last executing test programs: 5m52.682265214s ago: executing program 1 (id=538): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x7ab78c4493c52f9b, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r4 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000080)=[0x400000000000], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x601, 0x84) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m45.159661506s ago: executing program 1 (id=549): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000015c2920"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780), &(0x7f00000007c0)={'L-', 0xfffffffffffffffe}, 0x16, 0x2) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000380)={0x0, 0xa, 0x92, {0x92, 0x5, "8694ab9dcb65619780cb2290e4ad04b17556fb4c70624928e6a79dd1bea85730cd4d4c9fedd3669e1e5edba90491863d6fe5f6dbf221d13dfd220f1d33a09c2d72b95708d4b9620d336df6347ef316861c5a9d2aae682999739e3a3ee816ab4c0194ebbd4b85c1d2558708cc3d111380d01693ad2750e2dca06e3bbe2a8bf3775ab66da2d54518bae94be646c0c638df"}}, &(0x7f0000000440)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "c24b6b04e013894a24adedd724900b90e21683ce5d61d2d776f766a17a7c3090dcc8d9b42cd59f3e5e77d6cca32b01fa9e5e47ea6f234560a0c7c125754f218ec1fcda707ea4cdda8d25"}}, &(0x7f00000004c0)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x1, "b825c748"}, @main=@item_4={0x3, 0x0, 0xb, "ebaa6099"}, @main, @main=@item_4={0x3, 0x0, 0x9, "6ba2df4f"}, @local=@item_012={0x2, 0x2, 0x3, "5b99"}, @main=@item_4={0x3, 0x0, 0x8, "3a55afed"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0xda9}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x0, 0x1f, 0x8, "8caee19c876ba67b"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x1, 0x8, "7708e3243b29e25a"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}}) 5m38.506451636s ago: executing program 1 (id=560): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000001c0)={0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3a, 0x20000000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r3, 0x0, 0x0, 0x81, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) epoll_create(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0, 0x20000000}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5m36.953951699s ago: executing program 1 (id=561): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x24) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) 5m33.5488722s ago: executing program 1 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000340)={0x6, @raw_data="af944dd7d83c04c44807d6033adaad301a5e486876b10fb38a7ae2663555faebbd297d5a2afb49a63fea28b9d52e2d734d1e1f37a6022e9d58747a38ea036389918e89100f705fe026ed37158481f00177f1d05e79d3265b0556afc44fba717b539879ef53d2cce3f1f6044fd5c7ea72c0bfa0522915d2e9897a20912c785f2b5a661976d07df996d48864ade5ea3c1cceed935e0db4abe846cb9e1cb784cf3d5c3ed63c2403682d98b39e055176ab3c82049c093e480c04c53c4dba3e1d38ea753939c46f2be383"}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb45fd629100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db220100002600000000000080622ea74b2b7f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) io_setup(0x59, &(0x7f00000001c0)) 5m31.638589459s ago: executing program 1 (id=573): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xe47, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) 5m14.711891403s ago: executing program 32 (id=573): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xe47, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) 22.090784328s ago: executing program 4 (id=1086): getresgid(0x0, &(0x7f0000000300), &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000900)=""/4114, 0x1012}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f0000000700)=""/179, 0xb3}], 0x5, 0x800, 0x4000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003803c0001"], 0xa8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 19.103239174s ago: executing program 4 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) 15.458865168s ago: executing program 3 (id=1100): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x280a00, 0x4) pwritev2(r1, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) renameat(r1, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x8}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) dup3(r2, r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400f2192d38a6074d100f84d60000060000000400000000000007000000000000000000000001050000000000080000000000010000850000000000000000"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 13.468857448s ago: executing program 3 (id=1103): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000240)=ANY=[@ANYBLOB="636f6d6d69743d30303030303030303030303030303030303030302c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c726573765f6c6576656c3d303030303030303030303030342c6c6f63616c666c6f636b732c00000000000000009364d3e93add4501a796d7e53eb149ae16eea57a06855580b7ae1449f9a35e9cd3b52e9b0f5ab58ccf3d8ac589ba210e0311d9e6e150d9f0a7a2e64e6a61758bb49682451515e77604a128a78dbbca3f2dca7d32bf4624e2e8a3d62815c3c3c5fa4bc3eb4ac5b95db231798b56209dd5c5605d049e093149d7a03421c474c0d02466fd7190f390c6774c10694552045c3af560d82a485b2debbac26e8fc48dacde57c5"], 0x1, 0x4422, &(0x7f0000004480)="$eJzs3c9PHFUcAPA3A1qobYXaQ01M3MQmGjUEelJpIqW0FFqsqbYxXrYLbFt0YRtYjIce8NbEk4kH46HRxBunhoPX+id48VjPTfTgxcSkEbO7s8AMu7I2LNjm80nKMO/37nfn7Zsmw4sTlZtzS7m5pVxhIVeeub50MvdZubQ8XwzxHtnv/mlPJ+Ik9vvn0plzH1w9GcJPs788XF9fXw9V3aGpoS2///nH7Zmtx4Y4U6fabvPWdsvHIYRj28ZV1RVC+OjHEKIQwukkbTQ59oYQjoR63tXbX17L7dJo7j0onso/mrqzNnxicvXuWuvXHoXwbenFN2/M//ZK1/Cvr+9S9wAAAAAAAAAAAAAAAAAAPOHGL1+68v7gULgfhe7VaPvzuuPJsdXzseu75uXOv1gAAAAAAAAAAAAAAAAAAAD4n9p8/j8XHW3y/P9YchxpUX/93c6Pkc6ZeO/S2NnBoWT/92hb/ltJ0u+nu0J/k33fs/u/n87Ub77/+/Z+HldjfI1++0IUD6TO43hgIITvk43fj0cH41J5qfLG9fLywuyuDeOJlY5/fff+VHSSDf3bjf9opv3O7///wrZPU/X82u59xJ5q6fh3tSz3wxdRW/E/k6m3F/Gve6az3Tyl0vHvrqX1bi0wUp8AqvH/qnvn+I9l2u9U/I+EEHJRday51AxQXcNU0zfWKz4W/yod//qblZo6kzey1fX/Vyb+ZzPt79f8v5L9IqKpdPyfraX1pEpsXv/98c7X/7lM+/sR/+r4V3z/tyUd/wP1xO5Ukdo72e78P55pv1PxvxIn4zwSpT4Bq1E9vdXfqyMtHf+ebfmb939xW+u/85n6e3X/1+i3cf/XmP5fi+r3fzSXjn9vy3LtXv8TmXqdnv9Haus/Hlc6/gdraen/6+ur/Ww3/pOZ9jsV/9qqpKcR/8355O8D9fTvrP/ako7/c/XEeGuJldrP2vov2nn9fyHT/n6s/6rjX4k72+vTIh3/Qy3LVeP/cxvf/xcz9Tof/xAGrfUfWzr+h1uWq13/PTvHfypTr9Pxf7WTjQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AUaTY1+I4oHUeRwPDIRwJjk/Hg5G04XZ/HSpPPPpUghjSXouHI1ulMrThVJ+bqE8W8wXSqXyTAhnk/xjoSdaKpUr+fnCrXMbbfVGN4uFxcp0sVAJIYwn6S+Fw422pucq84VbIYTzG3nPx+XFWzcLC/nZucV3BgcHB8PExhj6o+LnleJCpd57PTeEyY26fdGWwdWyL2yM5VD0SXl5caFQqqVf3FKnVJ4plLbUmUryvg79UWVxeWGmUCnmS+Ubjf7200hyHJu4/OHli0Pb8q9F9ePo3g4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP/o/vDb34QQuutncQghFyW/RMm/lHsPiqfyj6burA2fmFy9u/awWRkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgH3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS/8oCgNRHIAns2y/x9gqJN22WXYRLYwInkCP4WH0KF7CO1hY2FoJOgHJH0iT7vuaR/Jj5j2YBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPN1vVmVZThM32fdufLe75I9fDbf/5j4vmY1nxZ//0XZXr3rJP/pF/XKj7T+22/DT21cWztSXufXrp92ob2bWi+pu9XyGIeQqhS/p3FmOfj7gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRd8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCvAAAA//9ggh5T") ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0x508, &(0x7f0000000500)="$eJzs3U1sI1cdAPD/TD7sTdMmhR4AFbqUwoJWayfeNqp6YTlVCFVC9MhhGxInitaJo9gpTVik7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQOLjyeJzNlxtrG9u78e8njebNe+P5v7ez8571rMwLYGxdj4iDiJiOiHciYi7PT/It7nS29nkfP7y/cvjw/koSrdbb/0qy8nZe9oHaTzvnR8Qz+TWLEfGDNyN+lJwK+ueIxt7+veVarbqTZ5Wbm9vlxt7+rY3N5fXqenWrUllaXFp4/fZrlUtr60ubv/3oWkT84fdf/vBPB9/6Sbtas3nZUTsuWafpU0dx2iYj4nuDCDYCE3l7ph/nw4/1IS5TGhGfi4iXs+d/Liayu3nSydv07SHWDgAYhFZrLlpzx48BgKsuzebAkrSUzwXMRpqWSp05vBdiJq3VG82ba/XdrdXOXNl8TKVrG7XqQj5XOB9TydrGZHUxS3ePa9XKqePbEfF8RPy8cC07Lq3Ua6uj/OIDAGPsmVPj/38LnfEfALjiio+ShVHWAwAYnuKoKwAADJ3xHwDGj/EfAMaP8R8Axo/xHwDGj/EfAMbK9996q721DvP3X6++u7d7r/7urdVq405+ys52ab1eX8/e2bN50fVq9fr24qux+165WW00y429/bub9d2t5t3svd53q1MDbxEAcJHnX/rgr0lEHLxxLdvi2Pv+LxyrXxx07YBBSkddAWBkJkZdAWBkzq72BYwL8/HAsSV6HxzLLp5JnPZ+X5dPrRsKT54bX/wM8//AU838P4yvx5v/910ergLz/zC+Wq3Emv8AMGbM8QPJBeXHf/9faB076O/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiSZrMtSUv5WuCzkaalUsSzETEfU8naRq26EBHPRcRfClOF9vFiRFg3CACeZuk/knz9rxtzr8yeLp0u/K+Q7SPix798+xfvLTebO4sR08m/j/Kb7+f5lVHUHwC4SHec7o7jXR8/vL/S3YZZn4++01lctB33MN86JZMxme2L2VzDzH+S/Lij/X1l4hLiHzyIiC+c1/4kmxuZz1c+PR2/HfvZocZPT8RPs7LOvv1v8flLqAuMmw/a/U/rvOcvjevZ/vznv5j1UJ9dt/87PNP/pUf930SP/u96vzFe/eN3z2S25jplDyK+NBlx2L34sf6nGz/pEf+VPuP/7cWvvNyrrPWriBtxXvuTE7HKzc3tcmNv/9bG5vJ6db26VaksLS4tvH77tUo5m6Mud2eqz/rnGzef6xW/3f6ZHvGLF7T/6322/9f/f+eHX/2U+N/82vn3/4VPid8eE7/RZ/zlmd8Ve5W146/2aP9F9/9mn/E//Pv+ap+nAgBD0Njbv7dcu1Pd6SRqA0ukgw+RJZKIgwGHeJQo/OZnbw4r1gATcZTT/W/xhFRMYnSJ0fZLwOA9euhHXRMAAAAAAAAAAAAAAKCXYfw50ajbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNX1SQAAAP//gILP2Q==") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd60cb653e00082c0300000000000000000000000000000000ff02000000000700070000000000000102009078000000"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) accept4(r0, 0x0, 0x0, 0x800) 11.800661183s ago: executing program 4 (id=1108): socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0}]) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, 0x0, 0x0, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) unshare(0x2a020400) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) close(r7) io_uring_enter(r4, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 10.901694586s ago: executing program 0 (id=1109): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB='6\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca"], 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.792853848s ago: executing program 2 (id=1110): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='1\x00', 0x2) 10.578873251s ago: executing program 0 (id=1111): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) close_range(r0, r1, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) r5 = dup3(r4, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000480)}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x0, r0}, 0x18) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x5, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001340)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x5, 0x3, 0x7}, 0x10, 0x2f169, r4, 0x3, &(0x7f0000000580)=[0xffffffffffffffff, r6, r7], &(0x7f00000005c0)=[{0x4, 0x5, 0x8, 0xa}, {0x5, 0x1, 0x10, 0xb}, {0x5, 0x3, 0x9}], 0x10, 0x2647, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0xee01, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x9, 0x7, 0x2, 0x2, 0x0, 0x0, 0x3}) sendmmsg$unix(r5, &(0x7f000000ab00)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000002340)="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", 0x1000}, {0x0}, {&(0x7f00000006c0)}], 0x3, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20000084}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="fdea503541b9209753151f0d44a875", 0xf}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60, 0x35}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)="23816fbba9e34f97fd93b9bbe35c19b9e575955475df32e1460e6185335239444e5b57bbf75dcad0b9b79447803f06764f2d226986a594f467ee2dcad480e1311db1f531afcc9e4694822e57ef916d9b00e120a5daca464d72f357494d735a906bd4552b95a4705bbdda133ab3633ff0d84b10f4be880dd5f40509f9151816adf77f8a72b360138bfc1f1ea9e984144c845106c2f5b850ee5afe516b1a4391d8d270f297f455ee37fcd8a1f3de140da8db5110", 0xb3}, {&(0x7f0000001000)="b2889854596c585b2a995258356dce6e6d3a35e1a6c50fce7fcc57899817cdf25c25c035a29fc2e1179040660e72a153396e1704869a57975e4c0048780aa1f317a27acac3fa541a2950b817c842e1a9ab5d3a7e46d07f65bbbaec2db54090", 0x5f}, {&(0x7f0000001080)="7d2c05b5bb51ceb5b037b90b5db0ac73158638633b51ad7d83d1840ae0f435b342aa307571d70e5bce106beaa631", 0x2e}], 0x3, &(0x7f0000005380)=[@rights={{0x28, 0x1, 0x1, [r1, r5, r7, r3, r5, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r1, r5, r0, r7, r6, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r4, r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd0}}, {{&(0x7f0000005480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005700)=[{&(0x7f0000005500)="0b4d74b49d953c5a5fff9f7d6ba65fdbc7dda7312616be58b8444dd612d431c59586150acc5298f8e2de78fba16fdd8f7c757c791e3cc58727cab23e77cba07604b25dc24f6831fe85939e6735fa66495e612fa6b05202b07b79915470e352bcee8ef5a63d5ed04dcc3e182a535632fa98eca2b934aa54939c0c84ed6155582925538b265b564c5ec6d54df145cf9d8595a4fed2184871d1baf3128fe6e1d1a2bb35b26591f93ae71818c0e30e5b63854d1fce47f6b573fb0dfce73ea1b2cf6677f99eab55a549f67e5e309742ff0a37490b10e98408", 0xd6}, {&(0x7f0000005600)="99ba42542f25fcf1164c56910da97b54de37264cdc3146aee91a88c0b7683a70e0fb8fd50e543576963460d21c7e862a2d365cf46c00426f7f90fcf16e073f55591425f128", 0x45}, {&(0x7f00000012c0)="e608613c85247c495c1dc2a100e4e9c734823cb04b89847cb59fca1346760c64f963c724c96de188d3bc", 0x2a}, {&(0x7f00000056c0)="11f139d9cb8a95763fc2ecd5037bb8b41cf16182a2d01b431527", 0x1a}], 0x4, 0x0, 0x0, 0x40}}, {{&(0x7f0000005740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005cc0)=[{&(0x7f00000057c0)="4d9e5457118adb858bebe0636c85568f88de30a57dd7245a3dae023adcd2336fa075d66f540648606fffc03d1e49f069fb50b438c73f30cc9c7cf3776f1b403701857657d79a64e4fcb257d30be03ff356467250d21479bd42a5f64992721c48525c31e327cfecbba82a6854459306a010b1b12dd07240684cea6bf45dddac0a94263e993ad0f132f338f3087943428d9bc334c2b6b8665b580b", 0x9a}, {&(0x7f0000005940)="14e96c55cd849e8a60793709492f337472870c69d1828285fcc278e58ebc72d244ab01cb360ec1b0c12df806bc2569ffaabe80e231cda44ecb97da6de0c7d3ee64d0e35b105d2be028a96dd8d3d590f80f18f10686e5983191daf7cb4cff4a064efa6dbacd6449d6f781fdb3f6798d26ef9ba813", 0x74}, {0x0}, {&(0x7f0000005ac0)="6b0e26e9c7b3b2a8c8d23f5c9683b4ab1933c3cdc4aa916b1cf0dd2956c0709902135612934c9ca290658b13b4f1dedb63feb95528e2fdcdd1b73f133673643b3f376259be9ae0e8e68b21c33f8b48c450b846b7b235ae845167e78d364c8cc4524455314946894f540894356de36c61ec7a28", 0x73}, {&(0x7f0000005b40)="96d68e6eb6f9cb70dfd8b92aa99c1305c9d4e23419cf61c50fc8ac76da3a4edee65d6a3a0a6a5709e24e104e204a332ad374dee93f8e11c783100c34e137c681fa2c378aab3a7cc75921c79e53eec3db06a9a18abb4b1dd8f68148c86f6aab39e86beda8656a723d439bb335b1632bfea16cc3", 0x73}, {&(0x7f0000005c00)="c354bbf6402ea7ec740b0ca797003a04c99ec3fee74adb675e86bc6c47884544c5a09e6cadb0e7a44095ab1a3a56ea48f50673", 0x33}, {&(0x7f0000005c80)}], 0x7, &(0x7f0000005d80)=[@cred={{0x1c}}], 0x20, 0x4008000}}, {{&(0x7f0000005dc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005e40)="745c483a25a4ec0b10d63cc63cd560a82ed61c35d0dde0e65d5777b717a26f4112c7414b9b984f0c4b6bc80d25dd1b9e757aa13110744f2366e7942e11579b", 0x3f}], 0x1, &(0x7f0000006080)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r0, r8]}}, @rights={{0x24, 0x1, 0x1, [r7, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x20, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, r4]}}], 0xd8, 0x40084}}, {{&(0x7f0000006180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006300), 0x0, &(0x7f0000006380)=[@rights={{0x18, 0x1, 0x1, [r3, r5]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r8]}}], 0x48, 0x4}}, {{&(0x7f0000006440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006900)=[{&(0x7f00000064c0)="95e05bb1", 0x4}, {&(0x7f0000006500)="430ff7db4e699fd3fb160aaec14ec71e1d2b4715d4edea987d94f208b118ba94009fe9d66490d5dd951f2c187f36a6af23517f5fbd13c551a22ec94dcad60de064dfbd2802", 0x45}, {&(0x7f0000006580)}, {0x0}, {&(0x7f00000066c0)="ad5b8fef709069cbd6668c8477ccf4406cf211fee2355cbd5a4eda45d3f28901b53e0b7e8f35817e3018e68d2b56ed3c521f020a633f9484866ba44bad562eec8b75b67b7ec50b080236fce2bf1a898f5c38331919b92fcaa0e540f2e4325ceaadf89e5a71b68b3240f407c1fcb49f25e0c7b98f75238e66a6f7e7", 0x7b}, {&(0x7f0000006740)="c356b1e04e84e7776ff624cf52b6e6c26b3fc5a3aa591f032d59b86602a17236667390a304c3406c4e2e2f8a169c4ac317dacda4c636abc318392c2e256e64e77b9779079e24b6ced2a6629564703749219538750d8c2be65d7ef61cdf9ccb22486916985aa71b3e4310cdbb889e68290705a0f6e082992dd217a23fffd0f404e7b935aac13528c05d538181736f95138db6413ff9d6addace42daee16a0ef5676a0d34da95379e8a164ae", 0xab}, {&(0x7f0000006800)="974ac9811e19ee4a1e0133835b7e38814109eeb7d606cb625e72a7d01b55c380518ca570e7c05fff28c4d27865e533d4db3bbeb7aeb85a98232ad49641b19499d584eecfd3132c7600c08dbcee361fc17d14f3597697d65c9e26bdda33f53d1d3aa5162ac0d6e81a8874e91deb050667ddda07ee3d1260b056517db30f6a7af24394aa65ceaf0a025f668656268fe5f44c3f7ffe8de7a94c2bab29d5b4aea1c832ba25fe04cc17482f9b1e308dac5b80d138784e3d1cfc465506ef29f5", 0xbd}, {&(0x7f00000068c0)="61ad51a9e850401f9858d9cca93981a1f77df80bc7d78af0f50b53116497224ddcce29f36cd1fd3cd20a44b863d5", 0x2e}], 0x8, &(0x7f000000aac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x1}}], 0x8, 0x8080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0xaf01, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r13, 0x1, 0x123, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x40000) write$nci(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="400403bf825310"], 0x7) 10.517370142s ago: executing program 2 (id=1112): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) madvise(&(0x7f0000f6d000/0x1000)=nil, 0x1000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x4, 0x40000}], 0x1, 0x0) recvmsg(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3}}, 0x30) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 9.855046872s ago: executing program 2 (id=1113): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000880)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup=r1, r0, 0x9, 0x3010, 0x0, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r3, 0x541c, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) 9.791706833s ago: executing program 3 (id=1114): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x280a00, 0x4) pwritev2(r1, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) renameat(r1, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x8}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) dup3(r2, r6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400f2192d38a6074d100f84d60000060000000400000000000007000000000000000000000001050000000000080000000000010000850000000000000000"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 9.708276074s ago: executing program 0 (id=1115): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) iopl(0x3) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x80000, 0x800, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0x4}, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x400000002, 0x0) io_setup(0x30, &(0x7f0000000600)) pipe2$9p(0x0, 0x80000) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000580)='./file1\x00', 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x10001011, r4, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x12a) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 8.625519431s ago: executing program 3 (id=1116): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x24) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbmod={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x7, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) 8.494173662s ago: executing program 2 (id=1117): timerfd_create(0x8, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000980)=@multiplanar_mmap={0x9, 0x6, 0x4, 0x10000, 0x2, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x4, 0x9, 0xd, "25e58189"}, 0x6, 0x1, {0x0}, 0xff}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@private0, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00"], 0x70}}, 0x0) 7.065300124s ago: executing program 2 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) 6.64589094s ago: executing program 4 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 5.795178483s ago: executing program 5 (id=1121): syz_read_part_table(0x5dd, &(0x7f0000000740)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") 5.572857476s ago: executing program 4 (id=1122): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@delalloc}, {@acl}]}, 0x1, 0x577, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x8000) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 5.453338958s ago: executing program 3 (id=1123): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) close_range(r2, 0xffffffffffffffff, 0x0) 5.31311228s ago: executing program 5 (id=1124): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) madvise(&(0x7f0000f6d000/0x1000)=nil, 0x1000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x4, 0x40000}], 0x1, 0x0) recvmsg(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3}}, 0x30) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 4.294098685s ago: executing program 5 (id=1125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.912171001s ago: executing program 5 (id=1126): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x280a00, 0x4) pwritev2(r1, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) renameat(r1, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x8}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) dup3(r2, r6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400f2192d38a6074d100f84d60000060000000400000000000007000000000000000000000001050000000000080000000000010000850000000000000000"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 3.529681617s ago: executing program 0 (id=1127): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000880)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup=r1, r0, 0x9, 0x3010, 0x0, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r3, 0x541c, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) 2.751221278s ago: executing program 5 (id=1128): timerfd_create(0x8, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000980)=@multiplanar_mmap={0x9, 0x6, 0x4, 0x10000, 0x2, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x4, 0x9, 0xd, "25e58189"}, 0x6, 0x1, {0x0}, 0xff}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@private0, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00"], 0x70}}, 0x0) 2.567308691s ago: executing program 4 (id=1129): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0}]) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, 0x0, 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) unshare(0x2a020400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) 1.799485413s ago: executing program 2 (id=1130): socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0}]) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, 0x0, 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) unshare(0x2a020400) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) close(r8) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 1.764085603s ago: executing program 0 (id=1131): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x200080c2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r4 = userfaultfd(0x801) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000000c0)=0xf5a) 969.403435ms ago: executing program 5 (id=1132): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0xe77, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000b40)={0x17c04, r1, 0x800, 0x40eca, 0x8000000000000001, 0x10003}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000700)="3bd0", 0x2}], 0x1, 0xa8f, 0x1, 0x2) 189.164447ms ago: executing program 0 (id=1133): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 0s ago: executing program 3 (id=1134): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x24) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x3ff, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) kernel console output (not intermixed with test programs): 27566][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 96.835880][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 96.928736][ T7] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 96.977722][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.016678][ T7] usb 1-1: config 0 descriptor?? [ 97.031584][ T4467] overlayfs: missing 'lowerdir' [ 98.096200][ T4453] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 98.185897][ T7] corsair 0003:1B1C:1B09.0001: unbalanced delimiter at end of report description [ 98.262990][ T7] corsair 0003:1B1C:1B09.0001: parse failed [ 98.277149][ T7] corsair: probe of 0003:1B1C:1B09.0001 failed with error -22 [ 100.849812][ T27] usb 1-1: USB disconnect, device number 3 [ 102.655704][ T4512] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 102.664805][ T4512] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.667970][ T4348] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.910084][ T4348] usb 4-1: Using ep0 maxpacket: 8 [ 105.924688][ T4348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 106.053009][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 106.074734][ T4348] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 106.134522][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.234398][ T4348] usb 4-1: config 0 descriptor?? [ 106.612806][ T4302] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.781690][ T4348] corsair 0003:1B1C:1B09.0002: unbalanced delimiter at end of report description [ 106.803748][ T4348] corsair 0003:1B1C:1B09.0002: parse failed [ 107.118416][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 107.424220][ T4348] corsair: probe of 0003:1B1C:1B09.0002 failed with error -22 [ 107.439033][ T4302] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.459813][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.474548][ T4302] usb 2-1: Product: syz [ 107.479068][ T4302] usb 2-1: Manufacturer: syz [ 107.484798][ T4302] usb 2-1: SerialNumber: syz [ 107.500394][ T4302] usb 2-1: config 0 descriptor?? [ 107.653155][ T4348] usb 4-1: USB disconnect, device number 2 [ 109.156076][ T4566] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.344715][ T4460] usb 2-1: USB disconnect, device number 2 [ 109.388860][ T4566] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.920974][ T4575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 113.835936][ T4609] usb usb8: usbfs: process 4609 (syz.4.66) did not claim interface 0 before use [ 116.173368][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 116.265856][ T4626] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.275596][ T4626] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.457630][ T4348] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.467389][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.757226][ T4348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.767427][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 116.774503][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.789614][ T4348] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.917984][ T27] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 116.928679][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.972437][ T27] usb 3-1: config 0 descriptor?? [ 116.997413][ T4348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.005521][ T4348] usb 5-1: Product: syz [ 117.023272][ T4348] usb 5-1: Manufacturer: syz [ 117.033423][ T4348] usb 5-1: SerialNumber: syz [ 117.433626][ T4348] usb 5-1: config 0 descriptor?? [ 117.899908][ T4640] can0: slcan on ptm1. [ 118.465468][ T27] corsair 0003:1B1C:1B09.0003: unbalanced delimiter at end of report description [ 118.488653][ T27] corsair 0003:1B1C:1B09.0003: parse failed [ 118.489843][ T4640] can0 (unregistered): slcan off ptm1. [ 118.495859][ T27] corsair: probe of 0003:1B1C:1B09.0003 failed with error -22 [ 118.712073][ T4646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.76'. [ 119.629104][ T4460] usb 3-1: USB disconnect, device number 2 [ 119.711744][ T4547] usb 5-1: USB disconnect, device number 2 [ 120.067429][ T4335] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.237613][ T4335] usb 1-1: device descriptor read/64, error -71 [ 120.577692][ T4335] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.807661][ T4335] usb 1-1: device descriptor read/64, error -71 [ 121.019690][ T4335] usb usb1-port1: attempt power cycle [ 122.117593][ T4335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.158196][ T4335] usb 1-1: device descriptor read/8, error -71 [ 122.710656][ T4335] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.176676][ T4335] usb 1-1: device descriptor read/8, error -71 [ 124.307683][ T4335] usb usb1-port1: unable to enumerate USB device [ 128.652750][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 128.736560][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 129.117471][ T4547] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.897092][ T4547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.911419][ T4547] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.936177][ T4547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.956671][ T4547] usb 2-1: Product: syz [ 129.962514][ T4547] usb 2-1: Manufacturer: syz [ 129.967499][ T4547] usb 2-1: SerialNumber: syz [ 129.996415][ T4547] usb 2-1: config 0 descriptor?? [ 132.791366][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797855][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.967503][ T4302] usb 2-1: USB disconnect, device number 3 [ 133.246919][ T4736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.96'. [ 135.048024][ T4743] 9pnet_fd: Insufficient options for proto=fd [ 139.724312][ T4771] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.717810][ T4348] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.937855][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 142.400080][ T4348] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.459036][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.511551][ T4348] usb 1-1: Product: syz [ 142.534602][ T4348] usb 1-1: Manufacturer: syz [ 142.551489][ T4348] usb 1-1: SerialNumber: syz [ 142.590850][ T4348] usb 1-1: config 0 descriptor?? [ 142.858380][ T4789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.110'. [ 143.017413][ T4460] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.933427][ T4797] Bluetooth: MGMT ver 1.22 [ 145.317962][ T4460] usb 3-1: Using ep0 maxpacket: 8 [ 145.696616][ T4460] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 145.711349][ T4460] usb 3-1: can't read configurations, error -71 [ 145.727681][ T127] usb 1-1: USB disconnect, device number 8 [ 150.073309][ T4829] 9pnet_fd: Insufficient options for proto=fd [ 150.557466][ T4302] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.445945][ T4302] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.757789][ T4838] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 151.767108][ T4838] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.904008][ T4302] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.928705][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.949466][ T4302] usb 2-1: SerialNumber: syz [ 152.346139][ T4844] can0: slcan on ptm1. [ 152.894748][ T4851] netlink: 2 bytes leftover after parsing attributes in process `syz.4.126'. [ 154.284888][ T4302] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 154.388397][ T4844] can0 (unregistered): slcan off ptm1. [ 154.406785][ T4302] usb 2-1: USB disconnect, device number 4 [ 154.586316][ T4854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.127'. [ 155.595345][ T4851] delete_channel: no stack [ 155.647525][ T4460] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.877401][ T4460] usb 2-1: device descriptor read/64, error -71 [ 156.469118][ T4460] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.868560][ T4390] wlan0: Trigger new scan to find an IBSS to join [ 156.897479][ T4460] usb 2-1: device descriptor read/64, error -71 [ 157.017563][ T4460] usb usb2-port1: attempt power cycle [ 157.437399][ T4460] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.334375][ T4460] usb 2-1: device descriptor read/8, error -71 [ 161.397843][ T4460] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.469648][ T4460] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.701487][ T4916] netlink: 2 bytes leftover after parsing attributes in process `syz.2.141'. [ 161.827529][ T4378] wlan0: Trigger new scan to find an IBSS to join [ 162.510084][ T4460] usb 2-1: string descriptor 0 read error: -71 [ 162.537098][ T4460] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.570356][ T4460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.584718][ T4460] usb 2-1: can't set config #1, error -71 [ 162.596819][ T4460] usb 2-1: USB disconnect, device number 8 [ 162.787569][ T4335] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.977586][ T4335] usb 4-1: Using ep0 maxpacket: 8 [ 162.985153][ T4335] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 162.998906][ T4335] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 163.010402][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.038125][ T4335] usb 4-1: config 0 descriptor?? [ 163.449828][ T46] wlan0: Creating new IBSS network, BSSID 9a:c9:8c:76:c4:47 [ 163.555623][ T4335] corsair 0003:1B1C:1B09.0004: unbalanced delimiter at end of report description [ 163.573008][ T4335] corsair 0003:1B1C:1B09.0004: parse failed [ 163.580884][ T4335] corsair: probe of 0003:1B1C:1B09.0004 failed with error -22 [ 164.289942][ T4460] usb 4-1: USB disconnect, device number 3 [ 164.452558][ T4913] delete_channel: no stack [ 165.266017][ T4493] wlan0: Trigger new scan to find an IBSS to join [ 165.421306][ T4335] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.613826][ T4335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.797744][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.973496][ T4335] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.982925][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.991867][ T4335] usb 5-1: Product: syz [ 165.996913][ T4335] usb 5-1: Manufacturer: syz [ 166.025227][ T4335] usb 5-1: SerialNumber: syz [ 166.137690][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 166.182648][ T4335] usb 5-1: config 0 descriptor?? [ 166.188663][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.213999][ T22] usb 4-1: config 0 has no interfaces? [ 166.219675][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.252430][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.266021][ T22] usb 4-1: config 0 descriptor?? [ 167.601864][ T22] usb 4-1: USB disconnect, device number 4 [ 168.356882][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.973360][ T4348] usb 5-1: USB disconnect, device number 3 [ 169.716779][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.724748][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.828669][ T4493] wlan0: Trigger new scan to find an IBSS to join [ 170.890175][ T4993] 9pnet_fd: Insufficient options for proto=fd [ 170.983006][ T4995] netlink: 2 bytes leftover after parsing attributes in process `syz.1.156'. [ 171.778008][ T4390] wlan0: Creating new IBSS network, BSSID 86:9d:fd:2d:55:44 [ 172.377418][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.587412][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 172.596707][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 172.639187][ T22] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 172.701612][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.764209][ T22] usb 1-1: config 0 descriptor?? [ 173.256261][ T22] corsair 0003:1B1C:1B09.0005: unbalanced delimiter at end of report description [ 173.282007][ T22] corsair 0003:1B1C:1B09.0005: parse failed [ 173.303663][ T22] corsair: probe of 0003:1B1C:1B09.0005 failed with error -22 [ 173.356065][ T4987] delete_channel: no stack [ 174.493879][ T4390] wlan0: Trigger new scan to find an IBSS to join [ 174.524378][ T4547] usb 1-1: USB disconnect, device number 9 [ 178.577947][ T4460] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 178.797809][ T4460] usb 3-1: Using ep0 maxpacket: 8 [ 179.364190][ T4460] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.400261][ T4460] usb 3-1: config 0 has no interfaces? [ 179.417399][ T4460] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.428442][ T4460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.580276][ T4460] usb 3-1: config 0 descriptor?? [ 179.827663][ T4363] wlan0: Trigger new scan to find an IBSS to join [ 182.310194][ T4349] usb 3-1: USB disconnect, device number 5 [ 183.377953][ T4296] wlan0: Creating new IBSS network, BSSID a2:c6:95:3d:28:fe [ 184.157120][ T5066] can0: slcan on ptm3. [ 184.527662][ T5066] can0 (unregistered): slcan off ptm3. [ 186.378064][ T5075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.176'. [ 186.609792][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 187.575911][ T5088] 9pnet: Could not find request transport: fd0x0000000000000009 [ 189.121068][ T5102] 9pnet_fd: Insufficient options for proto=fd [ 189.277940][ T127] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.597500][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 189.613586][ T127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.635696][ T127] usb 3-1: config 0 has no interfaces? [ 189.652626][ T127] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.677904][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.717511][ T127] usb 3-1: config 0 descriptor?? [ 190.807811][ T4349] usb 3-1: USB disconnect, device number 6 [ 193.552507][ T4390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.233022][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240899][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279323][ T5125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.190'. [ 195.887464][ T5138] 9pnet_fd: Insufficient options for proto=fd [ 196.307443][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 196.313590][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 196.313651][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 196.320617][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 197.508464][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 198.227369][ T5157] 9pnet_fd: Insufficient options for proto=fd [ 199.567476][ T4349] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.757446][ T4349] usb 5-1: Using ep0 maxpacket: 8 [ 199.769447][ T4349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.785755][ T4349] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.797036][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.822359][ T4349] usb 5-1: config 0 descriptor?? [ 199.843991][ T4349] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 201.657109][ T4349] usb 5-1: USB disconnect, device number 4 [ 201.846613][ T4390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.964689][ T5174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.203'. [ 202.077355][ T4460] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.268310][ T4460] usb 4-1: Using ep0 maxpacket: 8 [ 202.284356][ T4460] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 202.323064][ T4460] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 202.386791][ T4460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.427112][ T4460] usb 4-1: config 0 descriptor?? [ 202.881836][ T4460] corsair 0003:1B1C:1B09.0006: unbalanced delimiter at end of report description [ 202.904958][ T4460] corsair 0003:1B1C:1B09.0006: parse failed [ 202.922164][ T4460] corsair: probe of 0003:1B1C:1B09.0006 failed with error -22 [ 203.217747][ T4460] usb 4-1: USB disconnect, device number 5 [ 204.662405][ T5197] can0: slcan on ptm3. [ 205.240277][ T5198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.207'. [ 205.406187][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.209'. [ 206.667373][ T5197] can0 (unregistered): slcan off ptm3. [ 209.731072][ T5223] 9pnet_fd: Insufficient options for proto=fd [ 210.317438][ T4349] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.527391][ T4349] usb 3-1: Using ep0 maxpacket: 8 [ 210.534799][ T4349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.555476][ T4349] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.576575][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.633671][ T4349] usb 3-1: config 0 descriptor?? [ 210.668118][ T4349] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 211.501455][ T127] usb 3-1: USB disconnect, device number 7 [ 213.419783][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 213.887441][ T127] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.360845][ T4493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.797721][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 216.103834][ T5272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 216.140342][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 216.930358][ T127] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 217.002472][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.444602][ T127] usb 2-1: config 0 descriptor?? [ 217.453405][ T127] usb 2-1: can't set config #0, error -71 [ 217.455213][ T5281] dlm: no local IP address has been set [ 217.461086][ T127] usb 2-1: USB disconnect, device number 9 [ 217.583471][ T5281] dlm: cannot start dlm midcomms -107 [ 217.968308][ T5287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.227'. [ 218.513650][ T4302] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 218.727383][ T4302] usb 5-1: Using ep0 maxpacket: 8 [ 218.759447][ T5300] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 219.514923][ T4302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.525619][ T4302] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.534869][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.553548][ T4302] usb 5-1: config 0 descriptor?? [ 219.565786][ T4302] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 220.269141][ T4460] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 221.010936][ T4299] usb 5-1: USB disconnect, device number 5 [ 221.262949][ T4460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.461216][ T4460] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.482353][ T4460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.491100][ T4460] usb 4-1: Product: syz [ 221.495304][ T4460] usb 4-1: Manufacturer: syz [ 221.516345][ T4460] usb 4-1: SerialNumber: syz [ 221.634824][ T5319] can0: slcan on ptm3. [ 221.967511][ T5319] can0 (unregistered): slcan off ptm3. [ 222.056919][ T4460] usb 4-1: config 0 descriptor?? [ 222.117826][ T4460] usb 4-1: can't set config #0, error -71 [ 222.515795][ T4460] usb 4-1: USB disconnect, device number 6 [ 222.982316][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 223.107624][ T129] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 223.317489][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 223.358104][ T129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 223.394601][ T129] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 223.427561][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.504797][ T129] usb 3-1: config 0 descriptor?? [ 223.549200][ T5336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.240'. [ 224.881139][ T129] corsair 0003:1B1C:1B09.0007: unbalanced delimiter at end of report description [ 224.892381][ T129] corsair 0003:1B1C:1B09.0007: parse failed [ 224.899901][ T129] corsair: probe of 0003:1B1C:1B09.0007 failed with error -22 [ 226.734423][ T4297] usb 3-1: USB disconnect, device number 8 [ 226.935005][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.693726][ T4297] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 228.967472][ T4297] usb 4-1: Using ep0 maxpacket: 8 [ 228.978685][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.019686][ T4297] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.036631][ T4297] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.050871][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.636761][ T4297] usb 4-1: config 0 descriptor?? [ 229.963300][ T4297] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 230.978338][ T4300] usb 4-1: USB disconnect, device number 7 [ 231.475078][ T5388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.253'. [ 232.945055][ T4308] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.977757][ T4297] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 233.497772][ T4297] usb 5-1: Using ep0 maxpacket: 8 [ 233.514426][ T4297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 233.551556][ T4297] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 233.730271][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.924122][ T5407] netlink: 64 bytes leftover after parsing attributes in process `syz.3.258'. [ 234.725471][ T4503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.313581][ T4297] usb 5-1: config 0 descriptor?? [ 237.309427][ T4297] usb 5-1: can't set config #0, error -71 [ 237.318502][ T4297] usb 5-1: USB disconnect, device number 6 [ 237.338500][ T4557] udevd[4557]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory [ 240.215876][ T5448] netlink: 2 bytes leftover after parsing attributes in process `syz.1.271'. [ 240.246471][ T4349] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 241.807718][ T4349] usb 5-1: Using ep0 maxpacket: 8 [ 241.823848][ T4349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.903778][ T4349] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.934850][ T4349] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.944654][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.963705][ T4349] usb 5-1: config 0 descriptor?? [ 242.353991][ T4349] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 242.411658][ T4349] usb 5-1: USB disconnect, device number 7 [ 242.691106][ T5448] delete_channel: no stack [ 242.701690][ T5468] can0: slcan on ptm3. [ 242.878442][ T5468] can0 (unregistered): slcan off ptm3. [ 243.837457][ T4346] wlan0: Trigger new scan to find an IBSS to join [ 246.229908][ T5488] netlink: 64 bytes leftover after parsing attributes in process `syz.2.281'. [ 248.923897][ T5511] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 248.935892][ T5511] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 249.874415][ T4375] wlan0: Trigger new scan to find an IBSS to join [ 251.092593][ T4346] wlan0: Creating new IBSS network, BSSID fe:35:c1:e1:78:2e [ 251.257398][ T127] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 252.445304][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 252.465656][ T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.512286][ T127] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.541112][ T127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.556617][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.609074][ T127] usb 5-1: config 0 descriptor?? [ 252.675360][ T127] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 253.479410][ T4349] usb 5-1: USB disconnect, device number 8 [ 255.670372][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.676787][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.374637][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 260.357347][ T129] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 260.547507][ T129] usb 2-1: Using ep0 maxpacket: 8 [ 260.561227][ T129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 260.610598][ T129] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 260.663613][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.715602][ T129] usb 2-1: config 0 descriptor?? [ 260.735204][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.460739][ T129] corsair 0003:1B1C:1B09.0008: unbalanced delimiter at end of report description [ 261.478005][ T129] corsair 0003:1B1C:1B09.0008: parse failed [ 261.484015][ T129] corsair: probe of 0003:1B1C:1B09.0008 failed with error -22 [ 261.731720][ T5584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 262.928873][ T4302] usb 2-1: USB disconnect, device number 10 [ 263.447436][ T4348] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 264.292653][ T5608] can0: slcan on ptm3. [ 264.300940][ T4348] usb 5-1: Using ep0 maxpacket: 8 [ 265.049355][ T4348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.068271][ T5608] can0 (unregistered): slcan off ptm3. [ 265.138102][ T4348] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.183754][ T4348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.228341][ T4348] usb 5-1: config 0 descriptor?? [ 265.249466][ T4348] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 265.323756][ T5614] netlink: 64 bytes leftover after parsing attributes in process `syz.1.308'. [ 267.005565][ T4300] usb 5-1: USB disconnect, device number 9 [ 268.818838][ T4428] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 269.684444][ T5633] can0: slcan on ptm3. [ 270.763523][ T4296] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 271.093424][ T5633] can0 (unregistered): slcan off ptm3. [ 271.910860][ T5649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 272.487516][ T4300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 272.717464][ T4300] usb 3-1: Using ep0 maxpacket: 8 [ 272.733651][ T4300] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 272.963440][ T4300] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 273.133175][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.353836][ T4300] usb 3-1: config 0 descriptor?? [ 276.993215][ T4300] corsair 0003:1B1C:1B09.0009: unbalanced delimiter at end of report description [ 277.004337][ T4300] corsair 0003:1B1C:1B09.0009: parse failed [ 277.012447][ T4300] corsair: probe of 0003:1B1C:1B09.0009 failed with error -22 [ 279.731399][ T5685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.321'. [ 279.773039][ T4299] usb 3-1: USB disconnect, device number 9 [ 280.015347][ T5703] can0: slcan on ptm4. [ 281.109242][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.178756][ T5703] can0 (unregistered): slcan off ptm4. [ 282.674009][ T5715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 282.767196][ T5726] fuse: Bad value for 'fd' [ 287.076661][ T4460] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.497322][ T4460] usb 3-1: Using ep0 maxpacket: 8 [ 287.591747][ T4460] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 287.639931][ T5750] 9pnet_fd: Insufficient options for proto=fd [ 287.803101][ T4460] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 287.826525][ T4460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.870942][ T4460] usb 3-1: config 0 descriptor?? [ 288.055199][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 289.030892][ T4460] corsair 0003:1B1C:1B09.000A: unbalanced delimiter at end of report description [ 289.070090][ T4460] corsair 0003:1B1C:1B09.000A: parse failed [ 289.097439][ T4460] corsair: probe of 0003:1B1C:1B09.000A failed with error -22 [ 291.478590][ T5784] fuse: Bad value for 'fd' [ 292.346184][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.369931][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.406356][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.411988][ T4460] usb 3-1: USB disconnect, device number 10 [ 292.462660][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.818103][ T4301] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 293.037724][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 293.099077][ T4301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.178232][ T4301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.455999][ T4301] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.465200][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.486341][ T4301] usb 5-1: config 0 descriptor?? [ 293.815111][ T4375] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 294.208899][ T4301] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 294.911342][ T4301] usb 5-1: USB disconnect, device number 10 [ 296.057384][ T5806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.352'. [ 298.369223][ T5830] netlink: 2 bytes leftover after parsing attributes in process `syz.1.356'. [ 301.075593][ T5830] delete_channel: no stack [ 301.827444][ T9] wlan0: Trigger new scan to find an IBSS to join [ 301.895916][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.068728][ T26] audit: type=1326 audit(1748901633.284:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.1.362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f905cf8e969 code=0x0 [ 302.157783][ T4256] Bluetooth: hci4: command 0x0405 tx timeout [ 303.601837][ T4348] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 303.898799][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.653514][ T4348] usb 4-1: Using ep0 maxpacket: 8 [ 305.275606][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.555165][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.703660][ T4348] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.827458][ T5324] wlan0: Trigger new scan to find an IBSS to join [ 305.837656][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.572058][ T4348] usb 4-1: config 0 descriptor?? [ 306.820005][ T4348] usb 4-1: can't set config #0, error -71 [ 306.833391][ T4348] usb 4-1: USB disconnect, device number 8 [ 306.925423][ T4346] wlan0: Creating new IBSS network, BSSID 6a:aa:2d:92:ea:d8 [ 309.575885][ T5900] netlink: 2 bytes leftover after parsing attributes in process `syz.0.373'. [ 311.365444][ T129] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 311.381446][ T5907] device bridge2 entered promiscuous mode [ 311.547436][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 311.560544][ T129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 311.607906][ T129] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 311.617401][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.636793][ T129] usb 3-1: config 0 descriptor?? [ 312.892928][ T5900] delete_channel: no stack [ 313.012556][ T4439] wlan0: Trigger new scan to find an IBSS to join [ 313.420924][ T5917] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 313.429672][ T5917] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.831761][ T129] corsair 0003:1B1C:1B09.000B: unbalanced delimiter at end of report description [ 313.933290][ T129] corsair 0003:1B1C:1B09.000B: parse failed [ 313.941128][ T129] corsair: probe of 0003:1B1C:1B09.000B failed with error -22 [ 314.427356][ T4348] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 314.617453][ T4348] usb 4-1: Using ep0 maxpacket: 8 [ 314.628439][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.686398][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.702770][ T4348] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.738694][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.780654][ T4348] usb 4-1: config 0 descriptor?? [ 314.801814][ T129] usb 3-1: USB disconnect, device number 11 [ 315.445686][ T4348] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 315.690008][ T5925] iowarrior 4-1:0.0: Error -90 while submitting URB [ 315.719089][ T4348] usb 4-1: USB disconnect, device number 9 [ 317.114192][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.120630][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.990839][ T9] wlan0: Trigger new scan to find an IBSS to join [ 319.145654][ T5948] 9pnet_fd: Insufficient options for proto=fd [ 320.313907][ T46] wlan0: Creating new IBSS network, BSSID 32:f7:ae:1c:a8:9c [ 321.323975][ T5961] netlink: 2 bytes leftover after parsing attributes in process `syz.2.391'. [ 323.191405][ T5958] delete_channel: no stack [ 323.783672][ T5972] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 323.792652][ T5972] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.577388][ T4241] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 324.827295][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 324.867603][ T46] wlan0: Trigger new scan to find an IBSS to join [ 326.188016][ T4241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 326.227512][ T4241] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 326.236956][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.258333][ T4241] usb 2-1: config 0 descriptor?? [ 326.365533][ T4296] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 326.396889][ T5981] netlink: 64 bytes leftover after parsing attributes in process `syz.2.398'. [ 327.661057][ T4241] usbhid 2-1:0.0: can't add hid device: -71 [ 327.668883][ T4241] usbhid: probe of 2-1:0.0 failed with error -71 [ 327.720290][ T4241] usb 2-1: USB disconnect, device number 11 [ 328.131958][ T4299] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 328.918510][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 328.979713][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.980028][ T75] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.991150][ T4299] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.076522][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.158718][ T4299] usb 1-1: config 0 descriptor?? [ 329.396161][ T4299] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 329.447550][ T4299] usb 1-1: USB disconnect, device number 10 [ 329.832368][ T6003] 9pnet_fd: Insufficient options for proto=fd [ 329.845018][ T75] wlan0: Creating new IBSS network, BSSID 92:cd:e8:76:cd:37 [ 330.334515][ T6007] netlink: 2 bytes leftover after parsing attributes in process `syz.0.404'. [ 333.502645][ T6001] delete_channel: no stack [ 335.426980][ T5665] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 335.455277][ T4390] wlan0: Trigger new scan to find an IBSS to join [ 336.847679][ T5665] usb 1-1: Using ep0 maxpacket: 8 [ 336.856599][ T5665] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 337.072832][ T4764] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.739750][ T5665] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 337.785879][ T5665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.517921][ T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 338.565673][ T5665] usb 1-1: config 0 descriptor?? [ 338.645097][ T5665] usb 1-1: can't set config #0, error -71 [ 338.727831][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 338.748403][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.749551][ T5277] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.760384][ T127] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.779635][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.850967][ T6042] usb usb8: usbfs: process 6042 (syz.0.417) did not claim interface 0 before use [ 338.860245][ T127] usb 4-1: config 0 descriptor?? [ 338.881904][ T5665] usb 1-1: USB disconnect, device number 11 [ 339.588372][ T127] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 339.800823][ T46] wlan0: Creating new IBSS network, BSSID f6:dc:aa:c4:49:0d [ 339.824516][ T127] usb 4-1: USB disconnect, device number 10 [ 342.114732][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 347.801006][ T6075] netlink: 96 bytes leftover after parsing attributes in process `syz.1.425'. [ 349.367576][ T6090] netlink: 64 bytes leftover after parsing attributes in process `syz.3.430'. [ 350.761112][ T6106] usb usb8: usbfs: process 6106 (syz.1.432) did not claim interface 0 before use [ 351.077657][ T5665] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 351.107173][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 351.677480][ T6114] netlink: 2 bytes leftover after parsing attributes in process `syz.2.435'. [ 354.716670][ T4428] wlan0: Trigger new scan to find an IBSS to join [ 354.717647][ T5665] usb 5-1: device descriptor read/64, error -32 [ 354.754790][ T6101] delete_channel: no stack [ 355.077313][ T5665] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 360.792268][ T11] wlan0: Trigger new scan to find an IBSS to join [ 362.540801][ T4375] wlan0: Creating new IBSS network, BSSID 16:79:66:1d:63:7e [ 363.107002][ T4493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.977359][ T4460] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 365.265731][ T6168] 9pnet_fd: Insufficient options for proto=fd [ 365.497398][ T6161] netlink: 2 bytes leftover after parsing attributes in process `syz.3.449'. [ 365.519666][ T4460] usb 2-1: Using ep0 maxpacket: 8 [ 365.538182][ T6160] delete_channel: no stack [ 365.643669][ T4460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.807663][ T4764] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.879679][ T4460] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 365.981325][ T4460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.026740][ T4460] usb 2-1: config 0 descriptor?? [ 367.257811][ T4460] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 367.844088][ T4321] wlan0: Trigger new scan to find an IBSS to join [ 367.864617][ T6115] usb 2-1: USB disconnect, device number 12 [ 369.344696][ T6200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 369.890692][ T75] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.028500][ T4460] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 370.820600][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.147441][ T4460] usb 1-1: Using ep0 maxpacket: 8 [ 371.191201][ T4460] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 371.401109][ T4460] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 371.532920][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.557171][ T4460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.615586][ T6216] dlm: no local IP address has been set [ 371.633256][ T4460] usb 1-1: config 0 descriptor?? [ 371.673507][ T6216] dlm: cannot start dlm midcomms -107 [ 373.093859][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 373.151065][ T4460] corsair 0003:1B1C:1B09.000C: unbalanced delimiter at end of report description [ 373.498387][ T4460] corsair 0003:1B1C:1B09.000C: parse failed [ 373.504392][ T4460] corsair: probe of 0003:1B1C:1B09.000C failed with error -22 [ 373.629759][ T6234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.463'. [ 373.829174][ T4439] wlan0: Trigger new scan to find an IBSS to join [ 375.739300][ T6253] 9pnet_fd: Insufficient options for proto=fd [ 375.745364][ T6251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.845002][ T6251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.856904][ T6251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.317775][ T4764] wlan0: Creating new IBSS network, BSSID b2:80:9a:1c:30:fd [ 376.328234][ T27] usb 1-1: USB disconnect, device number 12 [ 376.778016][ T6264] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.785654][ T6264] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 377.008149][ T5916] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 377.247381][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 377.324747][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.368010][ T5916] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 377.399772][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.458263][ T5916] usb 3-1: config 0 descriptor?? [ 377.746311][ T5916] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 378.617498][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.623840][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.047724][ T5916] usb 3-1: USB disconnect, device number 12 [ 379.479674][ T6281] can0: slcan on ptm3. [ 380.087354][ T6281] can0 (unregistered): slcan off ptm3. [ 380.144657][ T6283] fuse: Bad value for 'fd' [ 381.638303][ T6293] netlink: 64 bytes leftover after parsing attributes in process `syz.4.479'. [ 384.508068][ T129] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 384.808817][ T6309] 9pnet_fd: Insufficient options for proto=fd [ 385.289224][ T129] usb 2-1: config 0 has no interfaces? [ 385.308832][ T129] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 385.341073][ T6312] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 385.348999][ T6312] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 385.372878][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.424076][ T129] usb 2-1: Product: syz [ 385.472655][ T129] usb 2-1: Manufacturer: syz [ 385.495377][ T129] usb 2-1: SerialNumber: syz [ 385.520717][ T129] usb 2-1: config 0 descriptor?? [ 386.627249][ T6323] 9pnet_fd: Insufficient options for proto=fd [ 387.157279][ T129] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 387.369929][ T6327] can0: slcan on ptm3. [ 387.407468][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 387.492819][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.805733][ T129] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.832386][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.929703][ T129] usb 1-1: config 0 descriptor?? [ 388.070691][ T6327] can0 (unregistered): slcan off ptm3. [ 388.104266][ T6334] dlm: no local IP address has been set [ 388.110591][ T6334] dlm: cannot start dlm midcomms -107 [ 388.695645][ T129] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 388.937427][ T4494] usb 2-1: USB disconnect, device number 13 [ 389.047675][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 389.480270][ T4547] usb 1-1: USB disconnect, device number 13 [ 392.224250][ T6359] 9pnet_fd: Insufficient options for proto=fd [ 392.740601][ T4493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 392.871586][ T6363] fuse: Bad value for 'fd' [ 395.107413][ T4494] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 396.273348][ T4494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.589133][ T6391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 396.626139][ T4494] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 396.969052][ T4494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.029278][ T4494] usb 4-1: Product: syz [ 397.063008][ T4494] usb 4-1: Manufacturer: syz [ 397.101042][ T4494] usb 4-1: SerialNumber: syz [ 397.164267][ T4494] usb 4-1: config 0 descriptor?? [ 397.338875][ T6386] Zero length message leads to an empty skb [ 397.351952][ T6386] can0: slcan on ptm3. [ 397.391483][ T4494] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 397.414919][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.487372][ T6386] can0 (unregistered): slcan off ptm3. [ 399.006425][ T14] usb 4-1: USB disconnect, device number 11 [ 399.215473][ T6415] dlm: no local IP address has been set [ 399.250660][ T6415] dlm: cannot start dlm midcomms -107 [ 400.021708][ T4390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.221033][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.507'. [ 403.114217][ T4391] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.396300][ T4391] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 405.213523][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 405.650928][ T4391] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 406.340002][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 406.951840][ T6467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 407.349782][ T6482] can0: slcan on ptm3. [ 408.081599][ T5277] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.348118][ T6482] can0 (unregistered): slcan off ptm3. [ 411.929436][ T6515] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 411.938446][ T6515] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 415.737321][ T6534] can0: slcan on ptm3. [ 416.218197][ T6534] can0 (unregistered): slcan off ptm3. [ 417.369788][ T6540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 422.826970][ T6595] can0: slcan on ptm3. [ 423.557522][ T6595] can0 (unregistered): slcan off ptm3. [ 424.165542][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 424.837037][ T6607] netlink: 2 bytes leftover after parsing attributes in process `syz.2.543'. [ 426.395866][ T6606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 427.218272][ T6607] delete_channel: no stack [ 428.278680][ T4299] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 429.459905][ T4299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.519287][ T4299] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.726580][ T4299] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 430.083498][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.403943][ T4299] usb 2-1: Product: syz [ 430.419876][ T4299] usb 2-1: Manufacturer: syz [ 430.429984][ T4299] usb 2-1: SerialNumber: syz [ 430.451181][ T4299] usb 2-1: config 0 descriptor?? [ 430.494987][ T4299] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 430.703991][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.853733][ T11] wlan0: Trigger new scan to find an IBSS to join [ 431.324275][ T6653] can0: slcan on ptm3. [ 432.667761][ T6653] can0 (unregistered): slcan off ptm3. [ 433.040726][ T4349] usb 2-1: USB disconnect, device number 14 [ 433.292448][ T75] wlan0: Creating new IBSS network, BSSID 96:84:27:7e:84:97 [ 433.506301][ T26] audit: type=1326 audit(1748901764.724:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.3.557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f610a58e969 code=0x0 [ 435.022728][ T6690] netlink: 2 bytes leftover after parsing attributes in process `syz.1.561'. [ 435.519411][ T4390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.843409][ T6687] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 436.876960][ T4493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.717336][ T4300] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 437.874046][ T6688] delete_channel: no stack [ 437.970959][ T4493] wlan0: Trigger new scan to find an IBSS to join [ 438.236517][ T4300] usb 4-1: Using ep0 maxpacket: 8 [ 438.288167][ T4493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.316224][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 438.393999][ T4300] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 438.455627][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.500377][ T4300] usb 4-1: config 0 descriptor?? [ 439.028846][ T4300] usbhid 4-1:0.0: can't add hid device: -71 [ 439.071009][ T4300] usbhid: probe of 4-1:0.0 failed with error -71 [ 439.148418][ T4300] usb 4-1: USB disconnect, device number 12 [ 439.320520][ T4503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.547412][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.990268][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.997033][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.269167][ T6736] netlink: 64 bytes leftover after parsing attributes in process `syz.2.574'. [ 440.449242][ T6741] can0: slcan on ptm3. [ 440.869143][ T6741] can0 (unregistered): slcan off ptm3. [ 441.758520][ T4378] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 442.867471][ T4346] wlan0: Trigger new scan to find an IBSS to join [ 443.466184][ T6754] netlink: 2 bytes leftover after parsing attributes in process `syz.4.577'. [ 444.235047][ T6756] dlm: no local IP address has been set [ 444.245295][ T6756] dlm: cannot start dlm midcomms -107 [ 446.661349][ T6749] delete_channel: no stack [ 446.739465][ T4375] wlan0: Creating new IBSS network, BSSID 92:f0:ba:f9:82:e1 [ 446.797213][ T4390] wlan0: Trigger new scan to find an IBSS to join [ 450.459421][ T6790] loop2: detected capacity change from 0 to 7 [ 450.510406][ T6221] Dev loop2: unable to read RDB block 7 [ 450.516348][ T6221] loop2: unable to read partition table [ 450.561872][ T6221] loop2: partition table beyond EOD, truncated [ 450.630854][ T6790] Dev loop2: unable to read RDB block 7 [ 450.636764][ T6790] loop2: unable to read partition table [ 450.788374][ T6790] loop2: partition table beyond EOD, truncated [ 450.828465][ T6790] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 450.877449][ T4346] wlan0: Trigger new scan to find an IBSS to join [ 453.332553][ T6806] netlink: 64 bytes leftover after parsing attributes in process `syz.0.592'. [ 455.234809][ T9] wlan0: Creating new IBSS network, BSSID ea:ea:4c:11:58:ba [ 461.571569][ T6856] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 462.203460][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.213017][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.221524][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.231916][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.256371][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 462.266317][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.434519][ T6865] netlink: 64 bytes leftover after parsing attributes in process `syz.4.608'. [ 462.673816][ T4503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.314719][ T4503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.376308][ T46] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.511088][ T4503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.308616][ T4256] Bluetooth: hci3: command 0x0409 tx timeout [ 464.400826][ T4391] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.577842][ T4503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.707691][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 465.777514][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 465.985826][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.121902][ T22] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 466.250978][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.381135][ T22] usb 4-1: Product: syz [ 466.387336][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 466.452265][ T22] usb 4-1: Manufacturer: syz [ 466.515732][ T22] usb 4-1: SerialNumber: syz [ 466.664836][ T22] usb 4-1: config 0 descriptor?? [ 467.197919][ T22] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 467.269052][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.384298][ T6894] Falling back ldisc for ttyS3. [ 467.931938][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.965658][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.026580][ T6858] device bridge_slave_0 entered promiscuous mode [ 468.534270][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 468.821798][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.887593][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.895877][ T6858] device bridge_slave_1 entered promiscuous mode [ 468.936514][ T22] usb 4-1: USB disconnect, device number 13 [ 469.346312][ T6914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.619'. [ 470.016878][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.095050][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.627353][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 471.133137][ T6931] netlink: 64 bytes leftover after parsing attributes in process `syz.2.620'. [ 473.084484][ T32] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 473.306144][ T6858] team0: Port device team_slave_0 added [ 474.540180][ T6858] team0: Port device team_slave_1 added [ 475.204674][ T4375] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 476.155911][ T26] audit: type=1326 audit(1748901807.374:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feffc58e969 code=0x0 [ 476.777946][ T4321] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 476.788647][ T4391] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 477.618804][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.625811][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.664174][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.780501][ T6969] tipc: Started in network mode [ 477.816676][ T6969] tipc: Node identity 4, cluster identity 4711 [ 477.857953][ T6969] tipc: Node number set to 4 [ 477.894135][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.910669][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.000491][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.007775][ T6973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 479.018596][ T6973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.026186][ T6973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.712085][ T6858] device hsr_slave_0 entered promiscuous mode [ 480.828684][ T6858] device hsr_slave_1 entered promiscuous mode [ 480.836226][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.855404][ T6858] Cannot create hsr debugfs directory [ 480.945946][ T4503] device hsr_slave_0 left promiscuous mode [ 480.978238][ T4503] device hsr_slave_1 left promiscuous mode [ 481.002635][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.022692][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.049910][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.072918][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.156993][ T4503] device bridge_slave_1 left promiscuous mode [ 481.168078][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.277615][ T4503] device bridge_slave_0 left promiscuous mode [ 481.396557][ T7010] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 481.407180][ T7010] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 481.653554][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.948641][ T4503] device veth1_macvtap left promiscuous mode [ 481.955286][ T4503] device veth0_macvtap left promiscuous mode [ 481.982286][ T4503] device veth1_vlan left promiscuous mode [ 482.002771][ T4503] device veth0_vlan left promiscuous mode [ 485.359834][ T32] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.198823][ T4503] team0 (unregistering): Port device team_slave_1 removed [ 486.446396][ T4503] team0 (unregistering): Port device team_slave_0 removed [ 487.186530][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.266983][ T7068] dlm: no local IP address has been set [ 487.283149][ T7068] dlm: cannot start dlm midcomms -107 [ 487.297801][ T4503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.352179][ T4503] bond0 (unregistering): Released all slaves [ 489.906830][ T26] audit: type=1326 audit(1748901821.124:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 489.935390][ T26] audit: type=1326 audit(1748901821.124:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 489.957927][ T26] audit: type=1326 audit(1748901821.134:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 489.958445][ T7074] loop6: detected capacity change from 0 to 7 [ 489.983462][ T26] audit: type=1326 audit(1748901821.134:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 489.997045][ T7074] Dev loop6: unable to read RDB block 7 [ 490.013982][ T7074] loop6: unable to read partition table [ 490.019857][ T7074] loop6: partition table beyond EOD, truncated [ 490.026045][ T7074] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 490.026045][ T7074] ) failed (rc=-5) [ 490.072079][ T26] audit: type=1326 audit(1748901821.134:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 490.477507][ T26] audit: type=1326 audit(1748901821.164:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 490.631890][ T26] audit: type=1326 audit(1748901821.164:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 490.800342][ T26] audit: type=1326 audit(1748901821.164:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 490.824391][ T26] audit: type=1326 audit(1748901821.164:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 490.870010][ T26] audit: type=1326 audit(1748901821.164:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610a58e969 code=0x7ffc0000 [ 490.998939][ T7041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 491.164203][ T7041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.237905][ T7041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.479147][ T7108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.662'. [ 494.531562][ T7110] dlm: no local IP address has been set [ 494.637499][ T7110] dlm: cannot start dlm midcomms -107 [ 494.924390][ T7114] mkiss: ax0: crc mode is auto. [ 495.221069][ T6858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 495.280390][ T6858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 495.329861][ T6858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 495.645773][ T4493] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.048056][ T6858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 497.184387][ T4321] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 497.373418][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.468444][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.502462][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.630514][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.664877][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.718065][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.726715][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.734034][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.792717][ T4349] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 497.956247][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.975483][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 498.009332][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.024332][ T4349] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.039480][ T4349] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.053389][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.061635][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.078540][ T4349] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 498.100885][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 498.114933][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.125427][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 498.138598][ T4349] usb 5-1: SerialNumber: syz [ 498.152208][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 498.165361][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 498.175984][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.186955][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.208204][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.218420][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.233668][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.245474][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.255507][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.266396][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.356185][ T4349] usb 5-1: unknown interface protocol 0x1, assuming v1 [ 498.370203][ T4349] usb 5-1: cannot find UAC_HEADER [ 498.419479][ T4349] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 498.429330][ T4349] usb 5-1: USB disconnect, device number 13 [ 498.563528][ T7157] dlm: no local IP address has been set [ 499.372635][ T7157] dlm: cannot start dlm midcomms -107 [ 499.599289][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.355061][ T7178] libceph: resolve '4' (ret=-3): failed [ 501.442383][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449010][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.474308][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 502.115513][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.129462][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.153531][ T7183] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 502.164207][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.172422][ T7183] File: /dev/nullb0 PID: 7183 Comm: syz.4.683 [ 502.406792][ T7191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 503.075020][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 504.752311][ T7215] dlm: no local IP address has been set [ 504.777339][ T7215] dlm: cannot start dlm midcomms -107 [ 505.877509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 505.898356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.943342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.958415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.979539][ T6858] device veth0_vlan entered promiscuous mode [ 505.992967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 506.005188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.811604][ T6858] device veth1_vlan entered promiscuous mode [ 506.852247][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.912222][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.981795][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.143577][ T4503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 508.507221][ T4296] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 508.836539][ T7245] netlink: 96 bytes leftover after parsing attributes in process `syz.2.694'. [ 509.091896][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.103481][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.432371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 511.352179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.713361][ T4296] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.713962][ T6858] device veth0_macvtap entered promiscuous mode [ 511.737069][ T4321] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.764357][ T6858] device veth1_macvtap entered promiscuous mode [ 511.876515][ T7270] dlm: no local IP address has been set [ 511.900856][ T7270] dlm: cannot start dlm midcomms -107 [ 511.999975][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.033832][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 512.127230][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.154351][ T7273] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 512.220889][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.447517][ T7273] File: /dev/nullb0 PID: 7273 Comm: syz.3.698 [ 512.474275][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.273918][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.316766][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.339381][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.351483][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.377797][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.404943][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.585453][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.601727][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.612975][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.623468][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.634612][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.645651][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.657600][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.670137][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.009577][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.092818][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.626281][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 514.763227][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.869924][ T6858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.011220][ T6858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.119207][ T6858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.215241][ T6858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.472279][ T4375] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.982420][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.115934][ T7312] vivid-000: disconnect [ 517.321992][ T7313] vivid-000: reconnect [ 518.481190][ T5277] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.920160][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.530732][ T7307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.901023][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 519.917816][ T7312] device vcan0 entered promiscuous mode [ 523.271075][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 525.169729][ T4391] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.514347][ T4391] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.821455][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 525.833844][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 525.965110][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.091653][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.203010][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 526.210537][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 527.589707][ T7369] NILFS (nullb0): couldn't find nilfs on the device [ 527.639446][ T4391] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.308289][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 528.400421][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 529.300411][ T4391] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.474881][ T7386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.723'. [ 530.121593][ T7367] chnl_net:caif_netlink_parms(): no params data found [ 530.387401][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 533.849082][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 535.907529][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 536.139741][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.550790][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.737776][ T7367] device bridge_slave_0 entered promiscuous mode [ 536.954742][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.961972][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.990111][ T7367] device bridge_slave_1 entered promiscuous mode [ 539.258206][ T7367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.300085][ T7367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.617428][ T7449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 540.129215][ T7367] team0: Port device team_slave_0 added [ 540.165392][ T7367] team0: Port device team_slave_1 added [ 540.868310][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.875299][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.557813][ T7367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.622582][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.655083][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.702415][ T7367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.747791][ T4256] Bluetooth: hci3: command 0x0405 tx timeout [ 541.860974][ T4391] device hsr_slave_0 left promiscuous mode [ 541.919106][ T4391] device hsr_slave_1 left promiscuous mode [ 541.926135][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.965865][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.016452][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.040654][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.095176][ T4391] device bridge_slave_1 left promiscuous mode [ 542.104384][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.259925][ T4391] device bridge_slave_0 left promiscuous mode [ 542.268390][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.441086][ T4391] device veth1_macvtap left promiscuous mode [ 542.512727][ T4391] device veth0_macvtap left promiscuous mode [ 542.699598][ T4391] device veth1_vlan left promiscuous mode [ 542.827498][ T4391] device veth0_vlan left promiscuous mode [ 544.478253][ T4346] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.478463][ T4308] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 545.808758][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 547.048728][ T6376] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.219229][ T4321] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.230187][ T4348] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 550.451549][ T4348] usb 4-1: Using ep0 maxpacket: 32 [ 550.461461][ T4348] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 550.524080][ T4348] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 550.552223][ T4348] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.597455][ T4348] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 550.606585][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 550.628228][ T4348] usb 4-1: Product: syz [ 550.632467][ T4348] usb 4-1: Manufacturer: syz [ 550.637261][ T4348] usb 4-1: SerialNumber: syz [ 550.672440][ T4348] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 551.541055][ T4299] usb 4-1: USB disconnect, device number 14 [ 551.806017][ T4299] appletouch 4-1:1.0: input: appletouch disconnected [ 552.551481][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 552.866664][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 553.033000][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.092552][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.084476][ T4391] bond0 (unregistering): Released all slaves [ 554.211682][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 554.302115][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.346592][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.569719][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.652375][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 554.711753][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 554.764320][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 554.778529][ T26] audit: type=1326 audit(1748901885.984:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7537 comm="syz.3.754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f610a58e969 code=0x0 [ 554.879934][ T7530] netlink: 2 bytes leftover after parsing attributes in process `syz.2.752'. [ 555.048346][ T7531] delete_channel: no stack [ 555.172865][ T7367] device hsr_slave_0 entered promiscuous mode [ 555.342154][ T7367] device hsr_slave_1 entered promiscuous mode [ 555.366861][ T7367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.633872][ T7367] Cannot create hsr debugfs directory [ 558.229639][ T4296] wlan0: Trigger new scan to find an IBSS to join [ 560.227223][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 561.977504][ T4302] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 562.607323][ T4302] usb 4-1: Using ep0 maxpacket: 8 [ 562.787368][ T32] wlan0: Trigger new scan to find an IBSS to join [ 562.870777][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.877215][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.904564][ T4302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 562.961544][ T4302] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 563.115178][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.138753][ T4302] usb 4-1: config 0 descriptor?? [ 563.995694][ T7584] netlink: 2 bytes leftover after parsing attributes in process `syz.0.764'. [ 564.121405][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 564.204663][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.238507][ T4302] corsair 0003:1B1C:1B09.000D: unbalanced delimiter at end of report description [ 564.266533][ T4302] corsair 0003:1B1C:1B09.000D: parse failed [ 564.272766][ T4302] corsair: probe of 0003:1B1C:1B09.000D failed with error -22 [ 564.363849][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.705169][ T4302] usb 4-1: USB disconnect, device number 15 [ 564.802677][ T4346] wlan0: Creating new IBSS network, BSSID 82:9c:e9:b5:38:8d [ 565.168380][ T7367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.197368][ T7367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.244842][ T7367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 565.331091][ T7367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 565.442632][ T7619] dlm: no local IP address has been set [ 565.448414][ T7619] dlm: cannot start dlm midcomms -107 [ 565.527304][ T7621] libceph: resolve '4' (ret=-3): failed [ 566.333512][ T7584] delete_channel: no stack [ 566.759411][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 566.917795][ T9] wlan0: Trigger new scan to find an IBSS to join [ 568.414926][ T7367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.473666][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.534713][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.666107][ T7367] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.122911][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 569.650552][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.353758][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.360949][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.655110][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.836148][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 570.864864][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.923123][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.930332][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.986492][ T4296] wlan0: Trigger new scan to find an IBSS to join [ 572.013337][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 572.023951][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 572.033589][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 572.044303][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 572.062883][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 572.073845][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 572.084938][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 572.094638][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 572.114117][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 572.142631][ T7367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.180706][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 572.258221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 572.272723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 572.296477][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 572.316595][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 572.341696][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.018853][ T4391] wlan0: Creating new IBSS network, BSSID 76:ca:b3:ba:2d:6e [ 575.244617][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.253500][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 575.453546][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.208502][ T7685] delete_channel: no stack [ 577.553712][ T4390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 579.720344][ T32] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 581.663861][ T32] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 582.310466][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 582.717251][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 582.724544][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 582.774282][ T22] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 582.801193][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.856498][ T22] usb 5-1: config 0 descriptor?? [ 582.982074][ T4256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 582.991412][ T4256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.000038][ T4256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.008134][ T4256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.015825][ T4256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 583.023556][ T4256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 584.252233][ T22] corsair 0003:1B1C:1B09.000E: unbalanced delimiter at end of report description [ 584.263405][ T22] corsair 0003:1B1C:1B09.000E: parse failed [ 584.299003][ T22] corsair: probe of 0003:1B1C:1B09.000E failed with error -22 [ 585.323817][ T4302] usb 5-1: USB disconnect, device number 14 [ 585.798035][ T7760] delete_channel: no stack [ 585.909088][ T4256] Bluetooth: hci3: command 0x0409 tx timeout [ 586.259580][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 586.374142][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.481681][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.513795][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.524015][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.534273][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 587.857988][ T7795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 587.987255][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 590.091542][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 590.944993][ T7756] chnl_net:caif_netlink_parms(): no params data found [ 592.147300][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 592.635882][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.661806][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.687232][ T7756] device bridge_slave_0 entered promiscuous mode [ 592.705989][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.720164][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.728773][ T7756] device bridge_slave_1 entered promiscuous mode [ 592.761174][ T7756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.773486][ T7756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.818004][ T7756] team0: Port device team_slave_0 added [ 592.900671][ T7756] team0: Port device team_slave_1 added [ 593.695380][ T7815] delete_channel: no stack [ 593.875918][ T7840] 9pnet_fd: Insufficient options for proto=fd [ 594.227306][ T4256] Bluetooth: hci3: command 0x0405 tx timeout [ 594.288249][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.519939][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.934015][ T7756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.283311][ T7855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 595.382648][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.945207][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.975836][ T7756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.395078][ T7875] 8021q: VLANs not supported on hsr0 [ 597.629199][ T4321] device hsr_slave_0 left promiscuous mode [ 597.752513][ T4321] device hsr_slave_1 left promiscuous mode [ 597.874781][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.004368][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.315170][ T4321] device bridge_slave_1 left promiscuous mode [ 598.362210][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.443955][ T4321] device bridge_slave_0 left promiscuous mode [ 598.451287][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.968566][ T7887] NILFS (nullb0): couldn't find nilfs on the device [ 602.259853][ T7896] 9pnet_fd: Insufficient options for proto=fd [ 602.322632][ T7910] dlm: no local IP address has been set [ 602.348316][ T7910] dlm: cannot start dlm midcomms -107 [ 602.530591][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 602.751019][ T7916] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 602.763388][ T7916] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 603.470627][ T7919] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 603.626255][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 604.573941][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.976416][ T26] audit: type=1326 audit(1748901936.194:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.4.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d258e969 code=0x0 [ 605.805906][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.412119][ T4321] bond0 (unregistering): Released all slaves [ 608.521854][ T7954] 9pnet_fd: Insufficient options for proto=fd [ 608.665651][ T7756] device hsr_slave_0 entered promiscuous mode [ 608.713367][ T7756] device hsr_slave_1 entered promiscuous mode [ 608.758983][ T7756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.766795][ T7756] Cannot create hsr debugfs directory [ 608.893730][ T7886] delete_channel: no stack [ 609.038110][ T7956] dlm: no local IP address has been set [ 609.043766][ T7956] dlm: cannot start dlm midcomms -107 [ 612.314492][ T7988] NILFS (nullb0): couldn't find nilfs on the device [ 613.077554][ T75] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.098355][ T26] audit: type=1326 audit(1748901944.324:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.2.845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d9978e969 code=0x0 [ 614.155957][ T4300] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 614.258599][ T8009] binder: 8004:8009 ioctl c0306201 0 returned -14 [ 614.369388][ T4300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 614.442484][ T4300] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 614.452180][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.458390][ T7756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 614.461647][ T4300] usb 3-1: Product: syz [ 614.471838][ T4300] usb 3-1: Manufacturer: syz [ 614.476604][ T4300] usb 3-1: SerialNumber: syz [ 614.493592][ T4300] usb 3-1: config 0 descriptor?? [ 614.496994][ T7756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 614.518218][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 614.543146][ T7756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 614.572311][ T7756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 614.908098][ T8017] libceph: resolve '4' (ret=-3): failed [ 615.449156][ T7756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.475107][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 615.568528][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.610667][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.645329][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 615.674263][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 615.708239][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.715429][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.776043][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 615.785308][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 615.794450][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 615.803276][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.810455][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.820085][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 615.845730][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.887609][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 616.051180][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 616.115596][ T8027] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 616.314911][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 616.512838][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 616.754345][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 616.782646][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 616.792303][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 616.804351][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 616.858116][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 616.880247][ T8000] delete_channel: no stack [ 616.908972][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 616.956781][ T22] usb 3-1: USB disconnect, device number 13 [ 618.848191][ T22] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 620.810064][ T26] audit: type=1326 audit(1748901952.034:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.2.859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d9978e969 code=0x0 [ 621.017184][ T22] usb 5-1: device descriptor read/64, error -71 [ 621.307192][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 622.463081][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.471327][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.516498][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.310152][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.317315][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.687317][ T8098] tipc: Enabling of bearer rejected, failed to enable media [ 625.982715][ T8084] delete_channel: no stack [ 626.238172][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.257959][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.652014][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.704998][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.762809][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.793748][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.014007][ T7756] device veth0_vlan entered promiscuous mode [ 627.029841][ T7756] device veth1_vlan entered promiscuous mode [ 627.253541][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.363859][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 627.422217][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.618251][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.651106][ T7756] device veth0_macvtap entered promiscuous mode [ 627.730302][ T7756] device veth1_macvtap entered promiscuous mode [ 627.921950][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.813886][ T26] audit: type=1326 audit(1748901960.034:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d9978e969 code=0x0 [ 628.852777][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.894295][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.923482][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.958817][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.016849][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.037626][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.068201][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.105018][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.116627][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 629.133501][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.308985][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.443597][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.392001][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.402888][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.417161][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.427485][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.447227][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.457559][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.469320][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.492820][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.516634][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.759547][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 631.013388][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.080455][ T7756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.108194][ T8110] Process accounting resumed [ 631.115857][ T7756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.191275][ T7756] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.206750][ T7756] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.443667][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.483254][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.547491][ T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 631.566278][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.586301][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.606020][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.633380][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.755170][ T8141] sched: RT throttling activated [ 632.775409][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 633.809049][ T14] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 633.906003][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.917369][ T14] usb 5-1: Product: syz [ 633.922577][ T14] usb 5-1: Manufacturer: syz [ 633.928721][ T14] usb 5-1: SerialNumber: syz [ 633.942901][ T14] usb 5-1: config 0 descriptor?? [ 634.635217][ T8145] delete_channel: no stack [ 634.647194][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 634.909154][ T22] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 634.979426][ T22] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.124845][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 635.157526][ T22] usb 6-1: SerialNumber: syz [ 635.858658][ T6115] usb 5-1: USB disconnect, device number 17 [ 637.000374][ T8181] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 637.008028][ T8181] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 637.159425][ T6115] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 637.627252][ T6115] usb 3-1: Using ep0 maxpacket: 8 [ 637.695677][ T6115] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 637.824497][ T22] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 637.850285][ T6115] usb 3-1: config 179 has no interface number 0 [ 637.856723][ T6115] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 637.868037][ T22] usb 6-1: USB disconnect, device number 2 [ 637.885298][ T6115] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 637.897220][ T6115] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 637.920325][ T6115] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 637.932223][ T6115] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 637.988434][ T6115] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 638.070976][ T6115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.141600][ T8177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 638.400787][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 640.778248][ T14] usb 3-1: USB disconnect, device number 14 [ 640.778250][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 640.778292][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 644.293614][ T8225] libceph: resolve '4' (ret=-3): failed [ 644.658731][ T4391] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.669743][ T8228] netlink: 64 bytes leftover after parsing attributes in process `syz.4.896'. [ 644.737158][ T14] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 645.107303][ T14] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 645.233397][ T14] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.269642][ T8212] delete_channel: no stack [ 645.277202][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 645.347006][ T14] usb 6-1: SerialNumber: syz [ 647.442933][ T6376] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.448344][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 647.701210][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 648.906138][ T14] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 648.987651][ T14] usb 6-1: USB disconnect, device number 3 [ 649.142601][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 652.074747][ T8278] netlink: 'syz.5.905': attribute type 10 has an invalid length. [ 652.138321][ T8278] device hsr_slave_0 left promiscuous mode [ 652.146088][ T8278] device hsr_slave_1 left promiscuous mode [ 654.661891][ T8311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 655.680848][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 655.947861][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 655.951927][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.058764][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.692321][ T8340] netlink: 64 bytes leftover after parsing attributes in process `syz.5.917'. [ 657.161656][ T8349] tipc: Started in network mode [ 657.166929][ T8349] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 657.186008][ T8349] tipc: Enabled bearer , priority 10 [ 658.301492][ T4494] tipc: Node number set to 4269801490 [ 661.006620][ T8295] delete_channel: no stack [ 663.320985][ T8387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 664.535450][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 664.563404][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.662646][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.165970][ T8408] netlink: 64 bytes leftover after parsing attributes in process `syz.5.932'. [ 665.627191][ T4349] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 665.985710][ T4349] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 666.761192][ T4349] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.789130][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 666.807137][ T4349] usb 5-1: SerialNumber: syz [ 670.483876][ T4349] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 670.502580][ T4349] usb 5-1: USB disconnect, device number 18 [ 671.465983][ T8436] delete_channel: no stack [ 671.827510][ T4321] wlan0: Trigger new scan to find an IBSS to join [ 673.630216][ T8465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.942'. [ 674.671197][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.777744][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.787418][ T4375] wlan0: Trigger new scan to find an IBSS to join [ 678.007579][ T4296] wlan0: Creating new IBSS network, BSSID 6e:50:e1:d4:c1:32 [ 678.023222][ T8503] netlink: 64 bytes leftover after parsing attributes in process `syz.4.950'. [ 679.475453][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.333572][ T4390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 685.749093][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.760315][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.351248][ T8592] NILFS (nullb0): couldn't find nilfs on the device [ 690.603635][ T8601] fuse: Bad value for 'group_id' [ 690.944048][ T26] audit: type=1326 audit(1748902022.164:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.4.971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d258e969 code=0x0 [ 692.742691][ T8624] 9pnet_fd: Insufficient options for proto=fd [ 694.518014][ T26] audit: type=1326 audit(1748902025.724:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d258e969 code=0x0 [ 695.600511][ T8627] can0: slcan on ttyS3. [ 695.748760][ T8627] can0 (unregistered): slcan off ttyS3. [ 697.923634][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 697.945430][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.956662][ T8667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.649620][ T26] audit: type=1326 audit(1748902030.874:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.3.986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f610a58e969 code=0x0 [ 701.022808][ T8700] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 701.030645][ T8700] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 701.352049][ T8691] delete_channel: no stack [ 701.838055][ T32] wlan0: Trigger new scan to find an IBSS to join [ 704.899059][ T4503] wlan0: Trigger new scan to find an IBSS to join [ 705.043179][ T8716] 9pnet_fd: Insufficient options for proto=fd [ 707.458881][ T8748] 9pnet_fd: Insufficient options for proto=fd [ 708.516049][ T6376] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 710.473474][ T8751] delete_channel: no stack [ 711.799630][ T6376] wlan0: Trigger new scan to find an IBSS to join [ 714.577610][ T4764] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 715.281415][ T32] wlan0: Trigger new scan to find an IBSS to join [ 716.904516][ T8790] 9pnet_fd: Insufficient options for proto=fd [ 716.935721][ T5277] wlan0: Creating new IBSS network, BSSID 0e:f8:54:f7:7d:d4 [ 717.022247][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 719.379549][ T8800] overlayfs: failed to resolve './file1': -2 [ 721.150164][ T8822] libceph: resolve '4' (ret=-3): failed [ 721.846991][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 721.918775][ T8834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1021'. [ 721.950014][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 721.987421][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 722.104040][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 722.179901][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 722.220629][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 722.867284][ T5277] wlan0: Trigger new scan to find an IBSS to join [ 723.748316][ T8816] delete_channel: no stack [ 724.635545][ T8857] 9pnet_fd: Insufficient options for proto=fd [ 725.160081][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1034'. [ 725.169513][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1034'. [ 726.968275][ T32] wlan0: Trigger new scan to find an IBSS to join [ 729.694629][ T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 729.772733][ T75] wlan0: Creating new IBSS network, BSSID 3a:76:48:4a:a3:22 [ 730.585093][ T8874] delete_channel: no stack [ 730.867240][ T4390] wlan0: Trigger new scan to find an IBSS to join [ 731.787459][ T22] usb 6-1: device descriptor read/64, error -71 [ 732.063771][ T8901] overlayfs: missing 'workdir' [ 733.232606][ T8913] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 733.955281][ T8916] 9pnet_fd: Insufficient options for proto=fd [ 735.830930][ T4390] wlan0: Trigger new scan to find an IBSS to join [ 735.865575][ T8938] bridge0: port 3(syz_tun) entered blocking state [ 735.873855][ T8938] bridge0: port 3(syz_tun) entered disabled state [ 735.927208][ T8938] device syz_tun entered promiscuous mode [ 736.413682][ T4301] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 737.178405][ T8924] delete_channel: no stack [ 737.615431][ T8938] bridge0: port 3(syz_tun) entered blocking state [ 737.622521][ T8938] bridge0: port 3(syz_tun) entered forwarding state [ 737.657198][ T4301] usb 5-1: device descriptor read/64, error -71 [ 737.827419][ T32] wlan0: Trigger new scan to find an IBSS to join [ 737.898590][ T8944] overlayfs: missing 'workdir' [ 737.937315][ T4301] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 738.127137][ T4301] usb 5-1: device descriptor read/64, error -71 [ 738.243740][ T4321] wlan0: Creating new IBSS network, BSSID 3a:9b:a0:1e:93:c1 [ 738.257869][ T4301] usb usb5-port1: attempt power cycle [ 738.667324][ T4301] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 738.737931][ T4301] usb 5-1: device descriptor read/8, error -71 [ 739.651789][ T4390] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 741.033222][ T32] wlan0: Trigger new scan to find an IBSS to join [ 741.892690][ T8972] libceph: resolve '4' (ret=-3): failed [ 742.534575][ T6376] wlan0: Trigger new scan to find an IBSS to join [ 742.557729][ T8975] 9pnet_fd: Insufficient options for proto=fd [ 743.883920][ T8990] overlayfs: missing 'workdir' [ 744.178901][ T32] wlan0: Creating new IBSS network, BSSID f6:d2:c5:a6:91:93 [ 745.629044][ T8985] delete_channel: no stack [ 745.827417][ T4346] wlan0: Trigger new scan to find an IBSS to join [ 747.192321][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.199040][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.894767][ T9009] loop0: detected capacity change from 0 to 8 [ 748.104116][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 748.184124][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.254112][ T9011] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1080'. [ 748.385737][ T9019] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 748.394666][ T9019] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 748.407217][ T9019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 748.410168][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 748.425683][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 748.433471][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.072626][ T4503] wlan0: Trigger new scan to find an IBSS to join [ 751.198552][ T4764] wlan0: Creating new IBSS network, BSSID 72:e9:ef:0a:32:d0 [ 752.234018][ T9031] delete_channel: no stack [ 752.665465][ T26] audit: type=1326 audit(1748902083.884:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.0.1090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feffc58e969 code=0x0 [ 752.867246][ T4296] wlan0: Trigger new scan to find an IBSS to join [ 753.689391][ T9065] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 753.874746][ T9067] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 753.927224][ T9067] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 753.975900][ T9067] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 754.201715][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 754.310037][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 754.507226][ T4256] Bluetooth: hci3: command 0x0411 tx timeout [ 757.143737][ T5277] wlan0: Trigger new scan to find an IBSS to join [ 759.192303][ T9096] delete_channel: no stack [ 759.367657][ T46] wlan0: Creating new IBSS network, BSSID ca:37:c5:4a:54:96 [ 760.888250][ T4503] wlan0: Trigger new scan to find an IBSS to join [ 761.054123][ T9098] loop3: detected capacity change from 0 to 32768 [ 761.061946][ T9098] ======================================================= [ 761.061946][ T9098] WARNING: The mand mount option has been deprecated and [ 761.061946][ T9098] and is ignored by this kernel. Remove the mand [ 761.061946][ T9098] option from the mount to silence this warning. [ 761.061946][ T9098] ======================================================= [ 761.299023][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 761.357673][ T9122] fuse: Bad value for 'fd' [ 761.358679][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 761.371587][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 761.390331][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 761.393839][ T9098] (syz.3.1103,9098,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 761.400020][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 761.420302][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 761.469351][ T9098] (syz.3.1103,9098,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 761.975690][ T9141] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 765.772392][ T9167] loop5: detected capacity change from 0 to 2048 [ 765.828370][ T32] wlan0: Trigger new scan to find an IBSS to join [ 765.842433][ T9167] loop5: AHDI p1 p4 [ 765.852629][ T4321] wlan0: Trigger new scan to find an IBSS to join [ 765.967919][ T9147] delete_channel: no stack [ 766.342602][ T14] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 766.617367][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 766.628283][ T14] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 766.666017][ T14] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 766.695284][ T14] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 766.759499][ T14] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 766.801180][ T14] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 766.871505][ T14] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 766.945464][ T14] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 766.988618][ T14] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 767.049057][ T14] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 767.117097][ T4296] wlan0: Creating new IBSS network, BSSID 8a:14:db:ff:13:65 [ 767.149997][ T14] usb 5-1: string descriptor 0 read error: -22 [ 767.156319][ T14] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 767.217167][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.251799][ T14] adutux 5-1:168.0: interrupt endpoints not found [ 767.465585][ T9169] loop4: detected capacity change from 0 to 1024 [ 767.612971][ T9169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 767.703801][ T5665] usb 5-1: USB disconnect, device number 23 [ 768.617114][ T4503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 769.008207][ T9191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input25 [ 769.060846][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 769.802769][ T4503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 769.837218][ T32] wlan0: Trigger new scan to find an IBSS to join [ 771.442117][ T9206] loop5: detected capacity change from 0 to 1024 [ 771.545882][ T9210] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 771.558426][ T9210] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 771.592905][ T9206] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 771.649968][ T9206] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.868116][ T4296] wlan0: Creating new IBSS network, BSSID a6:cd:95:46:18:8e [ 771.939146][ T9218] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1134'. [ 772.759954][ T32] ------------[ cut here ]------------ [ 772.765853][ T32] WARNING: CPU: 0 PID: 32 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x418/0x4a0 [ 772.775739][ T32] Modules linked in: [ 772.779786][ T32] CPU: 0 PID: 32 Comm: kworker/u4:2 Not tainted 6.1.140-syzkaller #0 [ 772.788552][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 772.798684][ T32] Workqueue: cfg80211 cfg80211_event_work [ 772.804439][ T32] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 772.810667][ T32] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 71 f8 07 f8 0f 0b eb c3 e8 68 f8 07 f8 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 5a f8 07 f8 0f 0b e9 7a fd ff ff e8 [ 772.830376][ T32] RSP: 0018:ffffc90000a8faa0 EFLAGS: 00010293 [ 772.836547][ T32] RAX: ffffffff8978dea8 RBX: dffffc0000000000 RCX: ffff888017758000 [ 772.844662][ T32] RDX: 0000000000000000 RSI: ffffffff8a6c0000 RDI: ffffffff8abf1260 [ 772.852681][ T32] RBP: ffffc90000a8fb70 R08: dffffc0000000000 R09: fffffbfff2117055 [ 772.860726][ T32] R10: fffffbfff2117055 R11: 1ffffffff2117054 R12: ffff88805306b5d8 [ 772.868757][ T32] R13: 1ffff92000151f5c R14: 0000000000000001 R15: ffff88807e118c90 [ 772.876942][ T32] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 772.885944][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.892566][ T32] CR2: 00007f9140346000 CR3: 000000007db5f000 CR4: 00000000003506f0 [ 772.900586][ T32] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.908588][ T32] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 772.916755][ T32] Call Trace: [ 772.920104][ T32] [ 772.923044][ T32] ? mutex_lock_nested+0x10/0x10 [ 772.928050][ T32] ? trace_rdev_return_void+0x240/0x240 [ 772.933627][ T32] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 772.939605][ T32] cfg80211_process_rdev_events+0x9d/0x110 [ 772.945867][ T32] ? process_one_work+0x7a1/0x1160 [ 772.951023][ T32] cfg80211_event_work+0x2b/0x40 [ 772.956029][ T32] process_one_work+0x898/0x1160 [ 772.961030][ T32] ? worker_detach_from_pool+0x240/0x240 [ 772.966789][ T32] ? _raw_spin_lock_irq+0xab/0xe0 [ 772.971876][ T32] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 772.977282][ T32] ? kthread_data+0x4b/0xc0 [ 772.981805][ T32] worker_thread+0xaa2/0x1250 [ 772.986511][ T32] kthread+0x29d/0x330 [ 772.990654][ T32] ? worker_clr_flags+0x1a0/0x1a0 [ 772.995695][ T32] ? kthread_blkcg+0xd0/0xd0 [ 773.000362][ T32] ret_from_fork+0x1f/0x30 [ 773.004889][ T32] [ 773.007948][ T32] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 773.015232][ T32] CPU: 0 PID: 32 Comm: kworker/u4:2 Not tainted 6.1.140-syzkaller #0 [ 773.023297][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 773.033379][ T32] Workqueue: cfg80211 cfg80211_event_work [ 773.039114][ T32] Call Trace: [ 773.042497][ T32] [ 773.045440][ T32] dump_stack_lvl+0x168/0x22e [ 773.050219][ T32] ? memcpy+0x3c/0x60 [ 773.054223][ T32] ? show_regs_print_info+0x12/0x12 [ 773.059442][ T32] ? load_image+0x3b0/0x3b0 [ 773.063968][ T32] panic+0x2c9/0x710 [ 773.067881][ T32] ? bpf_jit_dump+0xd0/0xd0 [ 773.072847][ T32] ? ret_from_fork+0x1f/0x30 [ 773.077487][ T32] __warn+0x2f8/0x4f0 [ 773.081487][ T32] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 773.087414][ T32] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 773.092999][ T32] report_bug+0x2ba/0x4f0 [ 773.097356][ T32] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 773.102958][ T32] handle_bug+0x3a/0x70 [ 773.107157][ T32] exc_invalid_op+0x16/0x40 [ 773.111701][ T32] asm_exc_invalid_op+0x16/0x20 [ 773.116940][ T32] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 773.123145][ T32] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 71 f8 07 f8 0f 0b eb c3 e8 68 f8 07 f8 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 5a f8 07 f8 0f 0b e9 7a fd ff ff e8 [ 773.142946][ T32] RSP: 0018:ffffc90000a8faa0 EFLAGS: 00010293 [ 773.149119][ T32] RAX: ffffffff8978dea8 RBX: dffffc0000000000 RCX: ffff888017758000 [ 773.158195][ T32] RDX: 0000000000000000 RSI: ffffffff8a6c0000 RDI: ffffffff8abf1260 [ 773.166383][ T32] RBP: ffffc90000a8fb70 R08: dffffc0000000000 R09: fffffbfff2117055 [ 773.175359][ T32] R10: fffffbfff2117055 R11: 1ffffffff2117054 R12: ffff88805306b5d8 [ 773.184250][ T32] R13: 1ffff92000151f5c R14: 0000000000000001 R15: ffff88807e118c90 [ 773.192449][ T32] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 773.198034][ T32] ? mutex_lock_nested+0x10/0x10 [ 773.202989][ T32] ? trace_rdev_return_void+0x240/0x240 [ 773.208742][ T32] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 773.214677][ T32] cfg80211_process_rdev_events+0x9d/0x110 [ 773.220593][ T32] ? process_one_work+0x7a1/0x1160 [ 773.225798][ T32] cfg80211_event_work+0x2b/0x40 [ 773.230746][ T32] process_one_work+0x898/0x1160 [ 773.235707][ T32] ? worker_detach_from_pool+0x240/0x240 [ 773.241352][ T32] ? _raw_spin_lock_irq+0xab/0xe0 [ 773.246389][ T32] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 773.251776][ T32] ? kthread_data+0x4b/0xc0 [ 773.256297][ T32] worker_thread+0xaa2/0x1250 [ 773.261002][ T32] kthread+0x29d/0x330 [ 773.265081][ T32] ? worker_clr_flags+0x1a0/0x1a0 [ 773.270119][ T32] ? kthread_blkcg+0xd0/0xd0 [ 773.274723][ T32] ret_from_fork+0x1f/0x30 [ 773.279171][ T32] [ 773.282464][ T32] Kernel Offset: disabled [ 773.286879][ T32] Rebooting in 86400 seconds..