a3/0x510 [ 1109.653949][T14612] x64_sys_call+0x3033/0x3e70 [ 1109.654051][T14612] do_syscall_64+0xd9/0xf80 [ 1109.654191][T14612] ? clear_bhb_loop+0x40/0x90 [ 1109.654281][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.654378][T14612] RIP: 0033:0x7f578678f749 [ 1109.654450][T14612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.654527][T14612] RSP: 002b:00007f578755f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1109.654615][T14612] RAX: ffffffffffffffda RBX: 00007f57869e5fa0 RCX: 00007f578678f749 [ 1109.654677][T14612] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 1109.654728][T14612] RBP: 00007f5786813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1109.654780][T14612] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1109.654831][T14612] R13: 00007f57869e6038 R14: 00007f57869e5fa0 R15: 00007fff137c53b8 [ 1109.654911][T14612] [ 1110.910323][T12447] Bluetooth: hci4: command tx timeout [ 1111.091026][T13789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1111.115863][T13789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1111.125261][T13789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1111.181079][T13789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1111.235830][T13789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1111.702093][T14596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.709484][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.717327][T14596] bridge_slave_0: entered allmulticast mode [ 1111.725599][T14596] bridge_slave_0: entered promiscuous mode [ 1111.829870][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.837763][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.845716][T14596] bridge_slave_1: entered allmulticast mode [ 1111.854194][T14596] bridge_slave_1: entered promiscuous mode [ 1112.182328][T11915] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1112.391516][T14596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.424792][T11915] usb 4-1: Using ep0 maxpacket: 8 [ 1112.502778][T11915] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1112.511652][T11915] usb 4-1: config 179 has no interface number 0 [ 1112.518111][T11915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1112.529668][T11915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1112.541418][T11915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1112.552940][T11915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1112.564600][T11915] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1112.581631][T11915] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1112.592016][T11915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.611353][T14596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.831984][T14634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1112.920440][T11920] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1112.960661][T13789] Bluetooth: hci4: command tx timeout [ 1113.081056][T11915] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input36 [ 1113.265842][T11920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.278222][T11920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.285039][T13789] Bluetooth: hci5: command tx timeout [ 1113.288991][T11920] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1113.310310][T11920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.370329][T11915] usb 4-1: USB disconnect, device number 33 [ 1113.377994][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1113.487631][T11920] usb 1-1: config 0 descriptor?? [ 1113.784290][T14596] team0: Port device team_slave_0 added [ 1114.019919][T11920] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1114.061401][T11920] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1114.102153][T14596] team0: Port device team_slave_1 added [ 1114.223733][T11920] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 1114.439333][T11920] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 1114.519617][T11920] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -32 [ 1115.252630][T13789] Bluetooth: hci4: command tx timeout [ 1115.450631][T13789] Bluetooth: hci5: command tx timeout [ 1117.079276][T14596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.089847][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.118794][T14596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.241066][T14629] chnl_net:caif_netlink_parms(): no params data found [ 1117.325941][T11919] usb 1-1: USB disconnect, device number 16 [ 1117.453381][T14596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.461964][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.488342][T14596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.510930][T13789] Bluetooth: hci5: command tx timeout [ 1117.636503][T13825] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.810258][ T30] audit: type=1326 audit(1764853836.367:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14651 comm="syz.8.2903" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efedc18f749 code=0x0 [ 1118.036460][T13825] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.255116][T13825] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.605089][T13825] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.687465][T14596] hsr_slave_0: entered promiscuous mode [ 1118.696191][T14596] hsr_slave_1: entered promiscuous mode [ 1118.704388][T14596] debugfs: 'hsr0' already exists in 'hsr' [ 1118.711118][T14596] Cannot create hsr debugfs directory [ 1119.656463][T13789] Bluetooth: hci5: command tx timeout [ 1119.663866][T13825] bridge_slave_1: left allmulticast mode [ 1119.669903][T13825] bridge_slave_1: left promiscuous mode [ 1119.679659][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.012230][T13825] bridge_slave_0: left allmulticast mode [ 1120.018150][T13825] bridge_slave_0: left promiscuous mode [ 1120.026459][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.382836][T13825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.452793][T13825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.469052][T13825] bond0 (unregistering): Released all slaves [ 1122.877793][T13825] hsr_slave_0: left promiscuous mode [ 1122.903038][T13825] hsr_slave_1: left promiscuous mode [ 1122.912668][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.930355][T13825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.973170][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.980859][T13825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.026283][T13825] veth1_macvtap: left promiscuous mode [ 1123.032723][T13825] veth0_macvtap: left promiscuous mode [ 1123.038583][T13825] veth1_vlan: left promiscuous mode [ 1123.044320][T13825] veth0_vlan: left promiscuous mode [ 1123.220445][T11886] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1123.390468][T11886] usb 1-1: Using ep0 maxpacket: 8 [ 1123.419356][T11886] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1123.428138][T11886] usb 1-1: config 179 has no interface number 0 [ 1123.438263][T11886] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1123.450927][T11886] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1123.462698][T11886] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1123.474255][T11886] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1123.486101][T11886] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1123.499771][T11886] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1123.509115][T11886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.519487][T11888] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1123.593263][T14679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1123.826202][ T30] audit: type=1326 audit(1764853842.407:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14687 comm="syz.3.2915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd2498f749 code=0x0 [ 1123.863129][T11886] usb 1-1: USB disconnect, device number 17 [ 1123.870289][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1123.878927][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1123.978120][T11888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.989440][T11888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.999848][T11888] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1124.009497][T11888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.032417][T11888] usb 9-1: config 0 descriptor?? [ 1124.035198][T13825] team0 (unregistering): Port device team_slave_1 removed [ 1124.102288][T13825] team0 (unregistering): Port device team_slave_0 removed [ 1124.509645][T11888] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 1124.531798][T11888] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1124.583174][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.590948][T14629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.598702][T14629] bridge_slave_0: entered allmulticast mode [ 1124.608186][T14629] bridge_slave_0: entered promiscuous mode [ 1124.704000][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.711947][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.720218][T14629] bridge_slave_1: entered allmulticast mode [ 1124.732429][T14629] bridge_slave_1: entered promiscuous mode [ 1124.750358][T11888] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 1124.975560][T11888] cp2112 0003:10C4:EA90.0020: error requesting SMBus config [ 1124.987131][T11888] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -32 [ 1125.085584][T14629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.114430][T14629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.631939][T14629] team0: Port device team_slave_0 added [ 1125.735088][T14629] team0: Port device team_slave_1 added [ 1125.903918][T13825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.338787][T13825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.449209][T14629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.456989][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.488023][T14629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.721665][T13825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.781206][T11920] usb 9-1: USB disconnect, device number 10 [ 1126.994227][T14629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.001808][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.032319][T14629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.112292][T13825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.162180][T14596] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1127.263238][T14596] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1127.400610][T14596] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1127.496314][T14629] hsr_slave_0: entered promiscuous mode [ 1127.507769][T14629] hsr_slave_1: entered promiscuous mode [ 1127.518437][T14629] debugfs: 'hsr0' already exists in 'hsr' [ 1127.532338][T14629] Cannot create hsr debugfs directory [ 1127.545556][T14596] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1128.088809][T13825] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.431536][T13825] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.739472][T13825] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.902523][T13825] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.454650][T13825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.633426][T13825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.831474][T13825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.053711][T13825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.417738][ T30] audit: type=1326 audit(1764853848.977:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14716 comm="syz.3.2925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd2498f749 code=0x0 [ 1130.538457][T14596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.984350][T14596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.997386][T13825] bridge_slave_1: left allmulticast mode [ 1131.004175][T13825] bridge_slave_1: left promiscuous mode [ 1131.015979][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.617601][T13825] bridge_slave_0: left allmulticast mode [ 1131.628983][T13825] bridge_slave_0: left promiscuous mode [ 1131.635710][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.088171][T13825] bridge_slave_1: left allmulticast mode [ 1132.095481][T13825] bridge_slave_1: left promiscuous mode [ 1132.102115][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.211766][T13825] bridge_slave_0: left allmulticast mode [ 1132.217714][T13825] bridge_slave_0: left promiscuous mode [ 1132.227903][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.334102][T13825] bridge_slave_1: left allmulticast mode [ 1132.345116][T13825] bridge_slave_1: left promiscuous mode [ 1132.351765][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.426125][T13825] bridge_slave_0: left allmulticast mode [ 1132.432269][T13825] bridge_slave_0: left promiscuous mode [ 1132.438726][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.784577][T11886] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1133.984634][T11886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.996208][T11886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.006472][T11886] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1134.015999][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.107019][T11886] usb 4-1: config 0 descriptor?? [ 1134.192839][T13825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.220868][T13825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.239829][T13825] bond0 (unregistering): Released all slaves [ 1134.514011][T13825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.533563][T13825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.556022][T13825] bond0 (unregistering): Released all slaves [ 1134.597810][T11886] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1134.645107][T11886] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1134.805762][T11886] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 1134.834531][T13825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.866863][T13825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.885664][T13825] bond0 (unregistering): Released all slaves [ 1134.922133][T14629] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1134.984351][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.991951][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.024864][T11886] cp2112 0003:10C4:EA90.0021: error requesting SMBus config [ 1135.035249][T14629] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1135.047751][T11886] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -32 [ 1135.092515][T14629] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1135.171907][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.179467][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.199305][T14629] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1136.914440][T11920] usb 4-1: USB disconnect, device number 34 [ 1137.073522][ T30] audit: type=1326 audit(1764853855.647:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.8.2935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efedc18f749 code=0x0 [ 1137.456696][T14629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.832307][T13825] hsr_slave_0: left promiscuous mode [ 1137.841074][T13825] hsr_slave_1: left promiscuous mode [ 1137.854856][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.863800][T13825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.880789][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.888348][T13825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.929593][T13825] hsr_slave_0: left promiscuous mode [ 1137.937739][T13825] hsr_slave_1: left promiscuous mode [ 1137.948812][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.961437][T13825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.002515][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.010261][T13825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.060533][T13825] hsr_slave_0: left promiscuous mode [ 1138.082174][T13825] hsr_slave_1: left promiscuous mode [ 1138.089878][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.097757][T13825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.155678][T13825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.163388][T13825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.411661][T13825] veth1_macvtap: left promiscuous mode [ 1138.417681][T13825] veth0_macvtap: left promiscuous mode [ 1138.423817][T13825] veth1_vlan: left promiscuous mode [ 1138.429521][T13825] veth0_vlan: left promiscuous mode [ 1138.439075][T11920] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 1139.076627][T13825] veth1_macvtap: left promiscuous mode [ 1139.082490][T13825] veth0_macvtap: left promiscuous mode [ 1139.088338][T13825] veth1_vlan: left promiscuous mode [ 1139.094074][T13825] veth0_vlan: left promiscuous mode [ 1139.110089][T13825] veth1_macvtap: left promiscuous mode [ 1139.115816][T13825] veth0_macvtap: left promiscuous mode [ 1139.122612][T13825] veth1_vlan: left promiscuous mode [ 1139.310386][T11920] usb 1-1: config 0 has an invalid interface number: 121 but max is 0 [ 1139.319259][T11920] usb 1-1: config 0 has no interface number 0 [ 1139.325689][T11920] usb 1-1: config 0 interface 121 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 1139.336763][T11920] usb 1-1: New USB device found, idVendor=2184, idProduct=0030, bcdDevice=c0.8e [ 1139.346239][T11920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.807085][T11920] usb 1-1: config 0 descriptor?? [ 1139.822969][T14769] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1139.894713][T11920] cp210x 1-1:0.121: cp210x converter detected [ 1140.150175][T11920] cp210x 1-1:0.121: failed to get vendor val 0x370b size 1: -71 [ 1140.158197][T11920] cp210x 1-1:0.121: querying part number failed [ 1140.221807][T11920] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1140.289400][T11920] usb 1-1: USB disconnect, device number 18 [ 1140.310603][T11920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1140.319671][T11920] cp210x 1-1:0.121: device disconnected [ 1141.542962][T13825] team0 (unregistering): Port device team_slave_1 removed [ 1141.572045][T13825] team0 (unregistering): Port device team_slave_0 removed [ 1141.572231][T11920] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1141.798756][T11920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.810316][T11920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.820609][T11920] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1141.829925][T11920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.960676][T11920] usb 4-1: config 0 descriptor?? [ 1142.187776][T13825] team0 (unregistering): Port device team_slave_1 removed [ 1142.217299][T13825] team0 (unregistering): Port device team_slave_0 removed [ 1142.786325][T11920] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 1142.814891][T11920] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1143.123067][T11920] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 1143.134407][T11920] cp2112 0003:10C4:EA90.0022: error requesting SMBus config [ 1143.150912][T11920] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -32 [ 1143.572486][T13825] team0 (unregistering): Port device team_slave_1 removed [ 1143.596969][T13825] team0 (unregistering): Port device team_slave_0 removed [ 1143.839523][T14629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.043376][ T30] audit: type=1326 audit(1764853862.597:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14798 comm="syz.0.2947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578678f749 code=0x0 [ 1144.129041][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.136672][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.174076][T14596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.256227][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.263662][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.503372][T14629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1144.514383][T14629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1145.228950][T11886] usb 4-1: USB disconnect, device number 35 [ 1146.012920][T14629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.052755][T14818] input: syz0 as /devices/virtual/input/input37 [ 1146.261655][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.269854][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.549689][T14596] veth0_vlan: entered promiscuous mode [ 1146.640746][T14596] veth1_vlan: entered promiscuous mode [ 1146.963496][T14596] veth0_macvtap: entered promiscuous mode [ 1147.076892][T14596] veth1_macvtap: entered promiscuous mode [ 1147.229511][T14596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.306356][T14596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.432286][T13738] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.471402][T13738] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.512418][T13738] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.541991][T13738] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.136426][T14629] veth0_vlan: entered promiscuous mode [ 1148.198687][T14629] veth1_vlan: entered promiscuous mode [ 1148.556369][T14629] veth0_macvtap: entered promiscuous mode [ 1148.644103][T14629] veth1_macvtap: entered promiscuous mode [ 1148.708108][ T30] audit: type=1326 audit(1764853867.277:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.3.2957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd2498f749 code=0x0 [ 1148.780851][T14629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.866697][T14629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.945034][T14465] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.966835][ T1102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.988544][ T1102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.039342][ T1102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.444700][T12447] Bluetooth: hci0: command 0x0406 tx timeout [ 1154.459466][T14896] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2966'. [ 1155.766709][ T30] audit: type=1326 audit(1764853874.347:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14907 comm="syz.0.2969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578678f749 code=0x0 [ 1156.325692][T14335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.333987][T14335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.654426][T14335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.663647][T14335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.196669][T14170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.205354][T14170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.379816][T14170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.388208][T14170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.570780][T11894] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1159.790641][T11894] usb 1-1: device descriptor read/64, error -71 [ 1160.050280][T11894] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1160.250504][T11894] usb 1-1: device descriptor read/64, error -71 [ 1160.273784][T11920] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1160.369203][T11894] usb usb1-port1: attempt power cycle [ 1160.521859][T11920] usb 7-1: Using ep0 maxpacket: 16 [ 1160.566522][T11920] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.577803][T11920] usb 7-1: config 0 has no interfaces? [ 1160.699796][T11920] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1160.719726][T11920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.730869][T11920] usb 7-1: Product: syz [ 1160.735267][T11920] usb 7-1: Manufacturer: syz [ 1160.740724][T11920] usb 7-1: SerialNumber: syz [ 1160.742360][T11894] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1160.763666][T11920] usb 7-1: config 0 descriptor?? [ 1160.867524][T11894] usb 1-1: device descriptor read/8, error -71 [ 1161.496568][T11886] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1161.520637][T11894] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1161.576084][T11894] usb 1-1: device descriptor read/8, error -71 [ 1161.696275][T11894] usb usb1-port1: unable to enumerate USB device [ 1161.704511][T11886] usb 4-1: Using ep0 maxpacket: 16 [ 1162.205970][T11886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.216404][T11886] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1162.225891][T11886] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1162.237538][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.353191][T11886] usb 4-1: config 0 descriptor?? [ 1164.375799][T13789] Bluetooth: hci1: command 0x0406 tx timeout [ 1166.695575][T11886] usb 4-1: can't set config #0, error -71 [ 1166.741063][T11886] usb 4-1: USB disconnect, device number 36 [ 1168.265027][T11886] usb 7-1: USB disconnect, device number 23 [ 1168.730214][ T30] audit: type=1326 audit(1764853887.307:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.8.2980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efedc18f749 code=0x0 [ 1170.860427][T11920] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1171.031532][T11920] usb 9-1: device descriptor read/64, error -71 [ 1171.178008][ T30] audit: type=1326 audit(1764853889.757:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14996 comm="syz.6.2996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf4278f749 code=0x0 [ 1171.210728][T11915] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1171.713708][T11920] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1172.497480][T11920] usb 9-1: device descriptor read/64, error -71 [ 1172.784805][T11920] usb usb9-port1: attempt power cycle [ 1172.814611][T11915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.826197][T11915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.836459][T11915] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1172.849788][T11915] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1172.859264][T11915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.125445][T11915] usb 10-1: config 0 descriptor?? [ 1173.817208][T11915] usbhid 10-1:0.0: can't add hid device: -71 [ 1173.824037][T11915] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1173.851535][T11920] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1173.962407][T11915] usb 10-1: USB disconnect, device number 11 [ 1174.091605][T11920] usb 9-1: device descriptor read/8, error -71 [ 1176.044838][ T30] audit: type=1326 audit(1764853894.627:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.6.3009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf4278f749 code=0x0 [ 1176.831596][T11886] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1177.063673][T11886] usb 10-1: device descriptor read/64, error -71 [ 1177.350339][T11886] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1177.541464][T11886] usb 10-1: device descriptor read/64, error -71 [ 1177.653209][T11886] usb usb10-port1: attempt power cycle [ 1177.980308][T11898] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1178.030396][T11886] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1178.060454][T11894] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1178.073741][T11886] usb 10-1: device descriptor read/8, error -71 [ 1178.169453][T11898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.181093][T11898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.191474][T11898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1178.204781][T11898] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1178.216399][T11898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.247321][T11898] usb 7-1: config 0 descriptor?? [ 1178.253562][T11894] usb 9-1: Using ep0 maxpacket: 8 [ 1178.296250][T11894] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1178.308525][T11894] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1178.322519][T11894] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1178.333758][T11894] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.347165][T11894] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1178.356550][T11894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.445133][T11886] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1178.475277][T11886] usb 10-1: device descriptor read/8, error -71 [ 1178.595661][T11886] usb usb10-port1: unable to enumerate USB device [ 1178.657051][T11894] usb 9-1: GET_CAPABILITIES returned 11 [ 1178.663635][T11894] usbtmc 9-1:16.0: can't read capabilities [ 1178.795305][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.803497][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.811322][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.819058][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.830681][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.838329][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.847168][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.855052][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.862849][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.872498][T11898] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1178.924890][T11894] usb 9-1: USB disconnect, device number 15 [ 1178.971502][T11898] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1179.179135][T11894] usb 7-1: USB disconnect, device number 24 [ 1179.320476][T11920] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1179.525625][T11920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1179.535894][T11920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1179.550948][T11920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1179.562729][T11920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1179.606785][T11920] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1179.616600][T11920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.624912][T11920] usb 4-1: Product: syz [ 1179.629242][T11920] usb 4-1: Manufacturer: syz [ 1179.634213][T11920] usb 4-1: SerialNumber: syz [ 1179.658712][T11920] usb 4-1: config 0 descriptor?? [ 1179.694809][T11920] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1180.217306][T11920] scsi host1: usb-storage 4-1:0.0 [ 1180.260165][T11920] usb 4-1: USB disconnect, device number 37 [ 1180.661531][ T30] audit: type=1326 audit(1764853899.247:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15073 comm="syz.0.3024" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578678f749 code=0x0 [ 1180.830493][T11894] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1181.011110][T11894] usb 10-1: Using ep0 maxpacket: 32 [ 1181.030756][T11894] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1181.059378][T11894] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1181.069334][T11894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.078312][T11894] usb 10-1: Product: syz [ 1181.085156][T11894] usb 10-1: Manufacturer: syz [ 1181.090832][T11894] usb 10-1: SerialNumber: syz [ 1181.171828][T11894] usb 10-1: config 0 descriptor?? [ 1181.240305][T11920] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1181.408662][T11920] usb 9-1: Using ep0 maxpacket: 16 [ 1181.441306][T11920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.451975][T11920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1181.461472][T11920] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1181.470856][T11920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.631861][T11894] gs_usb 10-1:0.0: Couldn't get device config: (err=-32) [ 1181.639130][T11894] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -32 [ 1181.649006][T11920] usb 9-1: config 0 descriptor?? [ 1182.142587][T11920] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1182.433581][T11920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.445101][T11920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.455273][T11920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1182.468564][T11920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1182.478125][T11920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.577621][T11920] usb 1-1: config 0 descriptor?? [ 1183.610304][T11920] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1183.848214][T11894] usb 1-1: USB disconnect, device number 23 [ 1184.497999][T11894] usb 9-1: USB disconnect, device number 16 [ 1184.821894][T11920] usb 10-1: USB disconnect, device number 16 [ 1184.977402][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3035'. [ 1186.731285][ T30] audit: type=1326 audit(1764853905.317:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15126 comm="syz.0.3041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578678f749 code=0x0 [ 1188.134839][T11920] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1188.291129][T11894] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1189.529388][T11920] usb 9-1: Using ep0 maxpacket: 16 [ 1189.571301][T11920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.591360][T11920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1189.603790][T11920] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1189.613353][T11920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.630986][T11920] usb 9-1: config 0 descriptor?? [ 1189.913289][T11894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.924643][T11894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.934809][T11894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1189.948076][T11894] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1189.957629][T11894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.004508][T11894] usb 1-1: config 0 descriptor?? [ 1190.807008][T11894] hid_parser_main: 19 callbacks suppressed [ 1190.807100][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.827955][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.835897][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.844213][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.852120][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.859767][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.868486][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.876296][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.884137][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1190.892068][T11894] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1191.057818][T11894] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1191.238178][T11894] usb 1-1: USB disconnect, device number 24 [ 1192.281760][T11894] usb 9-1: USB disconnect, device number 17 [ 1192.308343][ T30] audit: type=1326 audit(1764853910.877:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15166 comm="syz.0.3057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578678f749 code=0x0 [ 1196.371246][T15194] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.377586][T15194] binder: 15193:15194 ioctl 4018620d 200000000040 returned -16 [ 1196.503462][T15196] loop8: detected capacity change from 0 to 8 [ 1196.611094][T15196] Dev loop8: unable to read RDB block 8 [ 1196.617586][T15196] loop8: unable to read partition table [ 1196.671665][T15196] loop8: partition table beyond EOD, truncated [ 1196.678162][T15196] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 1196.772130][T11915] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1196.982961][T11915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.994423][T11915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.004709][T11915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1197.015355][ T30] audit: type=1326 audit(1764853915.597:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.0.3072" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578678f749 code=0x0 [ 1197.017960][T11915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1197.049067][T11915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.150499][T11920] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1197.177702][T11915] usb 4-1: config 0 descriptor?? [ 1197.286357][T15214] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3074'. [ 1197.330872][T11920] usb 9-1: Using ep0 maxpacket: 16 [ 1197.347336][T11920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.358312][T11920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1197.371860][T11920] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1197.383040][T11920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.406258][T11920] usb 9-1: config 0 descriptor?? [ 1197.613700][T11915] hid_parser_main: 5 callbacks suppressed [ 1197.613813][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.628524][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.636577][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.644304][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.652726][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.665617][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.679399][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.689522][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.697956][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.705673][T11915] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1197.762294][T11915] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1197.843869][T11915] usb 4-1: USB disconnect, device number 38 [ 1199.800324][T11894] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1199.953831][T11898] usb 9-1: USB disconnect, device number 18 [ 1200.040678][T11894] usb 10-1: device descriptor read/64, error -71 [ 1200.836796][T11894] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1201.223774][T11894] usb 10-1: device descriptor read/64, error -71 [ 1201.351200][T11894] usb usb10-port1: attempt power cycle [ 1201.650287][T11898] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1201.710432][T11894] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1201.762707][T11894] usb 10-1: device descriptor read/8, error -71 [ 1201.886803][T11898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.898392][T11898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.908503][T11898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1201.922032][T11898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1201.931473][T11898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.075524][T11898] usb 4-1: config 0 descriptor?? [ 1202.086562][T11894] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1202.118570][T11894] usb 10-1: device descriptor read/8, error -71 [ 1202.245835][T11894] usb usb10-port1: unable to enumerate USB device [ 1202.574638][T11898] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1202.708283][T11898] usb 4-1: USB disconnect, device number 39 [ 1207.041323][T11920] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1207.190305][T11920] usb 1-1: device descriptor read/64, error -71 [ 1207.360372][T11898] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1207.450445][T11920] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1207.577229][T11898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.588910][T11898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.599791][T11898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1207.600427][T11920] usb 1-1: device descriptor read/64, error -71 [ 1207.600638][T11898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1207.632252][T11898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.693100][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.698013][T11898] usb 4-1: config 0 descriptor?? [ 1207.700122][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.739533][T11920] usb usb1-port1: attempt power cycle [ 1208.090533][T11920] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1208.112215][T11920] usb 1-1: device descriptor read/8, error -71 [ 1208.174700][T11898] hid_parser_main: 20 callbacks suppressed [ 1208.174767][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.188651][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.196442][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.204856][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.212647][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.223855][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.233016][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.240958][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.248620][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.256401][T11898] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1208.403096][T11920] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1208.462760][T11920] usb 1-1: device descriptor read/8, error -71 [ 1208.471994][T11898] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1208.570958][T11898] usb 4-1: USB disconnect, device number 40 [ 1208.571797][T11920] usb usb1-port1: unable to enumerate USB device [ 1209.442339][T15319] capability: warning: `syz.8.3112' uses 32-bit capabilities (legacy support in use) [ 1212.951438][T11898] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1213.250172][T11898] usb 10-1: Using ep0 maxpacket: 32 [ 1213.349316][T15350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1213.360279][T15350] unsupported nlmsg_type 40 [ 1213.592518][T11920] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1213.593023][T11894] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1213.659892][T11898] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1213.668555][T11898] usb 10-1: config 0 has no interface number 0 [ 1213.684792][T13789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1213.698656][T13789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1213.708076][T13789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1213.724093][T13789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1213.735461][T13789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1213.754257][T11920] usb 9-1: device descriptor read/64, error -71 [ 1213.805090][T11898] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1213.814629][T11898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.823213][T11898] usb 10-1: Product: syz [ 1213.827627][T11898] usb 10-1: Manufacturer: syz [ 1213.832746][T11898] usb 10-1: SerialNumber: syz [ 1214.000466][T11920] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1214.012246][T11886] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1214.028360][T11898] usb 10-1: config 0 descriptor?? [ 1214.108751][T11894] usb 1-1: config 8 has an invalid interface number: 234 but max is 0 [ 1214.117320][T11894] usb 1-1: config 8 has no interface number 0 [ 1214.128559][T11898] smsc95xx v2.0.0 [ 1214.151129][T11894] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=32.17 [ 1214.162534][T11894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.171680][T11894] usb 1-1: Product: syz [ 1214.176157][T11894] usb 1-1: Manufacturer: syz [ 1214.178008][T11920] usb 9-1: device descriptor read/64, error -71 [ 1214.181156][T11894] usb 1-1: SerialNumber: syz [ 1214.241347][T11886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.252087][T11886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1214.379573][T11920] usb usb9-port1: attempt power cycle [ 1214.387437][T11894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1214.396312][T11894] usb 1-1: setting power ON [ 1214.401186][T11894] dvb-usb: bulk message failed: -22 (2/0) [ 1214.602556][T11886] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1214.612043][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1214.620690][T11886] usb 4-1: SerialNumber: syz [ 1214.628672][T11898] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1214.640136][T11898] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1214.656185][T11894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1214.800895][T11920] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1214.826244][T15352] chnl_net:caif_netlink_parms(): no params data found [ 1214.830909][T11886] usb 4-1: 0:2 : does not exist [ 1214.871084][T11920] usb 9-1: device descriptor read/8, error -71 [ 1214.969500][T11894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1214.985147][T11894] dvb_usb_cxusb 1-1:8.234: probe with driver dvb_usb_cxusb failed with error -22 [ 1215.150377][T11920] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1215.200720][T11920] usb 9-1: device descriptor read/8, error -71 [ 1215.228791][T11894] usb 1-1: USB disconnect, device number 29 [ 1215.278563][T11915] usb 4-1: USB disconnect, device number 41 [ 1215.311823][T11920] usb usb9-port1: unable to enumerate USB device [ 1215.676990][T11898] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1215.689154][T11898] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1215.714212][T11898] usb 10-1: USB disconnect, device number 21 [ 1215.830381][T12447] Bluetooth: hci2: command tx timeout [ 1216.072116][T15352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.079592][T15352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.087921][T15352] bridge_slave_0: entered allmulticast mode [ 1216.097247][T15352] bridge_slave_0: entered promiscuous mode [ 1216.145879][T15352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.154269][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.161987][T15352] bridge_slave_1: entered allmulticast mode [ 1216.170724][T15352] bridge_slave_1: entered promiscuous mode [ 1216.209803][ T30] audit: type=1804 audit(1764853934.767:339): pid=15363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3125" name="/newroot/126/bus/file0" dev="overlay" ino=675 res=1 errno=0 [ 1216.472036][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.545332][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.769328][T15352] team0: Port device team_slave_0 added [ 1216.934136][T15352] team0: Port device team_slave_1 added [ 1217.372603][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.380403][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.407407][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.524410][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.531677][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.562010][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.784958][T15352] hsr_slave_0: entered promiscuous mode [ 1217.793601][T15352] hsr_slave_1: entered promiscuous mode [ 1217.801401][T15352] debugfs: 'hsr0' already exists in 'hsr' [ 1217.807217][T15352] Cannot create hsr debugfs directory [ 1217.942395][T12447] Bluetooth: hci2: command tx timeout [ 1218.131363][T15379] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3133'. [ 1218.808115][T15389] loop2: detected capacity change from 0 to 3 [ 1218.836610][T15389] Dev loop2: unable to read RDB block 3 [ 1218.842704][T15389] loop2: unable to read partition table [ 1218.904552][T15389] loop2: partition table beyond EOD, truncated [ 1218.911105][T15389] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1219.306855][T15352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1219.431060][T15352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1219.520563][T11920] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1219.569121][T15352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1219.645733][T15352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1219.736822][T11920] usb 9-1: device descriptor read/64, error -71 [ 1220.174849][T12447] Bluetooth: hci2: command tx timeout [ 1222.175676][T11920] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1223.196728][T12447] Bluetooth: hci2: command tx timeout [ 1223.367759][T11920] usb 9-1: device descriptor read/64, error -71 [ 1223.526640][T11920] usb usb9-port1: attempt power cycle [ 1224.187740][T11920] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1224.332100][T15352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.462815][T15352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.511221][T11920] usb 9-1: device not accepting address 25, error -71 [ 1224.548611][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.556034][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.160973][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.168391][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.564772][T15411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3140'. [ 1226.131558][T15410] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3142'. [ 1226.462961][T15415] fuse: Bad value for 'fd' [ 1227.595616][T15426] loop2: detected capacity change from 0 to 3 [ 1227.631061][T15426] Dev loop2: unable to read RDB block 3 [ 1227.636869][T15426] loop2: unable to read partition table [ 1227.699493][T15426] loop2: partition table beyond EOD, truncated [ 1227.706171][T15426] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1228.626578][T15352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.237338][T13789] Bluetooth: hci4: command 0x0406 tx timeout [ 1235.203811][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1235.213239][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1235.233446][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1235.271989][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1235.285559][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1235.451467][ T5804] Bluetooth: hci5: command 0x0406 tx timeout [ 1235.737928][T15460] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3154'. [ 1236.330522][T15456] chnl_net:caif_netlink_parms(): no params data found [ 1236.626736][T15352] veth0_vlan: entered promiscuous mode [ 1237.360257][T12447] Bluetooth: hci3: command tx timeout [ 1238.693780][T15352] veth1_vlan: entered promiscuous mode [ 1238.830231][T15474] loop2: detected capacity change from 0 to 3 [ 1238.902337][T15474] Dev loop2: unable to read RDB block 3 [ 1238.908087][T15474] loop2: unable to read partition table [ 1239.015034][T15474] loop2: partition table beyond EOD, truncated [ 1239.021797][T15474] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1239.430365][T12447] Bluetooth: hci3: command tx timeout [ 1239.698842][T15456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.706449][T15456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.715195][T15456] bridge_slave_0: entered allmulticast mode [ 1239.723762][T15456] bridge_slave_0: entered promiscuous mode [ 1239.877335][T15456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.884803][T15456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.892824][T15456] bridge_slave_1: entered allmulticast mode [ 1239.901150][T15456] bridge_slave_1: entered promiscuous mode [ 1240.240939][T15352] veth0_macvtap: entered promiscuous mode [ 1240.264014][T15456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.393674][T15456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.740649][T15352] veth1_macvtap: entered promiscuous mode [ 1240.766942][T15456] team0: Port device team_slave_0 added [ 1240.861156][T15456] team0: Port device team_slave_1 added [ 1241.201569][T15456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.208706][T15456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.234979][T15456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.510518][T12447] Bluetooth: hci3: command tx timeout [ 1241.792477][T15352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.168198][T15456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.175511][T15456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.203056][T15456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.532036][T15456] hsr_slave_0: entered promiscuous mode [ 1242.541188][T15456] hsr_slave_1: entered promiscuous mode [ 1242.553589][T15456] debugfs: 'hsr0' already exists in 'hsr' [ 1242.559489][T15456] Cannot create hsr debugfs directory [ 1242.727047][T15352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.196288][ T3435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.324065][ T3435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.378544][ T3435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.450732][T14407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.591936][T12447] Bluetooth: hci3: command tx timeout [ 1243.801937][T15506] loop2: detected capacity change from 0 to 3 [ 1243.841059][T15506] Dev loop2: unable to read RDB block 3 [ 1243.846920][T15506] loop2: unable to read partition table [ 1243.970962][T15506] loop2: partition table beyond EOD, truncated [ 1243.977406][T15506] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1245.096570][T15456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1245.203434][T15456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1245.275698][T15456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1245.366444][T15456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1246.322497][T15456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.607201][T15456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.716115][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.723668][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.900343][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.907907][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.354371][T14354] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.532667][T14354] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.564115][T15540] loop2: detected capacity change from 0 to 3 [ 1247.572999][T15540] Dev loop2: unable to read RDB block 3 [ 1247.578938][T15540] loop2: unable to read partition table [ 1247.587938][T15540] loop2: partition table beyond EOD, truncated [ 1247.595972][T15540] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1247.693783][T14354] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.909208][T14354] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.409097][T15541] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1249.317469][T14354] bridge_slave_1: left allmulticast mode [ 1249.323747][T14354] bridge_slave_1: left promiscuous mode [ 1249.330460][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.543786][T14354] bridge_slave_0: left allmulticast mode [ 1249.549779][T14354] bridge_slave_0: left promiscuous mode [ 1249.556526][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.294306][T14354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.339107][T14354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.354710][T14354] bond0 (unregistering): Released all slaves [ 1250.837931][T14354] hsr_slave_0: left promiscuous mode [ 1250.854312][T14354] hsr_slave_1: left promiscuous mode [ 1250.862500][T14354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.870190][T14354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.885717][T14354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.893632][T14354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.928318][T14354] veth1_macvtap: left promiscuous mode [ 1250.934860][T14354] veth0_macvtap: left promiscuous mode [ 1250.941134][T14354] veth1_vlan: left promiscuous mode [ 1250.946668][T14354] veth0_vlan: left promiscuous mode [ 1251.663645][T14354] team0 (unregistering): Port device team_slave_1 removed [ 1251.716193][T14354] team0 (unregistering): Port device team_slave_0 removed [ 1252.174246][T15456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.468748][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.477612][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.836144][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.845053][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.916371][T15456] veth0_vlan: entered promiscuous mode [ 1253.224265][T15456] veth1_vlan: entered promiscuous mode [ 1253.469474][T15578] loop2: detected capacity change from 0 to 3 [ 1253.538290][T15578] Dev loop2: unable to read RDB block 3 [ 1253.544537][T15578] loop2: unable to read partition table [ 1253.637955][T15578] loop2: partition table beyond EOD, truncated [ 1253.645750][T15578] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1253.815296][T15456] veth0_macvtap: entered promiscuous mode [ 1254.839505][T15456] veth1_macvtap: entered promiscuous mode [ 1255.112886][T15456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.281293][T15456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.504918][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.661630][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.840119][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.995463][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.444163][T11919] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1256.998614][T15600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.090573][T11919] usb 10-1: Using ep0 maxpacket: 8 [ 1257.115268][T11919] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1257.174329][T11919] usb 10-1: config 4 interface 0 has no altsetting 0 [ 1257.295659][T11919] usb 10-1: string descriptor 0 read error: -22 [ 1257.302486][T11919] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1257.312045][T11919] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1257.377109][T11919] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1257.397085][T11919] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1257.408823][T11919] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1257.416464][T11919] usb 10-1: media controller created [ 1257.541655][T11919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1259.121169][T11919] zl10353_read_register: readreg error (reg=127, ret==0) [ 1260.302859][ T30] audit: type=1326 audit(1764853976.847:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.0.3196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578678f749 code=0x0 [ 1262.851626][T11919] usb 10-1: USB disconnect, device number 22 [ 1263.029873][T15615] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1263.199723][T15619] loop2: detected capacity change from 0 to 3 [ 1263.249606][T15619] Dev loop2: unable to read RDB block 3 [ 1263.255928][T15619] loop2: unable to read partition table [ 1263.304135][T15619] loop2: partition table beyond EOD, truncated [ 1263.314587][T15619] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1263.632334][T15622] netlink: 'syz.0.3200': attribute type 16 has an invalid length. [ 1263.640563][T15622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1266.510251][T11919] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1266.671136][T11919] usb 1-1: Using ep0 maxpacket: 8 [ 1266.712014][T11919] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1266.742381][T11919] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1266.815201][T11919] usb 1-1: string descriptor 0 read error: -22 [ 1266.821993][T11919] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1266.831510][T11919] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1267.436769][T11919] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1269.225505][T11919] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1269.237280][T11919] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1269.246847][T11919] usb 1-1: media controller created [ 1269.250233][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.258659][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.724938][T11919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1269.847677][T15661] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1270.772120][T11919] zl10353_read_register: readreg error (reg=127, ret==0) [ 1272.191768][T15666] loop2: detected capacity change from 0 to 3 [ 1272.245542][T15666] Dev loop2: unable to read RDB block 3 [ 1272.251495][T15666] loop2: unable to read partition table [ 1272.287969][T15666] loop2: partition table beyond EOD, truncated [ 1272.294662][T15666] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1272.301635][T11919] usb 1-1: USB disconnect, device number 30 [ 1272.590637][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.598651][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.929144][T13738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.941316][T13738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.381209][T13789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1273.402434][T13789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1273.421191][T13789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1273.460926][T13789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1273.473449][T13789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1274.462121][T15675] chnl_net:caif_netlink_parms(): no params data found [ 1274.761503][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'. [ 1274.770610][T15689] erspan0: entered promiscuous mode [ 1274.783811][T15689] erspan0: entered allmulticast mode [ 1275.607952][T13789] Bluetooth: hci0: command tx timeout [ 1275.850256][T15705] loop2: detected capacity change from 0 to 3 [ 1275.901065][T15705] Dev loop2: unable to read RDB block 3 [ 1275.910782][T15705] loop2: unable to read partition table [ 1275.953752][T15705] loop2: partition table beyond EOD, truncated [ 1275.960721][T15705] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1276.246556][T15675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.246896][T15675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.247528][T15675] bridge_slave_0: entered allmulticast mode [ 1276.251307][T15675] bridge_slave_0: entered promiscuous mode [ 1276.449052][T15675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.449388][T15675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.450271][T15675] bridge_slave_1: entered allmulticast mode [ 1276.453781][T15675] bridge_slave_1: entered promiscuous mode [ 1277.765006][T13789] Bluetooth: hci0: command tx timeout [ 1278.860899][T15713] random: crng reseeded on system resumption [ 1278.883884][T15675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.001437][T15675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.372417][T15675] team0: Port device team_slave_0 added [ 1279.412070][T15675] team0: Port device team_slave_1 added [ 1279.819645][T15675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.826907][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.853346][T15675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.867824][T13789] Bluetooth: hci0: command tx timeout [ 1280.130298][T15675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.137503][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.164038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1280.171192][T15675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.917111][T13789] Bluetooth: hci0: command tx timeout [ 1282.727392][T15675] hsr_slave_0: entered promiscuous mode [ 1282.736222][T15675] hsr_slave_1: entered promiscuous mode [ 1282.744556][T15675] debugfs: 'hsr0' already exists in 'hsr' [ 1282.750618][T15675] Cannot create hsr debugfs directory [ 1283.039754][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3232'. [ 1283.199266][T15728] bridge0: entered promiscuous mode [ 1283.204998][T15728] macvtap1: entered promiscuous mode [ 1283.211236][T15728] macvtap1: entered allmulticast mode [ 1283.216759][T15728] bridge0: entered allmulticast mode [ 1283.308569][T15730] bridge0: left allmulticast mode [ 1283.315024][T15730] bridge0: left promiscuous mode [ 1283.707735][T15742] loop2: detected capacity change from 0 to 3 [ 1283.796989][T15742] Dev loop2: unable to read RDB block 3 [ 1283.803023][T15742] loop2: unable to read partition table [ 1283.848013][T13738] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.938903][T15742] loop2: partition table beyond EOD, truncated [ 1283.945772][T15742] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1284.164833][T13738] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.367040][T13738] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.536142][T13738] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.536470][T15747] binder: 15745:15747 ioctl c0306201 2000000003c0 returned -14 [ 1285.133442][ T30] audit: type=1326 audit(1764854003.657:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.9.3241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa21d98f749 code=0x0 [ 1285.253193][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.262591][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.563345][T15752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.587558][T15752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.031198][T15775] loop2: detected capacity change from 0 to 3 [ 1286.051086][T15775] Dev loop2: unable to read RDB block 3 [ 1286.057116][T15775] loop2: unable to read partition table [ 1286.066410][T15775] loop2: partition table beyond EOD, truncated [ 1286.078943][T15775] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1286.122090][T15752] macvtap1: left promiscuous mode [ 1286.127331][T15752] macvtap1: left allmulticast mode [ 1286.175428][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'. [ 1286.192467][T13738] bridge_slave_1: left allmulticast mode [ 1286.198302][T13738] bridge_slave_1: left promiscuous mode [ 1286.205375][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.277866][T13738] bridge_slave_0: left allmulticast mode [ 1286.284021][T13738] bridge_slave_0: left promiscuous mode [ 1286.294363][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.933258][T15785] binder: 15783:15785 ioctl c0306201 2000000003c0 returned -14 [ 1287.740380][T13738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.764065][T13738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.787319][T13738] bond0 (unregistering): Released all slaves [ 1287.893952][ T35] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.956110][ T35] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.095753][ T35] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.137716][ T35] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.411397][T13738] hsr_slave_0: left promiscuous mode [ 1288.419793][T13738] hsr_slave_1: left promiscuous mode [ 1288.429064][T13738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.436821][T13738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.459050][T13738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.467178][T13738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.505635][T13738] veth1_macvtap: left promiscuous mode [ 1288.511735][T13738] veth0_macvtap: left promiscuous mode [ 1288.517605][T13738] veth1_vlan: left promiscuous mode [ 1288.523688][T13738] veth0_vlan: left promiscuous mode [ 1288.897997][T15802] loop2: detected capacity change from 0 to 3 [ 1288.906536][T15802] Dev loop2: unable to read RDB block 3 [ 1288.917017][T15802] loop2: unable to read partition table [ 1288.927371][T15802] loop2: partition table beyond EOD, truncated [ 1288.934081][T15802] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1289.274815][T13738] team0 (unregistering): Port device team_slave_1 removed [ 1289.344417][T13738] team0 (unregistering): Port device team_slave_0 removed [ 1289.435413][T15806] binder: BINDER_SET_CONTEXT_MGR already set [ 1289.441879][T15806] binder: 15805:15806 ioctl 4018620d 200000000040 returned -16 [ 1289.611839][T15675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1289.711681][T15675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1289.982738][T15675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1290.176783][T15675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1290.564502][T11898] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1290.762604][T11898] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1290.772875][T11898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1290.783221][T11898] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1291.020191][T11898] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1291.029472][T11898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.037967][T11898] usb 9-1: Product: syz [ 1291.042397][T11898] usb 9-1: Manufacturer: syz [ 1291.047162][T11898] usb 9-1: SerialNumber: syz [ 1291.183013][T11898] usb 9-1: config 0 descriptor?? [ 1291.192807][T15811] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1292.255596][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1292.344255][T15819] batadv_slave_0: entered promiscuous mode [ 1292.350571][T15819] batadv_slave_0: entered allmulticast mode [ 1292.378121][T15822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.689193][T15675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.999287][T15675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.229240][T14335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.237164][T14335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.259336][T14335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.267374][T14335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.340446][T11898] usb 9-1: USB disconnect, device number 27 [ 1294.717922][T15836] loop2: detected capacity change from 0 to 3 [ 1294.747523][T15836] Dev loop2: unable to read RDB block 3 [ 1294.753586][T15836] loop2: unable to read partition table [ 1294.782391][T15836] loop2: partition table beyond EOD, truncated [ 1294.788782][T15836] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1295.133850][T15839] binder: BINDER_SET_CONTEXT_MGR already set [ 1295.140720][T15839] binder: 15838:15839 ioctl 4018620d 200000000040 returned -16 [ 1295.246607][T15675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.745767][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3277'. [ 1296.756058][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3277'. [ 1299.208848][T15875] loop2: detected capacity change from 0 to 3 [ 1299.220169][T15875] Dev loop2: unable to read RDB block 3 [ 1299.226097][T15875] loop2: unable to read partition table [ 1299.234910][T15875] loop2: partition table beyond EOD, truncated [ 1299.241522][T15875] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1299.504623][T15675] veth0_vlan: entered promiscuous mode [ 1299.544681][T15675] veth1_vlan: entered promiscuous mode [ 1299.586784][T15880] binder: BINDER_SET_CONTEXT_MGR already set [ 1299.593422][T15880] binder: 15879:15880 ioctl 4018620d 200000000040 returned -16 [ 1299.734086][T15675] veth0_macvtap: entered promiscuous mode [ 1299.791346][T15675] veth1_macvtap: entered promiscuous mode [ 1300.114594][T15675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.177909][T15886] hfs: can't find a HFS filesystem on dev nullb0 [ 1300.179189][T15675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.308897][ T3440] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.366924][ T3440] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.472095][ T3440] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.543417][ T3440] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.733099][T11920] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1300.894197][T11920] usb 3-1: device descriptor read/64, error -71 [ 1301.151103][T11920] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1301.361301][T11920] usb 3-1: device descriptor read/64, error -71 [ 1301.477794][T11920] usb usb3-port1: attempt power cycle [ 1301.891067][T11920] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1301.972354][T11920] usb 3-1: device descriptor read/8, error -71 [ 1302.226607][T11920] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1302.339045][T11920] usb 3-1: device descriptor read/8, error -71 [ 1302.452327][T11920] usb usb3-port1: unable to enumerate USB device [ 1305.163309][T15914] loop2: detected capacity change from 0 to 3 [ 1305.181151][T15914] Dev loop2: unable to read RDB block 3 [ 1305.187029][T15914] loop2: unable to read partition table [ 1305.227797][T15914] loop2: partition table beyond EOD, truncated [ 1305.234572][T15914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1306.470899][T15926] binder: 15925:15926 unknown command 0 [ 1306.476646][T15926] binder: 15925:15926 ioctl c0306201 200000000080 returned -22 [ 1306.542471][T15926] binder: 15925:15926 ioctl c0306201 2000000003c0 returned -14 [ 1310.034944][T14354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.043284][T14354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.251628][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.259749][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.656931][T15966] binder: 15964:15966 unknown command 0 [ 1310.662972][T15966] binder: 15964:15966 ioctl c0306201 200000000080 returned -22 [ 1310.797636][T15966] binder: 15964:15966 ioctl c0306201 2000000003c0 returned -14 [ 1312.773419][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3212'. [ 1321.315613][T15998] binder: 15996:15998 unknown command 0 [ 1321.321597][T15998] binder: 15996:15998 ioctl c0306201 200000000080 returned -22 [ 1321.342964][T15998] binder: 15996:15998 ioctl c0306201 2000000003c0 returned -14 [ 1322.664147][T16003] orangefs_mount: mount request failed with -4 [ 1323.708057][T11920] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1323.910868][T11920] usb 1-1: Using ep0 maxpacket: 8 [ 1323.942452][T11920] usb 1-1: no configurations [ 1323.947247][T11920] usb 1-1: can't read configurations, error -22 [ 1324.149238][T11920] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1324.320388][T11920] usb 1-1: Using ep0 maxpacket: 8 [ 1324.329081][T11920] usb 1-1: no configurations [ 1324.334064][T11920] usb 1-1: can't read configurations, error -22 [ 1324.371280][T11920] usb usb1-port1: attempt power cycle [ 1324.754430][T11920] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1324.826619][T11920] usb 1-1: Using ep0 maxpacket: 8 [ 1324.836100][T11920] usb 1-1: no configurations [ 1324.841226][T11920] usb 1-1: can't read configurations, error -22 [ 1325.360441][T11920] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1326.031722][T11920] usb 1-1: Using ep0 maxpacket: 8 [ 1328.161828][T16029] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1330.055847][T16042] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3331'. [ 1330.622524][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.629176][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1331.856950][T11920] usb 1-1: device descriptor read/all, error -110 [ 1331.900719][T11920] usb usb1-port1: unable to enumerate USB device [ 1335.173550][T16047] binder: 16046:16047 unknown command 0 [ 1335.179294][T16047] binder: 16046:16047 ioctl c0306201 200000000080 returned -22 [ 1338.754847][T12447] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1338.780257][T12447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1338.819112][T12447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1338.840431][T12447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1338.875357][T12447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.061973][T12447] Bluetooth: hci2: command tx timeout [ 1341.144492][T16071] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3344'. [ 1341.378315][T13789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1341.388664][T13789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1341.398722][T13789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1341.413591][T13789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1341.426421][T13789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1341.903101][T16081] binder: 16080:16081 unknown command 0 [ 1341.908855][T16081] binder: 16080:16081 ioctl c0306201 200000000080 returned -22 [ 1342.161522][T16063] chnl_net:caif_netlink_parms(): no params data found [ 1343.850936][T12447] Bluetooth: hci2: command tx timeout [ 1343.860242][T13789] Bluetooth: hci5: command tx timeout [ 1345.869109][T11894] IPVS: starting estimator thread 0... [ 1345.912196][T12447] Bluetooth: hci2: command tx timeout [ 1345.918048][T13789] Bluetooth: hci5: command tx timeout [ 1345.960863][T16100] IPVS: using max 240 ests per chain, 12000 per kthread [ 1347.953070][T16072] chnl_net:caif_netlink_parms(): no params data found [ 1348.020824][T13789] Bluetooth: hci5: command tx timeout [ 1348.026470][T12447] Bluetooth: hci2: command tx timeout [ 1348.504659][T16063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.512181][T16063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.520024][T16063] bridge_slave_0: entered allmulticast mode [ 1348.528219][T16063] bridge_slave_0: entered promiscuous mode [ 1348.788542][T16063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.796206][T16063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.804193][T16063] bridge_slave_1: entered allmulticast mode [ 1348.812578][T16063] bridge_slave_1: entered promiscuous mode [ 1349.117973][T16063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.143548][T16063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.375738][T16063] team0: Port device team_slave_0 added [ 1349.399648][T16063] team0: Port device team_slave_1 added [ 1349.544542][T16063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.552046][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.581026][T16063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.614104][T16113] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3354'. [ 1349.813675][T16063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.821361][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.848599][T16063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.070476][T12447] Bluetooth: hci5: command tx timeout [ 1350.098217][T16063] hsr_slave_0: entered promiscuous mode [ 1350.108577][T16063] hsr_slave_1: entered promiscuous mode [ 1350.117594][T16063] debugfs: 'hsr0' already exists in 'hsr' [ 1350.123980][T16063] Cannot create hsr debugfs directory [ 1350.449254][T11894] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1350.746128][T11894] usb 3-1: Using ep0 maxpacket: 32 [ 1350.749081][T16072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.758944][T16072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.767050][T16072] bridge_slave_0: entered allmulticast mode [ 1350.776536][T16072] bridge_slave_0: entered promiscuous mode [ 1350.822437][T11894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1350.865576][T11894] usb 3-1: config 244 has an invalid interface number: 28 but max is 0 [ 1350.874567][T11894] usb 3-1: config 244 has no interface number 0 [ 1350.881433][T11894] usb 3-1: config 244 interface 28 has no altsetting 0 [ 1350.953355][T11894] usb 3-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=61.24 [ 1350.963445][T11894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.972139][T11894] usb 3-1: Product: syz [ 1350.974481][T16072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.976606][T11894] usb 3-1: Manufacturer: syz [ 1350.983959][T16072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.988714][T11894] usb 3-1: SerialNumber: syz [ 1350.996452][T16072] bridge_slave_1: entered allmulticast mode [ 1351.010283][T16072] bridge_slave_1: entered promiscuous mode [ 1351.505279][T11894] usb 3-1: unsupported MDLM descriptors [ 1351.579674][T11894] usb 3-1: USB disconnect, device number 29 [ 1351.850623][T16072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.990824][T16072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.334758][T16072] team0: Port device team_slave_0 added [ 1352.532840][T16072] team0: Port device team_slave_1 added [ 1352.541182][T14354] bridge_slave_1: left allmulticast mode [ 1352.547089][T14354] bridge_slave_1: left promiscuous mode [ 1352.557559][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.617861][T14354] bridge_slave_0: left allmulticast mode [ 1352.623995][T14354] bridge_slave_0: left promiscuous mode [ 1352.633969][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.072493][T14354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.147233][T14354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.163801][T14354] bond0 (unregistering): Released all slaves [ 1353.443198][T16072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.451052][T16072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.477607][T16072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.534356][T16072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.541805][T16072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.568942][T16072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.585615][T16063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1353.620620][T16139] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1353.661435][T16063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1353.787224][T14354] hsr_slave_0: left promiscuous mode [ 1353.804666][T14354] hsr_slave_1: left promiscuous mode [ 1353.813365][T14354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.830259][T14354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.269613][T14354] team0 (unregistering): Port device team_slave_1 removed [ 1354.334350][T14354] team0 (unregistering): Port device team_slave_0 removed [ 1354.600790][T16063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1354.775681][T16063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1355.096594][T16072] hsr_slave_0: entered promiscuous mode [ 1355.106743][T16072] hsr_slave_1: entered promiscuous mode [ 1355.115293][T16072] debugfs: 'hsr0' already exists in 'hsr' [ 1355.121388][T16072] Cannot create hsr debugfs directory [ 1355.524029][T14354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.658852][T14354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.841393][T14354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.122894][T14354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.562601][T16063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.588774][T16165] input: syz0 as /devices/virtual/input/input44 [ 1356.628278][T14354] bridge_slave_1: left allmulticast mode [ 1356.634363][T14354] bridge_slave_1: left promiscuous mode [ 1356.641017][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.689251][T14354] bridge_slave_0: left allmulticast mode [ 1356.695382][T14354] bridge_slave_0: left promiscuous mode [ 1356.702092][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.369785][T14354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.391098][T14354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.407390][T14354] bond0 (unregistering): Released all slaves [ 1357.570887][T16174] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1357.658320][T16063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.761454][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.768925][T14147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.909241][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.916716][T14147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.240900][T12447] Bluetooth: hci3: command 0x0406 tx timeout [ 1358.462913][T14354] hsr_slave_0: left promiscuous mode [ 1358.512355][T14354] hsr_slave_1: left promiscuous mode [ 1358.520212][T14354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.527785][T14354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.569257][T14354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.577249][T14354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.616911][T14354] veth1_macvtap: left promiscuous mode [ 1358.622953][T14354] veth0_macvtap: left promiscuous mode [ 1358.628893][T14354] veth1_vlan: left promiscuous mode [ 1358.634642][T14354] veth0_vlan: left promiscuous mode [ 1359.268262][T14354] team0 (unregistering): Port device team_slave_1 removed [ 1359.293542][T14354] team0 (unregistering): Port device team_slave_0 removed [ 1359.910349][T11915] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1360.202856][T11915] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1360.211392][T11915] usb 3-1: config 0 has no interface number 0 [ 1360.217742][T11915] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1360.228457][T11915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.503584][T16072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1360.522791][T16072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1360.535209][T11915] usb 3-1: config 0 descriptor?? [ 1360.553307][T11915] usb 3-1: selecting invalid altsetting 1 [ 1360.559464][T11915] dvb_ttusb_budget: ttusb_init_controller: error [ 1360.566111][T11915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1360.612738][T16072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1360.649502][T16072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1361.136148][T11915] DVB: Unable to find symbol cx22700_attach() [ 1361.232199][T16072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.299087][T11915] DVB: Unable to find symbol tda10046_attach() [ 1361.305536][T11915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1361.336552][T16072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.376514][T11915] usb 3-1: USB disconnect, device number 30 [ 1361.411080][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.418414][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.504411][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.511819][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.841334][T16063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.857487][T16212] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3387'. [ 1363.716108][T16072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.106898][T16072] veth0_vlan: entered promiscuous mode [ 1364.120794][T16063] veth0_vlan: entered promiscuous mode [ 1364.183586][T16072] veth1_vlan: entered promiscuous mode [ 1364.200250][T16063] veth1_vlan: entered promiscuous mode [ 1364.398317][T16072] veth0_macvtap: entered promiscuous mode [ 1364.423410][T16063] veth0_macvtap: entered promiscuous mode [ 1364.704118][T16072] veth1_macvtap: entered promiscuous mode [ 1364.720989][T16063] veth1_macvtap: entered promiscuous mode [ 1364.788657][T16063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.813734][T16063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.920684][T14354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.232742][T14354] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.271194][T16072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.293535][T14354] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.323157][T16072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.342491][T14354] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.396321][T13738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.427402][T13738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.463976][T13738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.492258][T13738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.317883][T16257] Bluetooth: MGMT ver 1.23 [ 1371.001302][T12447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1371.011666][T12447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1371.037698][T12447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1371.050838][T12447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1371.062122][T12447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1373.190510][T12447] Bluetooth: hci4: command tx timeout [ 1373.200553][T16274] chnl_net:caif_netlink_parms(): no params data found [ 1374.666000][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.674254][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.761136][T16274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.768458][T16274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.776635][T16274] bridge_slave_0: entered allmulticast mode [ 1374.784958][T16274] bridge_slave_0: entered promiscuous mode [ 1374.871013][T13738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.879036][T13738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.968726][T16274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.976512][T16274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.984394][T16274] bridge_slave_1: entered allmulticast mode [ 1374.992651][T16274] bridge_slave_1: entered promiscuous mode [ 1375.271386][T12447] Bluetooth: hci4: command tx timeout [ 1375.308774][T16274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.407409][T16274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.595470][T16274] team0: Port device team_slave_0 added [ 1375.642167][T16274] team0: Port device team_slave_1 added [ 1375.819392][T16274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.827535][T16274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.855745][T16274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.877933][T16274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.885626][T16274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.912074][T16274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.086194][T16274] hsr_slave_0: entered promiscuous mode [ 1376.095024][T16274] hsr_slave_1: entered promiscuous mode [ 1376.102684][T16274] debugfs: 'hsr0' already exists in 'hsr' [ 1376.108515][T16274] Cannot create hsr debugfs directory [ 1377.156574][T16274] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1377.206548][T16274] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1377.266709][T16274] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1377.328875][T16274] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1377.360827][T12447] Bluetooth: hci4: command tx timeout [ 1378.589314][T14354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.597765][T14354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.905460][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.913809][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.729209][T12447] Bluetooth: hci4: command tx timeout [ 1380.455481][T16274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.557707][T16274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.849069][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.856667][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.875653][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.883061][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.718641][T16274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1381.796442][T16344] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1384.512209][T16274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.747289][T16339] Set syz1 is full, maxelem 65536 reached [ 1387.026449][T16274] veth0_vlan: entered promiscuous mode [ 1387.038727][T11919] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1387.140551][T16274] veth1_vlan: entered promiscuous mode [ 1387.232989][T11919] usb 2-1: Using ep0 maxpacket: 8 [ 1387.276771][T11919] usb 2-1: config 0 has no interfaces? [ 1387.299685][T11919] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=30.8b [ 1387.310669][T11919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.320681][T11919] usb 2-1: Product: syz [ 1387.324956][T11919] usb 2-1: Manufacturer: syz [ 1387.329635][T11919] usb 2-1: SerialNumber: syz [ 1387.432370][T11919] usb 2-1: config 0 descriptor?? [ 1387.652901][T11919] usb 2-1: USB disconnect, device number 14 [ 1387.772980][T16379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3419'. [ 1391.174393][T16390] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1392.020412][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1392.029016][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.147707][T16274] veth0_macvtap: entered promiscuous mode [ 1394.110182][T13789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1394.127128][T13789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1394.149050][T13789] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1394.162616][T13789] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1394.222209][T13789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1394.241865][T16274] veth1_macvtap: entered promiscuous mode [ 1394.403570][T16274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.462982][T16274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.048256][ T1102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.190788][ T1102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.282668][ T1102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.525923][ T1102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.244299][T16400] chnl_net:caif_netlink_parms(): no params data found [ 1396.417738][T13789] Bluetooth: hci6: command tx timeout [ 1399.284220][T13789] Bluetooth: hci6: command tx timeout [ 1401.350492][T13789] Bluetooth: hci6: command tx timeout [ 1403.430256][T13789] Bluetooth: hci6: command tx timeout [ 1403.951587][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.959184][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.968024][T16400] bridge_slave_0: entered allmulticast mode [ 1403.976571][T16400] bridge_slave_0: entered promiscuous mode [ 1404.018980][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.027123][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.035042][T16400] bridge_slave_1: entered allmulticast mode [ 1404.043383][T16400] bridge_slave_1: entered promiscuous mode [ 1404.234165][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.286450][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.638204][T16400] team0: Port device team_slave_0 added [ 1404.741026][T16400] team0: Port device team_slave_1 added [ 1404.986654][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.994261][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.020764][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.224267][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.237028][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.263891][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.674271][T16400] hsr_slave_0: entered promiscuous mode [ 1405.682875][T16400] hsr_slave_1: entered promiscuous mode [ 1405.690695][T16400] debugfs: 'hsr0' already exists in 'hsr' [ 1405.696521][T16400] Cannot create hsr debugfs directory [ 1406.045120][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3440'. [ 1406.821818][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 1408.186614][T16400] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.282840][T16478] overlayfs: failed to resolve './file1': -2 [ 1410.105187][T16400] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.211569][T16400] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.066882][T16400] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.618858][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.627116][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.680748][T16400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1411.730965][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.739044][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.817722][T16400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1411.918008][T16400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1411.988640][T16400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1412.050387][T11919] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1412.177634][T16492] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3397'. [ 1412.223638][T11919] usb 2-1: Using ep0 maxpacket: 8 [ 1412.275697][T11919] usb 2-1: config 0 has no interfaces? [ 1412.346917][T11919] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=30.8b [ 1412.357338][T11919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.366298][T11919] usb 2-1: Product: syz [ 1412.371238][T11919] usb 2-1: Manufacturer: syz [ 1412.375954][T11919] usb 2-1: SerialNumber: syz [ 1412.581965][T11919] usb 2-1: config 0 descriptor?? [ 1413.227671][T11915] usb 2-1: USB disconnect, device number 15 [ 1413.461794][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.676178][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.812122][T14354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.819498][T14354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.935987][T14354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.943655][T14354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.230352][T16400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1414.241058][T16400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1415.601446][T16509] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1416.712184][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.039100][T16400] veth0_vlan: entered promiscuous mode [ 1417.137205][T16400] veth1_vlan: entered promiscuous mode [ 1417.386846][T16400] veth0_macvtap: entered promiscuous mode [ 1417.454934][T16400] veth1_macvtap: entered promiscuous mode [ 1417.743409][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.791832][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.935704][ T3440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.038409][ T1099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.108703][ T1099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.189579][ T1099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.267622][T16539] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3457'. [ 1423.557018][T11920] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1423.730347][T11920] usb 3-1: Using ep0 maxpacket: 8 [ 1423.765013][T11920] usb 3-1: config 0 has no interfaces? [ 1423.846362][T11920] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=30.8b [ 1423.856068][T11920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.865122][T11920] usb 3-1: Product: syz [ 1423.869595][T11920] usb 3-1: Manufacturer: syz [ 1423.878490][T11920] usb 3-1: SerialNumber: syz [ 1423.899129][T11920] usb 3-1: config 0 descriptor?? [ 1423.928722][T16544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3460'. [ 1423.938333][T16544] block nbd0: reconnected socket [ 1423.965391][T14556] bridge_slave_1: left allmulticast mode [ 1423.971409][T14556] bridge_slave_1: left promiscuous mode [ 1423.981426][T14556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.009482][T14556] bridge_slave_0: left allmulticast mode [ 1424.015524][T14556] bridge_slave_0: left promiscuous mode [ 1424.021799][T14556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.045790][T13789] block nbd0: Receive control failed (result -32) [ 1424.127061][T16200] usb 3-1: USB disconnect, device number 31 [ 1424.614916][T14556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.677604][T14556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.714188][T14556] bond0 (unregistering): Released all slaves [ 1425.642328][T14556] hsr_slave_0: left promiscuous mode [ 1427.691934][T14556] hsr_slave_1: left promiscuous mode [ 1427.699294][T14556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.707004][T14556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.031577][T14556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.039150][T14556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.226538][T14556] veth1_macvtap: left promiscuous mode [ 1428.232787][T14556] veth0_macvtap: left promiscuous mode [ 1428.238626][T14556] veth1_vlan: left promiscuous mode [ 1428.244260][T14556] veth0_vlan: left promiscuous mode [ 1429.503670][T14556] team0 (unregistering): Port device team_slave_1 removed [ 1429.760592][T14556] team0 (unregistering): Port device team_slave_0 removed [ 1432.337392][T16582] nbd1: detected capacity change from 0 to 127 [ 1432.355517][T16586] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3471'. [ 1432.364947][T16586] block nbd0: reconnected socket [ 1432.411831][T13789] block nbd1: Receive control failed (result -32) [ 1432.441066][T12447] block nbd0: Receive control failed (result -32) [ 1433.010316][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.018329][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.051066][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.059075][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.992546][T16593] binder: 16589:16593 unknown command 0 [ 1433.998502][T16593] binder: 16589:16593 ioctl c0306201 200000000080 returned -22 [ 1443.921346][T11898] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1444.200379][T11898] usb 7-1: Using ep0 maxpacket: 8 [ 1444.226134][T11898] usb 7-1: config 0 has no interfaces? [ 1444.303023][T11898] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=30.8b [ 1444.312533][T11898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.320918][T11898] usb 7-1: Product: syz [ 1444.325275][T11898] usb 7-1: Manufacturer: syz [ 1444.330152][T11898] usb 7-1: SerialNumber: syz [ 1444.565197][T13789] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1444.574765][T13789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1444.586195][T13789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1444.610870][T13789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1444.647512][T13789] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1444.662382][T11898] usb 7-1: config 0 descriptor?? [ 1444.941617][T11898] usb 7-1: USB disconnect, device number 25 [ 1445.451697][T16639] chnl_net:caif_netlink_parms(): no params data found [ 1446.710092][T13789] Bluetooth: hci7: command tx timeout [ 1448.790127][T13789] Bluetooth: hci7: command tx timeout [ 1449.298591][T16639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.306642][T16639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.314403][T16639] bridge_slave_0: entered allmulticast mode [ 1449.322936][T16639] bridge_slave_0: entered promiscuous mode [ 1449.490284][T16639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.497669][T16639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.505863][T16639] bridge_slave_1: entered allmulticast mode [ 1449.514395][T16639] bridge_slave_1: entered promiscuous mode [ 1449.898568][T16639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.318783][T16639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.691017][T16673] ===================================================== [ 1450.698519][T16673] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30 [ 1450.710268][T16673] ieee802154_hdr_push+0x9ac/0xa30 [ 1450.715597][T16673] ieee802154_header_create+0x854/0xb90 [ 1450.722941][T16673] dgram_sendmsg+0xb40/0x16d0 [ 1450.727835][T16673] ieee802154_sock_sendmsg+0x92/0xd0 [ 1450.733361][T16673] __sock_sendmsg+0x333/0x3d0 [ 1450.738287][T16673] ____sys_sendmsg+0x7f5/0xcf0 [ 1450.743435][T16673] ___sys_sendmsg+0x271/0x3b0 [ 1450.748251][T16673] __x64_sys_sendmsg+0x211/0x3e0 [ 1450.756626][T16673] x64_sys_call+0x1c60/0x3e70 [ 1450.761575][T16673] do_syscall_64+0xd9/0xf80 [ 1450.766225][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.772367][T16673] [ 1450.774754][T16673] Uninit was stored to memory at: [ 1450.780169][T16673] ieee802154_hdr_push+0x9a5/0xa30 [ 1450.785584][T16673] ieee802154_header_create+0x854/0xb90 [ 1450.792939][T16673] dgram_sendmsg+0xb40/0x16d0 [ 1450.797774][T16673] ieee802154_sock_sendmsg+0x92/0xd0 [ 1450.807033][T16673] __sock_sendmsg+0x333/0x3d0 [ 1450.813179][T16673] ____sys_sendmsg+0x7f5/0xcf0 [ 1450.818162][T16673] ___sys_sendmsg+0x271/0x3b0 [ 1450.823044][T16673] __x64_sys_sendmsg+0x211/0x3e0 [ 1450.828105][T16673] x64_sys_call+0x1c60/0x3e70 [ 1450.833014][T16673] do_syscall_64+0xd9/0xf80 [ 1450.837669][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.843915][T16673] [ 1450.846308][T16673] Local variable hdr created at: [ 1450.851370][T16673] ieee802154_header_create+0x4e/0xb90 [ 1450.856981][T16673] dgram_sendmsg+0xb40/0x16d0 [ 1450.861912][T16673] [ 1450.864334][T16673] CPU: 0 UID: 0 PID: 16673 Comm: syz.2.3497 Not tainted syzkaller #0 PREEMPT(none) [ 1450.875095][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1450.886777][T16673] ===================================================== [ 1450.893900][T16673] Disabling lock debugging due to kernel taint [ 1450.900344][T16673] Kernel panic - not syncing: kmsan.panic set ... [ 1450.906878][T16673] CPU: 0 UID: 0 PID: 16673 Comm: syz.2.3497 Tainted: G B syzkaller #0 PREEMPT(none) [ 1450.917994][T16673] Tainted: [B]=BAD_PAGE [ 1450.922225][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1450.932379][T16673] Call Trace: [ 1450.935735][T16673] [ 1450.938748][T16673] __dump_stack+0x26/0x30 [ 1450.943256][T16673] dump_stack_lvl+0x53/0x270 [ 1450.948001][T16673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1450.953992][T16673] dump_stack+0x1e/0x25 [ 1450.958295][T16673] vpanic+0x435/0xd30 [ 1450.962451][T16673] panic+0x15d/0x160 [ 1450.966544][T16673] kmsan_report+0x31c/0x320 [ 1450.971205][T16673] ? stack_depot_save+0x12/0x20 [ 1450.976310][T16673] ? __msan_warning+0x1b/0x30 [ 1450.981133][T16673] ? ieee802154_hdr_push+0x9ac/0xa30 [ 1450.986598][T16673] ? ieee802154_header_create+0x854/0xb90 [ 1450.992470][T16673] ? dgram_sendmsg+0xb40/0x16d0 [ 1450.997467][T16673] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 1451.003094][T16673] ? __sock_sendmsg+0x333/0x3d0 [ 1451.008099][T16673] ? ____sys_sendmsg+0x7f5/0xcf0 [ 1451.013170][T16673] ? ___sys_sendmsg+0x271/0x3b0 [ 1451.018159][T16673] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1451.023404][T16673] ? x64_sys_call+0x1c60/0x3e70 [ 1451.028427][T16673] ? do_syscall_64+0xd9/0xf80 [ 1451.033243][T16673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.039466][T16673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.045678][T16673] ? ____sys_sendmsg+0x7f5/0xcf0 [ 1451.050754][T16673] ? ___sys_sendmsg+0x271/0x3b0 [ 1451.055738][T16673] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1451.060995][T16673] ? x64_sys_call+0x1c60/0x3e70 [ 1451.066050][T16673] ? do_syscall_64+0xd9/0xf80 [ 1451.070891][T16673] ? kmsan_get_metadata+0xfb/0x160 [ 1451.076180][T16673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1451.082166][T16673] ? cfg802154_pernet_exit+0x1d1/0x230 [ 1451.087808][T16673] ? filter_irq_stacks+0x49/0x190 [ 1451.093004][T16673] ? kmsan_get_metadata+0xfb/0x160 [ 1451.098277][T16673] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1451.104690][T16673] ? kmsan_get_metadata+0xfb/0x160 [ 1451.109975][T16673] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1451.116475][T16673] ? kmsan_get_metadata+0xfb/0x160 [ 1451.121767][T16673] __msan_warning+0x1b/0x30 [ 1451.126424][T16673] ieee802154_hdr_push+0x9ac/0xa30 [ 1451.131737][T16673] ? nvdimm_namespace_common_probe+0x562/0x1490 [ 1451.138277][T16673] ? __msan_memcpy+0x108/0x1c0 [ 1451.143200][T16673] ieee802154_header_create+0x854/0xb90 [ 1451.148937][T16673] ? kmsan_get_metadata+0xfb/0x160 [ 1451.154220][T16673] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1451.160446][T16673] dgram_sendmsg+0xb40/0x16d0 [ 1451.165312][T16673] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1451.170599][T16673] ieee802154_sock_sendmsg+0x92/0xd0 [ 1451.176072][T16673] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1451.182222][T16673] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1451.188389][T16673] __sock_sendmsg+0x333/0x3d0 [ 1451.193239][T16673] ____sys_sendmsg+0x7f5/0xcf0 [ 1451.198182][T16673] ___sys_sendmsg+0x271/0x3b0 [ 1451.203016][T16673] ? __rcu_read_unlock+0x6d/0xd0 [ 1451.208237][T16673] ? __fget_files+0x3b4/0x4a0 [ 1451.213151][T16673] ? __fget_files+0x3b9/0x4a0 [ 1451.217995][T16673] ? kmsan_get_metadata+0xfb/0x160 [ 1451.223277][T16673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1451.229262][T16673] __x64_sys_sendmsg+0x211/0x3e0 [ 1451.234352][T16673] ? kmsan_get_metadata+0xfb/0x160 [ 1451.239642][T16673] x64_sys_call+0x1c60/0x3e70 [ 1451.244495][T16673] do_syscall_64+0xd9/0xf80 [ 1451.249144][T16673] ? clear_bhb_loop+0x40/0x90 [ 1451.253969][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.260008][T16673] RIP: 0033:0x7fa228f8f749 [ 1451.264524][T16673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.284273][T16673] RSP: 002b:00007fa229e43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.292841][T16673] RAX: ffffffffffffffda RBX: 00007fa2291e6180 RCX: 00007fa228f8f749 [ 1451.300927][T16673] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1451.309041][T16673] RBP: 00007fa229013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1451.317123][T16673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.325196][T16673] R13: 00007fa2291e6218 R14: 00007fa2291e6180 R15: 00007ffd867238e8 [ 1451.333330][T16673] [ 1451.336814][T16673] Kernel Offset: disabled [ 1451.341189][T16673] Rebooting in 86400 seconds..