last executing test programs: 6m21.10096655s ago: executing program 2 (id=899): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'ip6gre0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/186, 0xba, 0x100, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = timerfd_create(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) 6m16.764358491s ago: executing program 2 (id=913): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 6m16.580121622s ago: executing program 2 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) 6m15.584075359s ago: executing program 2 (id=917): setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0xfffffffffffff9f9, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 6m14.838003142s ago: executing program 2 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004a80), &(0x7f0000004ac0)=0xc) fstat(r1, &(0x7f0000004b00)) getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x4000010) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6m13.851613839s ago: executing program 2 (id=926): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@broadcast, 0x7ff}, {@empty, 0x1}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 5m58.721815934s ago: executing program 32 (id=926): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@broadcast, 0x7ff}, {@empty, 0x1}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 3m46.18009107s ago: executing program 0 (id=1445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000700)="440f20c0663503000000440f22c036f30fc7fe0f01cb3ef30f2d5700f20fc21ec2b400b862058ed00f01c20f01cb66660f7ef4832a42", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000000, 0x9, 0x38, 0x6, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m46.033676448s ago: executing program 0 (id=1447): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) 3m45.963776902s ago: executing program 0 (id=1448): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x54, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f00000010c0), &(0x7f0000000140)=@tcp, 0x1}, 0x20) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000010401030000000000000000070000010500010102000000eb0393ab981459369440192ae00d0661e722031add9d019aeaaea28a3a119fd37ab6fed1b9ab8f3ee30735944254c29339c5e0f8e380a1453ab24ff52b8d0b5bab"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(r2) recvmmsg(r5, &(0x7f0000001080)=[{{&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/120, 0x78}], 0x2, &(0x7f0000000900)=""/125, 0x7d}, 0x9}, {{&(0x7f0000000980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/135, 0x87}], 0x1, &(0x7f0000000b00)=""/146, 0x92}, 0x79bd}, {{&(0x7f0000000bc0)=@nl=@unspec, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c40)=""/9, 0x9}, {&(0x7f0000000c80)=""/57, 0x39}], 0x2}, 0x40000000}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000000e80)=""/193, 0xc1}], 0x5, &(0x7f0000001000)=""/80, 0x50}, 0x6}], 0x4, 0x10021, &(0x7f0000001180)={0x0, 0x989680}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x3, 0x37, @mcast2, @private2, 0x8000, 0x7f61, 0x6, 0x9}}) socketpair(0x25, 0x1, 0x0, &(0x7f00000005c0)) sendmsg$xdp(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x2c, 0xd, r7, 0x20}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="fdaaa02071aecf279b27dfc9076d9a537107cf8574e3c78797fd", 0x1a}, {&(0x7f0000000140)="cd405cb37d7d8adc937a9ad64b7c6841e51805dccd79d86c57cf21496edaf684cdb43267cf7f1089e772899a680b70b3cdeff3aaa34f288efebbdd599a21744aee0db95b2bba5b88f0dc72e54d838099ba1a93c2243e05aff98d1b62a29234c89f86df8b0359", 0x66}, {&(0x7f00000001c0)="4ee742821821f56010cd6be0482bb000bd645c316016789bf81100d3883dffc9d4778244c1a807304b1019a859d59ee8c6a61cccc0a63510838bb948bb7612dd107f192b4acf45e91898e4acecc860e08441a101f8fcaa5194f822", 0x5b}, {&(0x7f0000000280)="249f293d94d8279169416db8dc1ef4bbc88c5bca8602fbc32a81d5629f967f04293963cebd4e99a081738cb51f2dc2b501bf30350c0f248476bdf553b33fd65b9574e9fda6457d9c9f4ccae5521642f9db009666dffe8db26599fa646d667655fff159019b55f7edc41b6bdf482fbced3919bc4ec0e1cd6f2bcf73824d487ac6361ccf21edca6315fb731c37fa9d7d4ef797b03c60008a717d5c03d679396934f89fd06b39393651927b34c20b", 0xad}], 0x4, 0x0, 0x0, 0x8060}, 0x8000) sendmmsg$sock(r1, &(0x7f0000002280)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x41, 0x7}}], 0x18}}], 0x1, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) 3m42.561748299s ago: executing program 0 (id=1456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xe0}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(0x0, 0x500, 0x40) getdents64(r3, 0x0, 0x0) 3m42.307637803s ago: executing program 0 (id=1460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) 3m42.276063005s ago: executing program 0 (id=1461): r0 = fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0xfffd, 0x0) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) readv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2) 3m25.76441021s ago: executing program 33 (id=1461): r0 = fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0xfffd, 0x0) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) readv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2) 1m35.7957502s ago: executing program 3 (id=1983): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q\x00'], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1, 0x9f8, 0x1, 0x6, 0x1}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000"], 0x48) mmap(&(0x7f0000887000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x3000) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xfc, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xe8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x7, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x78, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m34.442599948s ago: executing program 3 (id=1992): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x3}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m33.010389481s ago: executing program 3 (id=1999): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x80, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m32.840138391s ago: executing program 3 (id=2001): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x272) 1m32.838203981s ago: executing program 3 (id=2002): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0xd03c817dc5286b2f}, "ff05000000ffffe2", "8e083780daf38a0008e9b5e9c2f133d7", "6ab2aab9", "1277a5904e3402bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'rti800\x00', [0x2eff, 0x4, 0xd19b, 0xfffff044, 0x2, 0x9, 0x3, 0x3, 0xffe, 0xa, 0xc, 0x1001, 0x7f, 0x3, 0xffd, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x9, 0x2, 0x800, 0xe2df, 0x2, 0x80d, 0x5, 0x9, 0x6, 0xfffffffd, 0x70f]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x4}) pipe(0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m32.655794671s ago: executing program 3 (id=2005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r6, 0x3ff, 0x8}, 0xc) 1m32.553557468s ago: executing program 34 (id=2005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r6, 0x3ff, 0x8}, 0xc) 28.1849976s ago: executing program 1 (id=2405): mkdir(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x3, {0x2, 0xcd, 0x0, {0x2, 0x3, 0x6, 0x1000, 0xfffffffffffffff9, 0x7, 0xf79c000, 0x2, 0x4000005, 0x8000, 0x538, 0x0, 0x0, 0x7, 0x3ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1"], 0x0) 28.051713668s ago: executing program 1 (id=2407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000006c0)) 27.872897928s ago: executing program 1 (id=2410): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210125bd7000fcdbdf251500000008002c0010000000050029000100000008002c00ff03000008000300", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 27.796157473s ago: executing program 1 (id=2414): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f00007e0000/0xe000)=nil, 0xe000}) 15.263683537s ago: executing program 5 (id=2475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc5f747e"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x20000101}]) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40002002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0013fa89c32eb80001"], 0x30}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000100ff7f00000202000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13.972659712s ago: executing program 6 (id=2478): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x54, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f00000010c0), &(0x7f0000000140)=@tcp, 0x1}, 0x20) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000010401030000000000000000070000010500010102000000eb0393ab981459369440192ae00d0661e722031add9d019aeaaea28a3a119fd37ab6fed1b9ab8f3ee30735944254c29339c5e0f8e380a1453ab24ff52b8d0b5bab"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(0xffffffffffffffff) recvmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/120, 0x78}], 0x2, &(0x7f0000000900)=""/125, 0x7d}, 0x9}, {{&(0x7f0000000980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/135, 0x87}], 0x1, &(0x7f0000000b00)=""/146, 0x92}, 0x79bd}, {{&(0x7f0000000bc0)=@nl=@unspec, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c40)=""/9, 0x9}, {&(0x7f0000000c80)=""/57, 0x39}], 0x2}, 0x40000000}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000000e80)=""/193, 0xc1}], 0x5, &(0x7f0000001000)=""/80, 0x50}, 0x6}], 0x4, 0x10021, &(0x7f0000001180)={0x0, 0x989680}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x3, 0x37, @mcast2, @private2, 0x8000, 0x7f61, 0x6, 0x9}}) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) socketpair(0x25, 0x1, 0x0, &(0x7f00000005c0)) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x2c, 0xd, r5, 0x20}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="fdaaa02071aecf279b27dfc9076d9a537107cf8574e3c78797fd", 0x1a}, {&(0x7f0000000140)="cd405cb37d7d8adc937a9ad64b7c6841e51805dccd79d86c57cf21496edaf684cdb43267cf7f1089e772899a680b70b3cdeff3aaa34f288efebbdd599a21744aee0db95b2bba5b88f0dc72e54d838099ba1a93c2243e05aff98d1b62a29234c89f86df8b0359", 0x66}, {&(0x7f00000001c0)="4ee742821821f56010cd6be0482bb000bd645c316016789bf81100d3883dffc9d4778244c1a807304b1019a859d59ee8c6a61cccc0a63510838bb948bb7612dd107f192b4acf45e91898e4acecc860e08441a101f8fcaa5194f822", 0x5b}, {&(0x7f0000000280)="249f293d94d8279169416db8dc1ef4bbc88c5bca8602fbc32a81d5629f967f04293963cebd4e99a081738cb51f2dc2b501bf30350c0f248476bdf553b33fd65b9574e9fda6457d9c9f4ccae5521642f9db009666dffe8db26599fa646d667655fff159019b55f7edc41b6bdf482fbced3919bc4ec0e1cd6f2bcf73824d487ac6361ccf21edca6315fb731c37fa9d7d4ef797b03c60008a717d5c03d679396934f89fd06b39393651927b34c20b", 0xad}], 0x4, 0x0, 0x0, 0x8060}, 0x8000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x41, 0x7}}], 0x18}}], 0x1, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) 13.811650931s ago: executing program 7 (id=2479): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61000005000000fffe00000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x0, 0x9, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 13.736655866s ago: executing program 4 (id=2480): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x1c5420) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r8], 0x50}}, 0x2) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x1, 0x2, 0x0, 0x5, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r9, @ANYBLOB="08551000dd000000000000ec00c8d05300000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES16=r0], 0x50) 10.927134018s ago: executing program 6 (id=2481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb173, 0x200, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 10.55168997s ago: executing program 7 (id=2482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d3000000000000014001680100001800c0004"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) 8.882301556s ago: executing program 6 (id=2483): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.689436748s ago: executing program 4 (id=2484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 8.608325712s ago: executing program 6 (id=2485): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040090) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65766500001000028006"], 0x40}}, 0x80) 5.838839522s ago: executing program 4 (id=2486): openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x705442) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x8b, 0x0, 0x42}, {0x960, 0x0, 0xdf}]}) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r7 = getpid() process_vm_writev(r7, &(0x7f0000000140)=[{&(0x7f0000019300)=""/192, 0xc0}, {&(0x7f0000000040)=""/73, 0x49}], 0x2, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) 5.383942369s ago: executing program 5 (id=2487): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x616e9570) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000080)) 4.448151943s ago: executing program 5 (id=2488): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q\x00'], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1, 0x9f8, 0x1, 0x6, 0x1}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000887000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x3000) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x44830) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.709113994s ago: executing program 5 (id=2489): r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, &(0x7f0000000000)) socket(0x18, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 2.226436851s ago: executing program 4 (id=2490): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x80000001, 0x22020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xdf, 0x81, 0x3, 0xc4ea}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x8000000000000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r6, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 1.363773011s ago: executing program 7 (id=2491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x401) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x48, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r8, 0x1}}, 0x18) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$FS_IOC_GETVERSION(r2, 0x4008af25, &(0x7f0000000600)) 1.242979808s ago: executing program 6 (id=2492): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = syz_io_uring_setup(0x53e2, &(0x7f0000000380)={0x0, 0x1a1d, 0x8000, 0x2, 0x1d7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000140)=0x30) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0xc, 0xe7, 0x7f}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001480)=@getsa={0x7ec, 0x12, 0x800, 0x70bd26, 0x25dfdbfd, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x2, 0x33}, [@sec_ctx={0x7c4, 0x8, {0x7c0, 0x8, 0x0, 0x6, 0x7b8, "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"}}]}, 0x7ec}}, 0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0xa5b8, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000001c0)=""/47, 0x2f) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)=0x3) r10 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r10) 1.062335429s ago: executing program 7 (id=2493): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 975.471543ms ago: executing program 4 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) 792.993624ms ago: executing program 6 (id=2495): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa09dd6000fc010000000000000000000000000001ff020000000000000000000000000001db7c90780001000800", @ANYRESDEC=0x0], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) shutdown(r3, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r5 = openat$cgroup_int(r4, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xc92) 761.261926ms ago: executing program 5 (id=2496): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xb}, &(0x7f0000000200)=0xfffffffffffffe7a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x28, &(0x7f0000000080)="0b9ca2bc7ed21832933c3c13da47bc501c522b23e5bf054f6b53401677f67a9bd671906d97d795281384", 0x2a) openat(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) 725.141478ms ago: executing program 4 (id=2497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x5000, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x10000, 0xfdfdffff}) 671.869501ms ago: executing program 7 (id=2498): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x80000, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x400, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 617.566134ms ago: executing program 1 (id=2415): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c02", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 33.393028ms ago: executing program 7 (id=2499): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r3, 0x6, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 15.769029ms ago: executing program 5 (id=2500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xe, 0xffffffffffffffff, &(0x7f0000000980)="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", 0xfc0, 0x0, 0x0, 0x7cade52a03e03391}, &(0x7f0000000400)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000090) socket(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) 0s ago: executing program 1 (id=2501): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x200}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r1, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x70, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x62}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4b12d8c0}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x68a289cc}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x15}, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x25dfdbfc, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): etting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.934560][ T4231] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 361.996782][ T4231] usb 4-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 362.105277][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.132551][ T4231] usb 4-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 362.310679][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.328930][ T4231] usb 4-1: config 0 descriptor?? [ 362.344955][ T8954] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 364.671915][ T8998] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1513'. [ 364.829512][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1514'. [ 364.838744][ T4231] usb 4-1: string descriptor 0 read error: -71 [ 364.954771][ T4231] usbhid 4-1:0.0: can't add hid device: -71 [ 364.960833][ T4231] usbhid: probe of 4-1:0.0 failed with error -71 [ 365.008195][ T4231] usb 4-1: USB disconnect, device number 6 [ 365.304999][ T5250] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 367.689698][ T9050] loop4: detected capacity change from 0 to 256 [ 367.789362][ T9024] chnl_net:caif_netlink_parms(): no params data found [ 367.806833][ T9050] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.902108][ T9050] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 367.968700][ T9050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 368.168245][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.245783][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.290549][ T9024] device bridge_slave_0 entered promiscuous mode [ 368.325438][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1527'. [ 368.345489][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.409946][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.432114][ T9024] device bridge_slave_1 entered promiscuous mode [ 368.542906][ T9024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.612016][ T9024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.634854][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 369.601146][ T9024] team0: Port device team_slave_0 added [ 369.650992][ T9024] team0: Port device team_slave_1 added [ 370.067698][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.947700][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 370.982580][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.171480][ T9024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.237204][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.244210][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.363294][ T9024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.444740][ T9024] device hsr_slave_0 entered promiscuous mode [ 371.475008][ T9024] device hsr_slave_1 entered promiscuous mode [ 372.648082][ T9024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.904766][ T9024] Cannot create hsr debugfs directory [ 373.671911][ T6690] Bluetooth: hci3: command 0x040f tx timeout [ 373.722279][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'. [ 373.858674][ T9125] loop4: detected capacity change from 0 to 1024 [ 373.974650][ T9125] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 374.125164][ T9125] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 374.405643][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 374.405660][ T26] audit: type=1800 audit(1769447721.387:65): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1541" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 374.481223][ T5281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.631295][ T5281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.685365][ T26] audit: type=1800 audit(1769447721.677:66): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1541" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 374.813802][ T5281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.993826][ T5281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.093406][ T9146] loop3: detected capacity change from 0 to 256 [ 375.345042][ T9146] FAT-fs (loop3): Directory bread(block 64) failed [ 375.351803][ T9146] FAT-fs (loop3): Directory bread(block 65) failed [ 375.358930][ T9146] FAT-fs (loop3): Directory bread(block 66) failed [ 375.365824][ T9146] FAT-fs (loop3): Directory bread(block 67) failed [ 375.372910][ T9146] FAT-fs (loop3): Directory bread(block 68) failed [ 375.380003][ T9146] FAT-fs (loop3): Directory bread(block 69) failed [ 375.387173][ T9146] FAT-fs (loop3): Directory bread(block 70) failed [ 375.394176][ T9146] FAT-fs (loop3): Directory bread(block 71) failed [ 375.401321][ T9146] FAT-fs (loop3): Directory bread(block 72) failed [ 375.408112][ T9146] FAT-fs (loop3): Directory bread(block 73) failed [ 376.215149][ T6690] Bluetooth: hci3: command 0x0419 tx timeout [ 376.472053][ T9163] device dummy0 entered promiscuous mode [ 376.552117][ T9163] device dummy0 left promiscuous mode [ 377.167664][ T9173] loop3: detected capacity change from 0 to 512 [ 377.192179][ T9024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.215781][ T9173] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 377.968743][ T9173] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 378.048324][ T9173] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 378.176781][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1551'. [ 378.243985][ T9024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.279849][ T9024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.387243][ T9024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.637557][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.644690][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.924913][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.936392][ T9214] loop3: detected capacity change from 0 to 256 [ 378.965402][ T9214] exfat: Bad value for 'uid' [ 379.008990][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.038280][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.068752][ T9024] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.203667][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.329357][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.035578][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.042806][ T5250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.207526][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.235662][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.257698][ T9227] loop3: detected capacity change from 0 to 512 [ 380.298684][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.330838][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.338084][ T5250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.347957][ T9227] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 380.365923][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.377560][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.387364][ T9227] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 380.396701][ T9227] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1562: attempt to clear invalid blocks 2 len 1 [ 380.413390][ T9227] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 380.429944][ T9227] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1562: invalid indirect mapped block 1819239214 (level 0) [ 380.541717][ T9227] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1562: invalid indirect mapped block 1819239214 (level 1) [ 380.575548][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1564'. [ 380.594032][ T9227] EXT4-fs (loop3): 1 truncate cleaned up [ 380.687541][ T9227] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 381.217741][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.449805][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.459685][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.540320][ T9245] 9pnet: Insufficient options for proto=fd [ 381.589727][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.607596][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.633174][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.989881][ T9024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.035630][ T9024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 382.066807][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.076103][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.107324][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.266146][ T5281] bond8: (slave gretap1): Releasing backup interface [ 382.590801][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.590943][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.634719][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.685678][ T5281] device dummy0 left promiscuous mode [ 383.692011][ T5281] device team0 left promiscuous mode [ 383.724920][ T5281] device team_slave_0 left promiscuous mode [ 383.748726][ T5281] device team_slave_1 left promiscuous mode [ 384.112595][ T5281] device hsr_slave_0 left promiscuous mode [ 384.138725][ T5281] device hsr_slave_1 left promiscuous mode [ 384.169705][ T5281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.266488][ T5281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.317651][ T5281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.380126][ T5281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.558222][ T5281] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.678034][ T5281] device bridge_slave_0 left promiscuous mode [ 384.843123][ T5281] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.994684][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 385.169023][ T5281] device veth1_macvtap left promiscuous mode [ 385.175430][ T5281] device veth0_macvtap left promiscuous mode [ 385.181811][ T5281] device veth1_vlan left promiscuous mode [ 385.188025][ T5281] device veth0_vlan left promiscuous mode [ 385.274805][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 385.424981][ T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 385.440772][ T23] usb 4-1: config 2 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.453947][ T23] usb 4-1: config 2 interface 0 has no altsetting 0 [ 385.798773][ T5281] bond8 (unregistering): Released all slaves [ 385.818089][ T23] usb 4-1: New USB device found, idVendor=04e2, idProduct=7e12, bcdDevice=ca.a8 [ 385.842263][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.842844][ T5281] bond7 (unregistering): Released all slaves [ 385.883263][ T23] usb 4-1: Product: syz [ 385.887538][ T23] usb 4-1: Manufacturer: syz [ 385.920201][ T23] usb 4-1: SerialNumber: syz [ 385.935187][ T5281] bond6 (unregistering): Released all slaves [ 385.971595][ T5281] bond5 (unregistering): Released all slaves [ 386.019657][ T5281] bond4 (unregistering): Released all slaves [ 386.063846][ T5281] bond3 (unregistering): Released all slaves [ 386.118854][ T5281] bond2 (unregistering): (slave vlan2): Releasing active interface [ 386.140386][ T5281] bond2 (unregistering): Released all slaves [ 386.161762][ T5281] bond1 (unregistering): (slave geneve2): Releasing active interface [ 386.183407][ T5281] bond1 (unregistering): Released all slaves [ 386.504854][ T9317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 386.564717][ T23] usb 4-1: USB disconnect, device number 7 [ 388.803079][ T9321] loop3: detected capacity change from 0 to 1024 [ 388.996399][ T9321] EXT4-fs (loop3): Ignoring removed bh option [ 389.014186][ T9321] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 389.813956][ T9321] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 389.876233][ T5281] team0 (unregistering): Port device team_slave_1 removed [ 389.911938][ T5281] team0 (unregistering): Port device team_slave_0 removed [ 390.025584][ T5281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.060798][ T5281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.418905][ T5281] bond0 (unregistering): Released all slaves [ 390.719489][ T9341] loop4: detected capacity change from 0 to 512 [ 390.810031][ T9341] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 390.966046][ T9341] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 390.992151][ T9341] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1589: attempt to clear invalid blocks 2 len 1 [ 391.013459][ T9341] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 391.031949][ T9341] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1589: invalid indirect mapped block 1819239214 (level 0) [ 391.067686][ T9341] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1589: invalid indirect mapped block 1819239214 (level 1) [ 391.115211][ T9341] EXT4-fs (loop4): 1 truncate cleaned up [ 391.120928][ T9341] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 391.402393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.472234][ T9355] 9pnet: Insufficient options for proto=fd [ 391.735018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.820563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.846445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.882498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.942859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.980899][ T9024] device veth0_vlan entered promiscuous mode [ 392.022006][ T9024] device veth1_vlan entered promiscuous mode [ 392.172074][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.202056][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.248229][ T9024] device veth0_macvtap entered promiscuous mode [ 392.320830][ T9024] device veth1_macvtap entered promiscuous mode [ 392.505515][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.570272][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.764612][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.851209][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.601983][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.669365][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.680939][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.691268][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 393.705382][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 393.770640][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 393.802158][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 393.845211][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.884081][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.906197][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.931902][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.955918][ T9024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.978230][ T9024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.013960][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.052095][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 394.072863][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.115497][ T9024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.154278][ T9024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.227563][ T9024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.298531][ T9024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.523771][ T5275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.017895][ T5275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.429384][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.521231][ T5273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.542271][ T5273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.645011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.762456][ T9457] loop4: detected capacity change from 0 to 128 [ 397.822868][ T9458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.877963][ T9458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.893720][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1511'. [ 397.951911][ T9457] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 397.994830][ T9457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.561316][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.285421][ T9486] block device autoloading is deprecated and will be removed. [ 400.367313][ T9494] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 400.374273][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 400.475881][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 400.520825][ T9496] vhci_hcd: connection closed [ 400.529877][ T4308] vhci_hcd: stop threads [ 400.556862][ T4308] vhci_hcd: release socket [ 400.584268][ T4308] vhci_hcd: disconnect device [ 401.141558][ T9525] loop6: detected capacity change from 0 to 128 [ 401.241087][ T9525] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 401.275803][ T9529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1635'. [ 401.301873][ T9525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.672891][ T9544] fuse: Bad value for 'fd' [ 404.273299][ T9590] loop3: detected capacity change from 0 to 128 [ 404.357239][ T9590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 404.423708][ T9590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.634725][ T6688] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 404.785644][ T9608] fuse: Bad value for 'fd' [ 404.995154][ T6688] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 405.070682][ T6688] usb 7-1: config 0 has no interface number 0 [ 405.149147][ T6688] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 405.354896][ T6688] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 405.384225][ T6688] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 405.464032][ T6688] usb 7-1: Manufacturer: syz [ 405.479081][ T6688] usb 7-1: SerialNumber: syz [ 405.512437][ T6688] usb 7-1: config 0 descriptor?? [ 407.395647][ T6688] usbtouchscreen: probe of 7-1:0.214 failed with error -71 [ 407.425397][ T6688] usb 7-1: USB disconnect, device number 2 [ 407.921772][ T4195] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 409.548709][ T9705] binder: 9704:9705 unknown command 0 [ 409.554248][ T9705] binder: 9704:9705 ioctl c0306201 200000000080 returned -22 [ 409.702755][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1693'. [ 409.801426][ T4235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 410.764746][ T4235] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 410.802541][ T4235] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 410.845873][ T4235] usb 4-1: Product: syz [ 410.850744][ T4235] usb 4-1: Manufacturer: syz [ 410.914710][ T4235] usb 4-1: SerialNumber: syz [ 411.096218][ T4235] usb 4-1: config 0 descriptor?? [ 411.146077][ T4235] ch341 4-1:0.0: ch341-uart converter detected [ 412.166034][ T5893] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 412.434709][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 412.506757][ T4235] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 412.584952][ T5893] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 412.607855][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.667698][ T5893] usb 5-1: config 0 descriptor?? [ 412.709057][ T4235] usb 4-1: USB disconnect, device number 8 [ 412.742467][ T5893] as10x_usb: device has been detected [ 412.773187][ T4235] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 412.791977][ T5893] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 412.824360][ T4235] ch341 4-1:0.0: device disconnected [ 412.885140][ T5893] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 413.000588][ T5893] as10x_usb: error during firmware upload part1 [ 413.016293][ T5893] Registered device nBox DVB-T Dongle [ 413.023731][ T5893] usb 5-1: USB disconnect, device number 11 [ 413.141035][ T5893] Unregistered device nBox DVB-T Dongle [ 413.147637][ T5893] as10x_usb: device has been disconnected [ 413.410519][ T9804] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1713'. [ 413.714837][ T5893] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 414.007020][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 414.164753][ T5893] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 414.184180][ T5893] usb 4-1: config 0 has no interface number 0 [ 414.194376][ T5893] usb 4-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=a9.c1 [ 414.214746][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.238322][ T5893] usb 4-1: config 0 descriptor?? [ 414.484270][ T5893] gspca_main: tv8532-2.14.0 probing 0923:010f [ 414.555107][ T4235] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 414.854725][ T4235] usb 5-1: Using ep0 maxpacket: 16 [ 415.027437][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.266098][ T4235] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 415.354513][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.446810][ T4235] usb 5-1: config 0 descriptor?? [ 415.489215][ T9866] binder_alloc: 9865: binder_alloc_buf, no vma [ 415.553149][ T9872] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.701832][ T9872] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.810981][ T9872] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.910442][ T9872] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.004647][ T6688] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 416.024869][ T4235] usbhid 5-1:0.0: can't add hid device: -71 [ 416.032613][ T4235] usbhid: probe of 5-1:0.0 failed with error -71 [ 416.074776][ T4235] usb 5-1: USB disconnect, device number 12 [ 416.095616][ T9872] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.140110][ T9872] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.171807][ T9872] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.188372][ T9872] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.291019][ T5893] usb 4-1: USB disconnect, device number 9 [ 416.374754][ T6688] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 416.457569][ T6688] usb 7-1: config 0 has no interface number 0 [ 416.735557][ T6688] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 416.802711][ T6688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.921518][ T6688] usb 7-1: Product: syz [ 416.988295][ T6688] usb 7-1: Manufacturer: syz [ 417.064079][ T6688] usb 7-1: SerialNumber: syz [ 417.202411][ T6688] usb 7-1: config 0 descriptor?? [ 417.855200][ T5893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 417.935903][ T4235] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 418.210092][ T4235] Bluetooth: hci3: Injecting HCI hardware error event [ 418.257044][ T4195] Bluetooth: hci3: hardware error 0x00 [ 418.367047][ T6688] usb 7-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 418.384989][ T5893] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 418.396263][ T9922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1745'. [ 418.406389][ T6688] usb 7-1: Firmware version (0.0) predates our first public release. [ 418.406417][ T6688] usb 7-1: Please update to version 0.2 or newer [ 418.423944][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.444698][ T6688] usb 7-1: Firmware: build 7 [ 418.450737][ T6688] usb 7-1: atusb_probe: initialization failed, error = -32 [ 418.462081][ T5893] usb 4-1: config 0 descriptor?? [ 418.504063][ T6688] atusb: probe of 7-1:0.128 failed with error -32 [ 418.516787][ T5893] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 418.681532][ T6688] usb 7-1: USB disconnect, device number 3 [ 418.834711][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1747'. [ 418.845045][ T5893] gp8psk: usb in 128 operation failed. [ 418.911159][ T5893] gp8psk: usb in 137 operation failed. [ 419.794146][ T9941] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.989277][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.014955][ T5893] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 420.028740][ T5893] usb 4-1: media controller created [ 420.049612][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.077703][ T9941] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.098012][ T9945] loop3: detected capacity change from 0 to 128 [ 420.099693][ T5893] gp8psk_fe: Frontend attached [ 420.112233][ T5893] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 420.128176][ T5893] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 420.203153][ T9951] loop6: detected capacity change from 0 to 256 [ 420.251372][ T9945] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 420.322172][ T9945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.339099][ T9941] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.388037][ T9951] exfat: Bad value for 'uid' [ 420.412171][ T9941] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.655252][ T5893] gp8psk: usb in 138 operation failed. [ 420.661389][ T5893] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 421.208134][ T5893] gp8psk: found Genpix USB device pID = 203 (hex) [ 421.218351][ T5893] usb 4-1: USB disconnect, device number 10 [ 421.302567][ T5893] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 421.373446][ T9941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.424692][ T9941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.468117][ T9941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.518012][ T9941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.785855][ T9973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1758'. [ 422.154808][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1763'. [ 423.238719][ T9995] loop6: detected capacity change from 0 to 128 [ 423.357328][ T9995] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 424.580223][ T9995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.679043][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 425.073759][T10023] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1771'. [ 425.702301][T10044] loop3: detected capacity change from 0 to 256 [ 425.738819][T10044] exfat: Bad value for 'uid' [ 427.264500][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 427.762576][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'. [ 428.003608][T10064] ubi31: attaching mtd0 [ 428.011454][T10061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.039866][T10066] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1783'. [ 428.069575][T10064] ubi31: scanning is finished [ 428.075302][T10064] ubi31: empty MTD device detected [ 428.114680][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 428.262379][ T5893] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 428.383922][ T5893] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 428.398907][T10064] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 428.415203][T10064] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 428.432985][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.446009][T10064] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 428.538032][T10081] fuse: Bad value for 'fd' [ 428.761260][T10064] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 428.862963][ T5893] usb 7-1: config 0 descriptor?? [ 429.135060][ T5893] usb 7-1: can't set config #0, error -71 [ 429.173504][ T5893] usb 7-1: USB disconnect, device number 4 [ 429.198024][T10064] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 429.300999][T10064] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 429.334642][T10064] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3593743758 [ 429.399224][T10064] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 429.418103][T10088] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.515403][T10075] ubi31: background thread "ubi_bgt31d" started, PID 10075 [ 429.686249][T10088] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.104940][ T4280] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.148540][T10088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.169112][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 431.257105][T10088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.364668][T10119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.549553][T10088] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.601180][T10088] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.631527][T10131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1796'. [ 431.662928][T10088] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.723765][T10088] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.237013][T10154] fuse: Bad value for 'fd' [ 432.355725][ T21] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 432.975242][ T21] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 432.994671][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.017387][ T21] usb 7-1: Product: syz [ 433.021929][ T21] usb 7-1: Manufacturer: syz [ 433.029189][ T21] usb 7-1: SerialNumber: syz [ 433.135648][ T21] usb 7-1: config 0 descriptor?? [ 433.595483][ T21] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 433.924561][T10173] loop3: detected capacity change from 0 to 256 [ 433.936168][T10163] 8021q: adding VLAN 0 to HW filter on device bond7 [ 433.956543][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1805'. [ 433.966628][T10173] exfat: Bad value for 'uid' [ 434.140889][T10178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1809'. [ 435.144872][ T21] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 435.205159][ T21] usb 7-1: USB disconnect, device number 5 [ 435.279752][T10191] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.370133][T10191] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.437230][T10191] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.540486][T10191] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.363338][T10222] fuse: Bad value for 'fd' [ 437.431788][T10191] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.656477][T10228] 8021q: adding VLAN 0 to HW filter on device bond8 [ 437.671909][T10191] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.699866][T10191] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.749675][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 437.778694][T10191] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.810786][T10236] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 437.823983][T10236] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 437.864928][ T4232] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 438.104823][ T4232] usb 7-1: Using ep0 maxpacket: 32 [ 438.224778][ T4232] usb 7-1: config 0 has an invalid interface number: 135 but max is 0 [ 438.532037][T10261] loop4: detected capacity change from 0 to 128 [ 438.620765][T10261] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 438.716560][ T4232] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.728700][ T4232] usb 7-1: config 0 has no interface number 0 [ 438.735071][ T4232] usb 7-1: config 0 interface 135 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.745798][ T4232] usb 7-1: config 0 interface 135 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.756629][ T4232] usb 7-1: config 0 interface 135 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.759409][T10261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.771834][ T4232] usb 7-1: config 0 interface 135 has no altsetting 0 [ 439.171287][T10267] fuse: Bad value for 'fd' [ 440.095525][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106598][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.288296][T10274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.924204][ T4232] usb 7-1: New USB device found, idVendor=0f11, idProduct=1011, bcdDevice=49.1a [ 440.935036][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.943993][ T4232] usb 7-1: Product: syz [ 440.948568][ T4232] usb 7-1: Manufacturer: syz [ 440.953230][ T4232] usb 7-1: SerialNumber: syz [ 440.961459][ T4232] usb 7-1: config 0 descriptor?? [ 440.991663][ T4232] usb 7-1: can't set config #0, error -71 [ 440.999367][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1835'. [ 441.032485][ T4232] usb 7-1: USB disconnect, device number 6 [ 441.081394][T10288] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.417870][T10288] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.511722][T10288] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.827506][T10288] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.887742][T10288] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.991469][T10288] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.092222][T10288] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.184407][T10288] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.624130][T10340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 444.063007][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 445.567802][T10390] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.614861][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 445.653756][T10390] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.761825][T10390] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.874738][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 445.893552][T10390] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.004800][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.033574][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.059447][ T13] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 446.092278][T10407] netlink: 'syz.5.1860': attribute type 1 has an invalid length. [ 446.107377][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.139165][ T13] usb 4-1: config 0 descriptor?? [ 446.157263][T10407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.180263][T10390] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.231567][T10390] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.303397][T10390] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.413344][T10390] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.687971][ T13] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 447.042869][ T6688] usb 4-1: USB disconnect, device number 11 [ 447.114740][T10430] fido_id[10430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 447.136351][T10436] device macvlan2 entered promiscuous mode [ 447.191579][T10436] device bond9 entered promiscuous mode [ 447.240833][T10436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 447.263359][T10436] device bond9 left promiscuous mode [ 448.507838][T10457] netlink: 'syz.6.1871': attribute type 1 has an invalid length. [ 449.715527][T10457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.886523][T10469] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 449.985687][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 453.066004][T10539] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 453.103629][T10539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.226591][T10550] loop3: detected capacity change from 0 to 128 [ 453.309918][T10550] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 453.458192][T10550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.331476][T10567] fuse: Bad value for 'fd' [ 455.254734][ T6688] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 455.266050][ T6688] Bluetooth: hci1: Injecting HCI hardware error event [ 455.277276][ T4195] Bluetooth: hci1: hardware error 0x00 [ 457.017711][T10599] input: syz1 as /devices/virtual/input/input25 [ 459.193190][T10601] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.210439][T10601] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 459.549823][T10613] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 459.602968][T10613] device macvlan2 entered promiscuous mode [ 459.610664][T10613] device bond2 entered promiscuous mode [ 459.619750][T10613] device gretap1 entered promiscuous mode [ 459.632012][T10613] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.658979][T10613] device bond2 left promiscuous mode [ 459.675419][T10613] device gretap1 left promiscuous mode [ 459.877264][T10630] binder: 10629:10630 ioctl c0306201 0 returned -14 [ 459.919436][T10630] binder: 10629:10630 unknown command 1074553619 [ 459.972247][T10630] binder: 10629:10630 ioctl c0306201 200000000040 returned -22 [ 460.020549][T10636] binder: 10629:10636 unknown command 1074553620 [ 460.027971][T10636] binder: 10629:10636 ioctl c0306201 200000000640 returned -22 [ 460.255028][ T4173] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 460.876275][ T4173] usb 7-1: unable to get BOS descriptor or descriptor too short [ 460.955149][ T4173] usb 7-1: not running at top speed; connect to a high speed hub [ 461.094889][ T4173] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.299124][ T4173] usb 7-1: config 0 has no interfaces? [ 462.432086][T10660] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.456479][T10660] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.389115][ T5281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.484817][T10663] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1925'. [ 463.499534][ T4173] usb 7-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 463.514725][ T4173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.526601][ T4173] usb 7-1: Product: syz [ 463.538478][ T4173] usb 7-1: config 0 descriptor?? [ 463.590022][ T4173] usb 7-1: can't set config #0, error -71 [ 463.632642][ T4173] usb 7-1: USB disconnect, device number 7 [ 463.735797][T10671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 463.812097][T10677] device macvlan2 entered promiscuous mode [ 463.859107][T10677] device bond10 entered promiscuous mode [ 463.877169][T10677] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.890896][T10677] device bond10 left promiscuous mode [ 463.941069][T10683] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1926'. [ 463.959770][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 463.992121][T10683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.085662][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 464.370858][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 464.545474][ T21] usb 5-1: config 0 has an invalid interface number: 157 but max is 0 [ 464.633882][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.937822][ T21] usb 5-1: config 0 has no interface number 0 [ 465.444107][T10722] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1942'. [ 465.607455][ T21] usb 5-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=1b.b7 [ 465.619525][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.628975][ T21] usb 5-1: Product: syz [ 465.661526][ T21] usb 5-1: Manufacturer: syz [ 465.704501][ T21] usb 5-1: SerialNumber: syz [ 465.747451][T10728] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.761238][T10728] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 465.956535][ T21] usb 5-1: config 0 descriptor?? [ 466.406740][ T21] mct_u232 5-1:0.157: MCT U232 converter detected [ 466.450764][T10735] netlink: 'syz.6.1946': attribute type 1 has an invalid length. [ 466.480777][ T21] mct_u232 ttyUSB0: expected endpoint missing [ 466.534599][T10735] device macvlan2 entered promiscuous mode [ 466.548976][T10735] device bond3 entered promiscuous mode [ 466.558179][T10735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.592808][T10735] device bond3 left promiscuous mode [ 466.646464][T10741] fuse: Bad value for 'fd' [ 466.690369][ T5891] usb 5-1: USB disconnect, device number 13 [ 466.703166][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 466.728996][ T5891] mct_u232 5-1:0.157: device disconnected [ 466.925103][ T4173] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 467.104647][ T21] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 467.168543][T10757] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1954'. [ 467.544816][ T4173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.959775][ T21] usb 7-1: Using ep0 maxpacket: 8 [ 467.980547][ T4173] usb 4-1: config 0 has no interfaces? [ 468.002290][ T4173] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 468.012834][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.406814][ T4173] usb 4-1: config 0 descriptor?? [ 468.755935][ T21] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 468.768509][ T21] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.785511][ T21] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.801299][ T21] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.815156][ T21] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.834386][ T21] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 468.845370][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.124750][ T21] usb 7-1: GET_CAPABILITIES returned 0 [ 469.132079][ T21] usbtmc 7-1:16.0: can't read capabilities [ 469.272372][T10785] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 469.307088][T10785] device macvlan2 entered promiscuous mode [ 469.317626][T10785] device bond6 entered promiscuous mode [ 469.334730][T10785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.357115][T10785] device bond6 left promiscuous mode [ 469.374329][ T21] usb 7-1: USB disconnect, device number 8 [ 470.386491][ T4291] usb 4-1: USB disconnect, device number 12 [ 470.718949][T10799] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.989605][T10807] fuse: Bad value for 'fd' [ 471.075311][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 471.306475][T10799] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.460915][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 471.500694][T10799] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.568970][T10799] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.673020][T10799] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.696915][T10799] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.712776][T10799] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.730206][T10799] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.789630][ T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 471.808808][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.824930][ T4291] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 471.852327][ T21] usb 5-1: Product: syz [ 471.865100][T10817] loop6: detected capacity change from 0 to 256 [ 471.873866][ T21] usb 5-1: Manufacturer: syz [ 471.887043][ T21] usb 5-1: SerialNumber: syz [ 471.915790][ T21] usb 5-1: config 0 descriptor?? [ 471.985485][T10817] exfat: Bad value for 'uid' [ 472.255446][ T21] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 472.784893][ T21] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 472.825760][ T21] usb 5-1: USB disconnect, device number 14 [ 473.206418][ T4291] usb 4-1: Using ep0 maxpacket: 8 [ 474.264667][ T4291] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.317332][ T4291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.416257][ T4291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.678410][ T4291] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.715902][T10846] loop3: detected capacity change from 0 to 128 [ 474.746131][ T4291] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.789982][T10846] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 474.790673][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.882062][T10846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.899336][ T4291] usb 4-1: can't set config #16, error -71 [ 474.922606][ T4291] usb 4-1: USB disconnect, device number 13 [ 475.102734][ T26] audit: type=1326 audit(1769447822.091:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10853 comm="syz.5.1988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0e6507eb9 code=0x0 [ 475.307558][T10860] fuse: Bad value for 'fd' [ 475.974659][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 477.014884][ T21] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 477.037063][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.063578][ T21] usb 5-1: config 0 descriptor?? [ 477.266385][ T21] cp210x 5-1:0.0: cp210x converter detected [ 477.611620][ T21] usb 5-1: cp210x converter now attached to ttyUSB0 [ 477.654597][ T4232] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 477.811664][ T6688] usb 5-1: USB disconnect, device number 15 [ 477.841425][ T6688] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 477.889567][ T6688] cp210x 5-1:0.0: device disconnected [ 477.915979][ T4232] usb 7-1: Using ep0 maxpacket: 16 [ 478.034758][ T4232] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 478.245213][ T4232] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 478.275374][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.310910][ T4232] usb 7-1: Product: syz [ 478.329665][ T4232] usb 7-1: Manufacturer: syz [ 478.355980][ T4232] usb 7-1: SerialNumber: syz [ 478.388795][ T4232] usb 7-1: config 0 descriptor?? [ 478.623071][T10903] chnl_net:caif_netlink_parms(): no params data found [ 478.738540][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 478.773428][T10934] fuse: Bad value for 'fd' [ 478.781024][T10903] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.791377][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.802134][T10903] device bridge_slave_0 entered promiscuous mode [ 478.822302][T10903] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.830665][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.840442][T10903] device bridge_slave_1 entered promiscuous mode [ 478.878262][T10903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.892518][T10903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.966996][T10903] team0: Port device team_slave_0 added [ 478.979850][T10903] team0: Port device team_slave_1 added [ 479.004655][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 479.053372][T10903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.089210][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.159222][T10903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.218970][T10903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.235021][T10903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.285326][ T13] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 479.318650][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.319719][T10903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.354825][ T13] usb 5-1: Product: syz [ 479.361611][ T13] usb 5-1: Manufacturer: syz [ 479.399113][ T13] usb 5-1: SerialNumber: syz [ 479.417697][ T13] usb 5-1: config 0 descriptor?? [ 479.477483][ T13] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 479.497600][ T4280] device hsr_slave_0 left promiscuous mode [ 479.510350][ T4280] device hsr_slave_1 left promiscuous mode [ 479.528780][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.549593][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.561228][T10949] syz.1.2019 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 479.575478][ T4280] device bridge_slave_1 left promiscuous mode [ 479.590829][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.602315][ T4280] device bridge_slave_0 left promiscuous mode [ 479.617021][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.642347][ T4280] bond3 (unregistering): Released all slaves [ 479.677372][ T4280] bond2 (unregistering): Released all slaves [ 479.799227][ T4280] bond1 (unregistering): Released all slaves [ 479.848759][ T4232] usb 7-1: USB disconnect, device number 9 [ 480.136780][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 480.185096][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 480.268097][ T4232] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 480.304781][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 480.353376][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.363722][ T13] gspca_ov534_9: reg_w failed -71 [ 480.394904][ T4280] device bond_slave_1 left promiscuous mode [ 480.451143][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.472120][ T4280] device bond_slave_0 left promiscuous mode [ 480.524725][ T4232] usb 7-1: Using ep0 maxpacket: 32 [ 480.660939][ T4280] bond0 (unregistering): Released all slaves [ 480.704864][ T4232] usb 7-1: unable to get BOS descriptor or descriptor too short [ 480.754893][ T13] gspca_ov534_9: Unknown sensor 0000 [ 480.754971][ T13] ov534_9: probe of 5-1:0.0 failed with error -22 [ 480.788443][ T13] usb 5-1: USB disconnect, device number 16 [ 480.796287][ T4232] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 480.815263][ T4232] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 480.864959][ T4232] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 480.904022][ T4232] usb 7-1: config 128 has no interface number 0 [ 480.932287][ T4232] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 87, changing to 10 [ 480.964578][ T4232] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 32864, setting to 1024 [ 480.984551][ T4232] usb 7-1: config 128 interface 127 has no altsetting 0 [ 481.022127][T10903] device hsr_slave_0 entered promiscuous mode [ 481.087382][T10903] device hsr_slave_1 entered promiscuous mode [ 481.155110][ T4232] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 481.184633][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.194149][ T4232] usb 7-1: Product: syz [ 481.250757][ T4232] usb 7-1: Manufacturer: syz [ 481.284536][ T4232] usb 7-1: SerialNumber: syz [ 481.761614][T10903] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 481.806769][ T4232] usb 7-1: USB disconnect, device number 10 [ 481.839494][T10903] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 481.948007][T10903] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 482.002399][T10903] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 482.127069][ T4307] udevd[4307]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.164681][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2028'. [ 482.384614][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 482.455130][T10903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.501462][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.523925][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.547026][T10903] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.609550][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.630818][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.664864][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.674375][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.718027][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.749419][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.776346][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.807938][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.816925][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.859290][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.934917][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.966751][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 483.002431][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.204987][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.263739][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.707096][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.783263][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.860830][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.930181][T10903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.951883][T10903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.065118][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.107561][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.294525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.336063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 484.360467][T10903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.428186][ T5891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 484.464668][ T6688] Bluetooth: hci1: command 0x040f tx timeout [ 485.654553][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 485.777977][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.800509][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.833108][T10903] device veth0_vlan entered promiscuous mode [ 485.844941][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 485.867834][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.878385][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.898378][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.928758][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.944785][ T5891] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 485.954272][ T5891] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 485.981532][T10903] device veth1_vlan entered promiscuous mode [ 485.998687][ T5891] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 486.173950][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 486.208292][ T5891] usb 5-1: config 128 has no interface number 0 [ 486.215367][ T5891] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 87, changing to 10 [ 486.228523][ T5891] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 32864, setting to 1024 [ 486.230169][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 486.242542][ T5891] usb 5-1: config 128 interface 127 has no altsetting 0 [ 486.364805][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.618622][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.645053][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 486.693262][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.750315][ T5891] usb 5-1: Product: syz [ 486.761597][T11085] binder: BINDER_SET_CONTEXT_MGR already set [ 486.777980][T10903] device veth0_macvtap entered promiscuous mode [ 486.787069][ T5891] usb 5-1: Manufacturer: syz [ 486.812572][ T5891] usb 5-1: SerialNumber: syz [ 486.824149][T11085] binder: 11084:11085 ioctl 4018620d 200000000040 returned -16 [ 486.843470][T10903] device veth1_macvtap entered promiscuous mode [ 486.869112][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 486.909970][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.922595][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.936186][T11085] binder: 11084:11085 ioctl c0306201 200000000300 returned -11 [ 486.946672][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.982946][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.034552][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.047721][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.061803][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.084679][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.127377][T10903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.127787][T11086] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2050'. [ 487.127992][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 487.128704][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.131538][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 487.132191][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 487.179688][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.179761][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.179775][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.179790][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.179806][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.179821][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.179835][T10903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.179850][T10903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.185487][T10903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.186433][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 487.187255][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 487.191919][T10903] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.191961][T10903] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.191992][T10903] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.192023][T10903] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.326980][T11099] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2055'. [ 487.398902][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 487.433288][T11095] 9pnet: Insufficient options for proto=fd [ 487.438361][ T5891] usb 5-1: USB disconnect, device number 17 [ 487.541103][ T5281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.541209][ T5281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.582928][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 487.639266][ T5281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.639362][ T5281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.644760][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 487.686750][ T4307] udevd[4307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.217091][T11129] input: syz1 as /devices/virtual/input/input26 [ 489.274276][T11137] overlayfs: failed to clone upperpath [ 489.305424][T11135] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.346446][ T4291] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 489.421959][T11139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2064'. [ 489.550336][ T4291] Bluetooth: hci5: Injecting HCI hardware error event [ 489.550893][ T4193] Bluetooth: hci5: hardware error 0x00 [ 489.587987][T11135] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.641635][T11135] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.670694][ T4235] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 489.729605][T11135] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.901161][T11135] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.915110][ T4235] usb 8-1: Using ep0 maxpacket: 32 [ 489.950950][T11135] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.003911][T11135] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.032951][T11135] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.274821][ T4235] usb 8-1: unable to get BOS descriptor or descriptor too short [ 490.374758][ T4235] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 490.395704][ T4235] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 490.443452][ T4235] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 490.457648][T11168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2075'. [ 490.467714][ T4235] usb 8-1: config 128 has no interface number 0 [ 490.476007][ T4235] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 87, changing to 10 [ 490.488090][ T4235] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 32864, setting to 1024 [ 490.501889][ T4235] usb 8-1: config 128 interface 127 has no altsetting 0 [ 490.664831][ T4235] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 490.674858][ T4235] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.683082][ T4235] usb 8-1: Product: syz [ 490.688442][ T4235] usb 8-1: Manufacturer: syz [ 490.693305][ T4235] usb 8-1: SerialNumber: syz [ 491.161163][ T4235] usb 8-1: USB disconnect, device number 2 [ 491.227175][ T4307] udevd[4307]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.324720][ T4232] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 491.384187][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2079'. [ 491.694719][ T4232] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 491.713312][ T4232] usb 7-1: config 0 has no interface number 0 [ 491.732694][ T4232] usb 7-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d [ 491.751860][T11222] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2086'. [ 491.770691][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.803705][ T4232] usb 7-1: config 0 descriptor?? [ 491.869764][ T4232] gspca_main: spca501-2.14.0 probing 0733:0401 [ 491.892682][T11228] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2087'. [ 492.273612][ T5891] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 492.314787][ T4232] gspca_spca501: reg write: error -71 [ 492.322449][ T4232] spca501 7-1:0.255: Reg write failed for 0x00,0x02,0x01 [ 492.340309][ T4232] spca501: probe of 7-1:0.255 failed with error -22 [ 492.373485][ T4232] usb 7-1: USB disconnect, device number 11 [ 492.894897][ T5891] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 492.920128][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.941843][ T5891] usb 8-1: Product: syz [ 492.963655][ T5891] usb 8-1: Manufacturer: syz [ 492.977616][ T5891] usb 8-1: SerialNumber: syz [ 493.214661][ T4232] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 493.298156][T11283] overlayfs: failed to clone lowerpath [ 493.522084][T11296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2102'. [ 493.585397][ T4232] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 493.605116][ T4232] usb 7-1: config 1 has no interface number 0 [ 493.620032][ T4232] usb 7-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 493.651795][ T4232] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.844844][ T4232] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 493.861754][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.871116][ T4232] usb 7-1: Product: syz [ 493.880108][ T4232] usb 7-1: Manufacturer: syz [ 493.885955][ T4232] usb 7-1: SerialNumber: syz [ 493.905041][T11268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 493.924737][ T5891] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 493.930375][ T4232] usb 7-1: Expected 3 endpoints, found: 2 [ 493.959205][ T5891] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 493.990783][ T5891] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 494.002872][ T5891] lan78xx: probe of 8-1:1.0 failed with error -71 [ 494.015543][ T5891] usb 8-1: USB disconnect, device number 3 [ 495.648441][ T4291] usb 7-1: USB disconnect, device number 12 [ 495.768084][ T5891] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 496.089708][T11372] loop4: detected capacity change from 0 to 512 [ 496.143892][T11372] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 496.161862][T11372] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 496.174236][T11372] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2127: attempt to clear invalid blocks 2 len 1 [ 496.192722][T11372] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 496.210525][T11372] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2127: invalid indirect mapped block 1819239214 (level 0) [ 496.227758][T11372] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2127: invalid indirect mapped block 1819239214 (level 1) [ 496.245014][T11372] EXT4-fs (loop4): 1 truncate cleaned up [ 496.250827][T11372] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 496.534923][ T5891] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 496.544977][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.553580][ T5891] usb 8-1: Product: syz [ 496.558630][ T5891] usb 8-1: Manufacturer: syz [ 496.563522][ T5891] usb 8-1: SerialNumber: syz [ 496.619507][T11386] 9pnet: Insufficient options for proto=fd [ 496.677637][ T5891] usb 8-1: config 0 descriptor?? [ 497.028494][ T23] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 497.354733][ T5891] usb 8-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 497.371753][ T5891] usb 8-1: Firmware version (0.0) predates our first public release. [ 497.381917][ T5891] usb 8-1: Please update to version 0.2 or newer [ 499.371974][ T5891] usb 8-1: Firmware: build [ 499.377662][ T5891] usb 8-1: atusb_probe: initialization failed, error = -32 [ 499.386092][ T5891] atusb: probe of 8-1:0.0 failed with error -32 [ 499.452715][ T5891] usb 8-1: USB disconnect, device number 4 [ 499.564818][ T23] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 499.582191][ T23] usb 7-1: can't read configurations, error -71 [ 499.832146][T11428] loop6: detected capacity change from 0 to 512 [ 499.879477][ T4232] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 499.900602][T11428] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 499.918390][T11428] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 499.928257][T11428] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.2142: attempt to clear invalid blocks 2 len 1 [ 499.942530][T11428] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 499.970053][T11428] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2142: invalid indirect mapped block 1819239214 (level 0) [ 500.018061][T11434] fuse: Bad value for 'fd' [ 500.142397][T11428] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2142: invalid indirect mapped block 1819239214 (level 1) [ 500.354849][T11428] EXT4-fs (loop6): 1 truncate cleaned up [ 500.564601][T11428] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 500.944161][T11441] ubi: mtd0 is already attached to ubi31 [ 501.046233][T11446] 9pnet: Insufficient options for proto=fd [ 501.614867][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.648309][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.155029][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2149'. [ 502.284914][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.302772][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.314378][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.324829][ T21] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 502.344269][ T4232] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.364115][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.413742][ T4232] usb 5-1: config 0 descriptor?? [ 502.486769][ T4232] usb 5-1: can't set config #0, error -71 [ 502.513330][ T4232] usb 5-1: USB disconnect, device number 18 [ 502.732373][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2160'. [ 504.205532][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2164'. [ 504.414604][ T21] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 504.444724][ T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.453868][ T21] usb 8-1: Product: syz [ 504.484499][ T21] usb 8-1: Manufacturer: syz [ 504.489890][ T21] usb 8-1: SerialNumber: syz [ 504.521196][ T21] usb 8-1: config 0 descriptor?? [ 504.755451][ T21] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 504.830962][T11509] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.843719][T11509] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 505.354635][ T21] gspca_stk1135: reg_w 0x2 err -110 [ 505.361254][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.410900][ T21] gspca_stk1135: Sensor write failed [ 505.449399][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.516959][ T21] gspca_stk1135: Sensor write failed [ 505.522452][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.578037][ T21] gspca_stk1135: Sensor read failed [ 505.610174][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.637179][ T21] gspca_stk1135: Sensor read failed [ 505.678100][ T21] gspca_stk1135: Detected sensor type unknown (0x0) [ 505.696514][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.741912][ T21] gspca_stk1135: Sensor read failed [ 505.763981][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.780134][ T26] audit: type=1326 audit(1769447852.771:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.7.2171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee83a1deb9 code=0x0 [ 505.815035][ T21] gspca_stk1135: Sensor read failed [ 505.825138][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.844616][ T21] gspca_stk1135: Sensor write failed [ 505.864571][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 505.887020][ T21] gspca_stk1135: Sensor write failed [ 505.939090][ T21] stk1135: probe of 8-1:0.0 failed with error -110 [ 505.949093][T11528] fuse: Bad value for 'fd' [ 506.020468][ T21] usb 8-1: USB disconnect, device number 5 [ 506.035884][T11532] loop4: detected capacity change from 0 to 128 [ 506.113356][T11532] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 506.161756][T11532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.555240][T11544] fuse: Bad value for 'fd' [ 507.539680][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2179'. [ 507.993704][T11576] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.014039][T11562] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 508.034773][T11562] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 508.074539][ T23] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 508.103960][T11576] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.211109][T11576] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.339762][T11576] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.439921][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.460488][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.486624][ T23] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 508.502801][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.505634][T11576] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.531235][ T23] usb 8-1: config 0 descriptor?? [ 508.551332][T11576] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.569096][T11576] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.597932][T11576] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.020606][T11611] input: syz1 as /devices/virtual/input/input27 [ 509.253904][ T23] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 509.795419][ T23] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 509.812692][T11615] netlink: 'syz.6.2193': attribute type 1 has an invalid length. [ 509.923596][T11615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.961844][T11623] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2194'. [ 509.972350][ T23] cp2112 0003:10C4:EA90.000A: Part Number: 0x1A Device Version: 0xC4 [ 510.349335][ T23] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 510.380757][ T23] usb 8-1: USB disconnect, device number 6 [ 510.579545][T11646] fido_id[11646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 511.244871][T11665] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 511.294661][T11665] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 511.483724][T11679] input: syz1 as /devices/virtual/input/input28 [ 511.962435][T11684] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2210'. [ 512.044093][T11685] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 512.169574][T11685] 8021q: adding VLAN 0 to HW filter on device bond11 [ 512.364529][ T23] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 512.551059][ T4235] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 512.569391][T11710] fuse: Bad value for 'fd' [ 512.734746][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.765944][ T23] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 512.802359][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.811229][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 512.832010][ T23] usb 8-1: config 0 descriptor?? [ 512.877411][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 512.934800][ T4235] usb 5-1: config 0 interface 0 has no altsetting 0 [ 513.104886][ T4235] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 513.124874][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.141446][ T4235] usb 5-1: Product: syz [ 513.146386][ T4235] usb 5-1: Manufacturer: syz [ 513.151227][ T4235] usb 5-1: SerialNumber: syz [ 513.210637][ T4235] usb 5-1: config 0 descriptor?? [ 513.282512][T11731] "syz.6.2220" (11731) uses obsolete ecb(arc4) skcipher [ 513.443991][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 514.348316][T11740] input: syz1 as /devices/virtual/input/input29 [ 514.475997][ T23] pwc: recv_control_msg error -71 req 02 val 2c00 [ 514.784748][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 514.976027][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 515.045605][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 515.068028][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 515.169343][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 515.214645][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 515.234722][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 515.264712][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 515.316822][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2238'. [ 515.326529][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 515.360543][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 515.406581][ T4173] usb 5-1: USB disconnect, device number 19 [ 515.416860][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 515.484597][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 515.509219][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 515.532756][ T23] pwc: Registered as video103. [ 515.556902][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 515.621460][ T23] usb 8-1: USB disconnect, device number 7 [ 515.764875][T11782] loop6: detected capacity change from 0 to 256 [ 515.815189][T11782] exfat: Bad value for 'uid' [ 516.878510][ T23] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 517.011514][T11805] loop6: detected capacity change from 0 to 128 [ 517.031644][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2244'. [ 517.058938][T11805] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 517.102674][T11805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.124593][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 517.244763][ T23] usb 8-1: config 0 has an invalid interface number: 135 but max is 0 [ 517.262636][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.417868][ T23] usb 8-1: config 0 has no interface number 0 [ 517.482413][T11827] fuse: Bad value for 'fd' [ 518.007365][ T23] usb 8-1: config 0 interface 135 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 518.080619][ T23] usb 8-1: config 0 interface 135 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 0 [ 518.145354][ T23] usb 8-1: config 0 interface 135 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.187498][ T23] usb 8-1: config 0 interface 135 has no altsetting 0 [ 518.375192][ T23] usb 8-1: New USB device found, idVendor=0f11, idProduct=1011, bcdDevice=49.1a [ 518.391266][T11843] loop4: detected capacity change from 0 to 256 [ 518.408790][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.430940][ T23] usb 8-1: Product: syz [ 518.436302][ T23] usb 8-1: Manufacturer: syz [ 518.441042][ T23] usb 8-1: SerialNumber: syz [ 518.450344][ T23] usb 8-1: config 0 descriptor?? [ 518.465422][T11843] exfat: Bad value for 'uid' [ 518.514237][ T23] usb 8-1: can't set config #0, error -71 [ 518.539947][ T23] usb 8-1: USB disconnect, device number 8 [ 519.672637][T11873] fuse: Bad value for 'fd' [ 520.490590][T11882] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.544592][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2266'. [ 520.577466][T11882] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.643580][T11882] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.676264][T11899] loop6: detected capacity change from 0 to 256 [ 520.715452][T11899] exfat: Bad value for 'uid' [ 520.770562][T11882] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.167375][T11882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.191835][T11882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.219022][T11882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.241894][T11882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.632261][T11927] fuse: Bad value for 'fd' [ 522.825280][T11926] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 523.267014][T11926] 8021q: adding VLAN 0 to HW filter on device bond12 [ 523.314808][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2281'. [ 523.527339][T11942] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.597574][T11942] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.648616][ T26] audit: type=1326 audit(1769447870.641:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.7.2288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee83a1deb9 code=0x0 [ 523.651908][T11942] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.756596][T11942] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.774699][ T23] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 523.858469][T11942] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.877007][T11942] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.896398][T11942] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.917142][T11942] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.149023][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.167363][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.195064][ T23] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 524.213691][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.241858][ T23] usb 7-1: config 0 descriptor?? [ 524.263844][T11978] Process accounting resumed [ 524.402768][T11989] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.472897][T11989] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.520133][T11989] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.591886][T11989] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.714729][ T6688] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 524.737030][ T23] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 524.747119][ T23] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 524.844830][ T4232] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 524.964819][ T23] cp2112 0003:10C4:EA90.000B: Part Number: 0x1A Device Version: 0xC4 [ 525.104905][ T4232] usb 8-1: Using ep0 maxpacket: 32 [ 525.154988][ T6688] usb 5-1: unable to get BOS descriptor or descriptor too short [ 525.205159][ T6688] usb 5-1: not running at top speed; connect to a high speed hub [ 525.244916][ T4232] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 525.253319][ T4232] usb 8-1: config 0 has no interface number 0 [ 525.294925][ T6688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.306577][ T6688] usb 5-1: config 0 has no interfaces? [ 525.474780][ T4232] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 525.502795][ T4232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.515764][ T6688] usb 5-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 525.527097][ T4232] usb 8-1: Product: syz [ 525.531474][ T4232] usb 8-1: Manufacturer: syz [ 525.537561][ T6688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.735455][ T23] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 525.964020][ T23] usb 7-1: USB disconnect, device number 15 [ 526.378720][T12014] fido_id[12014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 526.430611][ T4232] usb 8-1: SerialNumber: syz [ 526.438457][ T6688] usb 5-1: Product: syz [ 526.443400][ T6688] usb 5-1: Manufacturer: syz [ 526.450391][ T4232] usb 8-1: config 0 descriptor?? [ 526.456762][ T6688] usb 5-1: SerialNumber: syz [ 526.465697][ T6688] usb 5-1: config 0 descriptor?? [ 526.496174][ T4232] smsc95xx v2.0.0 [ 526.565868][ T26] audit: type=1326 audit(1769447873.561:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.5.2318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0e6507eb9 code=0x0 [ 526.903498][ T6688] usb 5-1: USB disconnect, device number 20 [ 526.924773][ T4232] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 526.940306][ T4232] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.023618][T12035] loop6: detected capacity change from 0 to 128 [ 527.092295][T12035] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 527.115549][T12035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.646975][ T4232] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 527.749068][ T4232] smsc95xx: probe of 8-1:0.67 failed with error -32 [ 528.152899][T12042] netlink: 'syz.4.2327': attribute type 1 has an invalid length. [ 528.222526][T12042] 8021q: adding VLAN 0 to HW filter on device bond7 [ 528.938752][ T4232] usb 8-1: USB disconnect, device number 9 [ 529.393404][ T26] audit: type=1326 audit(1769447876.381:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.5.2336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0e6507eb9 code=0x0 [ 529.799415][T11989] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.828907][T11989] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.902395][T11989] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.938309][T11989] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.970295][T12077] netlink: 'syz.6.2340': attribute type 1 has an invalid length. [ 530.067619][T12077] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.304635][ T5275] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 530.977498][T12112] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.010515][T12110] netlink: 'syz.7.2353': attribute type 1 has an invalid length. [ 531.083686][T12110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.109117][T12112] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.205461][T12112] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.298284][T12112] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.451051][T12112] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.469534][T12112] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.487253][T12112] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.503524][T12112] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.551790][T12149] input: syz1 as /devices/virtual/input/input31 [ 532.589161][T12152] JFS: discard option not supported on device [ 532.602602][T12152] Mount JFS Failure: -22 [ 532.608876][T12152] jfs_mount failed w/return code = -22 [ 532.853932][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 533.046856][T12148] input: syz1 as /devices/virtual/input/input32 [ 535.280106][T12173] team0: No ports can be present during mode change [ 535.326434][T12171] netlink: 'syz.7.2374': attribute type 1 has an invalid length. [ 535.409596][T12171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.498967][T12175] netlink: 'syz.6.2377': attribute type 10 has an invalid length. [ 535.553546][T12175] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2377'. [ 537.136745][ T26] audit: type=1326 audit(1769447884.131:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.1.2384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e7a69eb9 code=0x0 [ 537.422103][T12171] bond2: (slave veth0_to_bond): making interface the new active one [ 537.467042][T12171] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 537.515501][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 537.930079][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.994737][ T13] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 538.375423][ T13] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 538.426733][ T13] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 538.495505][ T13] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 538.517884][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.555003][T12212] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 538.865777][ T4232] usb 8-1: USB disconnect, device number 10 [ 541.952629][ T26] audit: type=1326 audit(1769447888.941:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.7.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee83a1deb9 code=0x0 [ 542.343517][T12277] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2406'. [ 542.557625][T12289] input: syz1 as /devices/virtual/input/input33 [ 543.691965][T12308] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.992189][T12308] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.024121][T12324] kvm: MONITOR instruction emulated as NOP! [ 544.133855][T12308] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.253391][T12308] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.365929][T12335] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 544.399707][T12335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.430215][T12335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.456305][T12335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.477208][T12335] device bridge_slave_0 left promiscuous mode [ 544.493997][T12335] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.514938][T12335] device bridge_slave_1 left promiscuous mode [ 544.521334][T12335] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.568043][T12335] bond0: (slave bond_slave_0): Releasing backup interface [ 544.615234][T12335] bond0: (slave bond_slave_1): Releasing backup interface [ 544.777335][T12335] team0: Port device team_slave_0 removed [ 544.827311][T12335] team0: Port device team_slave_1 removed [ 544.851394][T12335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.870202][T12335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.886705][T12335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.904576][T12335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.943106][T12335] bond1: (slave vlan2): Releasing backup interface [ 544.988942][T12335] bond2: (slave gretap1): Releasing backup interface [ 545.049146][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2426'. [ 545.258579][T12308] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.297242][T12308] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.315815][T12313] chnl_net:caif_netlink_parms(): no params data found [ 545.345927][T12308] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.373900][T12308] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.533400][ T26] audit: type=1326 audit(1769447892.521:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.7.2429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee83a1deb9 code=0x0 [ 545.576077][ T144] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.673824][T12356] 9pnet_virtio: no channels available for device syz [ 545.684970][ T4235] Bluetooth: hci0: command 0x0409 tx timeout [ 545.726682][T12356] overlayfs: failed to clone upperpath [ 545.946579][ T144] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.966511][T12364] netlink: 'syz.5.2433': attribute type 4 has an invalid length. [ 546.514599][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.531733][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.545833][T12313] device bridge_slave_0 entered promiscuous mode [ 546.555608][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.563331][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.572479][T12313] device bridge_slave_1 entered promiscuous mode [ 546.692798][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.783479][ T144] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.808021][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.824665][ T4173] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 546.909090][ T144] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.948965][T12313] team0: Port device team_slave_0 added [ 546.977840][T12313] team0: Port device team_slave_1 added [ 547.052850][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.062721][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.092210][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.126990][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.134559][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.162688][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.241541][ T4173] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 547.264140][ T4173] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 547.286625][ T4173] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 547.303501][T12313] device hsr_slave_0 entered promiscuous mode [ 547.311804][T12313] device hsr_slave_1 entered promiscuous mode [ 547.316020][ T4173] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 547.335611][T12313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.343620][T12313] Cannot create hsr debugfs directory [ 547.344932][ T4173] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 547.379956][T12381] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.449286][T12381] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.524946][ T4173] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 547.538794][ T4173] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 547.554515][ T4173] usb 8-1: Product: syz [ 547.558796][ T4173] usb 8-1: Manufacturer: syz [ 547.575176][T12381] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.611226][ T4173] cdc_wdm 8-1:1.0: skipping garbage [ 547.620050][ T4173] cdc_wdm 8-1:1.0: skipping garbage [ 547.635139][ T4173] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 547.643398][ T4173] cdc_wdm 8-1:1.0: Unknown control protocol [ 547.744636][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 547.770369][T12385] netlink: 'syz.5.2439': attribute type 1 has an invalid length. [ 547.822397][T12385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.850026][T12381] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.945284][ T4235] usb 8-1: USB disconnect, device number 11 [ 547.957358][T12371] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 548.027428][T12381] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.058777][T12381] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.076072][T12381] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.091696][T12381] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.505014][ T144] bond1: (slave gretap1): Releasing backup interface [ 548.658194][T12415] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2447'. [ 549.072283][T12428] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.114587][ T4235] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 549.215710][T12428] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.250854][ T144] device hsr_slave_0 left promiscuous mode [ 549.374642][ T4235] usb 8-1: Using ep0 maxpacket: 8 [ 549.461850][ T144] device hsr_slave_1 left promiscuous mode [ 549.475937][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.493759][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.515200][ T4235] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 549.525093][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.532681][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.544054][ T4235] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.568843][ T4235] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 549.580804][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.615029][ T144] device bridge_slave_0 left promiscuous mode [ 549.623773][ T4235] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 549.624200][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.661003][ T144] device veth1_macvtap left promiscuous mode [ 549.682016][ T144] device veth0_macvtap left promiscuous mode [ 549.696112][ T144] device veth1_vlan left promiscuous mode [ 549.710760][ T144] device veth0_vlan left promiscuous mode [ 549.714608][ T4235] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.794908][ T4235] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 549.804235][ T4235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.877791][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 550.196688][T12439] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 550.230940][T12439] IPVS: ip_vs_add_dest(): server weight less than zero [ 550.296814][ T144] bond12 (unregistering): Released all slaves [ 550.314770][ T144] bond11 (unregistering): Released all slaves [ 550.331895][ T144] bond10 (unregistering): Released all slaves [ 550.351558][ T144] bond9 (unregistering): Released all slaves [ 550.370142][ T144] bond8 (unregistering): Released all slaves [ 550.387040][ T144] bond7 (unregistering): Released all slaves [ 550.403211][ T144] bond6 (unregistering): Released all slaves [ 550.419473][ T144] bond5 (unregistering): Released all slaves [ 550.435465][ T144] bond4 (unregistering): Released all slaves [ 550.452721][ T144] bond3 (unregistering): Released all slaves [ 550.528231][ T144] bond2 (unregistering): Released all slaves [ 550.552405][ T144] bond1 (unregistering): Released all slaves [ 550.774606][T12440] usbtmc 8-1:16.0: simple usb_control_msg failed -32 [ 550.789880][ T4291] usb 8-1: USB disconnect, device number 12 [ 550.892387][ T144] team0 (unregistering): Port device team_slave_1 removed [ 550.922058][ T144] team0 (unregistering): Port device team_slave_0 removed [ 550.939015][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.957673][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.050229][ T144] bond0 (unregistering): Released all slaves [ 551.125569][T12428] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.239045][T12428] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.400836][T12442] process 'syz.7.2455' launched './file2' with NULL argv: empty string added [ 551.473916][T12428] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.493890][T12428] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.520964][T12428] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.538341][T12428] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.744648][ T6690] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 551.850095][T12313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.032424][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 552.154195][T12313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.154850][ T6690] usb 8-1: Using ep0 maxpacket: 8 [ 552.236281][T12313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.244351][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.261565][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.279006][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.291397][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.300737][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.312177][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.321532][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.331716][ T6690] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.345086][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.362436][ T6690] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 552.379322][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.392676][ T6690] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.412978][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.428081][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.438880][ T6690] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.457689][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.469572][ T6690] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.482326][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.492670][ T6690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.504505][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.520808][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.531999][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.541985][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.555370][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.567071][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.577096][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.586671][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.598962][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.613599][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.623447][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.641095][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.652668][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.667670][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.681963][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.697349][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.718770][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.753387][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.784728][ T6690] usb 8-1: GET_CAPABILITIES returned 0 [ 552.802036][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: unknown main item tag 0x0 [ 552.811478][ T6690] usbtmc 8-1:16.0: can't read capabilities [ 552.856807][T12313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.875409][ T4232] hid-generic 0004:FFFFFFFF:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz1 [ 552.899508][T12463] netlink: 'syz.6.2461': attribute type 1 has an invalid length. [ 552.983939][T12463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.014609][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 553.124667][ T4291] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 553.218851][ T6693] usb 8-1: USB disconnect, device number 13 [ 553.274150][T12313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.295005][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.313338][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.346567][T12313] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.366043][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.385505][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.408118][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.417844][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.455183][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.473897][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.493410][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.504491][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.511988][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.542317][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.564820][ T4291] usb 5-1: config 0 has no interfaces? [ 553.572186][ T4291] usb 5-1: New USB device found, idVendor=1a34, idProduct=0302, bcdDevice= 0.00 [ 553.592213][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.604666][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.615833][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.638168][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.655273][ T4291] usb 5-1: config 0 descriptor?? [ 553.672633][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.692651][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.744092][T12313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 553.798185][T12313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.853266][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.872363][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.904139][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.918365][ T4232] usb 5-1: USB disconnect, device number 21 [ 553.972129][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.002189][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.021529][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.154501][ T6693] Bluetooth: hci0: command 0x0c1a tx timeout [ 554.394681][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.422873][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.443539][T12512] netlink: 'syz.5.2472': attribute type 1 has an invalid length. [ 554.528403][T12513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 554.583989][T12512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.641051][T12313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.801051][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.846579][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.889285][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.906399][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.932881][T12313] device veth0_vlan entered promiscuous mode [ 554.947925][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.963962][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 554.997516][T12313] device veth1_vlan entered promiscuous mode [ 555.146082][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.310539][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.366454][T12528] loop6: detected capacity change from 0 to 128 [ 555.387948][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.445500][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.473998][T12528] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 555.480967][T12313] device veth0_macvtap entered promiscuous mode [ 555.509208][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.528336][T12313] device veth1_macvtap entered promiscuous mode [ 555.597352][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.630693][T12531] input: syz1 as /devices/virtual/input/input34 [ 555.645742][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.659564][T12528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.684589][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.749913][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.933742][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.398768][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.420988][T12313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.503171][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.540160][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.568904][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.591285][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.640992][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.289812][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.745494][T12313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.334163][T12313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.350127][T12313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.361376][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 559.564594][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.588229][T12313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.607383][T12313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.813568][T12313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.535069][T12313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.629158][T12560] netlink: 'syz.6.2483': attribute type 1 has an invalid length. [ 561.689830][T12560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 562.394745][T12569] 9pnet_virtio: no channels available for device syz [ 563.601507][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.609947][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.729528][T12566] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.738436][T12566] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.747753][T12566] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.757036][T12566] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.885801][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2482'. [ 568.899231][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2485'. [ 568.913753][T12568] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.929863][T12568] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.939545][T12568] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.953200][T12568] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.964085][T12568] device geneve2 entered promiscuous mode [ 569.008608][T12599] batman_adv: batadv0: Adding interface: gretap2 [ 569.053349][T12599] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.143132][T12599] batman_adv: batadv0: Interface activated: gretap2 [ 569.401643][ T5250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.419232][ T5250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.480867][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 569.517182][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.579687][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.638298][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 570.138649][T12624] input: syz0 as /devices/virtual/input/input35 [ 570.378766][ T5893] [ 570.381147][ T5893] ====================================================== [ 570.388196][ T5893] WARNING: possible circular locking dependency detected [ 570.395342][ T5893] syzkaller #0 Not tainted [ 570.399779][ T5893] ------------------------------------------------------ [ 570.407181][ T5893] kworker/1:11/5893 is trying to acquire lock: [ 570.413752][ T5893] ffff88807d574c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 570.425175][ T5893] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 570.425175][ T5893] but task is already holding lock: [ 570.432811][ T5893] ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 570.441956][ T5893] [ 570.441956][ T5893] which lock already depends on the new lock. [ 570.441956][ T5893] [ 570.452679][ T5893] [ 570.452679][ T5893] the existing dependency chain (in reverse order) is: [ 570.462494][ T5893] [ 570.462494][ T5893] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 570.471492][ T5893] __mutex_lock_common+0x1e3/0x2400 [ 570.477347][ T5893] mutex_lock_nested+0x17/0x20 [ 570.482804][ T5893] rfkill_register+0x33/0x8a0 [ 570.488226][ T5893] hci_register_dev+0x452/0x970 [ 570.493646][ T5893] vhci_create_device+0x32c/0x5c0 [ 570.499419][ T5893] vhci_write+0x391/0x450 [ 570.504401][ T5893] vfs_write+0x745/0xd60 [ 570.509393][ T5893] ksys_write+0x152/0x260 [ 570.514716][ T5893] do_syscall_64+0x4c/0xa0 [ 570.519698][ T5893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.526497][ T5893] [ 570.526497][ T5893] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 570.534818][ T5893] __mutex_lock_common+0x1e3/0x2400 [ 570.540700][ T5893] mutex_lock_nested+0x17/0x20 [ 570.546181][ T5893] vhci_send_frame+0x88/0x100 [ 570.551433][ T5893] hci_send_frame+0x1a9/0x2e0 [ 570.556758][ T5893] hci_tx_work+0x9f9/0x1710 [ 570.561839][ T5893] process_one_work+0x85f/0x1010 [ 570.567352][ T5893] worker_thread+0xaa6/0x1290 [ 570.572786][ T5893] kthread+0x436/0x520 [ 570.577613][ T5893] ret_from_fork+0x1f/0x30 [ 570.582954][ T5893] [ 570.582954][ T5893] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 570.592209][ T5893] __flush_work+0x116/0x210 [ 570.597288][ T5893] hci_dev_do_close+0x1e7/0x1030 [ 570.602891][ T5893] hci_unregister_dev+0x2d7/0x580 [ 570.608621][ T5893] vhci_release+0x73/0xc0 [ 570.614126][ T5893] __fput+0x234/0x930 [ 570.618676][ T5893] task_work_run+0x125/0x1a0 [ 570.624519][ T5893] do_exit+0x626/0x20c0 [ 570.629595][ T5893] do_group_exit+0x12e/0x300 [ 570.634982][ T5893] get_signal+0x6ca/0x12c0 [ 570.640072][ T5893] arch_do_signal_or_restart+0xe7/0x12c0 [ 570.646265][ T5893] exit_to_user_mode_loop+0x9e/0x130 [ 570.652120][ T5893] exit_to_user_mode_prepare+0xee/0x180 [ 570.658221][ T5893] syscall_exit_to_user_mode+0x16/0x40 [ 570.664236][ T5893] do_syscall_64+0x58/0xa0 [ 570.669318][ T5893] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.675772][ T5893] [ 570.675772][ T5893] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 570.683448][ T5893] __mutex_lock_common+0x1e3/0x2400 [ 570.689352][ T5893] mutex_lock_nested+0x17/0x20 [ 570.694774][ T5893] bg_scan_update+0x44/0x3b0 [ 570.699936][ T5893] process_one_work+0x85f/0x1010 [ 570.705436][ T5893] worker_thread+0xaa6/0x1290 [ 570.710760][ T5893] kthread+0x436/0x520 [ 570.715376][ T5893] ret_from_fork+0x1f/0x30 [ 570.720433][ T5893] [ 570.720433][ T5893] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 570.730552][ T5893] __lock_acquire+0x2c42/0x7d10 [ 570.736143][ T5893] lock_acquire+0x19e/0x400 [ 570.741297][ T5893] __flush_work+0x116/0x210 [ 570.746351][ T5893] __cancel_work_timer+0x3f4/0x560 [ 570.752347][ T5893] hci_request_cancel_all+0xcc/0x300 [ 570.758413][ T5893] hci_dev_do_close+0x4e/0x1030 [ 570.764704][ T5893] hci_rfkill_set_block+0x10a/0x190 [ 570.771287][ T5893] rfkill_set_block+0x1c6/0x420 [ 570.777208][ T5893] rfkill_epo+0x75/0x170 [ 570.782467][ T5893] rfkill_op_handler+0x76/0x220 [ 570.788090][ T5893] process_one_work+0x85f/0x1010 [ 570.793595][ T5893] worker_thread+0xaa6/0x1290 [ 570.798983][ T5893] kthread+0x436/0x520 [ 570.803807][ T5893] ret_from_fork+0x1f/0x30 [ 570.809171][ T5893] [ 570.809171][ T5893] other info that might help us debug this: [ 570.809171][ T5893] [ 570.819686][ T5893] Chain exists of: [ 570.819686][ T5893] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 570.819686][ T5893] [ 570.835755][ T5893] Possible unsafe locking scenario: [ 570.835755][ T5893] [ 570.843316][ T5893] CPU0 CPU1 [ 570.848724][ T5893] ---- ---- [ 570.854213][ T5893] lock(rfkill_global_mutex); [ 570.859091][ T5893] lock(&data->open_mutex); [ 570.866230][ T5893] lock(rfkill_global_mutex); [ 570.873546][ T5893] lock((work_completion)(&hdev->bg_scan_update)); [ 570.880180][ T5893] [ 570.880180][ T5893] *** DEADLOCK *** [ 570.880180][ T5893] [ 570.888343][ T5893] 3 locks held by kworker/1:11/5893: [ 570.893645][ T5893] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 570.904036][ T5893] #1: ffffc9000414fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 570.914431][ T5893] #2: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 570.923969][ T5893] [ 570.923969][ T5893] stack backtrace: [ 570.929903][ T5893] CPU: 1 PID: 5893 Comm: kworker/1:11 Not tainted syzkaller #0 [ 570.937597][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.947675][ T5893] Workqueue: events rfkill_op_handler [ 570.953091][ T5893] Call Trace: [ 570.956396][ T5893] [ 570.959358][ T5893] dump_stack_lvl+0x188/0x250 [ 570.964070][ T5893] ? load_image+0x400/0x400 [ 570.968606][ T5893] ? show_regs_print_info+0x20/0x20 [ 570.973981][ T5893] ? print_circular_bug+0x12b/0x1a0 [ 570.979220][ T5893] check_noncircular+0x296/0x330 [ 570.984217][ T5893] ? look_up_lock_class+0x71/0x110 [ 570.989360][ T5893] ? add_chain_block+0x940/0x940 [ 570.994673][ T5893] ? lockdep_lock+0xf1/0x1f0 [ 570.999309][ T5893] ? __lock_acquire+0x12e8/0x7d10 [ 571.004469][ T5893] ? mark_lock+0x94/0x320 [ 571.008931][ T5893] __lock_acquire+0x2c42/0x7d10 [ 571.013919][ T5893] ? verify_lock_unused+0x140/0x140 [ 571.019258][ T5893] lock_acquire+0x19e/0x400 [ 571.023799][ T5893] ? __flush_work+0xfa/0x210 [ 571.028509][ T5893] ? __lock_acquire+0x7d10/0x7d10 [ 571.033578][ T5893] ? read_lock_is_recursive+0x10/0x10 [ 571.039152][ T5893] ? start_flush_work+0x776/0x820 [ 571.044210][ T5893] __flush_work+0x116/0x210 [ 571.048763][ T5893] ? __flush_work+0xfa/0x210 [ 571.053378][ T5893] ? flush_work+0x20/0x20 [ 571.057916][ T5893] ? try_to_grab_pending+0xfa/0x7f0 [ 571.063179][ T5893] ? mark_lock+0x94/0x320 [ 571.067553][ T5893] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 571.073813][ T5893] ? lock_chain_count+0x20/0x20 [ 571.078841][ T5893] ? mark_lock+0x94/0x320 [ 571.083250][ T5893] ? __cancel_work_timer+0x36a/0x560 [ 571.088843][ T5893] __cancel_work_timer+0x3f4/0x560 [ 571.094122][ T5893] ? cancel_work_sync+0x20/0x20 [ 571.099457][ T5893] ? __cancel_work+0x1f9/0x2e0 [ 571.104358][ T5893] ? lockdep_hardirqs_on+0x94/0x140 [ 571.109804][ T5893] ? __cancel_work+0x27b/0x2e0 [ 571.114679][ T5893] ? cancel_work+0x20/0x20 [ 571.119131][ T5893] hci_request_cancel_all+0xcc/0x300 [ 571.124445][ T5893] hci_dev_do_close+0x4e/0x1030 [ 571.129323][ T5893] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 571.135300][ T5893] ? _raw_spin_unlock+0x40/0x40 [ 571.140273][ T5893] ? kobject_uevent_env+0x371/0x890 [ 571.145502][ T5893] hci_rfkill_set_block+0x10a/0x190 [ 571.150742][ T5893] ? rcu_lock_release+0x20/0x20 [ 571.155619][ T5893] rfkill_set_block+0x1c6/0x420 [ 571.160500][ T5893] rfkill_epo+0x75/0x170 [ 571.164772][ T5893] rfkill_op_handler+0x76/0x220 [ 571.169679][ T5893] process_one_work+0x85f/0x1010 [ 571.174655][ T5893] ? worker_detach_from_pool+0x240/0x240 [ 571.180322][ T5893] ? lockdep_hardirqs_off+0x70/0x100 [ 571.185645][ T5893] ? _raw_spin_lock_irq+0xb7/0xf0 [ 571.190707][ T5893] ? _raw_spin_lock_irqsave+0x100/0x100 [ 571.196279][ T5893] ? wq_worker_running+0x97/0x170 [ 571.201355][ T5893] worker_thread+0xaa6/0x1290 [ 571.206063][ T5893] ? lockdep_hardirqs_on+0x94/0x140 [ 571.211329][ T5893] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 571.217263][ T5893] kthread+0x436/0x520 [ 571.221458][ T5893] ? rcu_lock_release+0x20/0x20 [ 571.226376][ T5893] ? kthread_blkcg+0xd0/0xd0 [ 571.231096][ T5893] ret_from_fork+0x1f/0x30 [ 571.235561][ T5893] [ 571.319729][ T26] audit: type=1326 audit(1769447918.311:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12636 comm="syz.1.2501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179ba7beb9 code=0x0 [ 571.398781][T12642] 9pnet_virtio: no channels available for device syz [ 572.870135][ T144] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.919367][ T144] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.958983][ T144] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.018151][ T144] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.129667][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.170684][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.211787][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.249647][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.360216][ T144] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.397366][ T144] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.459749][ T144] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.497514][ T144] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.706818][ T144] device hsr_slave_0 left promiscuous mode [ 574.713176][ T144] device hsr_slave_1 left promiscuous mode [ 574.721512][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.730308][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.738874][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.746924][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.755141][ T144] device bridge_slave_1 left promiscuous mode [ 574.761370][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.770799][ T144] device bridge_slave_0 left promiscuous mode [ 574.778564][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.792876][ T144] device hsr_slave_0 left promiscuous mode [ 574.799688][ T144] device hsr_slave_1 left promiscuous mode [ 574.806456][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.814057][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.822342][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.831236][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.839870][ T144] device bridge_slave_1 left promiscuous mode [ 574.847057][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.855356][ T144] device bridge_slave_0 left promiscuous mode [ 574.861533][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.872166][ T144] device hsr_slave_0 left promiscuous mode [ 574.878809][ T144] device hsr_slave_1 left promiscuous mode [ 574.890387][ T144] device veth1_macvtap left promiscuous mode [ 574.898555][ T144] device veth0_macvtap left promiscuous mode [ 574.905080][ T144] device veth1_vlan left promiscuous mode [ 574.911300][ T144] device veth0_vlan left promiscuous mode [ 574.917955][ T144] device veth1_macvtap left promiscuous mode [ 574.924257][ T144] device veth0_macvtap left promiscuous mode [ 574.930882][ T144] device veth1_vlan left promiscuous mode [ 574.938473][ T144] device veth0_vlan left promiscuous mode [ 575.071235][ T144] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 575.082473][ T144] bond2 (unregistering): Released all slaves [ 575.093521][ T144] bond1 (unregistering): Released all slaves [ 575.152263][ T144] team0 (unregistering): Port device team_slave_1 removed [ 575.168416][ T144] team0 (unregistering): Port device team_slave_0 removed [ 575.182296][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.198082][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.250297][ T144] bond0 (unregistering): Released all slaves [ 575.333141][ T144] team0 (unregistering): Port device team_slave_1 removed [ 575.348832][ T144] team0 (unregistering): Port device team_slave_0 removed [ 575.361708][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.376087][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.429630][ T144] bond0 (unregistering): Released all slaves [ 575.479979][ T144] bond7 (unregistering): Released all slaves [ 575.494517][ T144] bond6 (unregistering): Released all slaves [ 575.508004][ T144] bond5 (unregistering): Released all slaves [ 575.519400][ T144] bond4 (unregistering): Released all slaves [ 575.529809][ T144] bond3 (unregistering): Released all slaves [ 575.540334][ T144] bond2 (unregistering): Released all slaves [ 575.552286][ T144] bond1 (unregistering): Released all slaves [ 575.647192][ T144] bond0 (unregistering): Released all slaves