last executing test programs: 13m41.810780965s ago: executing program 4 (id=1380): socket(0x10, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xffff5421}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000240), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 13m38.933978919s ago: executing program 4 (id=1386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x2, 0x0) fchown(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) r7 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000700000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c0003803800008008000340000000022c000b80280001800a0001006c696d6974000000180002800c00014000000000000000030800044000000001140000001000010000000000000000000084000a455e0c93e33c138557437812466f810667611f9fc9579a0a91faa0d5c7e7b6fb28c58f54830f3a9fc88b3c3a3bcfc07c7272906445886cd623929e3374987f80f8485f9555324309621d736d688f77ed6a222789c92c157aef1cf7d5d512e6e3961cb5606867ee3df8ac4fdf62ce5ef79895adc3e2a461b0b284e6c5a789ab51f813857dfb99d86f3181b3c4fe6648abfb3445bef18f0228bfea3ed4a59cb9ac0317c8b724a0afb7350702f4a1895cc87848f0be9a3da03736f33889f883f983c671212b9603b6d610058b1a6d16d369b5e9d0171770f534d5e2f5a2db2112e844ecfc687f038562947622bf660bcb44c44f049076abd9d842409dbef6c4e409badc7b515ab3ced9951f278790cb1e044c9a517ba9509b75ac44527a847f36396e27178307965c78d597a89eccbb262b7f557b0de4650013eef992736451e7d6890291510fcdce780d5cd646f574a6faafa689c171bad3e6e74c12eaf20bc37cfc67073440a77df869343f96a8f708"], 0xec}}, 0x4040082) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) 13m32.871800615s ago: executing program 4 (id=1399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x2, 0x0) fchown(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) r7 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xec}}, 0x4040082) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) 13m31.301297321s ago: executing program 4 (id=1405): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) move_mount(r1, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x50) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 13m30.177844543s ago: executing program 4 (id=1409): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) r1 = socket$unix(0x1, 0x2, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 13m25.326542541s ago: executing program 4 (id=1419): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 13m25.267218384s ago: executing program 32 (id=1419): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 12m58.710048108s ago: executing program 1 (id=1520): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 12m57.024841576s ago: executing program 1 (id=1527): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m56.039815288s ago: executing program 1 (id=1530): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xf7fffff7, 0xf21f96ad, 0x64, 0x7f, 0xc, "0000000000f2ff05ff00008000000400", 0x0, 0x6}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 12m55.882595938s ago: executing program 1 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 12m55.74746679s ago: executing program 3 (id=1533): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m55.363392091s ago: executing program 1 (id=1535): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) 12m54.690517223s ago: executing program 3 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12m54.666583184s ago: executing program 1 (id=1538): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000080)=0x8) 12m54.230238571s ago: executing program 33 (id=1538): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000080)=0x8) 12m54.215127661s ago: executing program 3 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100), 0x800) r0 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2009}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x8) 12m53.588669633s ago: executing program 3 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 12m53.425107999s ago: executing program 5 (id=1545): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12m53.264735834s ago: executing program 3 (id=1546): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x8001, 0x529c2970, 0x79e, 0x4, {0x2, 0xfffffffffffffffb, 0xd, 0xfe, 0xe, 0x2000000000000009, 0x9, 0x4, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x8}}, {0x2, 0x1, 0x6, 0xfffff1e2, 'bond0\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 12m52.081103277s ago: executing program 5 (id=1549): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 12m50.974881456s ago: executing program 5 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100), 0x800) r0 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2009}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x8) 12m50.748025469s ago: executing program 5 (id=1555): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 12m49.429947687s ago: executing program 5 (id=1556): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, 0x0) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, r0, 0x0) 12m49.188083295s ago: executing program 3 (id=1559): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m48.857628456s ago: executing program 34 (id=1559): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m48.565675075s ago: executing program 5 (id=1562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 12m48.291747451s ago: executing program 35 (id=1562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7m4.111295042s ago: executing program 0 (id=3167): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340", @ANYRESHEX], 0x64}}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10048803}, 0x4000000) 6m54.586188733s ago: executing program 0 (id=3212): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) poll(0x0, 0x0, 0x72) close(0x3) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) 6m50.190601849s ago: executing program 0 (id=3227): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010104}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}]}, 0x50}, 0x1, 0x7}, 0x10) 6m49.873422172s ago: executing program 0 (id=3234): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0x3000002, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 6m49.50202812s ago: executing program 0 (id=3236): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x8202, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6m49.277891313s ago: executing program 0 (id=3239): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5453c3322a527f4600000000000000000000000000009b9808"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe) 6m34.06738439s ago: executing program 36 (id=3239): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5453c3322a527f4600000000000000000000000000009b9808"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe) 18.894106822s ago: executing program 7 (id=4552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 17.837889434s ago: executing program 7 (id=4557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 17.464800371s ago: executing program 7 (id=4559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, 0x0, &(0x7f00000003c0)) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 15.592889848s ago: executing program 7 (id=4561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "22fde5", 0x44, 0x2f, 0x1, @local, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x4, {{0x4, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x7fffffff}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xd, 0x3, 0x1, 0x1, 0x3, 0xf}, 0x2, {0x3, 0x1c1a, 0x3, 0x3, 0x0, 0x0, 0x3, 0x1, 0x1}}}}}}}}}, 0x0) 15.210103778s ago: executing program 7 (id=4565): pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) 15.045034336s ago: executing program 7 (id=4566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 11.943314338s ago: executing program 2 (id=4577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 9.82978798s ago: executing program 8 (id=4579): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 9.503496253s ago: executing program 2 (id=4581): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = inotify_init() r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 9.285658326s ago: executing program 2 (id=4582): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$sndseq(r3, &(0x7f0000000280)=[{0xc, 0x4, 0xcc, 0xc, @time={0x401, 0x3}, {0x6, 0x4}, {0x6, 0xaf}, @raw8={"49633a913d8645ea1dca6687"}}, {0x40, 0xb8, 0x6, 0x5, @time={0x633, 0x8}, {0xb9, 0xbe}, {0x8, 0x9}, @control={0x1, 0xfffff800, 0xfffffffe}}, {0x0, 0x9, 0x5, 0x7, @tick=0x2, {0x8, 0x5}, {0x9, 0x2}, @note={0x0, 0x7, 0x4, 0x25, 0x2}}, {0x2, 0x7, 0x4, 0x2, @time={0x6, 0x2}, {0xa, 0x59}, {0x1, 0x99}, @result={0x4, 0x10000}}], 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc080001"], 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 8.353088809s ago: executing program 2 (id=4584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 8.002575824s ago: executing program 6 (id=4585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 7.932405862s ago: executing program 8 (id=4586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "22fde5", 0x44, 0x2f, 0x1, @local, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x4, {{0x4, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x7fffffff}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xd, 0x3, 0x1, 0x1, 0x3, 0xf}, 0x2, {0x3, 0x1c1a, 0x3, 0x3, 0x0, 0x0, 0x3, 0x1, 0x1}}}}}}}}}, 0x0) 7.428859535s ago: executing program 6 (id=4587): r0 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) 7.24222004s ago: executing program 2 (id=4589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="15e72abd7000fcdbdf251f"], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private2}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 6.990599072s ago: executing program 8 (id=4591): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000500)={0x40, 0x30, 0x6f, {0x6f, 0x7, "bec414839094f1ef06e9c74d642d059ecc93c9e17f9c97196456cc41a391e4f4f196a011cea1d1fadd2fc7788e40f384f90d53e75d8dacd324705ac145c17c1e57d75b4d3ba7d6ae6efc564e39bfacd05d7ae205415922623687f0683327839cdc89a60c02bf331b1888a49a00"}}, &(0x7f0000000240)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "76dd345ed8796225de6b8216d72bedad280186906688d9dd7b4c658664ab719e6f6157df4abec9ac61eaf3093639551ca462311c204c5c1f46896964bdd32f343e5f23d8bf7a2222a9b839478306d16af7fdf34031f31cf8ac9d48a872de721371ca2e50f6a0bd8852d1101d12"}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x1, "b3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x40, 0x8, 0x2, "9d78"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.317999306s ago: executing program 6 (id=4593): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x2f00, 0x80000000, 0xd09a, 0x7, 0x3, 0xfffffffe, 0x20000000, 0x3, 0xffe, 0x80, 0xc, 0x2, 0x4, 0x54100, 0xffff, 0x5, 0x4, 0x7ff, 0x830, 0x9, 0x9, 0x9, 0x800, 0x305, 0x10000002, 0x8001, 0x7, 0x3, 0x10000004, 0x5, 0x78f]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 4.547824822s ago: executing program 6 (id=4596): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) syz_usb_connect(0x0, 0x98d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000dc243f08030414605352010203010902"], 0x0) 3.155047891s ago: executing program 9 (id=4598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 3.149021119s ago: executing program 8 (id=4599): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x19c, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x154, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x401}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.260348465s ago: executing program 6 (id=4600): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001240)={0x40, 0x16, 0x28, "21979cc6464e451922f383351c032a4034877d36fc4615b7d91a3f64f73da5d26ed7a40955c83840"}, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB]}) 2.217358913s ago: executing program 8 (id=4601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.016202878s ago: executing program 9 (id=4602): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff0000", 0x1e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures}) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.751703275s ago: executing program 8 (id=4603): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x41) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.692716496s ago: executing program 2 (id=4604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 1.140137874s ago: executing program 9 (id=4605): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406"], 0x7) 624.344242ms ago: executing program 9 (id=4606): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 456.617454ms ago: executing program 9 (id=4607): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "080200", "8a36c47a9c625dfaf08ace81c500", '\x00', "362d3017f069109d"}, 0x28) 52.936326ms ago: executing program 6 (id=4608): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x2) write(r1, &(0x7f0000000240), 0x0) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) 0s ago: executing program 9 (id=4609): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x1, 0x714, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x4, 0x6, 0x10000000ffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1c, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc001}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000000), 0x8) sendmsg$nl_generic(r6, 0x0, 0xc010) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r8, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fd", 0x1d) socket$rds(0x15, 0x5, 0x0) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setscheduler(0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): d using 3 upper inode bits. [ 728.198395][T13484] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 728.324295][T13484] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 728.324483][T13484] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 728.327062][T13484] overlayfs: d_ino too big (449, ino=9223372036854778184, xinobits=3) [ 728.359466][T13484] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 728.360025][T13484] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 728.371626][T13484] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 728.385307][T13484] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 728.400405][T13484] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 728.401148][T13484] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 728.428175][T13484] overlayfs: d_ino too big (instances, ino=4611686018427388269, xinobits=3) [ 729.015974][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 729.424518][T13522] bond1: entered allmulticast mode [ 729.934947][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 731.935463][T13625] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 731.935869][T13625] overlayfs: overlapping lowerdir path [ 731.975854][T13625] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 731.975930][T13625] overlayfs: overlapping lowerdir path [ 733.501792][T13683] fuse: Unknown parameter 'group_i00000000000000000000' [ 734.137154][T13631] Bluetooth: hci1: command 0x0406 tx timeout [ 734.137197][T13631] Bluetooth: hci2: command 0x0406 tx timeout [ 734.210639][T13695] syz.7.2310 (13695) used greatest stack depth: 17752 bytes left [ 734.660603][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2321'. [ 737.127206][T13766] fuse: Unknown parameter 'group_i00000000000000000000' [ 740.365145][T13834] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 740.762017][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 743.685004][T13910] overlay: Unknown parameter '/' [ 743.716464][T13910] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 744.003536][T13921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2394'. [ 744.557383][T13942] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 745.610814][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2407'. [ 746.713981][T13968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2411'. [ 747.418192][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.418266][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.624253][T14006] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 748.549122][T14031] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2429'. [ 750.721488][T14068] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2441'. [ 751.382640][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'. [ 752.322801][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2454'. [ 752.633169][T14105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.173388][T14105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.179441][T14161] vlan3: entered promiscuous mode [ 755.179465][T14161] gretap0: entered promiscuous mode [ 756.980215][T14227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 756.999336][T14227] overlay: Unknown parameter '/' [ 757.316320][T14235] netlink: 'syz.7.2510': attribute type 12 has an invalid length. [ 757.316345][T14235] netlink: 'syz.7.2510': attribute type 29 has an invalid length. [ 757.316371][T14235] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2510'. [ 757.316397][T14235] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2510'. [ 758.317038][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 758.592274][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2516'. [ 759.419035][T14254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.502211][T14254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.532154][T14254] bond0 (unregistering): Released all slaves [ 760.008317][T14273] netlink: 'syz.6.2521': attribute type 12 has an invalid length. [ 760.008342][T14273] netlink: 'syz.6.2521': attribute type 29 has an invalid length. [ 760.008357][T14273] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2521'. [ 760.008382][T14273] netlink: 59 bytes leftover after parsing attributes in process `syz.6.2521'. [ 760.403451][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 761.478555][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 762.095323][ T37] audit: type=1326 audit(1774508224.209:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14304 comm="syz.2.2534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2651fac799 code=0x0 [ 762.122555][T14303] syz.8.2535 (14303) used greatest stack depth: 17024 bytes left [ 762.177769][T14313] netlink: 'syz.0.2536': attribute type 12 has an invalid length. [ 762.177791][T14313] netlink: 'syz.0.2536': attribute type 29 has an invalid length. [ 762.177805][T14313] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2536'. [ 762.177831][T14313] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2536'. [ 762.419517][T14321] bond1: entered allmulticast mode [ 762.636714][T14320] netdevsim netdevsim2: Direct firmware load for / [ 762.636714][T14320] failed with error -2 [ 762.636828][T14320] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 762.636828][T14320] [ 762.836541][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2542'. [ 763.428729][T14338] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 763.432507][T14338] overlay: Unknown parameter '/' [ 763.883655][T14347] netlink: 'syz.7.2550': attribute type 12 has an invalid length. [ 763.883679][T14347] netlink: 'syz.7.2550': attribute type 29 has an invalid length. [ 763.883693][T14347] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2550'. [ 763.883718][T14347] netlink: 15 bytes leftover after parsing attributes in process `syz.7.2550'. [ 764.544947][T14364] fuse: Bad value for 'rootmode' [ 764.748133][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2559'. [ 766.810159][T14410] syz_tun: entered allmulticast mode [ 767.365453][ T37] audit: type=1326 audit(1774508229.479:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14427 comm="syz.2.2578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2651fac799 code=0x0 [ 767.683933][T14435] netdevsim netdevsim2: Direct firmware load for / [ 767.683933][T14435] failed with error -2 [ 767.683975][T14435] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 767.683975][T14435] [ 768.916229][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2588'. [ 769.510416][T14460] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.913962][T14468] fuse: Bad value for 'fd' [ 772.513790][T14499] fuse: Bad value for 'fd' [ 772.918530][T14504] fuse: Unknown parameter '0x0000000000000004' [ 774.055251][T14532] fuse: Bad value for 'fd' [ 784.018725][T14782] warning: `syz.6.2662' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 784.452689][T14789] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.501056][ T5814] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 784.653666][ T5814] usb 9-1: config 0 has no interfaces? [ 784.656720][ T5814] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 784.656751][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.656771][ T5814] usb 9-1: Product: syz [ 784.656787][ T5814] usb 9-1: Manufacturer: syz [ 784.656802][ T5814] usb 9-1: SerialNumber: syz [ 784.709254][ T5814] usb 9-1: config 0 descriptor?? [ 784.943545][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.961216][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.983294][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.983743][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.022933][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.023541][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.068370][T14784] 8021q: VLANs not supported on vxcan1 [ 785.151385][ T5814] usb 9-1: USB disconnect, device number 2 [ 786.677963][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2681'. [ 788.892014][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 793.270829][T14932] overlayfs: overlapping lowerdir path [ 793.307464][T14932] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 793.307511][T14932] overlayfs: overlapping lowerdir path [ 795.879798][T14962] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 795.921029][T14965] syz_tun: entered allmulticast mode [ 796.652882][T14959] syz_tun: left allmulticast mode [ 799.268944][T14999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 803.270184][T15035] overlayfs: failed to clone lowerpath [ 803.620491][T15045] vivid-004: disconnect [ 804.579572][T15036] vivid-004: reconnect [ 808.857121][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.857197][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.276356][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2787'. [ 816.671035][T11448] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 816.851260][T11448] usb 3-1: Using ep0 maxpacket: 8 [ 816.854009][T11448] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 816.854040][T11448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.957805][T11448] pvrusb2: Hardware description: Terratec Grabster AV400 [ 816.957846][T11448] pvrusb2: ********** [ 816.957854][T11448] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 816.957867][T11448] pvrusb2: Important functionality might not be entirely working. [ 816.957877][T11448] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 816.957889][T11448] pvrusb2: ********** [ 817.083471][ T2371] pvrusb2: Invalid write control endpoint [ 817.276073][T15210] pvrusb2: Invalid write control endpoint [ 817.353074][ T2371] pvrusb2: Invalid write control endpoint [ 817.353091][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 817.353102][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 817.353110][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 817.353121][ T2371] pvrusb2: Device being rendered inoperable [ 817.358687][ T5814] usb 3-1: USB disconnect, device number 11 [ 817.441012][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 817.441137][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 817.581712][ T2371] pvrusb2: Attached sub-driver cx25840 [ 817.581767][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 817.581780][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 822.135507][T15298] overlayfs: missing 'lowerdir' [ 822.277016][T15301] overlayfs: failed to clone lowerpath [ 823.799856][T15346] overlay: Unknown parameter '/' [ 823.853371][T15348] overlayfs: failed to clone lowerpath [ 828.523066][T15342] syz.8.2825 (15342) used greatest stack depth: 16032 bytes left [ 830.901318][T15423] vivid-006: disconnect [ 831.416008][T15418] vivid-006: reconnect [ 836.460978][ T5787] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 836.645840][ T5787] usb 1-1: config 0 has no interfaces? [ 836.650605][ T5787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 836.650637][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.650659][ T5787] usb 1-1: Product: syz [ 836.650674][ T5787] usb 1-1: Manufacturer: syz [ 836.650757][ T5787] usb 1-1: SerialNumber: syz [ 836.823237][ T5787] usb 1-1: config 0 descriptor?? [ 837.059930][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.060577][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.075399][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.077149][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.127832][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.262007][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.426989][T15482] 8021q: VLANs not supported on vxcan1 [ 837.506805][ T5787] usb 1-1: USB disconnect, device number 10 [ 839.162681][T15509] vivid-000: disconnect [ 839.673916][T15506] vivid-000: reconnect [ 839.991440][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2866'. [ 842.621045][ T5806] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 842.802885][ T5806] usb 1-1: config 0 has no interfaces? [ 842.806222][ T5806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 842.806253][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.806280][ T5806] usb 1-1: Product: syz [ 842.806297][ T5806] usb 1-1: Manufacturer: syz [ 842.806312][ T5806] usb 1-1: SerialNumber: syz [ 842.865909][ T5806] usb 1-1: config 0 descriptor?? [ 843.207634][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.208230][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.295465][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.297502][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.352626][T15567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.370936][T15567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.732737][T15567] 8021q: VLANs not supported on vxcan0 [ 843.909674][ T5806] usb 1-1: USB disconnect, device number 11 [ 844.520965][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 844.602416][ T5787] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 844.700767][ T10] usb 3-1: config 0 has no interfaces? [ 844.718137][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 844.718169][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.718190][ T10] usb 3-1: Product: syz [ 844.718212][ T10] usb 3-1: Manufacturer: syz [ 844.718227][ T10] usb 3-1: SerialNumber: syz [ 844.773714][ T5787] usb 9-1: config 0 has no interfaces? [ 844.776718][ T5787] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 844.776747][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.776769][ T5787] usb 9-1: Product: syz [ 844.776784][ T5787] usb 9-1: Manufacturer: syz [ 844.776798][ T5787] usb 9-1: SerialNumber: syz [ 844.846160][ T10] usb 3-1: config 0 descriptor?? [ 844.864158][ T5787] usb 9-1: config 0 descriptor?? [ 845.099829][T15590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.100044][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.100525][T15590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.100620][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.107983][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.108561][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.111333][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.111932][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.113869][T15590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.114415][T15590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.122369][T15590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.123039][T15590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.261412][T15590] 8021q: VLANs not supported on vxcan1 [ 845.338072][ T5806] usb 3-1: USB disconnect, device number 12 [ 845.364471][ T36] usb 9-1: USB disconnect, device number 3 [ 847.412499][T15603] vivid-000: disconnect [ 847.428749][T15603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.824548][T15600] vivid-000: reconnect [ 847.833423][ T36] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 847.991122][ T36] usb 9-1: Using ep0 maxpacket: 8 [ 847.994443][ T36] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 847.994472][ T36] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.149337][ T36] pvrusb2: Hardware description: Terratec Grabster AV400 [ 848.149358][ T36] pvrusb2: ********** [ 848.149366][ T36] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 848.149380][ T36] pvrusb2: Important functionality might not be entirely working. [ 848.149389][ T36] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 848.149402][ T36] pvrusb2: ********** [ 848.293714][ T2371] pvrusb2: Invalid write control endpoint [ 848.576103][ T5787] usb 9-1: USB disconnect, device number 4 [ 848.654200][ T2371] pvrusb2: Invalid write control endpoint [ 848.654217][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 848.654228][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 848.654238][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 848.654248][ T2371] pvrusb2: Device being rendered inoperable [ 848.656293][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 848.656362][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 848.657681][ T2371] pvrusb2: Attached sub-driver cx25840 [ 848.657696][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 848.657708][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 849.249703][T15642] syz_tun: entered allmulticast mode [ 850.831892][T15662] fuse: Bad value for 'fd' [ 852.071848][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 852.095353][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 852.108393][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 852.118366][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 852.130570][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 852.946333][ T7036] syz_tun (unregistering): left allmulticast mode [ 853.162209][T15698] fuse: Bad value for 'fd' [ 853.254793][T15700] overlayfs: missing 'lowerdir' [ 854.273496][ T5817] Bluetooth: hci5: command tx timeout [ 854.951297][T15680] chnl_net:caif_netlink_parms(): no params data found [ 856.291042][ T5817] Bluetooth: hci5: command tx timeout [ 856.311847][T15680] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.312082][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.312313][T15680] bridge_slave_0: entered allmulticast mode [ 856.367820][T15680] bridge_slave_0: entered promiscuous mode [ 856.382227][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.384164][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.384410][T15680] bridge_slave_1: entered allmulticast mode [ 856.384803][T15744] overlayfs: missing 'lowerdir' [ 856.387158][T15680] bridge_slave_1: entered promiscuous mode [ 856.847824][T15680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.874157][T15680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.969917][T15680] team0: Port device team_slave_0 added [ 856.979804][T15680] team0: Port device team_slave_1 added [ 857.039735][T15680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.039752][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.039783][T15680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.101703][T15680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.101721][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.101750][T15680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.481667][T15680] hsr_slave_0: entered promiscuous mode [ 857.483075][T15680] hsr_slave_1: entered promiscuous mode [ 857.483991][T15680] debugfs: 'hsr0' already exists in 'hsr' [ 857.484015][T15680] Cannot create hsr debugfs directory [ 858.371770][ T5817] Bluetooth: hci5: command tx timeout [ 858.706951][T14600] bridge_slave_1: left allmulticast mode [ 858.706982][T14600] bridge_slave_1: left promiscuous mode [ 858.707177][T14600] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.835221][T14600] bridge_slave_0: left allmulticast mode [ 858.835244][T14600] bridge_slave_0: left promiscuous mode [ 858.835482][T14600] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.875484][T15778] overlayfs: missing 'lowerdir' [ 859.951700][T14600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.018602][T14600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.061993][T14600] bond0 (unregistering): Released all slaves [ 860.116464][T14600] bond1 (unregistering): Released all slaves [ 860.450968][ T5817] Bluetooth: hci5: command tx timeout [ 861.375807][T15802] overlayfs: failed to clone lowerpath [ 861.487340][T15805] overlay: Unknown parameter '/' [ 861.761857][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2944'. [ 861.906062][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2946'. [ 861.906102][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2946'. [ 861.908631][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2946'. [ 862.147602][T15813] fuse: Unknown parameter 'user_i00000000000000000000' [ 863.301004][T14600] hsr_slave_0: left promiscuous mode [ 863.341185][T14600] hsr_slave_1: left promiscuous mode [ 863.342026][T14600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.992550][T14600] team0 (unregistering): Port device team_slave_1 removed [ 864.051674][T14600] team0 (unregistering): Port device team_slave_0 removed [ 864.421147][T15827] lo: entered allmulticast mode [ 864.424327][T15827] lo: left allmulticast mode [ 866.425611][T15680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 866.785111][T15680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 866.889017][T15680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 867.119457][T15680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 869.233515][T15680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.344509][T15680] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.370195][T14610] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.370500][T14610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.415302][T14610] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.417674][T14610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.475680][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2971'. [ 870.369771][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.369847][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.511035][ T36] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 870.731833][ T36] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 870.731855][ T36] usb 1-1: config 0 has no interface number 0 [ 870.753559][ T36] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 870.753592][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.753614][ T36] usb 1-1: Product: syz [ 870.753629][ T36] usb 1-1: Manufacturer: syz [ 870.753645][ T36] usb 1-1: SerialNumber: syz [ 870.788474][ T36] usb 1-1: config 0 descriptor?? [ 870.835773][ T36] peak_usb 1-1:0.99: probe with driver peak_usb failed with error 99 [ 872.394952][T15680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.570390][T15680] veth0_vlan: entered promiscuous mode [ 872.676630][T15680] veth1_vlan: entered promiscuous mode [ 873.052249][T15680] veth0_macvtap: entered promiscuous mode [ 873.097271][T15680] veth1_macvtap: entered promiscuous mode [ 873.180198][T15680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.232472][T15680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.354525][ T3519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.372165][ T3519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.391853][ T3519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.392362][ T3519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.105229][T14610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.105253][T14610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.236869][T14610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.236892][T14610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.167686][ T5920] usb 1-1: USB disconnect, device number 12 [ 876.131718][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.136344][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.139918][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.210481][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.227554][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 878.300919][ T5812] Bluetooth: hci0: command tx timeout [ 878.602074][T15991] chnl_net:caif_netlink_parms(): no params data found [ 880.371139][ T5812] Bluetooth: hci0: command tx timeout [ 880.725097][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.725311][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.725512][T15991] bridge_slave_0: entered allmulticast mode [ 880.728191][T15991] bridge_slave_0: entered promiscuous mode [ 880.748758][T15991] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.749297][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.749876][T15991] bridge_slave_1: entered allmulticast mode [ 880.759928][T15991] bridge_slave_1: entered promiscuous mode [ 881.213255][T15991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.283199][T15991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.752617][T15991] team0: Port device team_slave_0 added [ 881.887030][T15991] team0: Port device team_slave_1 added [ 882.223589][T15991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.223609][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.223640][T15991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.225963][T15991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.225977][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.226002][T15991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.420389][ T3509] bridge_slave_1: left allmulticast mode [ 882.420419][ T3509] bridge_slave_1: left promiscuous mode [ 882.420694][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.451963][ T5812] Bluetooth: hci0: command tx timeout [ 882.553279][ T3509] bridge_slave_0: left allmulticast mode [ 882.553311][ T3509] bridge_slave_0: left promiscuous mode [ 882.553628][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.531008][ T5812] Bluetooth: hci0: command tx timeout [ 885.579729][T15991] hsr_slave_0: entered promiscuous mode [ 885.587932][T15991] hsr_slave_1: entered promiscuous mode [ 887.830966][ T3509] hsr_slave_0: left promiscuous mode [ 887.871066][ T3509] hsr_slave_1: left promiscuous mode [ 887.871876][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.464459][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3007'. [ 888.464479][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3007'. [ 888.464507][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3007'. [ 888.941233][ T3509] team0 (unregistering): Port device team_slave_1 removed [ 889.012070][ T3509] team0 (unregistering): Port device team_slave_0 removed [ 889.033599][T16173] overlayfs: failed to clone lowerpath [ 889.072430][T16173] overlayfs: failed to clone lowerpath [ 889.892292][ T5787] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 890.070096][ T5787] usb 9-1: config 0 has an invalid interface number: 99 but max is 0 [ 890.070128][ T5787] usb 9-1: config 0 has no interface number 0 [ 890.077407][ T5787] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 890.077439][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.077461][ T5787] usb 9-1: Product: syz [ 890.077561][ T5787] usb 9-1: Manufacturer: syz [ 890.077577][ T5787] usb 9-1: SerialNumber: syz [ 890.117628][ T5787] usb 9-1: config 0 descriptor?? [ 890.191088][ T5787] peak_usb 9-1:0.99: probe with driver peak_usb failed with error 99 [ 890.826506][T16198] team_slave_0: entered promiscuous mode [ 890.827702][T16198] team_slave_1: entered promiscuous mode [ 890.827900][T16198] vlan0: entered promiscuous mode [ 890.827915][T16198] team0: entered promiscuous mode [ 892.405380][ T5787] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 892.554217][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 892.556336][ T5787] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 892.556362][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.600630][ T5787] pvrusb2: Hardware description: Terratec Grabster AV400 [ 892.600644][ T5787] pvrusb2: ********** [ 892.600649][ T5787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 892.600658][ T5787] pvrusb2: Important functionality might not be entirely working. [ 892.600664][ T5787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 892.600673][ T5787] pvrusb2: ********** [ 892.796421][ T2371] pvrusb2: Invalid write control endpoint [ 893.048808][T16215] pvrusb2: Invalid write control endpoint [ 893.051398][ T5920] usb 3-1: USB disconnect, device number 13 [ 893.234514][ T2371] pvrusb2: Invalid write control endpoint [ 893.234532][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 893.234543][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 893.234552][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 893.234564][ T2371] pvrusb2: Device being rendered inoperable [ 893.237270][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 893.237331][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 893.324441][ T2371] pvrusb2: Attached sub-driver cx25840 [ 893.324459][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 893.324471][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 894.251152][T16235] netlink: 'syz.2.3024': attribute type 12 has an invalid length. [ 894.251177][T16235] netlink: 'syz.2.3024': attribute type 29 has an invalid length. [ 894.251193][T16235] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3024'. [ 894.251218][T16235] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3024'. [ 894.252628][T15991] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 894.430913][T15991] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 894.491763][T15991] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 894.547161][T15991] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 894.554129][ T10] usb 9-1: USB disconnect, device number 5 [ 894.970978][ T5920] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 895.153429][ T5920] usb 3-1: config 0 has no interfaces? [ 895.157366][ T5920] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 895.157397][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.157419][ T5920] usb 3-1: Product: syz [ 895.157434][ T5920] usb 3-1: Manufacturer: syz [ 895.157449][ T5920] usb 3-1: SerialNumber: syz [ 895.216664][ T5920] usb 3-1: config 0 descriptor?? [ 895.438309][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.471432][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.506722][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.507177][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.569599][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.570150][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.595139][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.821336][T16241] batadv0: entered promiscuous mode [ 895.821598][T16241] vlan2: entered promiscuous mode [ 896.054294][T15991] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.084369][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.084465][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.115057][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.115173][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.314589][ T36] usb 3-1: USB disconnect, device number 14 [ 896.970446][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3030'. [ 898.269780][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.524224][T15991] veth0_vlan: entered promiscuous mode [ 898.600422][T15991] veth1_vlan: entered promiscuous mode [ 898.753184][T15991] veth0_macvtap: entered promiscuous mode [ 898.832380][T15991] veth1_macvtap: entered promiscuous mode [ 898.923915][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.989656][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.106558][ T3509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.132290][ T3509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.132876][ T3509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.163763][ T3509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.799712][T14724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.799736][T14724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.945777][T14602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.945801][T14602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.215482][ T9] IPVS: starting estimator thread 0... [ 902.321709][T16315] IPVS: using max 11 ests per chain, 26400 per kthread [ 904.471033][ T5814] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 904.704941][ T5814] usb 9-1: config 0 has no interfaces? [ 904.708327][ T5814] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 904.708359][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.708381][ T5814] usb 9-1: Product: syz [ 904.708397][ T5814] usb 9-1: Manufacturer: syz [ 904.708411][ T5814] usb 9-1: SerialNumber: syz [ 904.763082][ T5814] usb 9-1: config 0 descriptor?? [ 904.947365][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3044'. [ 904.985561][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.985971][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.011968][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.012524][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.114758][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.115186][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.183451][T16319] batadv0: entered promiscuous mode [ 905.183557][T16319] vlan0: entered promiscuous mode [ 905.291226][T16328] vivid-000: disconnect [ 905.457862][T16323] vivid-000: reconnect [ 905.625814][ T5814] usb 9-1: USB disconnect, device number 6 [ 908.856833][T16377] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 910.029009][T16392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.958517][T16407] vivid-000: disconnect [ 913.075689][T16409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.013694][T16404] vivid-000: reconnect [ 915.615256][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 915.615276][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 915.615304][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 916.601027][ T36] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 916.773776][ T36] usb 3-1: config 0 has no interfaces? [ 916.776465][ T36] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 916.776489][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.776504][ T36] usb 3-1: Product: syz [ 916.776514][ T36] usb 3-1: Manufacturer: syz [ 916.776525][ T36] usb 3-1: SerialNumber: syz [ 916.780412][ T36] usb 3-1: config 0 descriptor?? [ 917.100675][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.106847][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.152870][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.153542][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.166221][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.167710][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.246349][T16443] 8021q: VLANs not supported on vxcan0 [ 917.317158][T11448] usb 3-1: USB disconnect, device number 15 [ 917.706730][T16464] team_slave_0: entered promiscuous mode [ 917.706788][T16464] team_slave_1: entered promiscuous mode [ 917.706968][T16464] vlan0: entered promiscuous mode [ 917.706983][T16464] team0: entered promiscuous mode [ 917.848311][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3088'. [ 917.994455][T16474] input: syz0 as /devices/virtual/input/input5 [ 919.090978][ T36] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 919.486646][ T36] usb 9-1: config 0 has an invalid interface number: 99 but max is 0 [ 919.486676][ T36] usb 9-1: config 0 has no interface number 0 [ 919.617651][T16490] fuse: Bad value for 'rootmode' [ 919.650673][ T36] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 919.650709][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.650732][ T36] usb 9-1: Product: syz [ 919.650748][ T36] usb 9-1: Manufacturer: syz [ 919.650764][ T36] usb 9-1: SerialNumber: syz [ 919.728477][ T36] usb 9-1: config 0 descriptor?? [ 919.958021][ T36] peak_usb 9-1:0.99: probe with driver peak_usb failed with error 99 [ 924.835275][ T9] usb 9-1: USB disconnect, device number 7 [ 925.763230][T16522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.771311][T16539] input: syz0 as /devices/virtual/input/input6 [ 929.876976][T16545] syz_tun: entered allmulticast mode [ 930.807106][ T36] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 931.104821][ T36] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 931.104844][ T36] usb 3-1: config 0 has no interface number 0 [ 931.109892][ T36] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 931.109916][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.109931][ T36] usb 3-1: Product: syz [ 931.109941][ T36] usb 3-1: Manufacturer: syz [ 931.109952][ T36] usb 3-1: SerialNumber: syz [ 931.168874][ T36] usb 3-1: config 0 descriptor?? [ 931.195842][ T36] peak_usb 3-1:0.99: probe with driver peak_usb failed with error 99 [ 931.429195][T16565] fuse: Bad value for 'rootmode' [ 931.738582][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.738658][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.919331][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3113'. [ 935.132180][ T5814] usb 3-1: USB disconnect, device number 16 [ 935.688327][T16582] bond1: entered allmulticast mode [ 936.474143][ T5814] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 936.477026][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 936.601128][ T5814] usb 9-1: device descriptor read/64, error -32 [ 936.880964][ T5814] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 937.113562][ T5814] usb 9-1: config 0 has no interfaces? [ 937.119950][ T5814] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 937.119973][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.119988][ T5814] usb 9-1: Product: syz [ 937.119998][ T5814] usb 9-1: Manufacturer: syz [ 937.120015][ T5814] usb 9-1: SerialNumber: syz [ 937.159394][ T5814] usb 9-1: config 0 descriptor?? [ 937.181132][T16600] netlink: 'syz.6.3121': attribute type 12 has an invalid length. [ 937.181158][T16600] netlink: 'syz.6.3121': attribute type 29 has an invalid length. [ 937.181173][T16600] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3121'. [ 937.368494][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.369025][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.374193][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.375651][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.406426][T16592] vlan0: entered promiscuous mode [ 938.015087][T11448] usb 9-1: USB disconnect, device number 9 [ 939.768420][T16626] bond2: entered allmulticast mode [ 940.160946][ T5814] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 940.382780][ T5814] usb 9-1: config 0 has an invalid interface number: 99 but max is 0 [ 940.382803][ T5814] usb 9-1: config 0 has no interface number 0 [ 940.388665][ T5814] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 940.388688][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.388703][ T5814] usb 9-1: Product: syz [ 940.388713][ T5814] usb 9-1: Manufacturer: syz [ 940.388724][ T5814] usb 9-1: SerialNumber: syz [ 940.441796][ T5814] usb 9-1: config 0 descriptor?? [ 940.468865][ T5814] peak_usb 9-1:0.99: probe with driver peak_usb failed with error 99 [ 941.931633][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 942.186999][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 942.187033][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 942.187048][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 942.187083][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 942.187103][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 942.191811][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 942.191843][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 942.191865][ T10] usb 3-1: Product: syz [ 942.191880][ T10] usb 3-1: Manufacturer: syz [ 942.381341][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 942.381359][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 942.533920][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 942.534005][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 942.828629][T16646] fuse: Bad value for 'rootmode' [ 945.111357][ T5787] usb 9-1: USB disconnect, device number 10 [ 947.034039][ T5787] usb 3-1: USB disconnect, device number 17 [ 947.475127][T16667] bond3: entered allmulticast mode [ 950.380959][ T5787] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 950.557174][ T5787] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 950.557197][ T5787] usb 1-1: config 0 has no interface number 0 [ 950.664207][ T5787] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 950.664232][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.664247][ T5787] usb 1-1: Product: syz [ 950.664258][ T5787] usb 1-1: Manufacturer: syz [ 950.664268][ T5787] usb 1-1: SerialNumber: syz [ 950.709359][ T5787] usb 1-1: config 0 descriptor?? [ 950.728463][ T5787] peak_usb 1-1:0.99: probe with driver peak_usb failed with error 99 [ 953.131857][ T5814] usb 1-1: USB disconnect, device number 13 [ 954.049257][T16761] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3171'. [ 955.481035][T16771] overlayfs: failed to clone upperpath [ 957.150962][ T5787] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 957.310877][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 957.888640][ T5787] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.888680][ T5787] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.888724][ T5787] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 957.888749][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.548492][T16807] capability: warning: `syz.7.3189' uses deprecated v2 capabilities in a way that may be insecure [ 958.607524][ T5787] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 958.892800][ T5787] usb 3-1: USB disconnect, device number 18 [ 959.860603][ T37] audit: type=1326 audit(1774508421.969:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 959.883870][ T37] audit: type=1326 audit(1774508421.999:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 959.887866][ T37] audit: type=1326 audit(1774508421.999:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a606ecfce code=0x7ffc0000 [ 959.888609][ T37] audit: type=1326 audit(1774508421.999:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 959.888921][ T37] audit: type=1326 audit(1774508421.999:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 959.890306][ T37] audit: type=1326 audit(1774508421.999:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 959.927299][ T37] audit: type=1326 audit(1774508421.999:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 959.927766][ T37] audit: type=1326 audit(1774508422.049:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16824 comm="syz.2.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 961.643408][T16843] Bluetooth: MGMT ver 1.23 [ 962.129594][ T36] kernel write not supported for file /sg0 (pid: 36 comm: kworker/1:1) [ 962.238511][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3203'. [ 962.238628][T16845] bridge_slave_1: left allmulticast mode [ 962.238653][T16845] bridge_slave_1: left promiscuous mode [ 962.238931][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.433108][T16845] bridge_slave_0: left allmulticast mode [ 962.433283][T16845] bridge_slave_0: left promiscuous mode [ 962.433567][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.551206][T16853] fuse: root generation should be zero [ 963.231699][ T36] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 963.670976][ T5814] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 963.691012][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 963.693216][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.693248][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.693286][ T36] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 963.693304][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.716467][ T36] usb 1-1: config 0 descriptor?? [ 963.765460][ T36] hub 1-1:0.0: USB hub found [ 963.859448][ T5814] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 963.859540][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.859564][ T5814] usb 9-1: Product: syz [ 963.859579][ T5814] usb 9-1: Manufacturer: syz [ 963.859595][ T5814] usb 9-1: SerialNumber: syz [ 963.965558][ T36] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 965.299627][ T36] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 965.354748][ T5814] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 965.354825][ T5814] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 965.427900][ T5806] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 965.571109][ T5806] usb 3-1: Using ep0 maxpacket: 32 [ 965.586557][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.586618][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.587231][ T5806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 965.587267][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 965.654666][ T5806] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 965.654691][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.655129][ T5806] usb 3-1: Product: syz [ 965.655143][ T5806] usb 3-1: Manufacturer: syz [ 965.655155][ T5806] usb 3-1: SerialNumber: syz [ 965.856541][ T36] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 965.860519][ T5806] usb 3-1: config 0 descriptor?? [ 966.066993][ T5806] usb 3-1: no audio or video endpoints found [ 966.843700][ T5814] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 966.843778][ T5814] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 966.845366][ T5814] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 967.002494][ T36] usb 1-1: USB disconnect, device number 14 [ 967.008922][ T5806] usb 3-1: USB disconnect, device number 19 [ 967.042570][ T5814] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 967.094282][ T5814] usb 9-1: USB disconnect, device number 11 [ 967.159046][T16901] fido_id[16901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 967.865039][ T36] kernel write not supported for file /vcsu (pid: 36 comm: kworker/1:1) [ 967.947701][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3237'. [ 968.418781][T16940] syzkaller0: entered promiscuous mode [ 968.418812][T16940] syzkaller0: entered allmulticast mode [ 968.434219][T16949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3244'. [ 968.514553][T16952] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3246'. [ 969.960208][T16966] netlink: 'syz.8.3249': attribute type 1 has an invalid length. [ 972.272755][T17019] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3271'. [ 972.325266][T17020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3271'. [ 974.773348][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 983.191031][T16966] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 983.201226][T17012] netlink: 'syz.7.3268': attribute type 3 has an invalid length. [ 983.713713][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 983.719994][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 983.737090][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 983.748740][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 983.758660][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 984.435946][T17054] SQUASHFS error: Failed to read block 0x0: -5 [ 985.224576][T15991] syz_tun (unregistering): left allmulticast mode [ 985.833540][ T5812] Bluetooth: hci4: command tx timeout [ 985.880350][T17073] fuse: Bad value for 'rootmode' [ 986.980511][ T37] audit: type=1326 audit(1774508449.089:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17081 comm="syz.2.3295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x0 [ 987.895373][ T5812] Bluetooth: hci4: command tx timeout [ 988.314549][T14611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.768700][T14611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.971004][ T5812] Bluetooth: hci4: command tx timeout [ 991.279379][T14611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.736366][T14611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.050898][ T5812] Bluetooth: hci4: command tx timeout [ 992.204655][T17037] chnl_net:caif_netlink_parms(): no params data found [ 993.253633][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.253765][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.254015][T17037] bridge_slave_0: entered allmulticast mode [ 993.305950][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.306023][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.300262][T17037] bridge_slave_0: entered promiscuous mode [ 994.372707][T14611] bridge_slave_1: left allmulticast mode [ 994.372739][T14611] bridge_slave_1: left promiscuous mode [ 994.372983][T14611] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.694841][T14611] bridge_slave_0: left allmulticast mode [ 994.694872][T14611] bridge_slave_0: left promiscuous mode [ 994.695132][T14611] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.681794][T14611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.771937][T14611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.803131][T14611] bond0 (unregistering): Released all slaves [ 996.859840][T17037] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.859976][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.860211][T17037] bridge_slave_1: entered allmulticast mode [ 996.889850][T17037] bridge_slave_1: entered promiscuous mode [ 997.008653][T17153] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 997.248610][T17037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.286032][T17037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.205443][T17037] team0: Port device team_slave_0 added [ 999.669708][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1000.443068][T17037] team0: Port device team_slave_1 added [ 1000.495183][T17215] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3335'. [ 1000.943668][T17037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.943686][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.943711][T17037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.003882][T17037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.003901][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.003933][T17037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.181134][T14611] hsr_slave_0: left promiscuous mode [ 1001.221222][T14611] hsr_slave_1: left promiscuous mode [ 1001.222453][T14611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.222484][T14611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.262669][T14611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.262699][T14611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.311147][ T5806] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1001.373657][T14611] veth1_macvtap: left promiscuous mode [ 1001.373765][T14611] veth0_macvtap: left promiscuous mode [ 1001.374015][T14611] veth1_vlan: left promiscuous mode [ 1001.374195][T14611] veth0_vlan: left promiscuous mode [ 1001.488842][ T5806] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.488881][ T5806] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.488906][ T5806] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1001.488953][ T5806] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1001.488978][ T5806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.546057][ T5806] usb 9-1: config 0 descriptor?? [ 1001.621356][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3342'. [ 1001.810441][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cbfc000: rx timeout, send abort [ 1002.046830][ T5806] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1002.311852][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cbfc000: abort rx timeout. Force session deactivation [ 1002.312698][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cbffc00: rx timeout, send abort [ 1002.366958][T17234] usb 9-1: string descriptor 0 read error: -71 [ 1002.385876][ T10] usb 9-1: USB disconnect, device number 12 [ 1002.424550][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3347'. [ 1002.712531][T17270] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3350'. [ 1002.812772][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cbffc00: abort rx timeout. Force session deactivation [ 1002.922507][T14611] team0 (unregistering): Port device team_slave_1 removed [ 1002.981708][T14611] team0 (unregistering): Port device team_slave_0 removed [ 1004.698745][T17287] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3357'. [ 1004.698772][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3357'. [ 1004.698793][T17287] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3357'. [ 1004.698834][T17287] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3357'. [ 1004.914454][T17037] hsr_slave_0: entered promiscuous mode [ 1004.915611][T17037] hsr_slave_1: entered promiscuous mode [ 1006.197198][T17308] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3364'. [ 1007.393422][T17324] evm: overlay not supported [ 1008.797833][T17037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1010.304192][T17037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1010.366586][T17037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1010.505359][T17357] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3378'. [ 1010.551643][T17037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1011.866164][T17037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.001869][T17037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.084964][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.085122][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.087662][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.087795][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.604108][T17037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.025729][T17423] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3391'. [ 1015.681378][T17037] veth0_vlan: entered promiscuous mode [ 1015.708913][T17037] veth1_vlan: entered promiscuous mode [ 1015.857899][T17037] veth0_macvtap: entered promiscuous mode [ 1015.891737][T17037] veth1_macvtap: entered promiscuous mode [ 1016.015833][T17037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.062936][T17037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.117056][ T3519] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.155299][ T3519] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.158949][ T3519] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.159546][ T3519] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.661158][T14608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.661180][T14608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.834658][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.834680][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.160938][ T5814] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1017.325074][ T5814] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1017.325137][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.381430][ T5814] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1017.381474][ T5814] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1017.381496][ T5814] usb 9-1: Manufacturer: syz [ 1017.420675][ T5814] usb 9-1: config 0 descriptor?? [ 1017.593342][ T5814] rc_core: IR keymap rc-hauppauge not found [ 1017.593366][ T5814] Registered IR keymap rc-empty [ 1017.596582][ T5814] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1017.599911][ T5814] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input8 [ 1017.751679][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 1017.951744][ T10] usb 9-1: USB disconnect, device number 13 [ 1018.183824][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3405'. [ 1018.360954][ T5787] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1018.580418][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.580457][ T5787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1018.580503][ T5787] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1018.580526][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.747371][ T5787] usb 3-1: config 0 descriptor?? [ 1019.323985][ T5787] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 1019.324034][ T5787] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1019.324062][ T5787] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1019.552207][ T5787] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1023.565746][T17549] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1023.733473][T17549] bond2: (slave lo): Enslaving as an active interface with an up link [ 1023.751765][T17549] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1025.248161][T11448] usb 3-1: USB disconnect, device number 20 [ 1026.763192][ T37] audit: type=1326 audit(1774508488.879:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17594 comm="syz.9.3436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x0 [ 1031.091743][T17647] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3450'. [ 1032.235367][T17662] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3454'. [ 1035.649810][T17699] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3465'. [ 1036.793191][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3470'. [ 1038.273017][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3474'. [ 1041.819449][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3486'. [ 1045.203675][T17832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.230466][T17832] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1048.175646][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3499'. [ 1048.880603][T17880] trusted_key: encrypted_key: insufficient parameters specified [ 1051.607388][ T37] audit: type=1326 audit(1774508513.719:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.8.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1051.607868][ T37] audit: type=1326 audit(1774508513.719:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.8.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1051.705553][ T37] audit: type=1326 audit(1774508513.719:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.8.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1051.705611][ T37] audit: type=1326 audit(1774508513.819:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.8.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1051.705661][ T37] audit: type=1326 audit(1774508513.819:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.8.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1051.705710][ T37] audit: type=1326 audit(1774508513.819:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.8.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1052.242848][T17911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3515'. [ 1052.562564][ T37] audit: type=1326 audit(1774508514.529:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.8.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1054.796406][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.798316][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.316479][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3521'. [ 1059.394357][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1061.725248][ T5812] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1062.524863][T18003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.041385][T18041] overlayfs: failed to clone upperpath [ 1065.913575][ T5812] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1065.913814][ T5812] Bluetooth: hci1: Injecting HCI hardware error event [ 1065.917180][ T5812] Bluetooth: hci1: hardware error 0x00 [ 1067.074870][T18077] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 1068.354194][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3565'. [ 1068.483181][T18096] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3567'. [ 1069.267154][ T5812] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1070.604961][T18128] bond2: (slave lo): Releasing backup interface [ 1070.685171][T18128] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1070.761027][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3580'. [ 1070.761045][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3580'. [ 1070.809880][T18128] bridge_slave_0: left allmulticast mode [ 1070.809926][T18128] bridge_slave_0: left promiscuous mode [ 1070.828617][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.983213][T18128] bridge_slave_1: left allmulticast mode [ 1070.983236][T18128] bridge_slave_1: left promiscuous mode [ 1070.983615][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.460335][ T5812] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1071.464762][ T5812] Bluetooth: hci3: Injecting HCI hardware error event [ 1071.473792][ T5812] Bluetooth: hci3: hardware error 0x00 [ 1071.604102][T18128] bond0: (slave bond_slave_0): Releasing backup interface [ 1071.724441][T18128] bond0: (slave bond_slave_1): Releasing backup interface [ 1071.795242][T18128] team_slave_0: left promiscuous mode [ 1072.137588][T18128] team0: Port device team_slave_0 removed [ 1072.138475][T18128] team_slave_1: left promiscuous mode [ 1073.067238][T18128] team0: Port device team_slave_1 removed [ 1073.068243][T18128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.068261][T18128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.159270][T18128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1073.255273][T18133] tipc: Started in network mode [ 1073.255298][T18133] tipc: Node identity 8651b1cc229e, cluster identity 4711 [ 1073.255876][T18133] tipc: Enabled bearer , priority 0 [ 1073.257086][T18141] syzkaller0: entered promiscuous mode [ 1073.257110][T18141] syzkaller0: entered allmulticast mode [ 1073.318258][T18155] tipc: Resetting bearer [ 1073.435153][T18123] tipc: Resetting bearer [ 1073.650945][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1074.942126][T18123] tipc: Disabling bearer [ 1075.235919][ T10] tipc: Node number set to 2765074892 [ 1076.421678][T18202] syzkaller0: entered promiscuous mode [ 1076.421707][T18202] syzkaller0: entered allmulticast mode [ 1076.502793][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1076.502820][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1076.824003][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1077.018894][ T37] audit: type=1326 audit(1774508539.129:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.046030][ T37] audit: type=1326 audit(1774508539.129:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.047149][ T37] audit: type=1326 audit(1774508539.159:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81f3fccfce code=0x7ffc0000 [ 1077.050508][ T37] audit: type=1326 audit(1774508539.159:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81f3fccfce code=0x7ffc0000 [ 1077.152729][ T37] audit: type=1326 audit(1774508539.189:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.152789][ T37] audit: type=1326 audit(1774508539.269:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.152839][ T37] audit: type=1326 audit(1774508539.269:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.152888][ T37] audit: type=1326 audit(1774508539.269:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.153604][ T37] audit: type=1326 audit(1774508539.269:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.155890][ T37] audit: type=1326 audit(1774508539.269:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.9.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x7ffc0000 [ 1077.422024][T18218] mmap: syz.9.3596 (18218) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1080.239011][T18237] syz.2.3604 (18237): drop_caches: 2 [ 1080.275661][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1081.990893][T18245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1081.990919][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1082.108760][ T10] usb 9-1: device not accepting address 14, error -71 [ 1082.337428][T18261] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3612'. [ 1082.365469][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1082.510131][T18267] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1083.029827][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1083.029854][T18281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1083.029870][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1083.309661][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3624'. [ 1083.600147][T18298] bridge_slave_0: left allmulticast mode [ 1083.600180][T18298] bridge_slave_0: left promiscuous mode [ 1083.600441][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.564674][T18298] bridge_slave_1: left allmulticast mode [ 1084.564706][T18298] bridge_slave_1: left promiscuous mode [ 1084.565106][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.814260][T18298] bond0: (slave bond_slave_0): Releasing backup interface [ 1084.915173][T18317] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3633'. [ 1084.915202][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3633'. [ 1084.995181][T18298] bond0: (slave bond_slave_1): Releasing backup interface [ 1085.139834][T18298] team0: Port device team_slave_0 removed [ 1085.206853][T18298] team0: Port device team_slave_1 removed [ 1085.207762][T18298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.207784][T18298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.289239][T18298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.289262][T18298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.332698][T18298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1089.739941][T18395] __nla_validate_parse: 6 callbacks suppressed [ 1089.740001][T18395] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3660'. [ 1089.740018][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3660'. [ 1089.740034][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3660'. [ 1090.746388][T18383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.414661][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3662'. [ 1092.421180][T18383] bridge_slave_0: left allmulticast mode [ 1092.421211][T18383] bridge_slave_0: left promiscuous mode [ 1092.421473][T18383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.525549][T18383] bridge_slave_1: left allmulticast mode [ 1092.525569][T18383] bridge_slave_1: left promiscuous mode [ 1092.525821][T18383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.707535][T18383] bond0: (slave bond_slave_0): Releasing backup interface [ 1092.761765][T18383] bond0: (slave bond_slave_1): Releasing backup interface [ 1092.841827][T18383] team0: Port device team_slave_0 removed [ 1092.883132][T18383] team0: Port device team_slave_1 removed [ 1092.888696][T18383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.892917][T18383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.954495][T18383] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1093.468703][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3666'. [ 1093.813891][T18430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3665'. [ 1095.051248][T18430] bond0: entered promiscuous mode [ 1095.053565][T18430] gretap0: entered promiscuous mode [ 1095.055464][T18430] hsr1: entered promiscuous mode [ 1095.988594][T18449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1096.519121][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3676'. [ 1099.856411][T18489] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3681'. [ 1102.148179][T18504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3688'. [ 1108.182677][T18077] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.937963][T18507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1116.058371][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.058447][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.141726][T18608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.176301][T18608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.215593][T18608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.617618][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3724'. [ 1116.785216][T18617] fuse: Unknown parameter '00000000000000000000003' [ 1117.840204][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3736'. [ 1123.319427][ T5814] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1124.012141][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 1124.018699][ T5814] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1124.018754][ T5814] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1124.018813][ T5814] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1124.018846][ T5814] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1124.018875][ T5814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1124.118455][ T5814] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1124.118489][ T5814] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1124.118512][ T5814] usb 9-1: Product: syz [ 1124.118528][ T5814] usb 9-1: Manufacturer: syz [ 1124.118544][ T5814] usb 9-1: SerialNumber: syz [ 1124.162530][ T5814] usb 9-1: config 0 descriptor?? [ 1124.189371][ T5814] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1124.266877][ T5814] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1124.614261][ T5814] usb 9-1: USB disconnect, device number 16 [ 1124.699236][ T5814] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1128.201290][T18726] netlink: 'syz.8.3760': attribute type 10 has an invalid length. [ 1128.250977][T18726] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1133.870861][ T5892] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1134.051049][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 1134.053669][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.053721][ T5892] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1134.053743][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.067996][ T5892] usb 10-1: config 0 descriptor?? [ 1137.175453][ T5892] usbhid 10-1:0.0: can't add hid device: -71 [ 1137.175569][ T5892] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1137.207409][ T5892] usb 10-1: USB disconnect, device number 2 [ 1138.175207][T18776] bond0: (slave bond_slave_0): Releasing backup interface [ 1138.231557][T18776] bond0: (slave bond_slave_1): Releasing backup interface [ 1138.277872][T18776] team_slave_0: left promiscuous mode [ 1138.302075][T18776] team0: Port device team_slave_0 removed [ 1138.316358][T18776] team_slave_1: left promiscuous mode [ 1138.341690][T18776] team0: Port device team_slave_1 removed [ 1138.345386][T18776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.365027][T18776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.409484][T18776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.413847][T18776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.456815][T18776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1139.420613][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1139.420634][ T37] audit: type=1326 audit(1774508601.509:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.420684][ T37] audit: type=1326 audit(1774508601.509:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a606ecfce code=0x7ffc0000 [ 1139.420920][ T37] audit: type=1326 audit(1774508601.509:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a606ecfce code=0x7ffc0000 [ 1139.420972][ T37] audit: type=1326 audit(1774508601.509:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.421074][ T37] audit: type=1326 audit(1774508601.509:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.421132][ T37] audit: type=1326 audit(1774508601.509:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.421180][ T37] audit: type=1326 audit(1774508601.509:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.421226][ T37] audit: type=1326 audit(1774508601.509:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.421275][ T37] audit: type=1326 audit(1774508601.509:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.421327][ T37] audit: type=1326 audit(1774508601.509:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18830 comm="syz.2.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1139.451039][T11448] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1139.703392][T11448] usb 9-1: Using ep0 maxpacket: 32 [ 1139.724890][T11448] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1139.724920][T11448] usb 9-1: config 0 has no interface number 0 [ 1139.725099][T11448] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1139.727799][T11448] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1139.727835][T11448] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.727851][T11448] usb 9-1: Product: syz [ 1139.727861][T11448] usb 9-1: Manufacturer: syz [ 1139.727872][T11448] usb 9-1: SerialNumber: syz [ 1140.033628][T11448] usb 9-1: config 0 descriptor?? [ 1140.034711][T18829] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1140.358325][T18829] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1141.157849][T18846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1142.425804][T11448] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1142.425839][T11448] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1142.426325][T11448] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1142.503122][T11448] usb 9-1: USB disconnect, device number 17 [ 1145.212353][T18885] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3814'. [ 1145.262083][T18884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1148.510136][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1148.510157][ T37] audit: type=1326 audit(1774508610.619:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1148.510211][ T37] audit: type=1326 audit(1774508610.619:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1148.517756][ T37] audit: type=1326 audit(1774508610.629:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a606ecfce code=0x7ffc0000 [ 1148.517855][ T37] audit: type=1326 audit(1774508610.629:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a606ecfce code=0x7ffc0000 [ 1148.517998][ T37] audit: type=1326 audit(1774508610.629:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1148.540346][ T37] audit: type=1326 audit(1774508610.649:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1148.540553][ T37] audit: type=1326 audit(1774508610.649:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1148.540668][ T37] audit: type=1326 audit(1774508610.649:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1148.541708][ T37] audit: type=1326 audit(1774508610.649:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1148.572610][ T37] audit: type=1326 audit(1774508610.649:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18901 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f5a6072c799 code=0x7ffc0000 [ 1149.802202][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3829'. [ 1152.055319][T18959] IPVS: Scheduler module ip_vs_ not found [ 1152.411935][T18980] netlink: 596 bytes leftover after parsing attributes in process `syz.8.3841'. [ 1154.670604][T16907] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1155.104467][T16907] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1155.104529][T16907] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1155.104555][T16907] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1155.110482][T16907] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1155.110514][T16907] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1155.110535][T16907] usb 10-1: Product: syz [ 1155.110551][T16907] usb 10-1: Manufacturer: syz [ 1155.110567][T16907] usb 10-1: SerialNumber: syz [ 1155.189898][T16907] usb 10-1: config 0 descriptor?? [ 1155.207733][T16907] hub 10-1:0.0: bad descriptor, ignoring hub [ 1155.207778][T16907] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1155.236529][T16907] usb 10-1: selecting invalid altsetting 0 [ 1155.668530][ T5892] usb 10-1: USB disconnect, device number 3 [ 1155.791996][T19021] netlink: 596 bytes leftover after parsing attributes in process `syz.8.3858'. [ 1158.265020][T19059] netlink: 596 bytes leftover after parsing attributes in process `syz.8.3873'. [ 1162.160315][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 1162.160335][ T37] audit: type=1326 audit(1774508624.269:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19093 comm="syz.2.3885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x0 [ 1166.176953][T19118] netlink: 596 bytes leftover after parsing attributes in process `syz.9.3889'. [ 1166.643060][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3894'. [ 1167.256968][T19137] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3897'. [ 1170.768305][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3899'. [ 1170.971517][T19160] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3907'. [ 1171.677590][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3910'. [ 1176.383382][T19210] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3923'. [ 1178.585667][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.585742][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.533965][T19261] netlink: 596 bytes leftover after parsing attributes in process `syz.9.3944'. [ 1185.876833][T19305] netlink: 596 bytes leftover after parsing attributes in process `syz.9.3960'. [ 1192.901653][T19344] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3971'. [ 1193.001131][T19346] 9p: Bad value for 'source' [ 1193.617466][T16907] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1193.645118][T16907] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1201.757816][T19417] netlink: 'syz.8.3996': attribute type 29 has an invalid length. [ 1201.760855][T19417] netlink: 596 bytes leftover after parsing attributes in process `syz.8.3996'. [ 1205.493408][T19454] netlink: 'syz.9.4009': attribute type 29 has an invalid length. [ 1205.494546][T19454] netlink: 596 bytes leftover after parsing attributes in process `syz.9.4009'. [ 1205.820940][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4012'. [ 1206.035702][T19468] netlink: 'syz.7.4015': attribute type 39 has an invalid length. [ 1208.312304][T19487] netlink: 'syz.2.4021': attribute type 29 has an invalid length. [ 1208.313552][T19487] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4021'. [ 1208.955164][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4026'. [ 1209.110894][T17845] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1209.501034][T17845] usb 10-1: Using ep0 maxpacket: 32 [ 1209.503738][T17845] usb 10-1: config 8 has an invalid interface number: 237 but max is 0 [ 1209.503770][T17845] usb 10-1: config 8 has no interface number 0 [ 1209.503803][T17845] usb 10-1: config 8 interface 237 has no altsetting 0 [ 1209.506962][T17845] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.23 [ 1209.506991][T17845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.507013][T17845] usb 10-1: Product: syz [ 1209.507029][T17845] usb 10-1: Manufacturer: syz [ 1209.507044][T17845] usb 10-1: SerialNumber: syz [ 1210.773753][T17845] usb 10-1: USB disconnect, device number 4 [ 1210.917033][T19520] netlink: 'syz.6.4032': attribute type 29 has an invalid length. [ 1210.931291][T19520] netlink: 'syz.6.4032': attribute type 29 has an invalid length. [ 1210.934132][T19520] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4032'. [ 1211.491047][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4037'. [ 1214.396244][T19558] netlink: 'syz.9.4046': attribute type 29 has an invalid length. [ 1214.400013][T19558] netlink: 'syz.9.4046': attribute type 29 has an invalid length. [ 1214.450278][T19558] netlink: 596 bytes leftover after parsing attributes in process `syz.9.4046'. [ 1214.793957][ T5812] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1214.890919][T16907] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1214.923746][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4050'. [ 1215.040986][T16907] usb 3-1: Using ep0 maxpacket: 32 [ 1215.043743][T16907] usb 3-1: config 0 has no interfaces? [ 1215.043782][T16907] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1215.043807][T16907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.059874][T16907] usb 3-1: config 0 descriptor?? [ 1215.505893][T16907] usb 3-1: USB disconnect, device number 21 [ 1215.600848][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1215.740871][ T10] usb 9-1: device descriptor read/64, error -71 [ 1216.070826][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1216.210757][ T10] usb 9-1: device descriptor read/64, error -71 [ 1216.321534][ T10] usb usb9-port1: attempt power cycle [ 1216.454322][ T37] audit: type=1326 audit(1774508678.569:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19588 comm="syz.2.4057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x0 [ 1216.670873][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1216.691634][ T10] usb 9-1: device descriptor read/8, error -71 [ 1217.160367][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1217.213358][ T10] usb 9-1: device descriptor read/8, error -71 [ 1217.321319][ T10] usb usb9-port1: unable to enumerate USB device [ 1217.496703][T19602] netlink: 'syz.9.4059': attribute type 29 has an invalid length. [ 1217.499958][T19602] netlink: 'syz.9.4059': attribute type 29 has an invalid length. [ 1217.525274][T19602] netlink: 596 bytes leftover after parsing attributes in process `syz.9.4059'. [ 1217.880803][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4061'. [ 1217.982079][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4062'. [ 1218.148531][ T37] audit: type=1326 audit(1774508680.259:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1218.149529][ T37] audit: type=1326 audit(1774508680.259:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1218.149582][ T37] audit: type=1326 audit(1774508680.259:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1218.150280][ T37] audit: type=1326 audit(1774508680.259:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1218.150329][ T37] audit: type=1326 audit(1774508680.259:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1218.150376][ T37] audit: type=1326 audit(1774508680.259:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2e53c799 code=0x7ffc0000 [ 1218.312047][ T37] audit: type=1326 audit(1774508680.429:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd2e4fcfce code=0x7ffc0000 [ 1218.315435][ T37] audit: type=1326 audit(1774508680.429:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd2e4fcfce code=0x7ffc0000 [ 1218.316925][ T37] audit: type=1326 audit(1774508680.429:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19611 comm="syz.8.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd2e4fcfce code=0x7ffc0000 [ 1219.277766][T19628] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4066'. [ 1220.321872][T19636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1220.505462][T19638] netlink: 'syz.6.4070': attribute type 29 has an invalid length. [ 1220.511727][T19638] netlink: 'syz.6.4070': attribute type 29 has an invalid length. [ 1220.518553][T19638] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4070'. [ 1220.815193][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 1221.163893][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4074'. [ 1222.581749][ T37] kauditd_printk_skb: 125 callbacks suppressed [ 1222.581769][ T37] audit: type=1326 audit(1774508684.699:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19660 comm="syz.9.4079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81f400c799 code=0x0 [ 1222.746620][T19658] 9p: Bad value for 'wfdno' [ 1223.537364][T19673] netlink: 'syz.8.4082': attribute type 29 has an invalid length. [ 1223.537885][T19673] netlink: 'syz.8.4082': attribute type 29 has an invalid length. [ 1223.538506][T19673] netlink: 596 bytes leftover after parsing attributes in process `syz.8.4082'. [ 1225.037148][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4085'. [ 1225.111131][T19672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4081'. [ 1225.111149][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4081'. [ 1225.111170][T19672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4081'. [ 1225.111210][T19672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4081'. [ 1230.098850][T19733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1233.717722][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4110'. [ 1233.747457][ T37] audit: type=1326 audit(1774508695.859:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19770 comm="syz.2.4111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a6072c799 code=0x0 [ 1238.274253][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4122'. [ 1239.058445][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.058499][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.997306][T19836] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4127'. [ 1241.997340][T19836] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1242.178928][T19840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.127499][ T37] audit: type=1326 audit(1774508705.239:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19855 comm="syz.6.4136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1bf85c799 code=0x0 [ 1243.173743][T19856] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4134'. [ 1243.173819][T19856] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4134'. [ 1243.173840][T19856] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4134'. [ 1243.173882][T19856] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4134'. [ 1250.395350][ T37] audit: type=1326 audit(1774508712.509:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19923 comm="syz.6.4158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1bf85c799 code=0x0 [ 1250.499141][T19926] syzkaller0: entered promiscuous mode [ 1250.499162][T19926] syzkaller0: entered allmulticast mode [ 1256.763684][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4184'. [ 1259.504727][T20025] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4191'. [ 1267.503898][T20113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.538720][T20113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.916765][T20122] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1271.340987][T20154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1271.341014][T20154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1271.341033][T20154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1271.341083][T20154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1271.901946][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4236'. [ 1274.006351][T20191] input: syz0 as /devices/virtual/input/input9 [ 1277.042604][T20213] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4248'. [ 1277.042639][T20213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4248'. [ 1277.042659][T20213] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4248'. [ 1277.042719][T20213] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4248'. [ 1283.102672][T20276] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1283.102698][T20276] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1283.102718][T20276] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1283.102760][T20276] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1286.743176][T20294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.751221][T20294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.219987][T14600] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.251255][T14683] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.251966][T14614] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.252012][T14614] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.653088][T20355] netlink: 'syz.9.4286': attribute type 39 has an invalid length. [ 1292.664790][T20367] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1292.664946][T20367] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1293.301918][T20372] binder: 20368:20372 ioctl 400c620e 200000000300 returned -22 [ 1297.270788][T20319] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1298.230747][T20319] usb 9-1: Using ep0 maxpacket: 8 [ 1298.236618][T20319] usb 9-1: config 0 has no interfaces? [ 1298.257083][T20319] usb 9-1: New USB device found, idVendor=0403, idProduct=6014, bcdDevice=52.53 [ 1298.257116][T20319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.257137][T20319] usb 9-1: Product: syz [ 1298.257152][T20319] usb 9-1: Manufacturer: syz [ 1298.257167][T20319] usb 9-1: SerialNumber: syz [ 1298.361173][T20319] usb 9-1: config 0 descriptor?? [ 1298.584695][T20319] usb 9-1: USB disconnect, device number 22 [ 1300.018190][T20425] netlink: 'syz.9.4306': attribute type 29 has an invalid length. [ 1300.018879][T20425] netlink: 'syz.9.4306': attribute type 29 has an invalid length. [ 1300.041278][T20425] netlink: 828 bytes leftover after parsing attributes in process `syz.9.4306'. [ 1300.224455][T20430] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1300.224483][T20430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1300.224504][T20430] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1300.224562][T20430] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4307'. [ 1300.431456][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.431531][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.315504][T20457] netlink: 'syz.8.4321': attribute type 29 has an invalid length. [ 1301.316251][T20457] netlink: 'syz.8.4321': attribute type 29 has an invalid length. [ 1301.317307][T20457] netlink: 828 bytes leftover after parsing attributes in process `syz.8.4321'. [ 1302.353709][T20478] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4326'. [ 1302.353736][T20478] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4326'. [ 1302.353755][T20478] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4326'. [ 1302.353796][T20478] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4326'. [ 1302.639869][T20492] netlink: 'syz.9.4332': attribute type 29 has an invalid length. [ 1302.650447][T20492] netlink: 'syz.9.4332': attribute type 29 has an invalid length. [ 1304.647171][T20523] netlink: 'syz.8.4344': attribute type 29 has an invalid length. [ 1304.648064][T20523] netlink: 'syz.8.4344': attribute type 29 has an invalid length. [ 1306.055610][T20543] __nla_validate_parse: 2 callbacks suppressed [ 1306.055641][T20543] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4348'. [ 1306.055658][T20543] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4348'. [ 1306.055677][T20543] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4348'. [ 1306.055718][T20543] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4348'. [ 1310.394436][T20605] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4371'. [ 1310.394462][T20605] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4371'. [ 1310.394482][T20605] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4371'. [ 1310.394538][T20605] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4371'. [ 1311.621699][T20623] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1311.639494][T20623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1312.900828][T20648] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1312.900856][T20648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1312.900877][T20648] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1312.900919][T20648] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1313.514443][T20663] syzkaller0: entered promiscuous mode [ 1313.514470][T20663] syzkaller0: entered allmulticast mode [ 1314.848718][T20693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4402'. [ 1314.848743][T20693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4402'. [ 1314.848762][T20693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4402'. [ 1314.848803][T20693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4402'. [ 1316.198949][T20697] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4404'. [ 1316.504715][T20707] kAFS: No cell specified [ 1317.487692][T20717] syzkaller0: entered promiscuous mode [ 1317.487720][T20717] syzkaller0: entered allmulticast mode [ 1318.181524][T20732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4418'. [ 1319.506942][T20745] kAFS: No cell specified [ 1322.004738][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1322.631170][T20778] kAFS: No cell specified [ 1326.326172][T20803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4441'. [ 1327.010570][T20821] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4445'. [ 1328.969304][T20848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4455'. [ 1331.191781][T18077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1331.222316][T18077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1331.226092][T18077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1331.257236][T18077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1331.273686][T18077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1333.410885][ T5812] Bluetooth: hci0: command tx timeout [ 1333.585093][T14683] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.559450][T14683] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.455411][T20910] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4472'. [ 1335.500816][ T5812] Bluetooth: hci0: command tx timeout [ 1336.476502][T14683] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.217545][T14683] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.579962][ T5812] Bluetooth: hci0: command tx timeout [ 1338.062707][T20867] chnl_net:caif_netlink_parms(): no params data found [ 1339.654333][ T5812] Bluetooth: hci0: command tx timeout [ 1340.736046][T14683] bond0 (unregistering): Released all slaves [ 1340.762914][T14683] bond1 (unregistering): Released all slaves [ 1341.125169][T20867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.127107][T20867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.127309][T20867] bridge_slave_0: entered allmulticast mode [ 1341.158718][T20867] bridge_slave_0: entered promiscuous mode [ 1341.169018][T20867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.169286][T20867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.169499][T20867] bridge_slave_1: entered allmulticast mode [ 1341.214273][T20867] bridge_slave_1: entered promiscuous mode [ 1341.392979][T20867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.399466][T20867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.488106][T20867] team0: Port device team_slave_0 added [ 1341.498293][T20867] team0: Port device team_slave_1 added [ 1341.952481][T20867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.952500][T20867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.952531][T20867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.960845][T20867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.960863][T20867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.960893][T20867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.050168][T21004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4497'. [ 1343.883974][T20867] hsr_slave_0: entered promiscuous mode [ 1343.885427][T20867] hsr_slave_1: entered promiscuous mode [ 1343.886404][T20867] debugfs: 'hsr0' already exists in 'hsr' [ 1343.886430][T20867] Cannot create hsr debugfs directory [ 1345.011070][T21017] block device autoloading is deprecated and will be removed. [ 1345.395819][T14683] hsr_slave_0: left promiscuous mode [ 1345.433163][T14683] hsr_slave_1: left promiscuous mode [ 1345.495208][T14683] veth1_macvtap: left promiscuous mode [ 1345.496584][T14683] veth0_macvtap: left promiscuous mode [ 1349.989679][T21054] IPVS: Error connecting to the multicast addr [ 1350.747592][T21067] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4514'. [ 1353.584146][T21104] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4524'. [ 1354.417124][T20867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1354.532657][T20867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1354.602660][T20867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1354.681894][T20867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1355.160527][T21144] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4535'. [ 1355.793984][T21161] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4539'. [ 1356.180134][T20867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.561863][T20867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.961005][T14683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.961345][T14683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.043691][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4546'. [ 1357.459135][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.459310][T14604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.839789][T21198] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4548'. [ 1358.904030][T20867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.215228][T21241] netlink: 67 bytes leftover after parsing attributes in process `syz.9.4555'. [ 1359.930383][T21256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1361.761714][T20867] veth0_vlan: entered promiscuous mode [ 1361.819783][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.819877][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.847098][T20867] veth1_vlan: entered promiscuous mode [ 1361.898232][T20867] veth0_macvtap: entered promiscuous mode [ 1361.911572][T20867] veth1_macvtap: entered promiscuous mode [ 1361.939516][T20867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.966813][T20867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.005038][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.005259][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.005490][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.008181][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.055778][T21266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4562'. [ 1362.469482][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.469505][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.544643][T14604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.544667][T14604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.603739][T21299] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4569'. [ 1364.559517][T18077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1364.585426][T18077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1364.598304][T18077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1364.600147][T18077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1364.620172][T18077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1366.179399][T21315] fuse: Bad value for 'fd' [ 1367.425434][ T5812] Bluetooth: hci3: command tx timeout [ 1367.572642][T21318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1368.154952][T21331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4582'. [ 1368.477525][T14602] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.863626][ T5812] Bluetooth: hci3: command tx timeout [ 1370.046452][T21304] chnl_net:caif_netlink_parms(): no params data found [ 1370.377349][T14602] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.690764][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1370.840749][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1370.843515][ T10] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1370.843546][ T10] usb 9-1: config 0 has no interface number 0 [ 1370.843602][ T10] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1370.846682][ T10] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1370.846713][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.846735][ T10] usb 9-1: Product: syz [ 1370.846751][ T10] usb 9-1: Manufacturer: syz [ 1370.846767][ T10] usb 9-1: SerialNumber: syz [ 1371.873369][ T10] usb 9-1: config 0 descriptor?? [ 1371.908556][ T10] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1371.908618][ T10] em28xx 9-1:0.132: Video interface 132 found: [ 1372.066508][ T5812] Bluetooth: hci3: command tx timeout [ 1372.098495][T14602] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.285514][ T10] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1373.128018][T14602] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.280851][T20319] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1373.300846][ T10] em28xx 9-1:0.132: failed to read eeprom (err=-110) [ 1373.300893][ T10] em28xx 9-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1373.428403][T21304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.428620][T21304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.428879][T21304] bridge_slave_0: entered allmulticast mode [ 1373.450788][T20319] usb 7-1: Using ep0 maxpacket: 8 [ 1373.453355][T20319] usb 7-1: config 0 has no interfaces? [ 1373.456623][T20319] usb 7-1: New USB device found, idVendor=0403, idProduct=6014, bcdDevice=52.53 [ 1373.456699][T20319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.456715][T20319] usb 7-1: Product: syz [ 1373.456726][T20319] usb 7-1: Manufacturer: syz [ 1373.456736][T20319] usb 7-1: SerialNumber: syz [ 1373.535676][T21304] bridge_slave_0: entered promiscuous mode [ 1373.548287][T20319] usb 7-1: config 0 descriptor?? [ 1373.566378][T21304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.566514][T21304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.566756][T21304] bridge_slave_1: entered allmulticast mode [ 1373.569810][T21304] bridge_slave_1: entered promiscuous mode [ 1373.598335][ T10] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1373.598453][ T10] em28xx 9-1:0.132: analog set to bulk mode. [ 1373.599961][T17845] em28xx 9-1:0.132: Registering V4L2 extension [ 1373.699771][ T10] usb 9-1: USB disconnect, device number 23 [ 1373.749316][ T10] em28xx 9-1:0.132: Disconnecting em28xx [ 1373.775650][T20304] usb 7-1: USB disconnect, device number 2 [ 1373.836201][T21304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.851325][T21304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.020129][T21304] team0: Port device team_slave_0 added [ 1374.045019][T21304] team0: Port device team_slave_1 added [ 1374.131390][ T5812] Bluetooth: hci3: command tx timeout [ 1374.170178][T17845] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1374.170205][T17845] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1374.170246][T17845] em28xx 9-1:0.132: No AC97 audio processor [ 1374.307687][T17845] usb 9-1: Decoder not found [ 1374.307710][T17845] em28xx 9-1:0.132: failed to create media graph [ 1374.307825][T17845] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1374.609395][T17845] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1374.609950][ T10] em28xx 9-1:0.132: Closing input extension [ 1375.131352][ T10] em28xx 9-1:0.132: Freeing device [ 1375.389966][T21304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.389985][T21304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.390015][T21304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.586583][T21304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.586601][T21304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.586632][T21304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.590981][ T5814] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1375.714570][T21408] misc userio: Invalid payload size [ 1376.034198][ T5814] usb 7-1: Using ep0 maxpacket: 32 [ 1376.036023][ T5814] usb 7-1: config 139 has an invalid interface number: 49 but max is 0 [ 1376.036049][ T5814] usb 7-1: config 139 has no interface number 0 [ 1376.036076][ T5814] usb 7-1: config 139 interface 49 has no altsetting 0 [ 1376.052191][ T5814] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1376.052285][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.052347][ T5814] usb 7-1: Product: syz [ 1376.052380][ T5814] usb 7-1: Manufacturer: syz [ 1376.052423][ T5814] usb 7-1: SerialNumber: syz [ 1376.384118][ T5814] radio-usb-si4713 7-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1376.407809][ T5814] radio-usb-si4713 7-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1376.408382][ T5814] usbhid 7-1:139.49: couldn't find an input interrupt endpoint [ 1376.477658][ T5814] usb 7-1: USB disconnect, device number 3 [ 1376.599290][ T5812] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 1378.611927][ T5812] ------------[ cut here ]------------ [ 1378.611942][ T5812] refcnt < 0 [ 1378.611956][ T5812] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u9:6/5812 [ 1378.612126][ T5812] Modules linked in: [ 1378.612159][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1378.612213][ T5812] Tainted: [L]=SOFTLOCKUP [ 1378.612220][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1378.612233][ T5812] Workqueue: hci4 hci_conn_timeout [ 1378.612265][ T5812] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 1378.612319][ T5812] Code: 48 89 df e8 33 99 09 00 eb 07 e8 dc f9 ad f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 17 a9 fe ff e8 c2 f9 ad f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1378.612335][ T5812] RSP: 0018:ffffc90004b6fab0 EFLAGS: 00010293 [ 1378.612357][ T5812] RAX: ffffffff8a167e8e RBX: ffff88804092c000 RCX: ffff888039e61e80 [ 1378.612372][ T5812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1378.612383][ T5812] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1378.612394][ T5812] R10: dffffc0000000000 R11: ffffed1008125803 R12: dffffc0000000000 [ 1378.612407][ T5812] R13: ffff888025506c18 R14: ffff88804092cac0 R15: ffff88804092c010 [ 1378.612421][ T5812] FS: 0000000000000000(0000) GS:ffff888126439000(0000) knlGS:0000000000000000 [ 1378.612436][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.612448][ T5812] CR2: 00007ff1f17bbff8 CR3: 0000000082e10000 CR4: 00000000003526f0 [ 1378.612470][ T5812] Call Trace: [ 1378.612480][ T5812] [ 1378.612488][ T5812] ? process_scheduled_works+0xa8d/0x18c0 [ 1378.612590][ T5812] process_scheduled_works+0xb6e/0x18c0 [ 1378.612650][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 1378.612689][ T5812] ? assign_work+0x3d5/0x5e0 [ 1378.612727][ T5812] worker_thread+0xa53/0xfc0 [ 1378.612814][ T5812] kthread+0x388/0x470 [ 1378.612840][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 1378.612871][ T5812] ? __pfx_kthread+0x10/0x10 [ 1378.612897][ T5812] ret_from_fork+0x51e/0xb90 [ 1378.612945][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.612977][ T5812] ? __switch_to+0xc7d/0x1450 [ 1378.613039][ T5812] ? __pfx_kthread+0x10/0x10 [ 1378.613066][ T5812] ret_from_fork_asm+0x1a/0x30 [ 1378.613117][ T5812] [ 1378.613137][ T5812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1378.613156][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1378.613185][ T5812] Tainted: [L]=SOFTLOCKUP [ 1378.613193][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1378.613208][ T5812] Workqueue: hci4 hci_conn_timeout [ 1378.613240][ T5812] Call Trace: [ 1378.613249][ T5812] [ 1378.613259][ T5812] vpanic+0x56c/0xa60 [ 1378.613305][ T5812] ? __pfx__printk+0x10/0x10 [ 1378.613331][ T5812] ? __pfx_vpanic+0x10/0x10 [ 1378.613362][ T5812] ? is_bpf_text_address+0x292/0x2b0 [ 1378.613407][ T5812] ? is_bpf_text_address+0x26/0x2b0 [ 1378.613448][ T5812] panic+0xc5/0xd0 [ 1378.613482][ T5812] ? __pfx_panic+0x10/0x10 [ 1378.613525][ T5812] ? ret_from_fork_asm+0x1a/0x30 [ 1378.613554][ T5812] __warn+0x315/0x4f0 [ 1378.613587][ T5812] ? hci_conn_timeout+0xff/0x2c0 [ 1378.613620][ T5812] ? hci_conn_timeout+0xff/0x2c0 [ 1378.613651][ T5812] __report_bug+0x29a/0x540 [ 1378.613769][ T5812] ? __lock_acquire+0x6b5/0x2cf0 [ 1378.613814][ T5812] ? hci_conn_timeout+0xff/0x2c0 [ 1378.613845][ T5812] ? __pfx___report_bug+0x10/0x10 [ 1378.613881][ T5812] ? register_lock_class+0x31/0x2e0 [ 1378.613908][ T5812] ? __lock_acquire+0x6b5/0x2cf0 [ 1378.613937][ T5812] ? hci_conn_timeout+0xff/0x2c0 [ 1378.613967][ T5812] report_bug+0x16a/0x220 [ 1378.614001][ T5812] ? hci_conn_timeout+0xff/0x2c0 [ 1378.614030][ T5812] ? hci_conn_timeout+0x101/0x2c0 [ 1378.614060][ T5812] handle_bug+0x9c/0x200 [ 1378.614121][ T5812] exc_invalid_op+0x1a/0x50 [ 1378.614146][ T5812] asm_exc_invalid_op+0x1a/0x20 [ 1378.614189][ T5812] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 1378.614221][ T5812] Code: 48 89 df e8 33 99 09 00 eb 07 e8 dc f9 ad f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 17 a9 fe ff e8 c2 f9 ad f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1378.614241][ T5812] RSP: 0018:ffffc90004b6fab0 EFLAGS: 00010293 [ 1378.614261][ T5812] RAX: ffffffff8a167e8e RBX: ffff88804092c000 RCX: ffff888039e61e80 [ 1378.614279][ T5812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1378.614293][ T5812] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1378.614307][ T5812] R10: dffffc0000000000 R11: ffffed1008125803 R12: dffffc0000000000 [ 1378.614324][ T5812] R13: ffff888025506c18 R14: ffff88804092cac0 R15: ffff88804092c010 [ 1378.614349][ T5812] ? hci_conn_timeout+0xfe/0x2c0 [ 1378.614388][ T5812] ? process_scheduled_works+0xa8d/0x18c0 [ 1378.614423][ T5812] process_scheduled_works+0xb6e/0x18c0 [ 1378.614488][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 1378.614529][ T5812] ? assign_work+0x3d5/0x5e0 [ 1378.614565][ T5812] worker_thread+0xa53/0xfc0 [ 1378.614627][ T5812] kthread+0x388/0x470 [ 1378.614651][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 1378.614683][ T5812] ? __pfx_kthread+0x10/0x10 [ 1378.614710][ T5812] ret_from_fork+0x51e/0xb90 [ 1378.614745][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.614784][ T5812] ? __switch_to+0xc7d/0x1450 [ 1378.614817][ T5812] ? __pfx_kthread+0x10/0x10 [ 1378.614844][ T5812] ret_from_fork_asm+0x1a/0x30 [ 1378.614884][ T5812] [ 1378.615501][ T5812] Kernel Offset: disabled