last executing test programs: 8m14.054923686s ago: executing program 2 (id=387): r0 = syz_io_uring_setup(0x422, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f0000000440)=0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xc, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2, 0x3}, {0x2, 0x2}, {0xb, 0x1}, {0x5, 0x2}, {0x3, 0x1}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0x3}, {0x400f, 0x2}]}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @struct={0xc, 0x6, 0x0, 0x4, 0x0, 0x8001, [{0x4, 0x5, 0x8}, {0xb, 0x2, 0x5}, {0x2, 0x3, 0x3}, {0xb, 0x0, 0x7f}, {0x10, 0x3, 0x1ff}, {0x2, 0x1, 0x8}]}]}, {0x0, [0x41, 0x2e, 0x0, 0x30, 0x30, 0x6f, 0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000700)=""/185, 0xf0, 0xb9, 0x1, 0xf, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000001b80)=ANY=[@ANYBLOB="180000008c4900000000000047000000538418000400000018110000f7ec629c326135ce100e2957ce08d934cb8f256403ba9003eb02c800396ee7e60b600b7432b79f09f01587f70c9d8c78522bdca0a9589425d4d20b9e5365d65fd91f8c55208e47b6a0b13e843b96940d9abe944b96dcf6e301ed885e5477b9a4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x1000, &(0x7f0000000b80)=""/4096, 0x40f00, 0x72, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x6, 0xaa, 0xa}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000880)=[{0x4, 0x4, 0x5, 0x3}, {0x3, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x2, 0x3}], 0x10, 0xdec4}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18, 0x4001}], 0x1, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120825", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m12.749633285s ago: executing program 2 (id=391): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x80, @multicast1}, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r1, &(0x7f00000041c0)=""/4111, 0x100f) getdents64(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025e00010100200009040000ff02020000052407"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) 8m9.301762441s ago: executing program 2 (id=399): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000006122000002"], 0x50) ptrace$pokeuser(0x6, 0x0, 0x51, 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000000), &(0x7f00000000c0)=@tcp, 0x1}, 0x20) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000100)={0x0, 0x4, 0x770d, 0x401, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000003c0)=@buf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000400)="5a2b60aaccc16d7caa0e99997a8eba9286d70fa9e72808c7da9fee7a697e5873a75f61f59a60d346df955324ddf76f467dee588574a8d0ef580ca152f69e99f80f759880cc4ca136c74cd97740e7eb535dbd563bbd4d0a5258eab5dc74bcd2c8779b55dbd4c8801324d9412c8ab1c0cf2a3d5e2b4c4e2a26004c196bdf0af479267a0f9cd117767b09b3890c0af220fb68b9d059bb7fb0d152890d924b0cd067ca1391920b2812a8c165b932ebef95d6b41c3999c75e6773ee48565e097e61d9ac27f506210170f1c66cc1da63e349380acf9d", 0xd3) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 8m8.202101856s ago: executing program 2 (id=401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x2, 0x2, 0xb84, 0x0, 0x28}}) 8m7.977843302s ago: executing program 2 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYRES16=0xffffffffffffffff], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7a}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES8=r0], &(0x7f00000004c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x88}, 0x0) r3 = syz_io_uring_setup(0x628e, &(0x7f0000000880)={0x0, 0x4204, 0x4000, 0xfffffffc, 0x29d}, &(0x7f0000000480)=0x0, &(0x7f0000000440)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/182, 0xb6}], 0x1}, 0x0, 0x40000103}) sendto(r6, &(0x7f0000000980)="9b95512f51bba2c11c56c10b6925293ea51024033167dc0261f35d7e0463835c7234e1acc82af34ed5daca0a62ae94d67183d3a77c8c6bc2c46781ed78cf88d56e2553ba3c7672f49c65df7e89826aa6ef1ef5a8cacc401de8d784f11bddd9c4bbb77716ece45a832d72c9b2bd7d25ca44755d1aa17c4033ec3c655f65965d490a6aa8e7518b98cf7a1835e61f76b210a09df9c0e003b5a9746eaccb60ccdedf9fe948934ac21943a5ececc8b1410ceefe0474090f779bdc4cff58ab67839bb63c202ed3ff7da5cea84f9a391f207ad1946bd6837bf05eaa7ec4626a19b4060a2cb4eb0a341db5", 0xe7, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x46f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x622002, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1/file4/file5\x00', 0x1c0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x200088c1) r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$VHOST_VDPA_GET_GROUP_NUM(r10, 0x8004af81, &(0x7f0000000700)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r11, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file1/file4/file5/file0\x00', r11, &(0x7f0000000040)='./file0\x00', 0x6) r12 = syz_io_uring_setup(0x6db9, &(0x7f0000000240)={0x0, 0xd462, 0x10000, 0xfffffffc, 0x1be, 0x0, r10}, 0x0, 0x0) fcntl$setlease(r12, 0x400, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) 8m7.406579422s ago: executing program 2 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002300)=ANY=[@ANYBLOB="0100000000000000a00d"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="1503"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0200"]) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "01383234c75ee302e6b8c0961ca00e1e"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008e40)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bd2d8e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debea4ee060c6edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d178c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f00000046c0)={0x50, 0xfffffffffffffffe, r12, {0x7, 0x9, 0x800, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r14) read$FUSE(r5, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r5, &(0x7f0000002c00)={0xa0, 0xfffffffffffffffe, r15, {{0x5, 0x3, 0x6, 0x4, 0x1b8d, 0x5, {0x1, 0x101, 0x2000200005, 0x2, 0x8, 0x7fff, 0x20000000, 0xa5, 0x2, 0x8000, 0x8, r13, r14, 0x64, 0xc5}}, {0x0, 0x13}}}, 0xa0) 7m52.036348314s ago: executing program 32 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002300)=ANY=[@ANYBLOB="0100000000000000a00d"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="1503"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0200"]) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "01383234c75ee302e6b8c0961ca00e1e"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008e40)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f00000046c0)={0x50, 0xfffffffffffffffe, r12, {0x7, 0x9, 0x800, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r14) read$FUSE(r5, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r5, &(0x7f0000002c00)={0xa0, 0xfffffffffffffffe, r15, {{0x5, 0x3, 0x6, 0x4, 0x1b8d, 0x5, {0x1, 0x101, 0x2000200005, 0x2, 0x8, 0x7fff, 0x20000000, 0xa5, 0x2, 0x8000, 0x8, r13, r14, 0x64, 0xc5}}, {0x0, 0x13}}}, 0xa0) 7m39.065047749s ago: executing program 4 (id=501): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @any, 0x5}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fcntl$dupfd(r1, 0x406, r1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0xc0240, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x10000000}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000140)="c7", 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) 7m37.268386815s ago: executing program 4 (id=512): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="fad241ac16163e3c374707fd17b5771cb771dc540494d85aac894ae2059958b8d4274e60a71d1cbda77de681f15b98daedf8c8b5eaa33f1da7ae305c4536fc16f348ea54334ab9b6af"]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xce, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x8d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0xc9, 0x90, 0x0, 0x1, [@nested={0x8c, 0x44, 0x0, 0x1, [@nested={0x69, 0x127, 0x0, 0x1, [@nested={0xc, 0xf0, 0x0, 0x1, [@nested={0x4, 0x10a}, @nested={0x4, 0x28}]}, @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x49b}, @generic="79c89f90ef00f2a8d60c43421a588c2b5a1dc7b0ba2c280d0daa756e55b911c420fe6d4dca8c0730bab38a9b0115cba9c09130ba3d124347cd4e753542ea60ad3b2fc789f93f134b27c550e014d570f61a"]}, @typed={0x8, 0xa5, 0x0, 0x0, @u32=0x10}, @typed={0x4, 0x13a}, @nested={0x4, 0xc5}, @typed={0xc, 0x62, 0x0, 0x0, @u64=0x532}]}, @generic="f0d1352a224aadf38cc0be9a1bfc6ea31cfe9abdfc6e08360d8cf57b7256e18c92263487faf40caf4b040e15ceaf45c9fef3a61ad0e2cba61a"]}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x18, 0xde, 0x0, 0x1, [@typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@remote}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) 7m37.017356813s ago: executing program 4 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1ffffffffffffe1e, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7m36.401271165s ago: executing program 4 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x80ad}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x27, 0x3}]}, 0x10) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x80ad}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) socket$inet6(0xa, 0xa, 0x8000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x633b, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) 7m35.443108822s ago: executing program 4 (id=518): ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x29) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8000}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)="37c9c879efa103dbf027bd9c4f95bb9d32a175aacb1643a1a4e7a59b13cbf8a71d7b2288055aec140d55a11a9d0b994626c1ecfde8020000000000006ef62c587049ff7e8a867b4d73f51e536e989a3710ccd64bab9707ec4a4d998ccc6b9a32cc032ea7b1c1d1e33085b225900a39856bbf09c77300000000000000000000000000000000008224ee7e3f3cdf0c04c9dfa48f51366d0aec26c74f0fcbbf80cb8015ed48ece94240fbdb52a5f0a20846b2bfd9a403ac7072c4992399ece6ac04c898055918d09d800800000000", &(0x7f00000002c0)="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", 0x1001, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x800, 0x0, 0xfc, 0x0, 0x0, 0x400}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 7m34.145637237s ago: executing program 4 (id=523): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) syz_usb_disconnect(r0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)={0x10, 0x34, 0x1}, 0x10}], 0x1}, 0x0) (rerun: 64) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) (async, rerun: 32) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="9c9a", 0x2}], 0x1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0"], 0x40}}, 0x0) (rerun: 64) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) (async) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x918) (async) write$char_usb(r8, &(0x7f0000000140)="cee186f2435e30dbc4b02caf63f4453596bb18f1645c87b3156e15af264d5ab3a6d44462cbfdb0cbd7bff4eaa5d8b6d2773f14ff985562acdca27810f3fdc8f0568ab53ce6dcfc4c4bd8eb00", 0x4c) 7m33.211516771s ago: executing program 33 (id=523): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) syz_usb_disconnect(r0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)={0x10, 0x34, 0x1}, 0x10}], 0x1}, 0x0) (rerun: 64) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) (async, rerun: 32) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="9c9a", 0x2}], 0x1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0"], 0x40}}, 0x0) (rerun: 64) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) (async) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x918) (async) write$char_usb(r8, &(0x7f0000000140)="cee186f2435e30dbc4b02caf63f4453596bb18f1645c87b3156e15af264d5ab3a6d44462cbfdb0cbd7bff4eaa5d8b6d2773f14ff985562acdca27810f3fdc8f0568ab53ce6dcfc4c4bd8eb00", 0x4c) 7m9.781781581s ago: executing program 5 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffeca, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 7m8.693244339s ago: executing program 5 (id=624): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x7f, 0x10}]}) setxattr$smack_xattr_label(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000100)={'$\']('}, 0x5, 0x2) (async) recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/143, 0x8f}], 0x6, &(0x7f0000000580)=""/36, 0x24}, 0x3}, {{&(0x7f00000005c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/117, 0x75}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000980)=""/50, 0x32}, {&(0x7f00000009c0)=""/168, 0xa8}, {&(0x7f0000000a80)=""/92, 0x5c}, {&(0x7f0000000b00)=""/226, 0xe2}], 0xa, &(0x7f0000000cc0)=""/73, 0x49}, 0x31b}, {{&(0x7f0000000d40)=@ieee802154, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x140, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0}, &(0x7f0000001f80)=0xc) setxattr$security_capability(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), &(0x7f0000001fc0)=@v3={0x3000000, [{0x200, 0x6}, {0x2, 0x3ff}], r3}, 0x18, 0x2) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) (rerun: 32) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000002000)={0x5, 0x0, [{0x4, 0xe, 0x1, 0xe2d, 0x8, 0x5, 0x9}, {0x1, 0x7, 0x3, 0xa, 0x3, 0x1, 0x6}, {0xd, 0xb35, 0x2, 0x7fffffff, 0x4, 0x5, 0x1}, {0x40000000, 0x7fffffff, 0x2, 0x7ff, 0x0, 0x80000001, 0x800}, {0x80000000, 0x4, 0x0, 0x1da54000, 0x5, 0xffffff00, 0x8001}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mount$overlay(0x0, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x80080, &(0x7f00000021c0)={[{@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0'}}], [{@smackfsdef={'smackfsdef', 0x3d, '@,/!'}}]}) (async, rerun: 32) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000002200)=@overlay={0xfbfa, 0x9, 0x4, 0x400, 0x5, {0x77359400}, {0x2, 0x8, 0x0, 0x8, 0x8, 0x9, "d0bcf562"}, 0x1, 0x3, {}, 0xfffffff8, 0x0, r0}) (rerun: 32) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) (async) r6 = syz_open_procfs$userns(r2, &(0x7f00000022c0)) mount_setattr(r0, &(0x7f0000002280)='./file0\x00', 0x8000, &(0x7f0000002300)={0x70, 0xf0, 0x20000, {r6}}, 0x20) (async) bind$unix(r4, &(0x7f0000002340)=@file={0x0, './file1\x00'}, 0x6e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002400)={&(0x7f00000023c0)='netfs_read\x00', r0}, 0x18) (async) clock_gettime(0x0, &(0x7f0000002440)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000002480)=@overlay={0x9, 0x1, 0x4, 0x1, 0xff, {r7, r8/1000+60000}, {0x1, 0x8, 0x40, 0x3, 0xc, 0x6, "5d64cf50"}, 0x4, 0x3, {}, 0x4, 0x0, r0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x24, r11, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r12}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc884}, 0x24048040) (async, rerun: 64) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000002680)) (rerun: 64) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000003040)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003000)={&(0x7f0000002700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x51}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}]}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1fc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_EXPR={0x10c, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x100, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xdc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "4d1710f10ce1ffbac5b40190439bf4b09468c79fc1fb1ae0f44d81795c7be7d8350f9cf52909a6afcb462202469125534fe45af109be13175233c8a81902e9dc508789adfbef4ec9f2e4bd463b4a256225853a17481623e78adaa9ee4b47f7e085ce066b3fef65effbcf1cac353a742a8291fc38156e4344890713c472d78f5b2c6fbca28de1425201460b4076c3e5964cbfd7f6a00ff79db9dbcf86c56df23ba1d541b42c53823f136511ad61c2f76b5ed80ddebac436a1b788"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_SET_USERDATA={0xd4, 0xd, 0x1, 0x0, "59f6e988f22123d68c636cbaa43e22a3a7223df341e5ec61700e41a4691da5b6f85cc445f61a1cbe953fe8c45713db1dec15d6806f040345becfae165567c6be4ac9e53e1d945d04771062daa7f96fc546247231493e1c62e86157ac06dd0b029c0827f170e4608459f964ffa1c75f425cfe1a080ba4b46afa617c69cffc7ab5466cdc64962a783f7c8c5f115a72814f76fc51cc7900978fc09855b7bed9a73562c436415ca58db3d3990cc037d616c592837c2fdc418a3f0eac0d48ae2e73f207d4efffa9feed0dc387c2868f439dd7"}]}, @NFT_MSG_DELFLOWTABLE={0x4fc, 0x18, 0xa, 0x704, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x168, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1b8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x114, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0xc0, 0xc, "02e1c0d49723c026c2ba9f497d68aa934faff28d87c961b7ff52ad8e97b3bb45cc0a8a6f8fcc638f8450e8a91864033b28a40d65b03f73aba85e055d4c1564bceb0fe12fff0e363a516476f12ca599956aaf36eb007cd23a5d471f8675fbebac46b9cfbc1bc3f8b63c88ea8b01754547911cbe9c6c2a69372d20176c15c1e411b8172968ebafb0fb0beec4c849b80f7b49b39a0ab9f1e185b5cb9afe05344e193d05d64cf1c0821c481e674e04c3456fd06359c0a1f08029cb74bb50"}, @NFTA_CHAIN_USERDATA={0x17, 0xc, "b4ee9b39bf9b9ef97c5883aa12083d593b01b5"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x900}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) (async) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000030c0), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000003680)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003640)={&(0x7f0000003100)={0x520, r14, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x90}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @mcast1, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8001, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @remote, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10d6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x600000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1030}]}, @TIPC_NLA_BEARER={0x150, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @loopback, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x3, 0x3, @private2, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffbff, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @remote, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8f2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc0, 0x3, "81cffbaaaf55f12f91cdb81cc83f6f93be29fb3bf9bbc14a18d20fbc5d8258c1f683018a13fb55f1cc4158bbbead576b8733bb614603d56a51e8f7eb6abfaf11bd1d3dce20f6b9cc813d112aea0c629fef507b5e2f4043cccd4bfea36e4bcefafafdeb84076c53a4ee6c916b7839849d1b2f68479217cf1f4c9a01f94ec983d0fa6db7335dcc6f7578e077b46e0d5be58588d0742e48df9fcf13e1d83a36e97959d0c3dcfdbf2ec747dfecefd095030f0def5853783900abec758bce"}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "b42e43d74166238345e2e51870116b82fa6621ed5b7f089e7a"}, @TIPC_NLA_NODE_ID={0x11, 0x3, "916db64b3f5f354611f7e2b9f3"}, @TIPC_NLA_NODE_ID={0x53, 0x3, "72c445a558a8a0038fece2af49af74e28c914036657e02545146d892d55965d0385b53814cad756d17e8ac83aeca2dd72599b7bfd58e2ca78be80cf84726ab4bc727fcb8f2896e54df13b0f71f9728"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "434272e1db657ebb2b9ae2a2cbd01eb91de2aadd0d333c95"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1f7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xcc38}, @TIPC_NLA_NODE_ID={0x33, 0x3, "fd7433fda498cdceb791ad9b88fa89cc6ab5da7e24d94a3c33dbeb3820464964fa0d8dbac06c3bace23e4098089cd5"}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x48044}, 0x10) read$alg(r9, &(0x7f00000036c0)=""/252, 0xfc) (async) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000037c0)) 7m7.821653691s ago: executing program 5 (id=627): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0xeec, &(0x7f00000000c0)={0x0, 0x8358, 0x10100, 0x200}, &(0x7f00000001c0), &(0x7f0000000240)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f2500c029000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) unshare(0x2040400) r1 = eventfd(0x3) sync_file_range(r1, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x24000059) socket$netlink(0x10, 0x3, 0x8000000004) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b52, &(0x7f0000000040)={0xfa, &(0x7f0000000000)=[{}]}) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f046}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 7m5.959548337s ago: executing program 5 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 7m5.257304374s ago: executing program 5 (id=645): mmap(&(0x7f0000d6d000/0x3000)=nil, 0x3000, 0x3000014, 0x10, 0xffffffffffffffff, 0x95a78000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61980}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x0, 0x35, 0x0, 0x9, 0x7}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x7, 0xffd, &(0x7f0000002cc0)=""/4093, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x40, 0x9}, 0x10}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='ext4_free_blocks\x00', r3, 0x0, 0xd}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c441, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000004c0)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r4, &(0x7f0000000880)=[{&(0x7f00000008c0)='z', 0x1}], 0x1) r5 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000900)=""/236, 0xec}], 0x1, 0xfffffff8, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd) execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) syz_init_net_socket$x25(0x9, 0x5, 0x0) 7m3.801728082s ago: executing program 5 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000008}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 6m48.798645633s ago: executing program 34 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000008}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 1m46.601738123s ago: executing program 7 (id=1735): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="35f31c7ad537"}, 0x10) 1m46.527524738s ago: executing program 7 (id=1738): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000010c0)={0x48, r3, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "04720c945bd30bf141315e54b7"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x48}}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00E']) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010d19d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308000000000000002408011c6600112d9cd2ce0c240208ffffffffffffff7f0924060506020100000924030003030005490c240206f3323511af6a77a0b47476b1a7173b4926ad1e720122663eae0d317a31a5c569d7e3ec7087367d185d3b463145ea1f145cbf39352142459ce99a64195bd7d90db490", @ANYRES8=r1, @ANYRES16=r0], 0x0) 1m43.016098585s ago: executing program 7 (id=1750): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x5c}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) 1m42.140687022s ago: executing program 7 (id=1753): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0xf, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014008000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240)=@sha1={0x1, "076886f7ea42da64b49397ed03f512f72d917b4a"}, 0x15, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}]}) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000200)={0x10003, 0x1c0, 0xc0, &(0x7f0000000680)=[0xf, 0x1, 0xe6, 0x80000001, 0x3, 0xfff, 0x3, 0x10, 0x2, 0x3, 0x7f, 0x4, 0xf7, 0x7, 0x42, 0x0, 0xe, 0x9, 0x0, 0x7, 0x59, 0x2, 0x5, 0x5, 0x8, 0x1, 0xac, 0x9, 0xb, 0x1, 0x9, 0x8, 0xffffffffffff02d7, 0x81, 0x1, 0x20000, 0x8000000000000001, 0x7, 0x8f, 0x6, 0xffff, 0x9f63, 0x800, 0xa, 0xf, 0x4, 0x4b7e, 0x81, 0xd, 0xffff, 0x7d5e, 0x10000, 0x2, 0x4, 0x200, 0xff, 0xffffffffffffffff, 0x7, 0xfe32, 0x4, 0x0, 0x9c, 0x15200000, 0x5, 0x2, 0x0, 0x3, 0x4, 0x7, 0x6, 0x9, 0xd0, 0x5, 0x9, 0x8, 0x8, 0x9, 0x4, 0xf557, 0x80000000, 0xd8, 0x800, 0xfff, 0x2, 0x7, 0x8, 0x7, 0x8, 0xec5b, 0x0, 0x80000001, 0x9, 0x6, 0x7fffffff, 0x9, 0x2, 0x9, 0x7, 0x481, 0x9, 0x9, 0x2, 0x81, 0xec69, 0x2, 0x4, 0x9, 0x4a15, 0x1, 0xfffffffffffffffa, 0x6, 0x9, 0x8, 0x8, 0xcf, 0x401, 0xfffffffffffffffe, 0xcf97, 0x6, 0x7fffffff, 0x4f, 0x43, 0x10000, 0x9, 0xfffffffffffff0fd, 0x6, 0x7, 0x8000000000000000]}) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000440)="66d4492a0a1b30e699005a6d88a8", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 1m41.875751908s ago: executing program 7 (id=1755): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x24000840) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x3, 0x99, 0x15, 0x5, 0xfc, 0x5, 0xfb, 0x3, 0x5d, 0x8, 0x81, 0x84, 0x0, 0x5}, 0xe) sendto$inet6(r2, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r2, 0x1) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/195, 0xc3}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m41.408857158s ago: executing program 7 (id=1759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) r1 = inotify_init1(0x0) read(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x8001, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r3, 0x402, 0x5) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8) creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r5 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r6, @ANYBLOB="fe000400000000001c0012000c00010062"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffdee) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)={0x0, @remote, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x3, 0x2b}, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sync() 1m41.151890142s ago: executing program 35 (id=1759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) r1 = inotify_init1(0x0) read(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x8001, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r3, 0x402, 0x5) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8) creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r5 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r6, @ANYBLOB="fe000400000000001c0012000c00010062"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffdee) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)={0x0, @remote, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x3, 0x2b}, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sync() 16.757868765s ago: executing program 6 (id=2040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380), 0x34000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300000a000000000700000000000003000600000000000200000100000000000000000000000002000100000000040000000d0000000003000000ac141400"/80], 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00a5020000000000240012804b00010062726964676500001400028005002b00020000000800040000000080"], 0x44}}, 0x0) 12.724952627s ago: executing program 6 (id=2058): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x8a, 0x31, 0x7c, 0x40, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x8e, 0xd1}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000441000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x2, 0xc0, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "7253b453"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xdb7, 0x1400, 0x6, 0x4d}, {0x6, 0x24, 0x1a, 0x81, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x14, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x2, 0x6}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x40, 0xc3, 0xb2, 0x64, 0x10, 0x7}, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x6, 0x7, 0x9, 0x29}]}, 0x1, [{0xfa, &(0x7f0000000480)=@string={0xfa, 0x3, "ed5c71a9a4b8a53732c53eb29dbd87b51deb0d2dc911016079eb08c1933ad6be968c7f14f51a758e8a79dc56737b6306ec3c48a97d84017810610e02df78b8d3b8d867d6bc13a881e0d8bd319873fa77f2d5c6497188b920f316d49fc0b60a9f8c66c30b3ef7cfd53e6abb99b1ead44495ec40f52934f503220f1c62881763adee1d0aa5617957954292d21f1172f5fe2c6edb1762665418dc73313225282ca0a00494b07f9d29225771634a39b5ad432351874723363556c5e65cccc37839f7e3ef14d71e82fd4fb667e050dc5a6a2791f4606e92d40d06e60d65d535ef957ddfb1c5a94fbae6859b14d925d0f0de71b28f65326e784408"}}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309acb9"]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f", 0xd}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) gettid() (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) r3 = memfd_create(&(0x7f0000000800)='uid<', 0x4) fstatfs(r3, &(0x7f00000003c0)=""/146) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240), 0x111}}, 0x20) syz_usb_connect$uac1(0x1, 0xd4, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x2, 0x7, 0x7, 0x10, 0x36}, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="052f9993010b10e4ff03feffffffcf4bced7280002"], 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43f}}]}) 9.488521249s ago: executing program 8 (id=2071): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r4 = fanotify_init(0x1a, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r4, 0x541, 0x1023, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) preadv2(r6, &(0x7f0000000380)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1, 0x3, 0x9383, 0xf) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x700) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x700, 0x7, 0x8, 0x36c, {{0x39, 0x4, 0x1, 0x16, 0xe4, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast, {[@ssrr={0x89, 0x2b, 0x7c, [@multicast1, @empty, @broadcast, @remote, @rand_addr=0x64010101, @remote, @local, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x43}]}, @noop, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x2, [0xd, 0x73, 0x8, 0x7f, 0x101]}, @cipso={0x86, 0x23, 0x1, [{0x2, 0x10, "8da76c8d8df7e519b25dfab6036d"}, {0x5, 0xd, "dee24e0abf46eff68b338b"}]}, @generic={0x86, 0xf, "ec436e968e33244dc10915c536"}, @timestamp_addr={0x44, 0x14, 0xb8, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x49062b60}, {@broadcast, 0x8}]}, @lsrr={0x83, 0x2b, 0xb2, [@empty, @loopback, @multicast1, @multicast2, @empty, @multicast2, @local, @rand_addr=0x64010100, @remote, @multicast1]}, @lsrr={0x83, 0x17, 0x5b, [@local, @private=0x5, @multicast1, @remote, @loopback]}, @timestamp={0x44, 0x4, 0x16, 0x0, 0xc}]}}}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000005c0)={@remote, @dev={0xac, 0x14, 0x14, 0x25}, r7}, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0xfffffffe}, 0x26}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000640)='wg1\x00', 0x4) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0x1, 0x2}, &(0x7f0000000480)=[{}, {}]) syz_usb_connect(0x2, 0x36f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xfb, 0x4, 0x0, 0x20, 0x80}, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="010500400089034ab8f2e98ed2c335a796ddf2b282a9c371a3cd6ee21f14f8f054b560fae4ad0ead4e2299aa439749b0026dfbdd73b654d394b21ae22f703247d94c2a0c1b30c873729e62265cf82afa6d355686f0ee7c54b7f3fff064990ea1ed49408cf4f8a2c4f3c52a5dc7ca4e03"], 0x1, [{0x55, &(0x7f0000000740)=ANY=[@ANYBLOB="55030b3315b0c43405c3c152484e6a4795e701c6c56328478836077778953ab0f5849f759bdda57e620518d16513cdd2265742cf470a175a456e18ab8262ae99f8b0c1e3d3b8355dd68d034532539545d928c6bf24"]}]}) 7.549868121s ago: executing program 0 (id=2083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001200)="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", 0x54f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000004c0)="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", 0x4c2}, {&(0x7f0000000340)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43d0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80928ff807a27624831c36caa3250460ce26adc9f1cc83e58d21abd5fafce3212e7d76b915a0b55b6d2e46ecff5448", 0x7f}], 0x2}}], 0x2, 0x0) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x820, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.337650409s ago: executing program 0 (id=2086): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000400)=0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x3, 0x10, r1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2d09000000000000000002000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) 7.337215417s ago: executing program 0 (id=2087): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xe, &(0x7f00000001c0)={0xffffffffffff9bb6, 0x1}) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) poll(0x0, 0xffffffffffffffac, 0x1008200) (async) poll(0x0, 0xffffffffffffffac, 0x1008200) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='btrfs_space_reservation\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x34) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000004e9ffff030000006e000200000000002803f74f50e21a55abd9c8e1ce9a1a66c4562b965cc7109eaeb76e711de33faa51f11ad79ab391362b879731c6", @ANYRES32, @ANYBLOB="00000000ffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf25140000000c0006000300000000000000080001000100000008001c00", @ANYRES32=r0, @ANYBLOB="0c0006000200000000000000b2570f26719a74c888089bc69973578a70efcd9cbc799f3a760abbcdaf63776187a6bed6fb2f72ecceaf1ab4deb671ac66e50300373ca9d5704261b2ea8507003712e10232fe19481fd68ef3f4acfab7b5e5b4a5d69cbc405708e9f30174fc7d2511bbe7118f2f7297d559df2d38e8d4edb71f285e8bf76fb34ff65a7a51994441242abe3d11ea2a476bc46467f555dc59bd7e02c0e567d924045baec254473e8d2f1808279e8fd18e2c229130"], 0x3c}}, 0x0) prlimit64(r0, 0xc, &(0x7f00000002c0)={0xc764, 0x200}, &(0x7f0000000300)) (async) prlimit64(r0, 0xc, &(0x7f00000002c0)={0xc764, 0x200}, &(0x7f0000000300)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x1e0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [], [], 'team_slave_1\x00', 'macsec0\x00'}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a2e2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@srh={{0x30}, {0x3c, 0xb7, 0x4, 0x0, 0x8, 0x400, 0x20}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x4}, {0x1, 0x5, 0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x1e0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [], [], 'team_slave_1\x00', 'macsec0\x00'}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a2e2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@srh={{0x30}, {0x3c, 0xb7, 0x4, 0x0, 0x8, 0x400, 0x20}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x4}, {0x1, 0x5, 0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) 6.871673303s ago: executing program 6 (id=2089): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) epoll_create(0x1) syz_io_uring_setup(0x58e4, &(0x7f0000000040)={0x0, 0x313b, 0x0, 0x0, 0xaf, 0x0, r0}, 0x0, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000010180)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001c00100025bd7000fbdbdf253c0a00100000000000000000002c00130020010000000000000000000000000000e0000002000000000000000000000000000000000a00000000000020919a44f5cdaa31fe246e2b8f5e36aaea7203d87a2bbd5a6cc990041f587de508c27374575205cc14151e4daa1eca207e6842cb4460091f996f1fc3ef3baae4c5df7ee109"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c", @ANYRES16=r5, @ANYRESHEX=r7, @ANYRESHEX=r5], 0x23c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x80000, 0x1000) bind$alg(r10, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) 4.781611199s ago: executing program 8 (id=2090): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x14) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000003dc0)={0x5c, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x0, 0x10000000, 0x32}, 0x2c) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffff6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000200)=0xc) sendmmsg$inet(r2, 0x0, 0x0, 0x44000004) bind(r2, &(0x7f0000000280)=@un=@file={0x1, './file1\x00'}, 0x80) write$binfmt_misc(0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffffffffef0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000003c0)='./bus\x00', 0x0) 4.746711136s ago: executing program 6 (id=2091): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xf2ed5fb803d576c6, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async, rerun: 64) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r9]) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='br_fdb_add\x00', r1, 0x0, 0x3}, 0x18) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="b1", @ANYRES16=r0], 0x0) 4.17707816s ago: executing program 0 (id=2096): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2a000, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000d040000000000000000346fcc3c63b9ed8f925f7c68000000007626c97fcb3eafb399fe95da6fa3fe5209f83ed2a7c8fa0ddac6ab36d458ca6919c250edc31989726414ad46e62f533bdfab61ad28bcb000b3bc763694e5fa30394acf887b816b512ec57e0e8c513a6002e3683e119b8ca84e3f0ecf0a14dba3ccc024a84c763e07643426eec0af0099bf465a8c23db18fdd5e9e93b3c9616852dbb3e1f3bf5f4f5331786a09582d279ba136ee18f2eb1d58fdce7eef55ec0373c18", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080009000000000008000100020000000800030000000000140035006d6163766c616e300000000000000000"], 0x60}}, 0x0) socket$inet6(0xa, 0x6, 0x10000) pread64(r4, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000080)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x6, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.533905799s ago: executing program 3 (id=2097): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r4, 0x103, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c042}, 0x0) 3.533496117s ago: executing program 1 (id=2098): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0x0, 0xd6}}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.525498162s ago: executing program 0 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0xffffffff, 0x0, {0xa}, [@NDA_VLAN={0x6, 0x5, 0x3}, @NDA_DST_IPV6={0x14, 0x1, @private1}]}, 0x38}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x87fd, 0x2, 0x1, 0x200002e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0x3, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081", 0x7}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x77, &(0x7f0000000000), 0x62) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r9}}) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x0, @fd_index=0x3, 0x100000001, 0x0, 0x0, 0xc, 0x1, {0x1, r4}}) r10 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$smackfs_labels_list(r10, &(0x7f0000000300)={[{'/dev/sequencer2\x00'}, {'\x00'}, {'\x00'}, {'\x00'}, {'\\)'}]}, 0x1b) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x7, &(0x7f0000000040)=[{0x62de, 0x6, 0x4}, {0xf77, 0x35, 0x7, 0x5780000}, {0x3, 0x4, 0x8, 0x44c}, {0x5, 0x1, 0x2, 0x9bde}, {0x8e23, 0x7, 0xa, 0x4}, {0x4c9f, 0x71, 0x1, 0x8001}, {0xe, 0x70, 0x8, 0x80000001}]}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0xffffffff, 0x0, {0xa}, [@NDA_VLAN={0x6, 0x5, 0x3}, @NDA_DST_IPV6={0x14, 0x1, @private1}]}, 0x38}}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) (async) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x87fd, 0x2, 0x1, 0x200002e9}, &(0x7f0000000380), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x9e, &(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0x3, 0x0, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081", 0x7}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) setsockopt$sock_attach_bpf(r8, 0x84, 0x77, &(0x7f0000000000), 0x62) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r9}}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x0, @fd_index=0x3, 0x100000001, 0x0, 0x0, 0xc, 0x1, {0x1, r4}}) (async) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) write$smackfs_labels_list(r10, &(0x7f0000000300)={[{'/dev/sequencer2\x00'}, {'\x00'}, {'\x00'}, {'\x00'}, {'\\)'}]}, 0x1b) (async) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x7, &(0x7f0000000040)=[{0x62de, 0x6, 0x4}, {0xf77, 0x35, 0x7, 0x5780000}, {0x3, 0x4, 0x8, 0x44c}, {0x5, 0x1, 0x2, 0x9bde}, {0x8e23, 0x7, 0xa, 0x4}, {0x4c9f, 0x71, 0x1, 0x8001}, {0xe, 0x70, 0x8, 0x80000001}]}) (async) 3.36761181s ago: executing program 1 (id=2100): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001d0001002cbd6000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="4000180614000100fc020000000000000000000000000001a66bca9577f21cb33247d95186999f14adab55479116782c7a50440ec0960e27635c895d6e33f6504905779347bd4442c6c1fc1b02be871f281e6274766a2c46dab1f76a1b0242f74e693c205910817eb4f91ef6bafa4c39e1435d16ec0196fe8d44"], 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb5", 0x11, 0x800, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xd6, 0x80, 0x4, '\x00', 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xd6, 0x80, 0x4, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) (async) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd4101, 0x100) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd4101, 0x100) 3.253719474s ago: executing program 3 (id=2101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)=""/2, &(0x7f0000000240)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="3f0443aee546504c59e34086d986253527282fcd149ebff4f000632f942c1b44a336c2043a676ed5d4178cc617f18efde8ce91", 0x33}, {&(0x7f00000001c0)="b09673144a61635c6fafacc206e76e35a9048a905bac4f1b26b251e1954e3d88b36e66d5de760e9b0212ed7383f14139194f8188da863e54e083bab7740bd1026c028d8034776176f53776807a3960a2457173edf5b79d081358e4633137fb", 0x5f}, {&(0x7f0000000240)="59a8dbaf01c939a0e0c64aab7792358755580625de9011b0083ae3fb4d72db756345375b1ea9be05d4fdcfa95d56279876acd45e1c85037a4f0c8c3f8946808da8d2e501f9ff", 0x46}, {&(0x7f0000000d40)="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", 0x729}], 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000400)={0x0, 0x2, 0x0, [0x0, 0xf4, 0x8, 0xfffffffffffffffa, 0x9], [0x9, 0x5, 0x7e2e, 0x1ff, 0x8000, 0x6fb, 0x4, 0x6, 0x1c00000000000, 0xa7d, 0x1, 0x1, 0x5, 0x7, 0xfffffffffffffff7, 0x6, 0x5, 0x0, 0x8, 0x3, 0xffffffff, 0x100000001, 0x7, 0x80000001, 0x2, 0x6, 0x3, 0x6, 0x0, 0x7fff, 0x5, 0x100000001, 0x7, 0x1c, 0x2, 0x8, 0x3a28, 0xffffffffffffffe1, 0x2, 0x7, 0x1, 0x7, 0x7, 0x1, 0x964, 0x3dc1, 0x5, 0x900, 0xfffffffffffffe6f, 0x1, 0x7, 0x6, 0xc03a, 0x0, 0x9, 0x8, 0x6, 0x5, 0x3, 0x5, 0x3, 0x100000000, 0x4f04, 0xffffffffffff8cc7, 0x0, 0x80000004, 0x2, 0xffffffffffffff09, 0x1, 0x100000, 0x800, 0x2, 0x4, 0x10000, 0x5, 0x7, 0x1, 0x1, 0x80000001, 0x3, 0xf, 0x2, 0xffffffffffffffff, 0x617f, 0x7fff, 0x0, 0x9, 0x6a, 0x14, 0x1fdbc000000, 0x3, 0x6, 0x8000000000000001, 0x1ff, 0x9, 0x6, 0x5, 0x4, 0x9, 0xffffffff94a83642, 0x6, 0x6, 0x8000, 0x1, 0x7, 0x4fb, 0x1, 0x100000001, 0x74c707f3, 0x10000, 0xfaaa, 0xda14, 0xffffffffffffe84f, 0x164, 0xb2b, 0x0, 0x0, 0x2, 0x8, 0x0, 0x7]}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000080)={{r2}, {@val={r3}, @max}}) 3.152212304s ago: executing program 1 (id=2102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000000)={0x79}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000001c0)=0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.10678835s ago: executing program 0 (id=2103): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x3459, 0x2040) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) signalfd4(r4, &(0x7f0000000000)={[0x10001]}, 0x8, 0x0) socket$inet6(0xa, 0x80802, 0x0) 2.577446513s ago: executing program 3 (id=2104): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x5}) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/10, 0xa}], 0x5, 0x2fd, 0x3ff) getpid() ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001380)={{r2}, 0x0, 0x0, @unused=[0x2c1, 0x401, 0x9, 0x80], @devid}) syz_emit_ethernet(0x6e6, &(0x7f0000002380)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x8}, {0x1, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0xffffd}], @ipv6=@icmpv6={0xa, 0x6, "77da53", 0x69c, 0x3a, 0x1, @private0, @rand_addr=' \x01\x00', {[@srh={0x11, 0x4, 0x4, 0x2, 0x3, 0x0, 0x6, [@mcast1, @remote]}, @hopopts={0x2b, 0x22, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0xb}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0xeb}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0xc, 0xcc, "6492f91e6373285b087724a9f0d0757f3ac90bfaa92fcbd0c6e7d61dcda7234fbf04de028bacaf21670715ef85e7abff529170562e3472c44c00cdc7335ddb96dc54a9c839a90fc62f6ef52bd598dae0a1592afad6f97ea5e578c728081ff5092e54791a4cc22b238150033729adaa9a2e8a75503d53f88d9a6359f668698b924e6cda738d514e0462ed68b5e6108c948647d78fd9a9c63c136647565b60c032524359d2f99ed06e031a0a671d763fd89a947503d9c596d92ebe27221c895c41835824f1b1bb8b19a4b5e5a7"}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xf0}]}, @srh={0x84, 0x4, 0x4, 0x2, 0x3, 0x38, 0x4, [@mcast1, @empty]}, @srh={0x0, 0xc, 0x4, 0x6, 0xb, 0x30, 0x6, [@private2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x3c, 0x1c, '\x00', [@generic={0x80, 0xc4, "df3b1a70799388b375b6b24fc8fb75660016d8e38e25f1473c5eead72d5e628a3115bcb3fc76519eb5d091a27264232bb3639ef774b097ab9ca77b178d55fbceeb027577c8bef9f5b1a1489ee57af752f4316ca2c393d1dba31bb608024968a252c51a5f824d208d4bde744863d45d4116dd69b632a4c832a1b6bc6834f2969b8145fff7277623540a92d8fd3628bcd73e7dd754f3c1d225576c48e534ed5c411d9f7d2873e28d4bef9929a66d488c5c74f80dd51cb35c0cfec6192b728edb9a8c150d0e"}, @jumbo={0xc2, 0x4, 0x7a7}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x1}]}, @hopopts={0x5e, 0x2e, '\x00', [@generic={0x9, 0x31, "f443a4b7fd9111044e603d7db873b677db2750c95a8a770d02b806f1788c1a4ee13dbbaf50fabff83a5f75e37c733cb77e"}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x30, {0x2, 0xa, 0xe2, 0x1ff, [0x9, 0xccb, 0x9, 0x6, 0x0]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x2b, 0xc0, "1cdee09307c69c070c3972164decf4a5d5d28a7485d879d8a25a3dc7cca92cd591a6311981a618aad0e9d8a62815cb46cfb650cc1b46a53e458c841c9771d01badc6bb70f5c66f62ef9b0bd381f639129e76bb52e1c9c8e8cd8f6516b8b67c66f90d651798186bce111a462de6ba6475d62cfafc67652b0be637977f22d17277af63a4fd10f7248d2cfffdb0cc4ee58123702a4138152253e395105d7eb386cb8a4741a98187f434cbc9517ec315a35ffcf6a313bec6fb87a5c21fe2e17e75ee"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @generic={0x5, 0x3, "f943cc"}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x8, 0x6, [{0x2, 0x2, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1], [0x9998, 0x9]}, {0x7, 0x5, 0x8, @mcast2, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @dev={0xfe, 0x80, '\x00', 0x41}, @private1, @dev={0xfe, 0x80, '\x00', 0x30}], [0x7110a0a8, 0x5, 0x1, 0x1, 0xe]}, {0x6, 0x1, 0x3, @remote, [@private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}], [0x0]}, {0x5, 0x6, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@dev={0xfe, 0x80, '\x00', 0x3b}, @remote], [0x7ff, 0xfffffffa, 0x800, 0x3, 0x2, 0x5]}, {0xb7, 0x4, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, [@local, @mcast2, @mcast1], [0x0, 0x8, 0xdd, 0x9]}, {0x4, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}], [0x6, 0x8, 0x8]}]}}}}}}}, 0x0) r3 = syz_io_uring_setup(0x56a5, &(0x7f0000002a80)={0x0, 0x5eae, 0x2000, 0x3, 0x234}, &(0x7f0000002b00), &(0x7f0000002b40)) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000002b80)=""/143) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000002c40)) r4 = io_uring_setup(0x675, &(0x7f0000002c80)={0x0, 0x6855, 0x2, 0x0, 0xca}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r2) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000002d40)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000002ec0)={0x2, [0x40, 0xaf]}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000002f00)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000002f40)={r6}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4000032, r3, 0x1a04e000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000002f80)={0x0}, &(0x7f0000002fc0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000003000)={r8, 0xd8, "7b2a6b37d248304a8532f33592030398afc675a3c7ddc139edfd7fd4cbd845ed8ca363fa536b3081e1769ea318e24fc3f98d4d50580e346fe30bb3dafb20e424261a0e60cb529b3a681ccb93adfa108a6392a74585715b84c75e55d01383309c3a70f0374132867226938edd70e2445b11ac87dafc5cfa049914afde392e9fefc310b2ea249794494552cc88aa450da29fe41c2a959e74ca83fb6f3cc2f48906cd7865210c938445fd1b42e9b426bc7e4fd964016b9a2eecaec11dfd80e3da4b47bb40c397268668069eee8fb33d37a634eb287da2ed44ea"}, &(0x7f0000003100)=0xe0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000003140)) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x6171, r2, 0xda9) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000003180)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) 2.441134432s ago: executing program 8 (id=2105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0xfffffffffffffe18}, 0x40010000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf2501000000000000000841000000140018000000dc7564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) unshare(0x22020600) (async) getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$inet6(0xa, 0x80002, 0x88) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) (async) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) (async) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) accept4(r5, 0x0, 0x0, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0xfffffffffffffe18}, 0x40010000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf2501000000000000000841000000140018000000dc7564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async) 2.391803054s ago: executing program 3 (id=2106): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x81}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905dd"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rpc\x00') lseek(r2, 0x8, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 32) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r6 = openat$cgroup_int(r5, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x38) 2.380784857s ago: executing program 1 (id=2107): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000a00)=""/158, 0x9e}, {&(0x7f0000000ac0)=""/141, 0x8d}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000004440)=""/56, 0x38}, {&(0x7f0000004480)=""/78, 0x4e}], 0x8}, 0x3ff}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x25, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000040)="f8ad48cc02cb29dcc8007f5b080038d69f8c018a", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.02178345s ago: executing program 8 (id=2108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) (rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) (async, rerun: 64) r4 = syz_open_pts(r3, 0x0) (rerun: 64) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xfff7, 0x0, 0x0, 0x7, 0xa, "b8cd9e6b41b50aee"}) (async, rerun: 32) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x11) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25003900000000000000000000000000000000bb00000000000000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 64) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async, rerun: 64) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) (async, rerun: 32) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) (rerun: 32) 1.958073469s ago: executing program 8 (id=2109): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P['], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r1 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341d79c4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000440)="100d9aa8b09181ecc5f3f50f1fa02bbc8307616eb9f33467b5656bc816c8dba8ea5ecaecbd", 0x25}, {&(0x7f0000000500)="5f9f22b0a379e994a3793b320b0b3499d6f23f108798319f385712d13091845349871f0f83b4242a00a4732fd0061a251ae2e35fceea62dce17590c972970cb6ed834f95616aae8e5a0ed9b5ccf1172b6691e5fecd610337278c1470897991370e04e8fa43f2f9a0645e2943af9178745dde3a746de33dc8eacf4b549c77fb061a6d0a238a088818d4715d2ca4ccc3b2124ce78cd2c7939ba1c243bc79ed9f17cf8bcd08fe40dd1e845a8bae40c5757db564956a304fd4aba732a99c0dc6fa4993d0b3a41d999ed465a62b3f6b4597dc773ed8715a", 0xd5}], 0x3}, 0x2c000811) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000440)="100d9aa8b09181ecc5f3f50f1fa02bbc8307616eb9f33467b5656bc816c8dba8ea5ecaecbd", 0x25}, {&(0x7f0000000500)="5f9f22b0a379e994a3793b320b0b3499d6f23f108798319f385712d13091845349871f0f83b4242a00a4732fd0061a251ae2e35fceea62dce17590c972970cb6ed834f95616aae8e5a0ed9b5ccf1172b6691e5fecd610337278c1470897991370e04e8fa43f2f9a0645e2943af9178745dde3a746de33dc8eacf4b549c77fb061a6d0a238a088818d4715d2ca4ccc3b2124ce78cd2c7939ba1c243bc79ed9f17cf8bcd08fe40dd1e845a8bae40c5757db564956a304fd4aba732a99c0dc6fa4993d0b3a41d999ed465a62b3f6b4597dc773ed8715a", 0xd5}], 0x3}, 0x2c000811) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={0x0, 0x0, 0x38}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={0x0, 0x0, 0x38}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, 0x0, 0x10) shutdown(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x80000, &(0x7f0000000340)="0bd2868363eb1d59a47e4ee04078e0290f707c1d930eb4c0db42b07bb2a51d0fed50b3403ae7259f895c2b3dfc605e94b2e4ac132b566d986607ec881570b903e5a0398e03755d86e6e9cc82494ab09d9744190adbb861c8aca319accdcf0f5164fd07dbc9986fcfb3", 0xffffffffffffff5a, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) 1.369888666s ago: executing program 6 (id=2110): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000937fed), &(0x7f0000000000)=0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8911, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0xffffffffffffff00, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/xfrm_stat\x00') io_submit(r3, 0x1, &(0x7f0000000dc0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000001c0)="00000000fff100", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000020000000000000102001d04404000010800000001000084090000000400000001000000000000010061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) fsmount(0xffffffffffffffff, 0x0, 0x0) ftruncate(r2, 0x10001) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000937fed), &(0x7f0000000000)=0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_netdev_private(r1, 0x8911, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0xffffffffffffff00, 0x2) (async) io_setup(0x8, &(0x7f0000004200)) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/xfrm_stat\x00') (async) io_submit(r3, 0x1, &(0x7f0000000dc0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000001c0)="00000000fff100", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000020000000000000102001d04404000010800000001000084090000000400000001000000000000010061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) ftruncate(r2, 0x10001) (async) 1.109881314s ago: executing program 1 (id=2111): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x9cf) recvfrom$inet(r1, &(0x7f0000000040)=""/28, 0x1c, 0x10100, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 1.098432584s ago: executing program 6 (id=2112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x9, @mcast1, 0x10}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x1000, 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/254], 0x15f) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x25, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 981.708077ms ago: executing program 3 (id=2113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0xffffffffffffff84) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x78) close(r4) 881.421808ms ago: executing program 8 (id=2114): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000590600000000000000000000400000000000000000004627a919433e05fc329e0e49ebf087d8de50f088edeb32b301d3b6ff4eee721e15c66190a3e565728ec044455e6c7c375aba594ba283609c72e8d578c3950283cdc1a7903bdb2d"], 0x50) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = creat(&(0x7f0000000240)='./file2\x00', 0x181) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x6b) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xa30000, 0x1, 0x0, r5, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x1, 0x1, 0x49, 0x1, 0x1}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x9}, &(0x7f0000000280)=0x8) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x865}, 0x2404c880) 844.018982ms ago: executing program 1 (id=2115): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x40891}, 0x24000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) mount$9p_tcp(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000640)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_client}, {@version_u}, {@version_L}, {@version_u}], [{@audit}, {@uid_eq={'uid', 0x3d, r4}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0xd, r9, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000400)={&(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f00000003c0)={&(0x7f0000000340)="ea0c09f60b2f307a70af8e19e78296fb21adea620162f29f2a2d1d88a889b8709ff174abd1c5492e07b74591156b467c2e693c214d5988ac906df5b9f06e373763d6896951f5e4fadc233e41dbb510a3e6d00a876fa0e0b90b505c40c01bdd6421ed1aad020aef5a4473f3f5500ded", 0x6f}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) getsockopt$netlink(r8, 0x10e, 0x3, &(0x7f0000000200)=""/146, &(0x7f0000000000)=0x92) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c000904020000010300000904020101010200000724"], 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) 0s ago: executing program 3 (id=2116): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = dup3(r3, r0, 0x80000) ioctl$NBD_DO_IT(r5, 0xab03) r6 = gettid() tkill(r6, 0x7) sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x3) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r3, 0x80, 0x290, 0x9}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) kernel console output (not intermixed with test programs): 0x81 has an invalid bInterval 0, changing to 7 [ 474.998120][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.033648][ T5168] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.090745][ T6016] zl10353_read_register: readreg error (reg=127, ret==0) [ 475.130025][ T5168] usb 8-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 475.244884][ T5168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.793828][ T5916] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 475.885759][ T5916] ath9k_htc: Failed to initialize the device [ 475.889566][ T5168] usb 8-1: config 0 descriptor?? [ 475.936200][ T5839] usb 4-1: ath9k_htc: USB layer deinitialized [ 476.044860][T12496] syz_tun: left promiscuous mode [ 476.949677][T12496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.964500][ T6016] usb 7-1: USB disconnect, device number 28 [ 477.467342][T12510] trusted_key: encrypted_key: master key parameter 'uks' is invalid [ 477.478550][ T6016] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 477.663476][ T6016] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 477.696858][ T6016] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 477.731460][ T6016] usb 7-1: config 0 interface 0 has no altsetting 0 [ 477.747550][ T6016] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 477.768326][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.800727][ T6016] usb 7-1: config 0 descriptor?? [ 477.806800][T12493] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 478.219420][ T5168] usbhid 8-1:0.0: can't add hid device: -71 [ 478.225555][ T5168] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 478.248674][ T5168] usb 8-1: USB disconnect, device number 16 [ 478.259159][ T6016] logitech 0003:046D:C24F.0009: unbalanced collection at end of report description [ 478.318159][ T6016] logitech 0003:046D:C24F.0009: parse failed [ 478.324399][ T6016] logitech 0003:046D:C24F.0009: probe with driver logitech failed with error -22 [ 478.598984][ T6016] usb 7-1: USB disconnect, device number 29 [ 479.518413][T12534] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 479.525004][T12534] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 479.534385][T12534] vhci_hcd vhci_hcd.0: Device attached [ 479.540817][T12538] vhci_hcd: connection closed [ 479.542409][ T9826] vhci_hcd: stop threads [ 479.557345][ T9826] vhci_hcd: release socket [ 479.561842][ T9826] vhci_hcd: disconnect device [ 479.809553][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 479.827250][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 481.248841][ T30] audit: type=1326 audit(1755940654.168:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12566 comm="syz.7.1360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcd8ebe9 code=0x0 [ 481.269920][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.728572][T12581] fuse: Bad value for 'fd' [ 482.580078][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1370'. [ 482.928661][T12609] misc userio: Can't change port type on an already running userio instance [ 482.971296][ T5930] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 483.167624][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 483.204644][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.241046][ T5930] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 483.271366][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.313994][ T5930] usb 7-1: config 0 descriptor?? [ 483.397802][ T5839] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 483.547840][T12602] netlink: 'syz.6.1373': attribute type 1 has an invalid length. [ 483.555716][T12602] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1373'. [ 483.583788][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1373'. [ 483.590963][ T5930] creative-sb0540 0003:041E:3100.000A: unknown main item tag 0x0 [ 484.380927][ T5839] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.427530][ T5930] creative-sb0540 0003:041E:3100.000A: item fetching failed at offset 3/5 [ 484.457377][ T5930] creative-sb0540 0003:041E:3100.000A: parse failed [ 484.467233][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 484.473893][ T5839] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 484.487747][ T5930] creative-sb0540 0003:041E:3100.000A: probe with driver creative-sb0540 failed with error -22 [ 484.507225][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.518377][ T5839] usb 2-1: config 0 descriptor?? [ 484.572603][ T5930] usb 7-1: USB disconnect, device number 30 [ 485.192656][ T5839] usbhid 2-1:0.0: can't add hid device: -71 [ 485.217317][ T5839] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 485.255410][ T5839] usb 2-1: USB disconnect, device number 44 [ 485.756350][T12633] netlink: 'syz.1.1381': attribute type 10 has an invalid length. [ 485.779094][T12633] syz_tun: entered promiscuous mode [ 485.834335][T12633] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 486.297268][ T5930] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 486.478954][ T5930] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 486.490015][ T5930] usb 2-1: config 150 has no interface number 0 [ 486.496389][ T5930] usb 2-1: config 150 interface 204 has no altsetting 0 [ 486.534835][ T5930] usb 2-1: config 150 interface 1 has no altsetting 0 [ 486.565320][ T5930] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 486.575006][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.589821][ T5930] usb 2-1: Product: syz [ 486.609089][ T5930] usb 2-1: Manufacturer: syz [ 486.628256][ T5930] usb 2-1: SerialNumber: syz [ 486.850366][T12640] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 486.873600][ T5930] xr_serial 2-1:150.204: xr_serial converter detected [ 487.870896][T12666] geneve2: entered promiscuous mode [ 487.876176][T12666] geneve2: entered allmulticast mode [ 487.978307][T12672] virt_wifi0 speed is unknown, defaulting to 1000 [ 488.015864][ T5930] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 488.231945][ T5930] usb 2-1: USB disconnect, device number 45 [ 488.311931][ T5930] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 488.348044][T12678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 488.422485][ T5930] xr_serial 2-1:150.204: device disconnected [ 488.667393][ T5839] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 488.747597][T12678] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 488.785784][T12678] netlink: 'syz.3.1393': attribute type 2 has an invalid length. [ 488.855555][T12678] netlink: 'syz.3.1393': attribute type 3 has an invalid length. [ 488.927403][ T5839] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.002807][ T5839] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.045941][ T5839] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.112517][ T5839] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.311890][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.337187][ T5839] usb 8-1: Product: syz [ 489.341971][ T5839] usb 8-1: Manufacturer: syz [ 489.352094][ T5839] usb 8-1: SerialNumber: syz [ 489.381973][ T5839] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 489.396555][ T5839] cdc_ncm 8-1:1.0: bind() failure [ 489.712592][ T5839] usb 8-1: USB disconnect, device number 17 [ 491.364839][T12681] syz.3.1393: vmalloc error: size 85106688, failed to allocated page array size 166224, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 491.390351][T12681] CPU: 1 UID: 0 PID: 12681 Comm: syz.3.1393 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 491.390378][T12681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.390395][T12681] Call Trace: [ 491.390406][T12681] [ 491.390416][T12681] dump_stack_lvl+0x189/0x250 [ 491.390448][T12681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.390471][T12681] ? __pfx__printk+0x10/0x10 [ 491.390498][T12681] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 491.390524][T12681] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 491.390551][T12681] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 491.390580][T12681] warn_alloc+0x214/0x310 [ 491.390610][T12681] ? __pfx_warn_alloc+0x10/0x10 [ 491.390644][T12681] ? __get_vm_area_node+0x28f/0x300 [ 491.390666][T12681] ? drm_property_create_blob+0x65/0x300 [ 491.390702][T12681] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 491.390724][T12681] ? __kasan_slab_free+0x62/0x70 [ 491.390772][T12681] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.390801][T12681] ? rcu_is_watching+0x15/0xb0 [ 491.390824][T12681] ? drm_property_create_blob+0x65/0x300 [ 491.390854][T12681] ? drm_property_create_blob+0x65/0x300 [ 491.390883][T12681] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 491.390905][T12681] ? drm_property_create_blob+0x65/0x300 [ 491.390937][T12681] ? drm_dev_enter+0x49/0x150 [ 491.390960][T12681] ? acpi_ev_finish_gpe+0x3e/0xd0 [ 491.390990][T12681] drm_property_create_blob+0x65/0x300 [ 491.391028][T12681] drm_mode_createblob_ioctl+0xbf/0x400 [ 491.391067][T12681] drm_ioctl_kernel+0x2cf/0x390 [ 491.391089][T12681] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 491.391122][T12681] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 491.391155][T12681] drm_ioctl+0x67f/0xb10 [ 491.391174][T12681] ? smk_tskacc+0x2fc/0x370 [ 491.391206][T12681] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 491.391253][T12681] ? __pfx_drm_ioctl+0x10/0x10 [ 491.391289][T12681] ? __fget_files+0x2a/0x420 [ 491.391316][T12681] ? bpf_lsm_file_ioctl+0x9/0x20 [ 491.391340][T12681] ? __pfx_drm_ioctl+0x10/0x10 [ 491.391361][T12681] __se_sys_ioctl+0xfc/0x170 [ 491.391395][T12681] do_syscall_64+0xfa/0x3b0 [ 491.391418][T12681] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.391439][T12681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.391459][T12681] ? clear_bhb_loop+0x60/0xb0 [ 491.391484][T12681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.391504][T12681] RIP: 0033:0x7f6fe618ebe9 [ 491.391522][T12681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.391540][T12681] RSP: 002b:00007f6fe7029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.391561][T12681] RAX: ffffffffffffffda RBX: 00007f6fe63b6090 RCX: 00007f6fe618ebe9 [ 491.391576][T12681] RDX: 00002000000000c0 RSI: 00000000c01064bd RDI: 0000000000000004 [ 491.391589][T12681] RBP: 00007f6fe6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 491.391602][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.391614][T12681] R13: 00007f6fe63b6128 R14: 00007f6fe63b6090 R15: 00007fff80137028 [ 491.391645][T12681] [ 491.391657][T12681] Mem-Info: [ 491.743465][T12681] active_anon:294 inactive_anon:16802 isolated_anon:0 [ 491.743465][T12681] active_file:22526 inactive_file:41820 isolated_file:0 [ 491.743465][T12681] unevictable:768 dirty:410 writeback:0 [ 491.743465][T12681] slab_reclaimable:7477 slab_unreclaimable:102420 [ 491.743465][T12681] mapped:31753 shmem:10541 pagetables:1748 [ 491.743465][T12681] sec_pagetables:0 bounce:0 [ 491.743465][T12681] kernel_misc_reclaimable:0 [ 491.743465][T12681] free:1270903 free_pcp:23588 free_cma:0 [ 491.867356][T12681] Node 0 active_anon:1176kB inactive_anon:66708kB active_file:89904kB inactive_file:167280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127012kB dirty:1640kB writeback:0kB shmem:40328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13884kB pagetables:6860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 491.905532][ T1207] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 491.927372][T12681] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 492.022589][T12681] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.077794][ T1207] usb 2-1: Using ep0 maxpacket: 8 [ 492.089541][ T1207] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 492.123135][T12681] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 492.133301][ T1207] usb 2-1: config 179 has no interface number 0 [ 492.199322][T12681] Node 0 DMA32 free:1178036kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1172kB inactive_anon:68868kB active_file:88124kB inactive_file:167220kB unevictable:1536kB writepending:1640kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:64596kB local_pcp:32696kB free_cma:0kB [ 492.238094][T12719] vlan2: entered promiscuous mode [ 492.243180][T12719] macvtap0: entered promiscuous mode [ 492.258361][ T1207] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 492.297511][ T1207] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 492.322093][T12722] netlink: 'syz.6.1403': attribute type 8 has an invalid length. [ 492.351649][T12681] lowmem_reserve[]: 0 0 1 1 1 [ 492.356521][T12681] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 492.385941][ T1207] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 492.420916][ T1207] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 492.462824][ T1207] usb 2-1: config 179 interface 65 has no altsetting 0 [ 492.471965][ T1207] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 493.123547][T12681] lowmem_reserve[]: 0 0 0 0 0 [ 493.149362][T12681] Node 1 Normal free:3898396kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20000kB local_pcp:11904kB free_cma:0kB [ 493.187486][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.224507][T12681] lowmem_reserve[]: 0 0 0 0 0 [ 493.229957][T12681] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 493.243397][T12681] Node 0 DMA32: 2956*4kB (UME) 1672*8kB (UME) 1186*16kB (UME) 626*32kB (UME) 391*64kB (UME) 115*128kB (UME) 49*256kB (UME) 24*512kB (UME) 11*1024kB (UME) 7*2048kB (UM) 251*4096kB (UM) = 1182480kB [ 493.263182][T12681] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 493.275576][T12681] Node 1 Normal: 219*4kB (UME) 58*8kB (UME) 40*16kB (UME) 125*32kB (UME) 47*64kB (UE) 6*128kB (UE) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898396kB [ 493.349180][T12681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.397306][T12681] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.435900][T12681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.479315][T12681] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.503327][T12681] 70991 total pagecache pages [ 493.514623][T12681] 0 pages in swap cache [ 493.519935][T12712] netlink: 'syz.1.1400': attribute type 10 has an invalid length. [ 493.531420][T12712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.540310][T12712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.552525][ T1207] usb 2-1: USB disconnect, device number 46 [ 493.564580][T12681] Free swap = 124996kB [ 493.568976][T12681] Total swap = 124996kB [ 493.573362][T12681] 2097051 pages RAM [ 493.577480][T12681] 0 pages HighMem/MovableOnly [ 493.582183][T12681] 424695 pages reserved [ 493.586649][T12681] 0 pages cma reserved [ 494.439772][T12746] JFS: charset not found [ 494.586682][T12762] netlink: 212388 bytes leftover after parsing attributes in process `syz.7.1412'. [ 494.671700][T12762] netlink: get zone limit has 8 unknown bytes [ 494.888094][T12769] overlayfs: failed to clone upperpath [ 495.967230][ T5930] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 496.267439][ T5930] usb 8-1: Using ep0 maxpacket: 8 [ 496.285218][ T5930] usb 8-1: config 0 has an invalid interface number: 122 but max is 0 [ 496.297252][ T5930] usb 8-1: config 0 has no interface number 0 [ 496.303384][ T5930] usb 8-1: config 0 interface 122 has no altsetting 0 [ 496.327691][ T5930] usb 8-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=f7.3e [ 496.347077][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.370558][ T5930] usb 8-1: config 0 descriptor?? [ 496.406024][ T5930] vmk80xx 8-1:0.122: driver 'vmk80xx' failed to auto-configure device. [ 496.627427][ T30] audit: type=1326 audit(1755940669.388:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12763 comm="syz.1.1414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80a9f8ebe9 code=0x0 [ 497.515713][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.561553][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.584274][ T6016] usb 8-1: USB disconnect, device number 18 [ 498.232268][T12798] netlink: 'syz.0.1420': attribute type 12 has an invalid length. [ 498.244809][T12800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1421'. [ 498.264809][T12798] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1420'. [ 498.275925][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1421'. [ 498.328920][T12802] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1421'. [ 498.685376][T12809] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1424'. [ 498.962952][T12813] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 499.035048][T12817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1426'. [ 499.343767][T12820] netlink: 'syz.0.1427': attribute type 11 has an invalid length. [ 499.473208][T12822] overlayfs: failed to resolve './file1': -2 [ 499.515651][T12822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 499.913180][T12830] misc userio: Can't change port type on an already running userio instance [ 499.924204][ T6016] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 500.188902][ T6016] usb 8-1: Using ep0 maxpacket: 8 [ 500.289424][ T6016] usb 8-1: config 1 has an invalid interface number: 128 but max is 1 [ 500.382576][ T6016] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.565567][ T6016] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 500.574843][ T6016] usb 8-1: config 1 has no interface number 0 [ 500.581140][ T6016] usb 8-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.596898][ T6016] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.616919][ T6016] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.689499][ T6016] usb 8-1: Product: syz [ 500.693743][ T6016] usb 8-1: Manufacturer: syz [ 500.699007][ T6016] usb 8-1: SerialNumber: syz [ 500.711098][ T6016] cdc_wdm 8-1:1.128: skipping garbage [ 500.856185][ T6016] cdc_wdm 8-1:1.128: skipping garbage [ 500.862502][ T6016] cdc_wdm 8-1:1.128: invalid descriptor buffer length [ 500.870326][ T6016] cdc_wdm 8-1:1.128: probe with driver cdc_wdm failed with error -22 [ 501.338052][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.889292][ T6016] usb 8-1: USB disconnect, device number 19 [ 501.903973][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.357269][ T1207] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 503.427290][T12858] mkiss: ax0: crc mode is auto. [ 503.569846][T12860] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1440'. [ 503.599468][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 503.671847][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 503.714082][ T1207] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.733675][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.751595][ T1207] usb 4-1: Product: syz [ 503.756687][ T1207] usb 4-1: Manufacturer: syz [ 503.775164][ T1207] usb 4-1: SerialNumber: syz [ 503.790875][ T1207] usb 4-1: config 0 descriptor?? [ 503.837690][ T1207] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 503.853582][ T1207] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 504.016025][T12878] loop9: detected capacity change from 0 to 8 [ 504.025391][ T5836] Dev loop9: unable to read RDB block 8 [ 504.031100][ T5836] loop9: unable to read partition table [ 504.036973][ T5836] loop9: partition table beyond EOD, truncated [ 504.055583][T12878] Dev loop9: unable to read RDB block 8 [ 504.061497][T12878] loop9: unable to read partition table [ 504.069080][T12878] loop9: partition table beyond EOD, truncated [ 504.075276][T12878] loop_reread_partitions: partition scan of loop9 (被x^> ) failed (rc=-5) [ 504.147402][ T5889] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 504.385954][T12885] misc userio: Can't change port type on an already running userio instance [ 504.399445][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.412514][ T1207] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 504.423535][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.433944][ T5889] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 504.443128][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.454209][ T5889] usb 7-1: config 0 descriptor?? [ 504.969398][ T5889] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 504.976716][ T5889] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 504.987848][ T1207] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 504.996119][ T1207] em28xx 4-1:0.0: board has no eeprom [ 505.031783][ T5889] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.000B/input/input21 [ 505.288857][ T5889] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 506.187425][ T1207] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 506.646119][ T1207] em28xx 4-1:0.0: dvb set to bulk mode. [ 506.699580][ T5889] em28xx 4-1:0.0: Binding DVB extension [ 506.707594][ T5902] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 506.710869][ T1207] usb 4-1: USB disconnect, device number 55 [ 506.788412][ T1207] em28xx 4-1:0.0: Disconnecting em28xx [ 506.935419][ T5889] em28xx 4-1:0.0: Registering input extension [ 507.010946][ T1207] em28xx 4-1:0.0: Closing input extension [ 507.021196][T12922] netlink: 146780 bytes leftover after parsing attributes in process `syz.6.1458'. [ 507.811725][ T1207] em28xx 4-1:0.0: Freeing device [ 508.451562][ T5902] usb 7-1: device descriptor read/64, error -71 [ 508.710667][ T5902] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 508.890046][ T5902] usb 7-1: device firmware changed [ 508.924139][ T6016] usb 7-1: USB disconnect, device number 31 [ 510.227398][ T6016] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 510.272646][ T30] audit: type=1326 audit(1755940683.188:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12965 comm="syz.0.1469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x0 [ 510.355900][T12970] tipc: Enabling of bearer rejected, failed to enable media [ 511.361064][T12988] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.511329][T12995] tmpfs: Unknown parameter 'nr_ipod' [ 512.751612][T13007] ceph: No mds server is up or the cluster is laggy [ 513.437553][ T5839] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 514.272621][ T5839] usb 8-1: not running at top speed; connect to a high speed hub [ 514.421309][ T5839] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 514.461171][ T5839] usb 8-1: can't read configurations, error -61 [ 515.287439][ T5839] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 515.608218][T13034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 515.817276][ T5889] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 515.866370][ T5839] usb 8-1: device descriptor read/all, error -71 [ 515.877778][ T5839] usb usb8-port1: attempt power cycle [ 516.077479][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 516.248141][ T5889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 516.262769][ T5889] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 516.630726][ T5889] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 516.797187][ T5889] usb 7-1: Product: syz [ 516.801412][ T5889] usb 7-1: Manufacturer: syz [ 516.827815][ T5889] usb 7-1: SerialNumber: syz [ 517.059068][ T5889] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 517.073357][ T5889] usb 7-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 517.132587][ T5889] usb 7-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 517.183378][ T5889] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 517.343758][T13060] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1494'. [ 517.405596][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1494'. [ 517.414848][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1494'. [ 517.557460][ T5889] usb 7-1: palm_os_3_probe - error -110 getting bytes available request [ 517.655622][ T5889] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 517.721958][ T5889] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 517.798914][ T5889] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 518.367480][ T5839] usb 7-1: USB disconnect, device number 33 [ 518.452637][ T5839] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 518.550237][ T5839] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 518.609669][ T5839] visor 7-1:1.0: device disconnected [ 520.753084][T13115] sctp: [Deprecated]: syz.3.1506 (pid 13115) Use of int in max_burst socket option deprecated. [ 520.753084][T13115] Use struct sctp_assoc_value instead [ 522.172790][T13128] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 522.180953][T13128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1508'. [ 522.817759][ T5889] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 522.983410][ T5889] usb 7-1: Invalid ep0 maxpacket: 64 [ 523.092220][T13133] 9pnet_fd: Insufficient options for proto=fd [ 523.107277][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1510'. [ 523.117425][T13133] virt_wifi0 speed is unknown, defaulting to 1000 [ 523.756609][ T5889] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 523.980490][ T5889] usb 7-1: Invalid ep0 maxpacket: 64 [ 524.002873][ T5889] usb usb7-port1: attempt power cycle [ 524.127564][ T5930] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 524.263431][T13153] veth: renamed from dummy0 (while UP) [ 524.300978][ T5930] usb 8-1: config 0 has an invalid interface number: 73 but max is 0 [ 524.317432][ T5930] usb 8-1: config 0 has no interface number 0 [ 525.063773][ T5889] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 525.080646][ T5930] usb 8-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 525.108287][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.128082][ T5930] usb 8-1: Product: syz [ 525.132294][ T5930] usb 8-1: Manufacturer: syz [ 525.136934][ T5930] usb 8-1: SerialNumber: syz [ 525.186640][ T5889] usb 7-1: device descriptor read/8, error -71 [ 525.238429][ T5930] usb 8-1: config 0 descriptor?? [ 525.761286][T13166] netlink: 'syz.6.1518': attribute type 11 has an invalid length. [ 526.839788][ T5930] usb 8-1: USB disconnect, device number 23 [ 527.453571][ T5916] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 527.757975][ T5916] usb 8-1: device descriptor read/64, error -71 [ 527.807347][ T6016] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 527.962884][ T30] audit: type=1326 audit(1755940700.878:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 527.967409][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 528.019785][ T6016] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.030005][ T5916] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 528.047472][ T30] audit: type=1326 audit(1755940700.908:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.098575][ T6016] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.126118][ T30] audit: type=1326 audit(1755940700.908:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.148284][ T6016] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 528.209289][ T6016] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 528.477208][ T5916] usb 8-1: device descriptor read/64, error -71 [ 528.487617][ T30] audit: type=1326 audit(1755940700.908:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.510015][ T30] audit: type=1326 audit(1755940700.908:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.518839][ T6016] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.554906][ T30] audit: type=1326 audit(1755940700.908:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.592997][ T5916] usb usb8-port1: attempt power cycle [ 528.626723][ T30] audit: type=1326 audit(1755940700.908:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.660278][ T30] audit: type=1326 audit(1755940700.908:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.677618][ T6016] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.717410][ T30] audit: type=1326 audit(1755940700.908:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.747240][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.782652][ T30] audit: type=1326 audit(1755940700.908:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13188 comm="syz.1.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 528.845472][ T6016] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 528.957348][ T5889] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 529.167767][ T5916] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 529.188529][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 530.485306][ T5168] usb 7-1: USB disconnect, device number 38 [ 530.675817][ T5916] usb 8-1: device descriptor read/8, error -71 [ 531.288704][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1530'. [ 531.955860][T13220] ipvlan2: entered promiscuous mode [ 532.017522][T13224] veth0_to_team: entered promiscuous mode [ 532.023411][T13224] veth0_to_team: entered allmulticast mode [ 533.012920][T13245] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 534.126201][T13253] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1540'. [ 534.243785][T13257] netlink: 'syz.7.1540': attribute type 1 has an invalid length. [ 534.256709][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1540'. [ 534.438294][T13264] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1544'. [ 534.475264][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 534.525303][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 534.597795][ T5889] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 534.787357][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 534.803091][ T5889] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 534.857829][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.882380][ T5889] usb 4-1: config 0 descriptor?? [ 534.915351][ T5889] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 535.231565][ T5889] gspca_vc032x: reg_r err -32 [ 535.236294][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.269397][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.300297][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.305641][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.354041][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.381916][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.404331][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.437205][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.465578][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.510737][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.538830][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.610339][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.639901][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.657616][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.666511][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.675428][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.683140][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.693164][ T5889] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.703297][ T5889] gspca_vc032x: Unknown sensor... [ 535.712032][ T5889] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 535.728936][ T5889] usb 4-1: USB disconnect, device number 57 [ 536.057327][ T5889] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 536.920263][ T5889] usb 4-1: config 9 has an invalid interface number: 1 but max is 0 [ 537.833126][ T5889] usb 4-1: config 9 has no interface number 0 [ 537.866690][ T5889] usb 4-1: config 9 interface 1 has no altsetting 0 [ 537.883672][ T5889] usb 4-1: string descriptor 0 read error: -22 [ 537.917409][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 537.926450][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.042613][ T5889] cx231xx 4-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 538.097528][ T5168] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 538.102189][ T5889] cx231xx 4-1:9.1: Not found matching IAD interface [ 538.497850][ T5168] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 538.606695][ T5168] usb 2-1: config 0 has no interface number 0 [ 538.785709][ T5168] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 539.115301][ T5168] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 539.181288][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.199136][T13309] netlink: 550 bytes leftover after parsing attributes in process `syz.6.1558'. [ 539.414075][ T5168] usb 2-1: Product: syz [ 539.446570][ T5168] usb 2-1: Manufacturer: syz [ 539.471744][ T5168] usb 2-1: SerialNumber: syz [ 539.501847][ T5168] usb 2-1: config 0 descriptor?? [ 539.546013][ T5168] usb 2-1: can't set config #0, error -71 [ 539.647556][ T5168] usb 2-1: USB disconnect, device number 47 [ 539.754858][ T5889] usb 4-1: USB disconnect, device number 58 [ 539.828032][T13312] input: syz1 as /devices/virtual/input/input23 [ 539.974748][T13315] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1560'. [ 540.101853][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 540.127550][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 540.418904][T13318] --map-set only usable from mangle table [ 544.134935][T13365] trusted_key: encrypted_key: insufficient parameters specified [ 544.579033][T13368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1574'. [ 544.961453][T13380] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.308464][T13407] QAT: Invalid ioctl 1073935638 [ 546.391877][T13406] random: crng reseeded on system resumption [ 546.481783][T13411] veth1_to_bond: entered promiscuous mode [ 546.492798][T13411] bridge_slave_0: entered promiscuous mode [ 546.995199][T13401] bridge_slave_0: left promiscuous mode [ 547.002727][T13401] veth1_to_bond: left promiscuous mode [ 547.930012][T13429] netlink: 'syz.1.1586': attribute type 25 has an invalid length. [ 548.143469][T13434] gtp0: entered promiscuous mode [ 548.151693][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 549.956314][T13453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.964045][T13453] IPv6: NLM_F_CREATE should be set when creating new route [ 549.971567][T13453] IPv6: NLM_F_CREATE should be set when creating new route [ 549.978958][T13453] IPv6: NLM_F_CREATE should be set when creating new route [ 549.998350][ T5839] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 550.120391][T13453] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1594'. [ 550.217392][ T5839] usb 8-1: device descriptor read/64, error -71 [ 550.457408][ T5839] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 550.620383][ T5839] usb 8-1: device descriptor read/64, error -71 [ 550.738688][ T5839] usb usb8-port1: attempt power cycle [ 551.082222][ T5839] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 551.109266][ T5839] usb 8-1: device descriptor read/8, error -71 [ 551.201405][T13477] virt_wifi0 speed is unknown, defaulting to 1000 [ 551.697217][ T5839] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 551.727251][ T5839] usb 8-1: device descriptor read/8, error -71 [ 551.842268][ T5839] usb usb8-port1: unable to enumerate USB device [ 553.692358][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 553.692376][ T30] audit: type=1326 audit(1755940726.608:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 553.748695][ T30] audit: type=1326 audit(1755940726.638:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 553.784224][ T30] audit: type=1326 audit(1755940726.638:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 553.927192][ T30] audit: type=1326 audit(1755940726.638:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 553.977197][ T5889] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 554.007440][ T30] audit: type=1326 audit(1755940726.638:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 554.061350][ T30] audit: type=1326 audit(1755940726.648:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 554.112969][ T30] audit: type=1326 audit(1755940726.648:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 554.157739][ T5889] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 554.172695][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.188613][ T5889] usb 2-1: config 0 has no interface number 0 [ 554.194892][ T30] audit: type=1326 audit(1755940726.648:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 554.223153][ T30] audit: type=1326 audit(1755940726.648:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 554.253248][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 554.273587][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.283122][ T30] audit: type=1326 audit(1755940726.648:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13503 comm="syz.1.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a9f8ebe9 code=0x7ffc0000 [ 554.304897][ T5889] usb 2-1: Product: syz [ 554.309144][ T5889] usb 2-1: Manufacturer: syz [ 554.313756][ T5889] usb 2-1: SerialNumber: syz [ 554.358702][ T5889] usb 2-1: config 0 descriptor?? [ 554.614952][ T5889] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 554.636957][ T5889] usb 2-1: No valid video chain found. [ 554.870756][ T5889] usb 2-1: USB disconnect, device number 48 [ 555.368896][T13525] tipc: Enabled bearer , priority 10 [ 555.380166][T13525] siw: device registration error -23 [ 555.855364][T13531] netlink: 'syz.0.1617': attribute type 13 has an invalid length. [ 555.867722][T13531] netlink: 'syz.0.1617': attribute type 17 has an invalid length. [ 556.076591][T13531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.353167][T13542] futex_wake_op: syz.6.1618 tries to shift op by 32; fix this program [ 556.356032][T13541] befs: (nullb0): invalid magic header [ 556.490003][ T5839] tipc: Node number set to 3028680704 [ 558.484106][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1631'. [ 558.667349][ T5889] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 558.847489][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 558.873552][ T5889] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 558.909518][T13602] input: syz0 as /devices/virtual/input/input25 [ 558.926107][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.956040][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.997430][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.037167][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.071854][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 559.110962][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.540269][ T5839] usb 4-1: USB disconnect, device number 59 [ 559.547347][ T5930] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 559.784158][ T5930] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 559.805721][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 559.832320][ T5930] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 559.852667][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 559.869702][ T5930] usb 2-1: Product: syz [ 559.879627][ T5930] usb 2-1: Manufacturer: syz [ 559.890527][ T5930] usb 2-1: SerialNumber: syz [ 559.940603][ T5930] usb 2-1: config 0 descriptor?? [ 559.973849][ T5930] usb 2-1: selecting invalid altsetting 0 [ 560.178125][ T5839] usb 2-1: USB disconnect, device number 49 [ 560.361409][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.515921][T13627] ip6gre1: entered allmulticast mode [ 560.525009][ T7123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.537466][ T5930] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 560.809650][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 560.902282][ T5168] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 561.393785][ T5930] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 561.424163][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 561.464653][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 561.598303][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 561.603545][ T5168] usb 8-1: device descriptor read/64, error -71 [ 561.640230][ T5930] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 561.649670][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.658513][ T5930] usb 4-1: Product: syz [ 561.662913][ T5930] usb 4-1: Manufacturer: syz [ 561.667897][ T5930] usb 4-1: SerialNumber: syz [ 561.680831][ T5930] usb 4-1: config 0 descriptor?? [ 561.687682][T13624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 561.694963][T13624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 561.743322][ T5930] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 561.750485][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 561.750575][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 561.847349][ T5168] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 561.912143][ T5930] usb 4-1: USB disconnect, device number 60 [ 561.931999][ T5930] mcba_usb 4-1:0.0 can0: device disconnected [ 561.987285][ T5168] usb 8-1: device descriptor read/64, error -71 [ 562.099788][ T5168] usb usb8-port1: attempt power cycle [ 562.309595][T13657] netlink: 772 bytes leftover after parsing attributes in process `syz.6.1646'. [ 562.459775][ T5168] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 562.535311][ T5168] usb 8-1: device descriptor read/8, error -71 [ 562.791832][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.816573][T13668] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 563.567271][ T5168] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 563.627658][ T5168] usb 8-1: device descriptor read/8, error -71 [ 563.807331][ T5168] usb usb8-port1: unable to enumerate USB device [ 564.042797][T13677] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1652'. [ 564.437387][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.358641][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1662'. [ 568.367922][T13734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1662'. [ 570.046646][ T6016] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 570.217240][ T6016] usb 4-1: Using ep0 maxpacket: 32 [ 570.257987][T13762] Cannot find add_set index 3 as target [ 570.348640][ T6016] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 570.366853][T13762] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1670'. [ 570.381115][ T6016] usb 4-1: config 0 has no interface number 0 [ 570.387427][ T6016] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice= 0.8b [ 570.406836][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.699952][ T6016] usb 4-1: config 0 descriptor?? [ 570.807330][ T5168] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 570.907298][ T5916] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 570.917623][ T6016] radio-si470x 4-1:0.35: this is not a si470x device. [ 570.982536][T13771] ceph: No mds server is up or the cluster is laggy [ 570.989472][ T5168] usb 8-1: Using ep0 maxpacket: 32 [ 571.007048][ T5168] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 571.027735][ T5168] usb 8-1: config 0 has no interface number 0 [ 571.034056][ T5168] usb 8-1: config 0 interface 184 has no altsetting 0 [ 571.049480][ T5916] usb 7-1: device descriptor read/64, error -71 [ 571.054457][ T5168] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 571.071427][ T5168] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.079603][ T5168] usb 8-1: Product: syz [ 571.083904][ T5168] usb 8-1: Manufacturer: syz [ 571.089271][ T5168] usb 8-1: SerialNumber: syz [ 571.099304][ T5168] usb 8-1: config 0 descriptor?? [ 571.119877][ T5168] smsc75xx v1.0.0 [ 571.287254][ T5916] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 571.641098][T13781] misc userio: Can't change port type on an already running userio instance [ 571.658600][ T5916] usb 7-1: device descriptor read/64, error -71 [ 571.693090][ T6016] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 571.850467][ T5916] usb usb7-port1: attempt power cycle [ 572.240628][T13791] netlink: 'syz.1.1675': attribute type 28 has an invalid length. [ 572.323195][T13793] support for cryptoloop has been removed. Use dm-crypt instead. [ 572.377242][ T5916] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 572.408939][ T5916] usb 7-1: device descriptor read/8, error -71 [ 572.657293][ T5916] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 572.679530][ T5916] usb 7-1: device descriptor read/8, error -71 [ 572.793955][ T5916] usb usb7-port1: unable to enumerate USB device [ 572.856893][ T5916] usb 4-1: USB disconnect, device number 61 [ 572.997656][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.153378][ T5168] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 573.238522][ T5168] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 573.321460][ T5168] usb 8-1: USB disconnect, device number 36 [ 573.606444][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 573.732011][T13813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.782053][T13813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.901269][T13815] veth1_to_bond: entered promiscuous mode [ 573.977863][ T5889] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 574.401515][T13803] veth1_to_bond: left promiscuous mode [ 574.557268][ T5889] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 574.582066][ T5889] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 574.602909][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.617106][ T5889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.626645][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.635260][ T5889] usb 4-1: Product: syz [ 574.639786][ T5889] usb 4-1: Manufacturer: syz [ 574.644419][ T5889] usb 4-1: SerialNumber: syz [ 575.175412][ T5889] usb 4-1: 0:2 : does not exist [ 575.318421][ T5889] usb 4-1: USB disconnect, device number 62 [ 577.168961][T13861] veth1_to_bond: entered promiscuous mode [ 577.492309][ T5843] Bluetooth: hci5: ACL packet for unknown connection handle 236 [ 577.633396][T13856] veth1_to_bond: left promiscuous mode [ 578.299045][ T5889] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 579.457351][ T5889] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 579.466546][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.547204][ T5889] usb 7-1: Product: syz [ 579.551438][ T5889] usb 7-1: Manufacturer: syz [ 580.218681][ T5889] usb 7-1: SerialNumber: syz [ 580.236408][ T5889] usb 7-1: config 0 descriptor?? [ 580.248140][ T5889] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 580.454881][T13901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.473701][T13901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.852812][ T5889] input: sonixb as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 581.074047][ T5916] usb 7-1: USB disconnect, device number 43 [ 581.704721][T13913] fuse: Unknown parameter '' [ 581.924838][T13925] veth1_to_bond: entered promiscuous mode [ 581.953753][T13925] bridge_slave_0: entered promiscuous mode [ 582.008737][T13924] bridge_slave_0: left promiscuous mode [ 582.015378][T13924] veth1_to_bond: left promiscuous mode [ 582.825831][T13948] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1714'. [ 582.876533][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 583.046330][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 583.437015][T13959] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 583.501101][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1717'. [ 583.612568][T13970] netlink: 'syz.0.1719': attribute type 8 has an invalid length. [ 583.746662][T13973] veth1_to_bond: entered promiscuous mode [ 583.766356][T13972] veth1_to_bond: left promiscuous mode [ 584.157357][ T6016] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 584.181122][T13989] vlan1: entered promiscuous mode [ 584.239715][T13989] vlan1: entered allmulticast mode [ 584.421787][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.497576][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.556312][ T6016] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 584.650733][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.698432][ T6016] usb 2-1: config 0 descriptor?? [ 585.404372][ T5916] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 585.577541][ T6016] usbhid 2-1:0.0: can't add hid device: -71 [ 585.579847][ T5916] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 585.583570][ T6016] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 585.633026][T14011] overlayfs: workdir and upperdir must be separate subtrees [ 585.644637][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.651529][ T6016] usb 2-1: USB disconnect, device number 50 [ 585.682884][ T5916] usb 7-1: config 0 descriptor?? [ 585.714303][ T5916] cp210x 7-1:0.0: cp210x converter detected [ 586.060664][T14030] veth1_to_bond: entered promiscuous mode [ 586.069573][T14029] veth1_to_bond: left promiscuous mode [ 586.130263][ T5916] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 586.465328][T14040] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 586.888113][ T5916] usb 7-1: cp210x converter now attached to ttyUSB0 [ 587.050826][T14036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1736'. [ 587.060711][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'. [ 587.072404][T14036] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1736'. [ 587.083507][T14036] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1736'. [ 587.093328][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 587.147325][T14036] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 587.312403][ T5916] usb 7-1: USB disconnect, device number 44 [ 587.322465][ T5916] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 587.335023][ T5916] cp210x 7-1:0.0: device disconnected [ 587.359869][T14041] program syz.7.1738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.657449][ T6016] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 587.787846][ T5839] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 587.820941][ T6016] usb 8-1: Using ep0 maxpacket: 16 [ 587.900492][T14052] virt_wifi0 speed is unknown, defaulting to 1000 [ 587.947320][ T6016] usb 8-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 588.007678][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 588.055182][ T6016] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.083493][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.104947][ T6016] usb 8-1: New USB device found, idVendor=9dd1, idProduct=0101, bcdDevice= 0.40 [ 588.116245][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.135698][ T6016] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.182044][ T6016] usb 8-1: Product: syz [ 588.187177][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.212684][ T6016] usb 8-1: Manufacturer: syz [ 588.242585][ T6016] usb 8-1: SerialNumber: syz [ 588.266768][ T5839] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 588.312971][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.356640][ T5839] usb 2-1: config 0 descriptor?? [ 588.517965][ T5843] Bluetooth: hci0: command tx timeout [ 588.536850][ T6016] usb 8-1: 0:2 : does not exist [ 588.997425][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.044196][ T6016] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 589.101955][ T5839] hid-multitouch 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 589.199243][ T5839] usb 2-1: USB disconnect, device number 51 [ 589.205538][ T6016] usb 8-1: USB disconnect, device number 37 [ 589.517558][ T6071] udevd[6071]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.638181][T14076] fido_id[14076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 589.641538][ T5909] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 590.411364][ T5909] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 590.450266][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.467677][ T5909] usb 4-1: Product: syz [ 590.471959][ T5909] usb 4-1: Manufacturer: syz [ 590.486320][ T5909] usb 4-1: SerialNumber: syz [ 590.526839][ T5909] usb 4-1: config 0 descriptor?? [ 590.723871][T14098] loop6: detected capacity change from 0 to 7 [ 590.762653][T14098] Dev loop6: unable to read RDB block 7 [ 590.793302][ T5909] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 590.809257][T14098] loop6: unable to read partition table [ 590.833381][T14098] loop6: partition table beyond EOD, truncated [ 590.853312][T14098] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 591.302269][ T2216] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.406206][ T2216] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.495085][ T2216] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.574976][T14115] dvmrp0: entered allmulticast mode [ 591.620457][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 591.620474][ T30] audit: type=1326 audit(1755940764.538:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14113 comm="syz.1.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f80a9f8ebe9 code=0x7fc00000 [ 591.669198][ T2216] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.703386][T14117] dvmrp0: left allmulticast mode [ 591.992543][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 592.007523][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 592.015786][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.032775][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.091116][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 592.178691][ T2216] bridge_slave_1: left allmulticast mode [ 592.196484][ T2216] bridge_slave_1: left promiscuous mode [ 592.214201][ T5916] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 592.215865][ T2216] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.293544][ T2216] bridge_slave_0: left allmulticast mode [ 592.300458][ T2216] bridge_slave_0: left promiscuous mode [ 592.306334][ T2216] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.404905][ T5916] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 592.427289][ T5916] usb 2-1: config 0 has no interface number 0 [ 592.433433][ T5916] usb 2-1: config 0 interface 228 has no altsetting 0 [ 592.539111][ T5916] usb 2-1: New USB device found, idVendor=19d2, idProduct=0153, bcdDevice=b1.33 [ 592.550622][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.580873][ T5916] usb 2-1: Product: syz [ 592.587325][ T5916] usb 2-1: Manufacturer: syz [ 592.594215][ T5916] usb 2-1: SerialNumber: syz [ 592.668110][ T5916] usb 2-1: config 0 descriptor?? [ 592.783660][T14133] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[14133] [ 593.365403][ T5916] option 2-1:0.228: GSM modem (1-port) converter detected [ 593.400964][ T5916] usb 2-1: USB disconnect, device number 52 [ 593.440487][ T5909] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 593.485338][ T5916] option 2-1:0.228: device disconnected [ 593.522781][ T5930] usb 4-1: USB disconnect, device number 63 [ 593.727773][ T5168] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 594.161526][ T5916] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 594.171475][ T5168] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 594.202921][ T5168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.207289][ T5842] Bluetooth: hci3: command tx timeout [ 594.262996][ T5168] usb 7-1: Product: syz [ 594.280651][ T5168] usb 7-1: Manufacturer: syz [ 594.295735][ T5168] usb 7-1: SerialNumber: syz [ 594.314900][ T5168] usb 7-1: config 0 descriptor?? [ 594.355671][ T5916] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 594.371747][ T5916] usb 2-1: config 0 has no interface number 0 [ 594.371967][ T2216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.391981][ T2216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.400319][ T5916] usb 2-1: config 0 interface 228 has no altsetting 0 [ 594.410340][ T5916] usb 2-1: New USB device found, idVendor=19d2, idProduct=0153, bcdDevice=b1.33 [ 594.414625][ T2216] bond0 (unregistering): Released all slaves [ 594.426069][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.434306][ T5916] usb 2-1: Product: syz [ 594.438907][ T5916] usb 2-1: Manufacturer: syz [ 594.443597][ T5916] usb 2-1: SerialNumber: syz [ 594.451486][ T5916] usb 2-1: config 0 descriptor?? [ 594.462465][ T2216] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 594.472814][ T2216] bond1 (unregistering): Released all slaves [ 594.493156][ T2216] bond2 (unregistering): Released all slaves [ 594.510785][ T2216] bond3 (unregistering): Released all slaves [ 594.532673][ T2216] bond4 (unregistering): Released all slaves [ 594.636535][T14124] virt_wifi0 speed is unknown, defaulting to 1000 [ 594.679814][ T5916] option 2-1:0.228: GSM modem (1-port) converter detected [ 594.739110][ T5916] usb 2-1: USB disconnect, device number 53 [ 594.766745][ T5916] option 2-1:0.228: device disconnected [ 594.767489][ T30] audit: type=1326 audit(1755940767.668:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14147 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe618ebe9 code=0x7ffc0000 [ 594.867452][ T30] audit: type=1326 audit(1755940767.678:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14147 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe618ebe9 code=0x7ffc0000 [ 594.936138][ T30] audit: type=1326 audit(1755940767.678:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14147 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f6fe618ebe9 code=0x7ffc0000 [ 594.991453][ T30] audit: type=1326 audit(1755940767.748:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14147 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe618ebe9 code=0x7ffc0000 [ 595.051170][ T30] audit: type=1326 audit(1755940767.748:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14147 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe618ebe9 code=0x7ffc0000 [ 595.281264][T14166] openvswitch: netlink: Missing key (keys=1040, expected=2000) [ 595.300074][T14166] openvswitch: netlink: Missing key (keys=1040, expected=2000) [ 595.506225][ T5168] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 595.526695][ T5168] asix 7-1:0.0: probe with driver asix failed with error -71 [ 595.582546][ T5168] usb 7-1: USB disconnect, device number 45 [ 595.643963][ T2216] hsr_slave_0: left promiscuous mode [ 595.674416][ T2216] hsr_slave_1: left promiscuous mode [ 595.695430][ T2216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.716192][ T2216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.742919][ T2216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.757399][ T2216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.800032][ T2216] veth1_macvtap: left promiscuous mode [ 595.816744][ T2216] veth0_macvtap: left promiscuous mode [ 595.826974][ T2216] veth1_vlan: left promiscuous mode [ 595.850814][ T2216] veth0_vlan: left promiscuous mode [ 596.248756][T14189] misc userio: Can't change port type on an already running userio instance [ 596.322177][ T5842] Bluetooth: hci3: command tx timeout [ 598.357819][ T5842] Bluetooth: hci3: command tx timeout [ 599.476892][ T2216] team0 (unregistering): Port device team_slave_1 removed [ 599.552170][ T2216] team0 (unregistering): Port device team_slave_0 removed [ 600.032209][T14187] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 600.122362][T14211] netlink: 'syz.6.1783': attribute type 1 has an invalid length. [ 600.191034][T14124] chnl_net:caif_netlink_parms(): no params data found [ 600.437913][ T5842] Bluetooth: hci3: command tx timeout [ 600.941702][T14234] hsr0: entered promiscuous mode [ 601.106011][T14244] overlayfs: failed to clone upperpath [ 601.123061][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.158915][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.190854][T14124] bridge_slave_0: entered allmulticast mode [ 601.233647][T14124] bridge_slave_0: entered promiscuous mode [ 601.265235][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.282777][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.316519][T14124] bridge_slave_1: entered allmulticast mode [ 601.367480][T14124] bridge_slave_1: entered promiscuous mode [ 602.183874][T14261] misc userio: Can't change port type on an already running userio instance [ 602.562133][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.792979][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.979292][T14124] team0: Port device team_slave_0 added [ 603.005200][T14124] team0: Port device team_slave_1 added [ 603.167912][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.176424][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.203036][T14272] netlink: 'syz.3.1795': attribute type 6 has an invalid length. [ 603.241762][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.355024][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.434195][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.516132][T14280] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.522713][T14280] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 603.529889][T14280] comedi comedi3: 8255: I/O port conflict (0x10001,4) [ 603.538193][T14280] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 603.545441][T14280] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.552392][T14280] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 603.559717][T14280] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 603.566369][T14280] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 603.574647][T14280] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 603.581653][T14280] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 603.588730][T14280] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 603.595492][T14280] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 603.602645][T14280] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 603.611165][T14280] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.669782][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.124735][T14124] hsr_slave_0: entered promiscuous mode [ 604.140618][T14124] hsr_slave_1: entered promiscuous mode [ 604.146862][T14124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.154901][T14124] Cannot create hsr debugfs directory [ 604.750025][T14297] netlink: 'syz.6.1801': attribute type 1 has an invalid length. [ 605.658135][T14304] overlayfs: failed to clone upperpath [ 606.384213][T14124] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 606.492326][T14124] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 606.562949][T14124] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 606.640051][T14324] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1807'. [ 606.671986][T14324] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1807'. [ 606.711085][T14124] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 608.132082][T14124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.192605][T14124] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.254871][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.262110][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.323758][ T2216] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.330953][ T2216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.713229][T14361] atomic_op ffff88803147b198 conn xmit_atomic 0000000000000000 [ 609.552208][T14368] tipc: Resetting bearer [ 609.919714][T14368] tipc: Disabling bearer [ 610.375035][T14124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.728940][T14385] vlan0: entered promiscuous mode [ 610.740573][T14398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1819'. [ 610.788234][T14385] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 610.890482][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1819'. [ 610.899217][T14385] vlan0: entered allmulticast mode [ 610.904628][T14385] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 610.930004][T14385] team0: Device vlan0 is up. Set it down before adding it as a team port [ 610.947278][ T5960] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 610.955418][T14399] nbd: device at index 64 is going down [ 611.147461][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 611.200609][ T5960] usb 4-1: unable to get BOS descriptor or descriptor too short [ 611.218971][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 611.263240][ T6071] udevd[6071]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 611.289647][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 611.323455][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 611.361456][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 611.377598][ T5960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 611.392238][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 611.407156][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 611.429181][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 611.468631][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 611.503495][ T5960] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 611.527406][ T5916] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 611.547164][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.577552][ T5960] usb 4-1: Product: syz [ 611.581837][ T5960] usb 4-1: Manufacturer: syz [ 611.604041][ T5960] usb 4-1: SerialNumber: syz [ 611.622890][ T5960] usb 4-1: config 0 descriptor?? [ 611.640564][T14394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 611.672455][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.710607][ T5916] usb 2-1: no configurations [ 611.720662][ T5916] usb 2-1: can't read configurations, error -22 [ 611.892187][ T5916] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 612.254862][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.293529][ T5916] usb 2-1: no configurations [ 612.300444][ T5916] usb 2-1: can't read configurations, error -22 [ 612.316455][ T5916] usb usb2-port1: attempt power cycle [ 612.416811][T14124] veth0_vlan: entered promiscuous mode [ 612.492008][T14124] veth1_vlan: entered promiscuous mode [ 612.549004][T14427] veth1_macvtap: left promiscuous mode [ 612.681046][ T5916] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 612.718162][T14124] veth0_macvtap: entered promiscuous mode [ 612.738743][ T5916] usb 2-1: no configurations [ 612.750378][ T5916] usb 2-1: can't read configurations, error -22 [ 612.770962][T14124] veth1_macvtap: entered promiscuous mode [ 612.811613][T14124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.849554][T14124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.883949][T14124] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.910658][T14431] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1823'. [ 612.923874][T14124] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.933125][ T5916] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 612.955920][T14124] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.976976][T14434] tipc: Can't bind to reserved service type 2 [ 612.988866][ T5916] usb 2-1: no configurations [ 612.993947][ T5916] usb 2-1: can't read configurations, error -22 [ 613.018584][T14124] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.038301][ T5916] usb usb2-port1: unable to enumerate USB device [ 613.293122][ T7110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.361930][ T7110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.453204][ T7110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.494215][ T7110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.911607][ T5168] usb 4-1: USB disconnect, device number 64 [ 614.029602][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1760'. [ 614.980887][T14469] fuse: Bad value for 'user_id' [ 614.985816][T14469] fuse: Bad value for 'user_id' [ 615.051588][ T5930] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 615.450798][T14472] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1834'. [ 615.581517][ T5930] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 615.629831][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.677784][ T5930] usb 7-1: config 0 descriptor?? [ 616.254384][T14502] veth1_to_bond: entered promiscuous mode [ 616.815617][T14496] veth1_to_bond: left promiscuous mode [ 616.893672][ T5930] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 617.206391][T14509] syz_tun: entered allmulticast mode [ 617.212600][ T5930] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 617.225001][ T5930] [drm] Initialized udl on minor 2 [ 617.295684][T14509] dvmrp8: entered allmulticast mode [ 617.322592][ T5930] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 617.364508][ T5930] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 617.367649][T14507] syz_tun: left allmulticast mode [ 618.350924][T14517] netlink: 'syz.8.1843': attribute type 1 has an invalid length. [ 618.710982][ T5960] usb 7-1: USB disconnect, device number 46 [ 618.717015][ T5916] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 618.746187][ T5916] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 618.834898][T14529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 618.891307][T14529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 618.935643][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 618.974174][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 619.240615][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1846'. [ 619.290489][T14529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 619.442805][T14529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 619.681407][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 621.975729][T14584] xt_HMARK: proto mask must be zero with L3 mode [ 622.987485][ T5960] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 623.140628][ T5839] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 623.177343][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 623.197645][ T5960] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 623.205682][ T5960] usb 4-1: config 0 has no interface number 0 [ 623.250835][ T5960] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 623.295012][ T5960] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 243, changing to 11 [ 623.297444][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 623.334119][ T5960] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 50999, setting to 1024 [ 623.415257][ T5960] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 623.455393][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 623.487909][ T5960] usb 4-1: Product: syz [ 623.496769][ T5839] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 623.505910][ T5839] usb 7-1: config 0 has no interface number 0 [ 623.512445][ T5839] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 623.523433][ T5960] usb 4-1: SerialNumber: syz [ 623.525336][ T5839] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 623.537314][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 623.545408][ T5839] usb 7-1: Product: syz [ 623.549850][ T5839] usb 7-1: SerialNumber: syz [ 623.610091][T14613] veth1_to_bond: entered promiscuous mode [ 623.870929][ T5960] usb 4-1: config 0 descriptor?? [ 624.078981][ T5839] usb 7-1: config 0 descriptor?? [ 624.084933][T14596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 624.090077][ T5839] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input30 [ 624.127727][T14606] veth1_to_bond: left promiscuous mode [ 624.145944][ T5960] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 624.231294][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.277007][ T5960] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input31 [ 624.286255][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.296528][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.304268][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.314773][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.322024][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.329190][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.336333][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.343736][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.351061][ T5909] usb 7-1: USB disconnect, device number 47 [ 624.357748][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 624.364722][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 624.457606][ T5909] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 624.751615][T14620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1860'. [ 624.857917][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 625.286190][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 625.289823][ T5839] usb 4-1: USB disconnect, device number 65 [ 625.293268][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 625.329030][ T5839] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 625.463625][T14639] binder: 14634:14639 ioctl c0306201 200000000c40 returned -22 [ 625.471526][T14639] binder: 14634:14639 ioctl ae01 29 returned -22 [ 625.490148][ T5960] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 625.645752][ T5960] usb 7-1: device descriptor read/64, error -71 [ 626.056488][ T5960] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 626.237548][ T5960] usb 7-1: device descriptor read/64, error -71 [ 626.686220][ T5960] usb usb7-port1: attempt power cycle [ 627.087860][ T5960] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 627.189773][ T5960] usb 7-1: device descriptor read/8, error -71 [ 627.618321][ T5960] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 627.657896][ T5960] usb 7-1: device descriptor read/8, error -71 [ 627.787517][ T5960] usb usb7-port1: unable to enumerate USB device [ 628.327407][ T5960] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 628.368971][T14692] xt_connbytes: Forcing CT accounting to be enabled [ 628.402207][T14692] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 628.439867][T14692] xt_bpf: check failed: parse error [ 628.539968][ T5960] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.601639][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.749310][ T5960] usb 4-1: config 0 descriptor?? [ 628.760128][ T5960] cp210x 4-1:0.0: cp210x converter detected [ 630.030437][ T5960] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 630.098505][ T5960] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 630.201022][ T5960] usb 4-1: cp210x converter now attached to ttyUSB0 [ 630.254967][ T5960] usb 4-1: USB disconnect, device number 66 [ 630.263472][ T5960] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 630.280722][ T5960] cp210x 4-1:0.0: device disconnected [ 630.888675][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ab05800: rx timeout, send abort [ 631.311394][T14718] cifs: Unknown parameter 'mode' [ 631.389268][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ab06c00: rx timeout, send abort [ 631.397819][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ab05800: abort rx timeout. Force session deactivation [ 631.897582][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ab06c00: abort rx timeout. Force session deactivation [ 631.957867][ T5960] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 632.309350][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.443614][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.585993][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.795655][ T5960] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 632.804900][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.118718][ T5960] usb 2-1: config 0 descriptor?? [ 633.167786][ T5960] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 634.117432][ T5168] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 634.211133][T14705] bridge2: entered promiscuous mode [ 634.216508][T14705] bridge2: entered allmulticast mode [ 634.319875][ T5168] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 634.355659][ T5168] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 634.503768][ T5168] usb 4-1: config 0 interface 0 has no altsetting 0 [ 634.537041][ T5168] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 634.557467][ T5190] bcm5974 2-1:0.0: could not read from device [ 634.585017][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 634.617235][ T5168] usb 4-1: Product: syz [ 634.621499][ T5168] usb 4-1: Manufacturer: syz [ 634.643610][ T5168] usb 4-1: SerialNumber: syz [ 634.780857][ T5960] usb 2-1: USB disconnect, device number 58 [ 634.793784][ T5190] bcm5974 2-1:0.0: could not read from device [ 634.828999][ T5168] usb 4-1: config 0 descriptor?? [ 634.848354][ T5168] hub 4-1:0.0: bad descriptor, ignoring hub [ 634.854301][ T5168] hub 4-1:0.0: probe with driver hub failed with error -5 [ 635.193459][ T6071] bcm5974 2-1:0.0: could not read from device [ 635.271336][ T5190] bcm5974 2-1:0.0: could not read from device [ 635.292191][ T5168] usb 4-1: selecting invalid altsetting 0 [ 635.362047][ T6071] udevd[6071]: Error opening device "/dev/input/event4": No such device [ 635.382003][ T6071] udevd[6071]: Unable to EVIOCGABS device "/dev/input/event4" [ 635.400327][ T6071] udevd[6071]: Unable to EVIOCGABS device "/dev/input/event4" [ 635.408307][ T6071] udevd[6071]: Unable to EVIOCGABS device "/dev/input/event4" [ 635.415925][ T6071] udevd[6071]: Unable to EVIOCGABS device "/dev/input/event4" [ 635.718383][ T5168] usb 4-1: reset high-speed USB device number 67 using dummy_hcd [ 635.939741][T14774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.956655][ T5168] usb 4-1: device firmware changed [ 635.980107][ T5168] usb 4-1: USB disconnect, device number 67 [ 636.022847][T14774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.157245][ T5909] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 636.359829][ T5909] usb 7-1: Using ep0 maxpacket: 16 [ 636.378464][ T5909] usb 7-1: device descriptor read/all, error -71 [ 636.587248][ T5168] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 636.749356][ T5168] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 636.785393][ T5168] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 636.841416][ T5960] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 636.855579][ T5168] usb 4-1: config 0 interface 0 has no altsetting 0 [ 636.897252][ T5168] usb 4-1: string descriptor 0 read error: -71 [ 636.903563][ T5168] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 637.650238][ T5960] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 637.686696][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 637.688610][ T5960] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 637.708004][ T5916] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 637.745324][ T5168] usb 4-1: config 0 descriptor?? [ 637.787530][ T5960] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 637.796612][ T5960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.799194][ T5168] usb 4-1: can't set config #0, error -71 [ 637.875811][ T5960] usb 9-1: Product: syz [ 637.885249][ T5168] usb 4-1: USB disconnect, device number 68 [ 637.892774][ T5960] usb 9-1: Manufacturer: syz [ 637.903559][ T5916] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 637.942472][ T5960] usb 9-1: SerialNumber: syz [ 637.948393][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.989867][ T5960] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 638.007185][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.091400][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 638.187971][T14830] netlink: 'syz.3.1903': attribute type 1 has an invalid length. [ 638.209720][ T5916] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 638.233599][ T5916] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 638.253031][ T5916] usb 2-1: Manufacturer: syz [ 638.268993][ T5916] usb 2-1: config 0 descriptor?? [ 638.316996][T14830] bond6: entered promiscuous mode [ 638.326797][T14830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 638.989409][ T5916] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 639.009392][ T5916] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 639.294399][T14842] 9pnet_fd: Insufficient options for proto=fd [ 639.377174][ T5916] usb 9-1: USB disconnect, device number 2 [ 639.495581][T14807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.526915][T14807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.542207][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1908'. [ 639.592257][ T5909] usb 2-1: USB disconnect, device number 59 [ 639.626030][T14850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.775259][T14850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.277538][T14869] misc userio: Can't change port type on an already running userio instance [ 640.496211][T14878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1912'. [ 640.573394][T14874] gretap1: entered allmulticast mode [ 640.647783][T14883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1914'. [ 641.217147][ T30] audit: type=1326 audit(1755940814.128:118): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.239229][ T30] audit: type=1326 audit(1755940814.128:119): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.287015][ T30] audit: type=1326 audit(1755940814.148:120): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.461990][ T30] audit: type=1326 audit(1755940814.158:121): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.584151][ T30] audit: type=1326 audit(1755940814.158:122): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.659796][ T30] audit: type=1326 audit(1755940814.158:123): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.712238][T14901] mkiss: ax0: crc mode is auto. [ 641.779882][ T30] audit: type=1326 audit(1755940814.158:124): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.830828][ T30] audit: type=1326 audit(1755940814.158:125): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.874837][ T30] audit: type=1326 audit(1755940814.288:126): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.912129][ T30] audit: type=1326 audit(1755940814.288:127): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=14880 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5418ebe9 code=0x7ffc0000 [ 641.927216][ T5168] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 642.099038][ T5168] usb 7-1: LPM exit latency is zeroed, disabling LPM. [ 642.107715][ T5168] usb 7-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.150222][ T5168] usb 7-1: config 1 interface 0 has no altsetting 0 [ 642.193045][ T5168] usb 7-1: string descriptor 0 read error: -22 [ 642.213210][ T5168] usb 7-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 642.245012][ T5168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.642453][T14926] veth1_to_bridge: entered promiscuous mode [ 642.685967][T14926] veth1_to_bridge: left promiscuous mode [ 642.768645][ T5168] usbhid 7-1:1.0: can't add hid device: -71 [ 642.779897][ T5168] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 642.837569][ T5168] usb 7-1: USB disconnect, device number 54 [ 643.797517][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 643.903160][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1926'. [ 644.277982][ T5960] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 644.364171][ T5909] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 644.521275][ T5909] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 644.547264][ T5909] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 644.569127][ T5960] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 644.582035][ T5909] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 644.595660][ T5909] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 644.610879][ T5909] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 644.611285][ T5960] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 644.644917][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.666144][ T5960] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 644.716149][ T5960] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.733796][ T5960] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 644.743419][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.763828][ T5960] usbtmc 9-1:16.0: bulk endpoints not found [ 644.906248][ T5909] ath6kl: Failed to submit usb control message: -71 [ 644.923347][ T5909] ath6kl: unable to send the bmi data to the device: -71 [ 644.935013][ T5909] ath6kl: Unable to send get target info: -71 [ 644.955592][ T5909] ath6kl: Failed to init ath6kl core: -71 [ 644.961783][ T5168] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 644.980650][ T5909] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 645.005644][ T5909] usb 4-1: USB disconnect, device number 69 [ 645.187398][ T5168] usb 2-1: device descriptor read/64, error -71 [ 645.222511][T14978] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1933'. [ 645.232298][T14978] netlink: 'syz.6.1933': attribute type 9 has an invalid length. [ 645.240264][T14978] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1933'. [ 645.249439][T14978] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1933'. [ 645.328449][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1933'. [ 645.337490][T14979] netlink: 'syz.6.1933': attribute type 5 has an invalid length. [ 645.345251][T14979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1933'. [ 645.378976][T14979] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 645.387836][T14979] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 645.396509][T14979] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 645.405404][T14979] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 645.416571][T14979] geneve2: entered promiscuous mode [ 645.421960][T14979] geneve2: entered allmulticast mode [ 646.088871][ T5889] usb 9-1: USB disconnect, device number 3 [ 646.177335][ T5168] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 646.317219][ T5168] usb 2-1: device descriptor read/64, error -71 [ 646.427531][ T5168] usb usb2-port1: attempt power cycle [ 646.679814][T15012] netlink: 'syz.8.1938': attribute type 1 has an invalid length. [ 646.836660][ T5168] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 646.930573][T15014] input: syz0 as /devices/virtual/input/input34 [ 647.248022][ T5168] usb 2-1: device descriptor read/8, error -71 [ 647.480947][T15020] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1941'. [ 647.490982][ T5168] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 647.518104][ T5168] usb 2-1: device descriptor read/8, error -71 [ 647.726791][T15022] misc userio: Can't change port type on an already running userio instance [ 647.785559][T15020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1941'. [ 647.818528][ T5889] IPVS: starting estimator thread 0... [ 647.867667][ T5168] usb usb2-port1: unable to enumerate USB device [ 647.907207][T15029] IPVS: using max 29 ests per chain, 69600 per kthread [ 648.217211][ T5168] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 648.385318][ T5168] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 648.394227][ T5168] usb 2-1: can't read configurations, error -22 [ 648.507853][T15040] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 648.537825][ T5168] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 648.541967][T15041] 9pnet_fd: Insufficient options for proto=fd [ 648.711177][ T5168] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 648.725896][ T5168] usb 2-1: can't read configurations, error -22 [ 648.746576][ T5168] usb usb2-port1: attempt power cycle [ 650.233446][ T5168] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 650.259500][ T5168] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 650.268412][ T5168] usb 2-1: can't read configurations, error -22 [ 650.939546][ T5168] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 650.992612][T15066] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 651.061231][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1954'. [ 651.099068][T15068] fuse: Unknown parameter '' [ 651.157164][ T5168] usb 2-1: device not accepting address 67, error -71 [ 651.174713][ T5168] usb usb2-port1: unable to enumerate USB device [ 651.657214][ T5168] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 651.807345][ T5168] usb 4-1: Using ep0 maxpacket: 8 [ 651.840483][ T5168] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 651.860187][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.902592][ T5168] usb 4-1: Product: syz [ 651.906873][ T5168] usb 4-1: Manufacturer: syz [ 651.928035][ T5168] usb 4-1: SerialNumber: syz [ 651.944857][ T5168] usb 4-1: config 0 descriptor?? [ 651.966382][ T5168] gspca_main: se401-2.14.0 probing 047d:5003 [ 652.168002][T15098] misc userio: Can't change port type on an already running userio instance [ 652.381783][T15080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.390653][T15096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.408351][T15080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.463399][T15080] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551487) [ 652.533103][T15080] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 652.557257][ T5168] gspca_se401: Wrong descriptor type [ 652.762912][ T5889] usb 4-1: USB disconnect, device number 70 [ 652.992243][T15104] syz_tun: left promiscuous mode [ 652.997441][T15104] syz_tun: entered allmulticast mode [ 654.728969][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 654.823992][T15121] bond0: (slave syz_tun): Releasing backup interface [ 654.956679][T15127] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1964'. [ 656.216752][T15152] xt_TCPMSS: Only works on TCP SYN packets [ 656.367600][ T5168] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 656.490501][ T5889] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 656.509283][ T5889] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 656.527473][ T5168] usb 2-1: Using ep0 maxpacket: 32 [ 656.530730][ T5889] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 656.541563][ T5168] usb 2-1: config index 0 descriptor too short (expected 18, got 16) [ 656.555788][ T5168] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 656.576687][ T5889] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 656.600278][ T5168] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 656.623076][ T5168] usb 2-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 656.634504][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.655069][ T5168] usb 2-1: Product: syz [ 656.666016][ T5168] usb 2-1: Manufacturer: syz [ 656.685464][ T5168] usb 2-1: SerialNumber: syz [ 656.721162][ T5168] usb 2-1: config 0 descriptor?? [ 657.257261][ T5168] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 657.662673][T15177] misc userio: Can't change port type on an already running userio instance [ 658.666453][T15197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 659.178305][ T5909] usb 2-1: USB disconnect, device number 68 [ 659.247429][ T5168] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 659.387334][ T5168] usb 7-1: device descriptor read/64, error -71 [ 659.616680][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'. [ 659.667801][ T5168] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 660.485877][ T5168] usb 7-1: device descriptor read/64, error -71 [ 660.504849][T15227] ceph: No mds server is up or the cluster is laggy [ 660.632461][ T5168] usb usb7-port1: attempt power cycle [ 660.885224][T15237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1985'. [ 660.894684][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1985'. [ 660.910981][T15237] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1985'. [ 660.920633][T15237] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1985'. [ 660.930320][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1985'. [ 661.027425][ T5168] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 661.051461][T15237] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 661.269131][ T5168] usb 7-1: device descriptor read/8, error -71 [ 662.102490][ T5168] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 662.266732][ T5168] usb 7-1: device descriptor read/8, error -71 [ 662.399097][ T5168] usb usb7-port1: unable to enumerate USB device [ 662.413148][T15246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1987'. [ 662.444703][T15247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1987'. [ 662.506883][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 662.506899][ T30] audit: type=1326 audit(1755940835.418:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15253 comm="syz.6.1989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5bbb8ebe9 code=0x0 [ 662.716523][T15260] overlayfs: failed to resolve './file1': -2 [ 663.719824][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 663.775399][T15287] netlink: 'syz.0.1995': attribute type 30 has an invalid length. [ 663.866557][T15287] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.875610][T15287] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.884744][T15287] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.893896][T15287] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.164104][T15293] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1997'. [ 664.237728][T15302] syz_tun: entered allmulticast mode [ 664.448736][ T5930] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 665.986486][ T5930] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.013616][ T5930] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 666.167244][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 666.230460][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 666.267686][T15330] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 666.275480][ T5930] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 666.308760][T15330] netlink: 'syz.3.2003': attribute type 4 has an invalid length. [ 666.381328][ T5930] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 666.394590][T15330] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.2003'. [ 666.431976][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 666.459097][ T5930] usb 9-1: Product: syz [ 666.482627][ T5930] usb 9-1: Manufacturer: syz [ 666.514686][ T5930] usb 9-1: SerialNumber: syz [ 666.542809][ T5930] usb 9-1: config 0 descriptor?? [ 666.574259][T15336] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2005'. [ 667.152817][ T5930] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 667.171915][ T5930] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 667.267470][ T5930] usb 9-1: USB disconnect, device number 4 [ 667.448457][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 668.323571][T15355] team0 (unregistering): Port device team_slave_0 removed [ 668.455578][T15355] team0 (unregistering): Port device team_slave_1 removed [ 669.044396][T15388] overlayfs: missing 'lowerdir' [ 669.467324][ T5930] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 669.546827][T15400] overlayfs: failed to resolve './cgroup': -2 [ 669.949020][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 669.967453][ T5930] usb 7-1: unable to get BOS descriptor or descriptor too short [ 669.996214][ T5930] usb 7-1: config 8 has an invalid interface number: 203 but max is 0 [ 670.019951][ T5930] usb 7-1: config 8 has no interface number 0 [ 670.026090][ T5930] usb 7-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 670.075531][ T5930] usb 7-1: config 8 interface 203 has no altsetting 0 [ 670.129070][ T5930] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 670.155790][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.185390][ T5930] usb 7-1: Product: syz [ 670.190655][ T5930] usb 7-1: Manufacturer: syz [ 670.195772][ T5930] usb 7-1: SerialNumber: syz [ 670.408231][ T1207] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 670.487524][ T5930] usb 7-1: USB disconnect, device number 59 [ 670.581265][ T5889] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 670.619325][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 670.739975][ T1207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.779053][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 670.790844][ T1207] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 670.804286][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.829211][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.840028][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.871865][ T1207] usb 2-1: Product: syz [ 670.887955][ T1207] usb 2-1: Manufacturer: syz [ 670.902358][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 670.914775][ T1207] usb 2-1: SerialNumber: syz [ 670.942153][ T1207] usb 2-1: config 0 descriptor?? [ 670.954644][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.015902][ T5889] usb 4-1: config 0 descriptor?? [ 671.046865][ T5889] hub 4-1:0.0: USB hub found [ 671.091144][ T1207] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 671.121723][ T1207] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 671.218092][ T1207] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 672.219634][ T1207] usb 2-1: USB disconnect, device number 69 [ 672.287499][ T5889] hub 4-1:0.0: 1 port detected [ 672.803964][ T5889] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 672.837792][ T5889] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 672.882568][ T5889] usbhid 4-1:0.0: can't add hid device: -71 [ 672.900176][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 672.957293][ T5889] usb 4-1: USB disconnect, device number 72 [ 673.010227][T15449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.236147][T15455] fuse: Bad value for 'group_id' [ 673.259069][T15455] fuse: Bad value for 'group_id' [ 673.509508][T15466] input: syz0 as /devices/virtual/input/input37 [ 673.536491][T15466] netlink: 'syz.3.2028': attribute type 61 has an invalid length. [ 673.592689][T15466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2028'. [ 673.757918][T15469] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 673.819513][T15471] random: crng reseeded on system resumption [ 673.944250][T15473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2030'. [ 674.480675][T15483] netlink: 'syz.6.2031': attribute type 21 has an invalid length. [ 674.564546][T15483] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.612426][T15483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.619737][T15483] IPv6: NLM_F_CREATE should be set when creating new route [ 674.627033][T15483] IPv6: NLM_F_CREATE should be set when creating new route [ 674.634302][T15483] IPv6: NLM_F_CREATE should be set when creating new route [ 674.777592][ T5889] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 674.928920][ T5889] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.051050][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2036'. [ 675.060592][ T5889] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 675.202261][T15508] ubi: mtd0 is already attached to ubi31 [ 675.671469][ T5889] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.736279][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 675.762525][ T5889] usb 9-1: SerialNumber: syz [ 675.801500][ T5889] cdc_ether 9-1:1.0: invalid descriptor buffer length [ 675.998606][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.008135][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.032501][ T5889] usb 9-1: bad CDC descriptors [ 676.809531][T15532] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2040'. [ 677.134462][ T5889] usb 9-1: USB disconnect, device number 5 [ 678.155387][T15552] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2045'. [ 678.410961][T15555] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2047'. [ 678.475567][T15559] bpf: Bad value for 'gid' [ 678.907195][ T5889] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 679.635887][ T5889] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 679.657556][ T5889] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 679.677645][ T5889] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 679.707129][ T5889] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.758272][ T5889] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 679.791015][ T5889] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 679.812075][ T5889] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 679.822748][ T5889] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.844647][ T5889] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 679.895873][ T5889] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 679.925698][ T5889] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 679.943695][ T5889] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.959281][T15586] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 679.974668][ T5889] usb 9-1: string descriptor 0 read error: -22 [ 679.974799][ T5889] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 679.974823][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.980848][ T5889] adutux 9-1:168.0: interrupt endpoints not found [ 680.207215][ T1207] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 680.212829][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.225812][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.235133][ T6016] usb 9-1: USB disconnect, device number 6 [ 680.297940][T15592] loop9: detected capacity change from 0 to 7 [ 680.304771][T15592] buffer_io_error: 11 callbacks suppressed [ 680.304786][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.318858][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.327298][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.335207][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.343886][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.351854][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.359801][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.368113][T15592] ldm_validate_partition_table(): Disk read failed. [ 680.374767][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.382762][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.390977][T15592] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.399078][T15592] Dev loop9: unable to read RDB block 0 [ 680.404937][T15592] loop9: unable to read partition table [ 680.410821][T15592] loop9: partition table beyond EOD, truncated [ 680.417020][T15592] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 680.417020][T15592] ) failed (rc=-5) [ 680.556770][ T1207] usb 7-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 680.566086][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.692877][ T1207] usb 7-1: config 0 descriptor?? [ 680.765571][ T1207] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 680.806119][ T1207] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 682.710206][ T6016] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 682.884953][ T6016] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 682.908496][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.948342][ T6016] usb 2-1: config 0 descriptor?? [ 682.982310][ T6016] cp210x 2-1:0.0: cp210x converter detected [ 683.204705][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.352242][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.363585][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.387902][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.478769][ T6016] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 683.515048][ T6016] usb 2-1: cp210x converter now attached to ttyUSB0 [ 684.157264][ T5168] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 684.280009][ T6016] usb 2-1: USB disconnect, device number 70 [ 684.307469][ T5168] usb 9-1: device descriptor read/64, error -71 [ 684.314256][ T6016] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 684.361793][ T6016] cp210x 2-1:0.0: device disconnected [ 684.372834][T15657] kvm: user requested TSC rate below hardware speed [ 684.383607][T15657] kvm: user requested TSC rate below hardware speed [ 684.532297][T15660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2075'. [ 684.577203][ T5168] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 684.657447][T15662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 684.672876][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2076'. [ 684.692380][T15662] tipc: MTU too low for tipc bearer [ 684.727222][ T5168] usb 9-1: device descriptor read/64, error -71 [ 684.837823][ T5168] usb usb9-port1: attempt power cycle [ 684.998413][T15680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.189595][ T5168] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 685.228272][ T5168] usb 9-1: device descriptor read/8, error -71 [ 685.458960][ T5889] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 685.477217][ T5168] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 685.502265][ T5168] usb 9-1: device descriptor read/8, error -71 [ 685.627320][ T5889] usb 4-1: device descriptor read/64, error -71 [ 685.627685][ T5168] usb usb9-port1: unable to enumerate USB device [ 685.653305][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.690502][ T5168] usb 7-1: USB disconnect, device number 60 [ 685.787356][ T5839] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 685.867326][ T5889] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 685.963420][ T5839] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 685.987810][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.080829][ T5839] usb 2-1: config 0 descriptor?? [ 686.999228][ T5839] ath6kl: Failed to submit usb control message: -71 [ 687.123888][ T5839] ath6kl: unable to send the bmi data to the device: -71 [ 687.266733][ T5839] ath6kl: Unable to send get target info: -71 [ 687.391918][ T5839] ath6kl: Failed to init ath6kl core: -71 [ 687.867817][ T5889] usb 4-1: device descriptor read/64, error -71 [ 687.888796][ T5839] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 687.978672][ T5889] usb usb4-port1: attempt power cycle [ 688.008768][ T5839] usb 2-1: USB disconnect, device number 71 [ 688.082004][T15717] IPVS: set_ctl: invalid protocol: 92 172.20.20.61:20000 [ 688.210829][T15723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 689.063946][T15736] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2096'. [ 690.557235][ T6016] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 690.718898][ T6016] usb 4-1: Using ep0 maxpacket: 8 [ 690.734986][ T6016] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 690.749983][ T6016] usb 4-1: config 6 has no interface number 0 [ 690.756595][ T6016] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 690.767288][ T6016] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 690.779023][ T6016] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 690.792448][ T6016] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 690.801862][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.811437][ T6016] usb 4-1: Product: syz [ 690.815976][ T6016] usb 4-1: Manufacturer: syz [ 690.820999][ T6016] usb 4-1: SerialNumber: syz [ 690.883663][ T6016] hso 4-1:6.2: Failed to find INT IN ep [ 691.378737][ T5889] usb 4-1: USB disconnect, device number 76 [ 691.526050][T15800] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2111'. [ 692.120377][T15811] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2112'. [ 692.129596][T15811] netlink: 21 bytes leftover after parsing attributes in process `syz.6.2112'. [ 692.138750][T15811] netlink: 21 bytes leftover after parsing attributes in process `syz.6.2112'. [ 693.531219][T15817] [ 693.533617][T15817] ====================================================== [ 693.540650][T15817] WARNING: possible circular locking dependency detected [ 693.547697][T15817] 6.16.0-syzkaller #0 Not tainted [ 693.552736][T15817] ------------------------------------------------------ [ 693.559759][T15817] syz.3.2116/15817 is trying to acquire lock: [ 693.565810][T15817] ffff888025259988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 693.576865][T15817] [ 693.576865][T15817] but task is already holding lock: [ 693.584227][T15817] ffff888025259a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 693.593107][T15817] [ 693.593107][T15817] which lock already depends on the new lock. [ 693.593107][T15817] [ 693.603497][T15817] [ 693.603497][T15817] the existing dependency chain (in reverse order) is: [ 693.612497][T15817] [ 693.612497][T15817] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 693.620322][T15817] lock_acquire+0x120/0x360 [ 693.625343][T15817] __mutex_lock+0x182/0xe80 [ 693.630414][T15817] refcount_dec_and_mutex_lock+0x30/0xa0 [ 693.636612][T15817] nbd_config_put+0x2c/0x790 [ 693.641750][T15817] nbd_release+0xfe/0x140 [ 693.646601][T15817] bdev_release+0x533/0x650 [ 693.651635][T15817] blkdev_release+0x15/0x20 [ 693.656664][T15817] __fput+0x449/0xa70 [ 693.661189][T15817] fput_close_sync+0x119/0x200 [ 693.666496][T15817] __x64_sys_close+0x7f/0x110 [ 693.671714][T15817] do_syscall_64+0xfa/0x3b0 [ 693.676736][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.683146][T15817] [ 693.683146][T15817] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 693.690968][T15817] lock_acquire+0x120/0x360 [ 693.695994][T15817] __mutex_lock+0x182/0xe80 [ 693.701049][T15817] __del_gendisk+0x129/0x9e0 [ 693.706186][T15817] del_gendisk+0xe8/0x160 [ 693.711033][T15817] nbd_dev_remove_work+0x47/0xe0 [ 693.716507][T15817] process_scheduled_works+0xade/0x17b0 [ 693.722689][T15817] worker_thread+0x8a0/0xda0 [ 693.727813][T15817] kthread+0x70e/0x8a0 [ 693.732408][T15817] ret_from_fork+0x3fc/0x770 [ 693.737515][T15817] ret_from_fork_asm+0x1a/0x30 [ 693.742801][T15817] [ 693.742801][T15817] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 693.751230][T15817] validate_chain+0xb9b/0x2140 [ 693.756509][T15817] __lock_acquire+0xab9/0xd20 [ 693.761710][T15817] lock_acquire+0x120/0x360 [ 693.766728][T15817] down_write+0x96/0x1f0 [ 693.771488][T15817] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 693.777733][T15817] nbd_start_device+0x16c/0xac0 [ 693.783105][T15817] nbd_ioctl+0x636/0xeb0 [ 693.787866][T15817] blkdev_ioctl+0x5a8/0x6d0 [ 693.792880][T15817] __se_sys_ioctl+0xfc/0x170 [ 693.798001][T15817] do_syscall_64+0xfa/0x3b0 [ 693.803023][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.809434][T15817] [ 693.809434][T15817] other info that might help us debug this: [ 693.809434][T15817] [ 693.819651][T15817] Chain exists of: [ 693.819651][T15817] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 693.819651][T15817] [ 693.833813][T15817] Possible unsafe locking scenario: [ 693.833813][T15817] [ 693.841257][T15817] CPU0 CPU1 [ 693.846616][T15817] ---- ---- [ 693.851978][T15817] lock(&nbd->config_lock); [ 693.856570][T15817] lock(&disk->open_mutex); [ 693.863681][T15817] lock(&nbd->config_lock); [ 693.870800][T15817] lock(&set->update_nr_hwq_lock); [ 693.875991][T15817] [ 693.875991][T15817] *** DEADLOCK *** [ 693.875991][T15817] [ 693.884128][T15817] 1 lock held by syz.3.2116/15817: [ 693.889231][T15817] #0: ffff888025259a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 693.898545][T15817] [ 693.898545][T15817] stack backtrace: [ 693.904423][T15817] CPU: 1 UID: 0 PID: 15817 Comm: syz.3.2116 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 693.904439][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.904449][T15817] Call Trace: [ 693.904455][T15817] [ 693.904461][T15817] dump_stack_lvl+0x189/0x250 [ 693.904481][T15817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.904496][T15817] ? __pfx__printk+0x10/0x10 [ 693.904515][T15817] ? print_lock_name+0xde/0x100 [ 693.904534][T15817] print_circular_bug+0x2ee/0x310 [ 693.904553][T15817] check_noncircular+0x134/0x160 [ 693.904572][T15817] validate_chain+0xb9b/0x2140 [ 693.904589][T15817] ? stack_depot_save_flags+0x40/0x900 [ 693.904612][T15817] __lock_acquire+0xab9/0xd20 [ 693.904627][T15817] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 693.904647][T15817] lock_acquire+0x120/0x360 [ 693.904659][T15817] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 693.904680][T15817] ? __mutex_trylock_common+0x153/0x260 [ 693.904699][T15817] down_write+0x96/0x1f0 [ 693.904717][T15817] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 693.904736][T15817] ? __pfx_down_write+0x10/0x10 [ 693.904752][T15817] ? rcu_is_watching+0x15/0xb0 [ 693.904767][T15817] ? trace_contention_end+0x39/0x120 [ 693.904785][T15817] ? __mutex_lock+0x330/0xe80 [ 693.904802][T15817] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 693.904823][T15817] ? blkdev_common_ioctl+0xfc3/0x2450 [ 693.904840][T15817] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 693.904854][T15817] ? nbd_ioctl+0x131/0xeb0 [ 693.904873][T15817] ? __pfx___mutex_lock+0x10/0x10 [ 693.904891][T15817] nbd_start_device+0x16c/0xac0 [ 693.904909][T15817] ? security_capable+0x7e/0x2e0 [ 693.904929][T15817] nbd_ioctl+0x636/0xeb0 [ 693.904950][T15817] ? __pfx_nbd_ioctl+0x10/0x10 [ 693.904967][T15817] ? __asan_memset+0x22/0x50 [ 693.904987][T15817] ? smack_file_ioctl+0x24a/0x340 [ 693.905002][T15817] ? __pfx_smack_file_ioctl+0x10/0x10 [ 693.905015][T15817] ? __pfx_nbd_ioctl+0x10/0x10 [ 693.905045][T15817] blkdev_ioctl+0x5a8/0x6d0 [ 693.905065][T15817] ? __pfx_blkdev_ioctl+0x10/0x10 [ 693.905080][T15817] ? __fget_files+0x2a/0x420 [ 693.905096][T15817] ? bpf_lsm_file_ioctl+0x9/0x20 [ 693.905111][T15817] ? __pfx_blkdev_ioctl+0x10/0x10 [ 693.905127][T15817] __se_sys_ioctl+0xfc/0x170 [ 693.905147][T15817] do_syscall_64+0xfa/0x3b0 [ 693.905162][T15817] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.905175][T15817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.905188][T15817] ? clear_bhb_loop+0x60/0xb0 [ 693.905203][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.905216][T15817] RIP: 0033:0x7f6fe618ebe9 [ 693.905228][T15817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.905241][T15817] RSP: 002b:00007f6fe704a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.905254][T15817] RAX: ffffffffffffffda RBX: 00007f6fe63b5fa0 RCX: 00007f6fe618ebe9 [ 693.905265][T15817] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 693.905273][T15817] RBP: 00007f6fe6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 693.905281][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.905289][T15817] R13: 00007f6fe63b6038 R14: 00007f6fe63b5fa0 R15: 00007fff80137028 [ 693.905305][T15817] [ 694.596299][ T5842] block nbd3: Receive control failed (result -32) [ 694.649280][T15826] block nbd3: NBD_DISCONNECT [ 694.680492][T15826] block nbd3: Send disconnect failed -32 [ 694.709866][T15826] block nbd3: shutting down sockets [ 694.867545][ T6016] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 695.031263][ T6016] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 695.050387][ T6016] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.078929][ T6016] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 695.091752][ T6016] usb 2-1: config 1 has no interface number 1 [ 695.104413][ T6016] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 695.121923][ T6016] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.150040][ T6016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.167277][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.184384][ T6016] usb 2-1: Product: syz [ 695.199274][ T6016] usb 2-1: Manufacturer: syz [ 695.203981][ T6016] usb 2-1: SerialNumber: syz [ 696.480556][ T6016] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 696.491824][ T6016] usb 2-1: MIDIStreaming interface descriptor not found [ 696.512301][ T6016] usb 2-1: USB disconnect, device number 72 [ 696.543931][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory