last executing test programs: 16m24.452854891s ago: executing program 2 (id=3): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmmsg(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x0, 0x0) close(r1) 16m23.299750539s ago: executing program 2 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x0, 0x8, 0x0, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x68, 0x0, 0x3, 0x0, 0x0, @private=0xa010100, @loopback, {[@lsrr={0x83, 0x13, 0x48, [@remote, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r1, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f00000000000000000008fff4000d40ff000000", 0x24) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x9, 0x7fffffff, 0x2}) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0xe, r2, 0x20, r3}, 0x10) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000), &(0x7f0000000040), 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x0, 0x8, 0x0, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x68, 0x0, 0x3, 0x0, 0x0, @private=0xa010100, @loopback, {[@lsrr={0x83, 0x13, 0x48, [@remote, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) write(r1, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f00000000000000000008fff4000d40ff000000", 0x24) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x9, 0x7fffffff, 0x2}) (async) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0xe, r2, 0x20, r3}, 0x10) (async) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000), &(0x7f0000000040), 0x4, 0x0) (async) 16m22.920604988s ago: executing program 2 (id=11): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00007a8000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000002080)={0x9, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739"}) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x4, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000016c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) syz_open_dev$media(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x24) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r5, 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 16m20.671233609s ago: executing program 2 (id=13): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) 16m4.674287635s ago: executing program 32 (id=13): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) 15m57.524183995s ago: executing program 0 (id=46): r0 = syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000000)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@nested={0x4, 0x13f}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = syz_io_uring_setup(0x24f0, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x12, 0x0, {0x0, r7}}) r8 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x59359916a72ae6a5, 0x44) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x141000, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RENAMEAT={0x23, 0x25, 0x0, r8, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00', r9, 0x0, 0x0, {0x0, r7}}) r10 = socket(0x2b, 0x1, 0x1) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x3}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, 0x0) getsockopt$PNPIPE_HANDLE(r10, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) 15m53.86757271s ago: executing program 0 (id=51): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0xfa2b, &(0x7f00000000c0)=0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x800, 0x0, {0x2, 0x0, 0x90, 0x0, 0xfc, 0x0, 0xc8, 0x9, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x0, 0x1, 0x0, 0x5, 0x6, 0x9, 0x200, 0x1000, 0x1, 0x6c2, 0x8, 0xb, 0x1, 0x3, 0x800]}, &(0x7f0000000340)=0x100) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601efff000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x1) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)="5453b4b7", 0x4}], 0x1}}], 0x1, 0xc0) 15m51.745120401s ago: executing program 0 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) recvfrom(r5, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25003900000000000000000000000000000000bb00000000000000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 15m50.30035465s ago: executing program 0 (id=57): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001000), 0x44000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000001040)={0x2, r2, 0x80000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, 0x0}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @volatile={0xa}, @float={0x5, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x0, 0x71, 0x61, 0x0, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f0000000c00)=""/225, 0x47, 0xe1, 0x0, 0xce0}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000d40)=[0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0], 0x0, 0xcf, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) 15m47.779684224s ago: executing program 0 (id=61): socket(0x10, 0x803, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x2, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x0, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x2, 0x53, 0xee, 0x97, 0x5, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0x2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x0, 0x8}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x5e) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) 15m42.866049303s ago: executing program 0 (id=65): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x406, r3) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15m26.436263461s ago: executing program 33 (id=65): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x406, r3) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 14m23.77475141s ago: executing program 4 (id=167): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 14m19.931729967s ago: executing program 4 (id=173): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r4, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0) 14m18.02848766s ago: executing program 4 (id=175): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x2c0900, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000000000001ffffff00001700"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c700000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c00000400428014000180060006008035000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) 14m16.602605307s ago: executing program 4 (id=177): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f0000003080)=@ret_submit={{0x3, 0x7f, 0x0, 0x1, 0x81}, 0x4, 0x9e, 0x25, 0x3bd, 0x2, 0x0, "e0751946122c44e44503c6241b9f99d473a788bbfdf550c288276ceb06684c47e2b3ad3f95107e38395401999eac50d5d2c55a847ab9e6869621747811a5fbe9a9adf92733e1bfe01bf1a26e3ff49a96bc30fb31ae70c3e6e41ae73f472d11a775191c8f8c8ad964f3b4c337ae2aa8fd3603a29cf4b5bcbc80937cd82bc04feac60a20ff8b16deebaceddf246de403cf415455dc51a1e59c685751f7edcd", [{0x0, 0x10001, 0x6}, {0x27, 0xfff, 0xfef, 0x3}, {0x4, 0xdb, 0x8, 0x5}, {0x2, 0x9, 0x7508, 0x90000}, {0x5, 0x6, 0x60b, 0xb}, {0x1ab, 0x9, 0x8, 0xc}, {0x8, 0x7, 0xee, 0x9}, {0x10, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x2, 0x2}, {0x1, 0x8, 0x2, 0x100}, {0x9, 0x90, 0x6, 0x8ea}, {0xfffff800, 0x533d, 0x80000001, 0x100}, {0x5, 0x9e0a, 0x925, 0xb}, {0x8, 0x9, 0x9, 0xc4}, {0xffff, 0x4, 0x2, 0x4}, {0xffff, 0x0, 0x4}, {0x81, 0xe62, 0x4, 0x3ff}, {0xd, 0xd, 0x0, 0x5}, {0x5, 0x3ff, 0xf1, 0xb}, {0x0, 0x1, 0x81, 0x1}, {0xffffffff, 0xffff, 0x7, 0xfff}, {0x101, 0x1400000, 0x9, 0x101}, {0x1, 0x2, 0x80, 0xab4}, {0x0, 0x9, 0xfff, 0xafc}, {0x6, 0x54, 0x5, 0xc}, {0x9, 0xfffffffb}, {0x1, 0x3, 0x80000001, 0x800}, {0x6, 0xf, 0x10000, 0x3}, {0x8, 0x7, 0x2, 0xaa8}, {0x5, 0x1a, 0x4041, 0x1}, {0xe, 0x4, 0x401, 0x7}, {0x3ff, 0x5, 0x474, 0x9}, {0x7f, 0x1000000, 0x0, 0x40}, {0xfffffffc, 0x0, 0xbd1a, 0x401}, {0x3, 0xe0, 0x9, 0x2}, {0x5, 0x8, 0x508, 0x4}, {0x7, 0x0, 0x2, 0x8000}, {0x5, 0x3, 0x80, 0x5}, {0x0, 0x68f, 0x80000000, 0x2}, {0x0, 0x8, 0x1, 0x10001}, {0x703568d4, 0x3, 0x5ac, 0x9}, {0xc27, 0x0, 0x4}, {0x9, 0x7, 0x8, 0x5}, {0x101, 0x80000001, 0x4, 0x5}, {0x3ff, 0x9, 0x4, 0x6}, {0x5, 0x3, 0xfffffffd}, {0x9, 0x517, 0x5f, 0x9}, {0x1, 0x7ff, 0x3, 0x8}, {0x8, 0x9, 0x8b15, 0x836}, {0x6c8, 0x9, 0x3, 0x1}, {0x81, 0xb0, 0x5, 0x3}, {0x3, 0x0, 0x3ff, 0x100}, {0x7, 0x40, 0x2, 0x9}, {0x9, 0x7, 0xd, 0x3}, {0x2, 0x7, 0x2, 0x1}, {0x163, 0x101, 0x3, 0xd8}, {0x20c, 0x10001, 0x4, 0xa}, {0x3, 0x6, 0x9, 0x2}, {0x6, 0x101, 0x5, 0x3}, {0x4, 0x7e, 0x8, 0x2}, {0x5, 0x7, 0xfffffffe}, {0x4, 0x1ff, 0x3, 0x4ff}, {0x67e, 0x1, 0x8, 0xd}, {0x2, 0x5, 0x10001, 0x4}, {0x7e1f, 0x6, 0x2, 0x9}, {0x3, 0x8, 0x3, 0x1}, {0x200, 0xfffff9bb, 0x6, 0x9}, {0x10001, 0xce, 0x1, 0x3}, {0x6, 0x9697, 0x80, 0x7}, {0x200, 0x4, 0x8000, 0x4}, {0xfffffffe, 0xfffffffb, 0x8, 0x7ff}, {0x0, 0x5, 0x9, 0x358c5a48}, {0x0, 0x7, 0x1, 0x3}, {0xfffff43d, 0xff, 0x3, 0x5d3c679d}, {0x5, 0xb5b9, 0x0, 0xf30d}, {0x2, 0x10, 0x5, 0x8001}, {0x5, 0xffffffff, 0x3, 0xff}, {0x7, 0x1c00000, 0x9, 0x10001}, {0x5, 0xfffff000, 0x800}, {0x100, 0x7, 0x7fff}, {0x7, 0x8b, 0xd12, 0x9}, {0x0, 0x10, 0x5, 0x9}, {0x5, 0x7, 0xb, 0x5}, {0x9, 0xfffffff9, 0x7, 0x10}, {0x680, 0x0, 0x100, 0x7}, {0x6, 0x1, 0x9ef, 0x7}, {0xcf5b, 0x3ff, 0x1, 0x100}, {0xfffffffe, 0xfffffffd, 0x4, 0xfffffffa}, {0x7f, 0x1, 0x1, 0x10001}, {0xb50d, 0x5, 0x6, 0x8}, {0x20000000, 0x6, 0x1, 0x4}, {0x2, 0x10, 0x9, 0x1}, {0x4, 0x7, 0x7, 0x4}, {0x1, 0x7, 0x8}, {0x2, 0xd, 0x2}, {0x64c, 0x8fc1, 0x7a, 0x81}, {0xe, 0x8, 0x7ff, 0x64}, {0x3, 0x7, 0x8, 0xc93}, {0x8, 0x800, 0x1ff, 0x1}, {0x10, 0x0, 0x7}, {0xb991, 0xffff, 0x5, 0x1}, {0x200, 0x5, 0x1ff, 0x8001}, {0x7, 0x3, 0x5, 0x1}, {0xc, 0x800, 0x12b, 0x1}, {0x5, 0x6, 0x40, 0x3}, {0x2, 0x2, 0x9c, 0x4}, {0x9d, 0x4425, 0x1, 0xd}, {0xffffffde, 0x69c, 0x5, 0x920}, {0x7, 0xab, 0x3ff, 0x3}, {0x6, 0x7, 0xc, 0x3}, {0x0, 0x9, 0x1, 0x5}, {0x200, 0x5, 0x0, 0x80000001}, {0x8, 0x4, 0xfffffff7, 0x100}, {0x80, 0x49d, 0x1, 0x9}, {0x4295ea54, 0xffff0000, 0x8, 0x6}, {0x5, 0x1, 0xa, 0x10a4caa8}, {0x7fff, 0xf, 0x0, 0x10}, {0xfffffffd, 0x9, 0x4080000}, {0x5, 0x0, 0x6, 0x4}, {0x1, 0x80000001, 0x5, 0x7fffffff}, {0x85b5, 0x7, 0x80, 0xa}, {0x2, 0x8, 0x80000000, 0x7}, {0x0, 0x7, 0xfff, 0x8}, {0x9, 0xd2b, 0x800, 0x80}, {0xba, 0x3, 0x400, 0x800}, {0x3, 0x0, 0x1, 0xfffffffd}, {0xffffff8b, 0x19000000, 0x3, 0x8}, {0x4, 0x40, 0x0, 0x77546c3a}, {0x8, 0xffff0000, 0x79, 0xd}, {0xffffffff, 0x18, 0x495, 0x1}, {0x9, 0x0, 0x57183f63, 0xfff}, {0x9, 0xe89, 0xffffff01, 0xd6}, {0x4a4b, 0x800, 0x7ff, 0x4}, {0x2, 0x7ff, 0x4000000, 0x9}, {0xa, 0x8, 0x9, 0xd3}, {0x6, 0x180, 0x9, 0x4}, {0x0, 0x0, 0x5, 0x4}, {0x7, 0x4ac, 0x0, 0x7}, {0x539e3033, 0xd6, 0x3}, {0x3, 0x8f, 0x7, 0x2}, {0xa, 0x0, 0x6, 0x6}, {0xfffffffe, 0x2, 0x9}, {0xfffffffe, 0x7f, 0x9, 0xb81}, {0x2, 0x0, 0x8d, 0x3}, {0x6, 0x44, 0x7, 0x6}, {0x6, 0x4, 0x9, 0x40}, {0x1175, 0x9, 0x4, 0xffffc1bc}, {0x3, 0xacd2, 0x0, 0xb42}, {0x3f, 0x40, 0x38, 0x401}, {0x2, 0x8, 0x10001, 0x7}, {0xffff9e2e, 0x3a9, 0x4, 0x4}, {0x3, 0x8, 0x8, 0x8001}, {0x9, 0x5c2, 0xb23, 0x4}, {0xfffffff8, 0x8, 0x64b, 0x5}, {0xfffffffb, 0x6f8118c3, 0xd, 0x2}, {0x4, 0xffff, 0x3, 0x8000}, {0x9, 0x7, 0x8}, {0x533, 0xa, 0x7, 0x51}, {0x131e, 0xd5, 0x7f}, {0xe49d, 0xc4f7, 0x1000, 0xd}, {0x10000, 0x2, 0x8, 0x2}, {0x8, 0x4, 0x8, 0x1}, {0x4, 0x9, 0x100, 0x9}, {0xffffffff, 0x1, 0x8, 0x9}, {0x9, 0x1, 0x6, 0x7fff}, {0x81, 0xbd5, 0x10001, 0x2}, {0x2, 0x3, 0x7fffffff, 0x6}, {0xffffff7c, 0xd98, 0x401}, {0x7, 0x0, 0x4, 0x262}, {0x6, 0xffffffff, 0xfffffffa, 0xfff}, {0x2, 0x40, 0x4, 0x3}, {0x0, 0x7f, 0x7, 0x84}, {0x7fffffff, 0x5, 0x3ff, 0x9}, {0xffffffff, 0x0, 0x0, 0xb}, {0x4, 0x92d, 0x0, 0x8}, {0x6, 0x7f, 0x0, 0x8001}, {0x5, 0x57e1, 0x10, 0x7}, {0x7fffffff, 0x8, 0xc7, 0x9}, {0x6, 0x8001, 0x3, 0x2}, {0xa736, 0x4, 0x2, 0x4}, {0xb6, 0x0, 0x3}, {0x200, 0x9, 0x1, 0x8}, {0x9, 0x8, 0x9, 0x344b}, {0x0, 0x55f4, 0x49d}, {0x80, 0x0, 0x2, 0xc58c}, {0x1032, 0x9, 0x1, 0x5}, {0x10, 0x0, 0x9}, {0x0, 0x6, 0x7, 0x2}, {0xe6f6, 0x1, 0x9, 0x5}, {0x101, 0x7, 0x9, 0x1}, {0x0, 0xffffff7f, 0x9, 0x6918}, {0xf1, 0xff4, 0x6, 0x10000}, {0xe, 0x81, 0x3, 0x3}, {0xf112, 0xf, 0x9, 0x3ff}, {0x6, 0x800, 0xc8cb, 0x6}, {0x5d, 0x0, 0x4, 0x8}, {0x9, 0x9, 0x0, 0xa756}, {0x8f26, 0xeda, 0x800, 0xa8bb}, {0x0, 0x0, 0x1, 0x8}, {0x7fda, 0x3, 0x8, 0xa}, {0x3, 0xc3f9, 0xfffffffd, 0x9}, {0x2, 0x7, 0xad, 0x8001}, {0x6, 0x6, 0x3, 0x2}, {0xb6d, 0x1, 0x2, 0x1}, {0x5, 0xffffffff, 0x5, 0xff}, {0xdce, 0x538, 0x8, 0x1ff}, {0x5, 0x6, 0xcd5, 0x10001}, {0x7ff, 0x1, 0x9, 0x7}, {0x8a59, 0x10001, 0x400, 0xfffffffe}, {0xa1, 0x80, 0x7f, 0x9}, {0x6, 0x10, 0x1ff, 0xff}, {0x0, 0x9, 0x80000001, 0xfe}, {0x20000, 0xd, 0x7, 0xe690}, {0x5, 0x7, 0x8, 0x200}, {0x7fff, 0x6, 0x7, 0x3}, {0x2, 0x7, 0x2, 0x9}, {0x0, 0x5803, 0x6, 0x8}, {0xa5, 0x10000, 0x8, 0xc9ea}, {0x6, 0x401, 0x3f8e, 0x100}, {0x3, 0xfff, 0x81, 0x1}, {0x3, 0x2, 0xd, 0x7}, {0xe, 0x8001, 0xffff, 0x9}, {0x0, 0x1ff, 0x9, 0x8}, {0x149, 0xffffffff, 0x0, 0x7}, {0x8, 0x8, 0x7, 0x4}, {0x6, 0x100, 0x0, 0x1}, {0x0, 0x8001, 0xfffffc00, 0x1ff}, {0x2, 0x5, 0x7, 0x5}, {0x3, 0x8, 0x4e3b, 0xf}, {0x10001, 0x9, 0x3, 0xcf}, {0x70, 0x3, 0x2}, {0x1, 0x8, 0x4, 0x8}, {0x0, 0x8001, 0xd3}, {0x1, 0x0, 0x800, 0x938}, {0xb7, 0x3, 0x7, 0x7}, {0xa, 0x153d, 0x6}, {0xd, 0x400, 0x2}, {0x2, 0xbc, 0x4, 0x7}, {0xe80, 0x9, 0x1, 0x7}, {0x3057, 0x630a, 0x1000, 0xfffffffd}, {0x8, 0x4, 0x101, 0x541}, {0x4, 0x10001, 0xb0, 0x5a800b0d}, {0x6, 0x3, 0x4, 0xf80}, {0x6, 0x4, 0x4, 0x4}, {0xffffffff, 0x1, 0x5e, 0x3}, {0xfffffff4, 0x4666, 0x7}, {0x8001, 0x9ab, 0x2, 0x8}, {0xffffffff, 0x6, 0xd0ce, 0x1}, {0x0, 0x80000000, 0xf, 0xe40}, {0x6, 0xa, 0x5, 0x6}, {0x8, 0x2, 0x5, 0x2}, {0xf1b8, 0x6b13, 0x7, 0x2}, {0x8000, 0x7, 0x5, 0x9}, {0x5, 0x2, 0x0, 0x2}, {0xd3bc, 0x7fffffff, 0x3, 0x3}, {0x57, 0x2, 0x3ff, 0x1}, {0x1, 0x9, 0x7, 0x8}, {0x1, 0x3, 0x4228, 0x8000}, {0xffff0001, 0x81, 0x40, 0x1000}, {0x1, 0x10, 0x9, 0x2}, {0x6, 0x5, 0x7fffffff, 0x3bf}, {0x1, 0x31ee75e9, 0xffffb454, 0xfc}, {0x7, 0x1, 0x6, 0xb}, {0x3, 0x7fffffff, 0x800}, {0x1, 0x0, 0x4, 0xfffff6d8}, {0x7, 0x5, 0x8, 0xa22a}, {0x3ff, 0x7, 0x7fffffff}, {0x4, 0x6, 0x0, 0x800}, {0xcba, 0x0, 0x10000, 0x7}, {0x4, 0x0, 0x2, 0x2}, {0xffffffff, 0x5, 0x4, 0x7}, {0x34b1, 0xfff, 0x7, 0x8}, {0x8000, 0x1, 0x4, 0x8000}, {0x1c4f, 0x3, 0x401, 0x3}, {0x0, 0xf5, 0x3}, {0x5, 0x6, 0x0, 0xd}, {0x4, 0x3, 0xb74d, 0x1}, {0x38, 0x2837, 0x2, 0x1}, {0x1, 0x2, 0xa, 0x5}, {0x4, 0x2, 0x7, 0x1000}, {0x4, 0x5, 0xfffffffc, 0xfffffff7}, {0x7fff, 0xfff, 0x4}, {0x0, 0xfffffff9, 0x7, 0xf}, {0x4, 0x200, 0x6, 0xbaf6}, {0x6, 0x1, 0x5, 0x1000}, {0x4, 0x9, 0x0, 0xd}, {0x10001, 0x78515d9, 0x2dc5, 0x8}, {0x5, 0x6, 0x0, 0x4}, {0x7, 0x6, 0x6, 0x5}, {0x7ff, 0x80000001, 0x0, 0xf}, {0x2, 0x8, 0x5, 0x5}, {0x100, 0x0, 0x9, 0x4}, {0x1, 0x5, 0xfffffffb, 0x2}, {0x1000, 0x6, 0x5, 0x80000001}, {0x7, 0x7, 0x8, 0x3}, {0x0, 0x2, 0x9, 0x3}, {0x788, 0x3ff, 0x4, 0x5}, {0x1, 0x3, 0x5, 0x5}, {0x100, 0x1, 0x1, 0xffffffff}, {0xfffffff8, 0x80000000, 0x3e74, 0x8}, {0x9, 0xd, 0x3, 0x8000}, {0xfffffffb, 0x2, 0x4, 0x10001}, {0x8, 0xf, 0x8, 0x1}, {0xe, 0x7, 0x3, 0xdd}, {0x0, 0x7, 0x100, 0x9}, {0x2, 0x9, 0x80000000, 0x1}, {0x3, 0x5, 0x1, 0x4}, {0x0, 0x4, 0x6, 0x6}, {0x3ff, 0x2, 0x2, 0x7}, {0x8001, 0xffff, 0x35, 0x4}, {0x2, 0x9, 0x3, 0x1}, {0x8, 0x4, 0xa87, 0x6000000}, {0xf, 0x6, 0x7, 0x7}, {0x3, 0xd2f, 0x9, 0x5}, {0x4, 0x7ff, 0x1, 0x7cc5}, {0x2, 0xffff, 0x80000001, 0xf}, {0x50, 0x4, 0x7, 0x1}, {0x7, 0x7, 0x7, 0x8}, {0x8, 0x1ff, 0x6, 0x20}, {0x7, 0x0, 0x8, 0x10000}, {0x5, 0x8, 0x81, 0x80}, {0xe0d, 0x2, 0x7e, 0x9}, {0x84, 0x4, 0x7, 0x1}, {0xffff, 0x0, 0x9, 0x1}, {0x4, 0x0, 0xe, 0x1ff}, {0x6, 0x4, 0x8, 0x7ff}, {0x80, 0x6, 0x1, 0x3}, {0xfffff800, 0x4, 0x4, 0x9}, {0x7fffffff, 0x40, 0xfffffff7, 0x7}, {0xe923, 0x5, 0x5, 0x3}, {0x200, 0x7, 0xff, 0x7}, {0x5, 0x0, 0x800, 0x80000001}, {0xfff, 0x9, 0x3, 0x8}, {0x5eff, 0x10001, 0x1}, {0x1ff, 0x3, 0x4, 0x81}, {0xfffffffe, 0x5, 0xd, 0x3}, {0x0, 0xfff, 0x2529, 0x210}, {0x1, 0x4, 0x10000, 0x9}, {0x9, 0x6, 0x3ff, 0x10}, {0x2, 0xce, 0xfffffffa, 0x2}, {0x7, 0x2, 0x7fff, 0x40}, {0x1, 0x0, 0x1, 0x10000}, {0x68f2, 0xd4, 0xfffff46c, 0x7}, {0x1ff, 0x7, 0x1, 0x8001}, {0x0, 0x5, 0x2, 0x101}, {0x4, 0x9, 0xfffffa1c, 0x8}, {0x7, 0x8001, 0x0, 0x4}, {0xcaab, 0xf, 0x0, 0x401}, {0x550a, 0x401, 0x5, 0x2}, {0x3, 0xf20, 0x0, 0x7ff}, {0x7, 0x1ff, 0x9, 0xfffffffd}, {0x4b0c, 0x4, 0x18c00000, 0x5}, {0x6, 0x400, 0x4, 0x8}, {0xfffffffd, 0x7ff, 0x10001, 0x4}, {0x9, 0x2, 0x7, 0xfffff7d9}, {0x9, 0x7, 0x2, 0x3}, {0x437ebacf, 0x4, 0x80000000, 0x7}, {0x0, 0x5, 0x6, 0x4}, {0xd, 0x100, 0xfffffffa, 0x5}, {0x7, 0x8, 0x81, 0x1}, {0xa5, 0x0, 0xf4b, 0x7727}, {0x2, 0x5, 0x7, 0x90}, {0x2, 0x5, 0x3, 0x1ff}, {0x5, 0x81, 0x80000000, 0x9ea9}, {0xfffffffd, 0x9, 0x3, 0x1}, {0x6, 0x1000, 0x1, 0x8}, {0x8, 0x9, 0xa0000000, 0xfffffffe}, {0x0, 0x4b0a, 0xfffffffd, 0x7}, {0x7, 0x5, 0x7, 0x1}, {0x8001, 0x7, 0x3, 0x1}, {0x6, 0x8ef4, 0xfffffff7, 0x318}, {0x5, 0x6, 0x1e8a5084, 0x8}, {0x5, 0x1000, 0x0, 0x3}, {0x9, 0x3, 0x9662, 0x5}, {0x2, 0x0, 0x8, 0x4}, {0x2, 0x2, 0xfffff5ac, 0x4}, {0x0, 0x400, 0x4, 0xed}, {0x1, 0xc, 0x86, 0x384}, {0x27, 0x5, 0x6, 0x6}, {0x4, 0x400, 0x2, 0x8}, {0x0, 0xffff7fff, 0x2, 0x7}, {0x6, 0x0, 0x2, 0x6}, {0x737, 0x1, 0xb, 0x1}, {0x200, 0x5, 0x2, 0x800}, {0x9, 0x8c5c, 0xc, 0x1}, {0x337b, 0xe8ce, 0x2, 0x8}, {0xa, 0x80000000, 0x7, 0xfd7}, {0x3, 0x200, 0x5, 0x4}, {0x8, 0x10000, 0x7, 0x8000}, {0x5, 0x401, 0xffffffff}, {0x0, 0x1f54, 0x4, 0x3}, {0xfffffff7, 0x4, 0xc, 0x4}, {0x5, 0x7fffffff, 0x3, 0x1551165c}, {0x8, 0xa5, 0x2, 0x6}, {0x40, 0xfeac, 0x5, 0x6}, {0x9, 0x3, 0x2, 0x8}, {0x4, 0x1, 0x9, 0x1}, {0x1, 0x9, 0xcd, 0x32}, {0x6, 0x17, 0x5, 0x1}, {0x8, 0x8001, 0x5, 0xb}, {0x0, 0x3, 0xd2c3, 0x3}, {0x7, 0xc2e, 0x2, 0x5}, {0x1000, 0x5, 0x9, 0x9}, {0x438, 0x6, 0x1, 0x3420}, {0x3, 0x1, 0xffffffec, 0x340f}, {0x180000, 0xfffffffe, 0x5, 0x6}, {0x8001, 0x3ff, 0x46f0, 0xe}, {0x0, 0x5, 0x9, 0x10001}, {0x8, 0x8, 0x7ff, 0x1000}, {0x3, 0xfeb2, 0x9, 0x4}, {0x2, 0x3f, 0xd}, {0x5, 0xe7, 0x9, 0x9}, {0xfffffff9, 0x3, 0x3, 0x1}, {0x10000, 0xffffffff, 0x2, 0x6d2}, {0x8ec3, 0x3, 0x1, 0x7fff}, {0x4, 0x9, 0x2, 0x6}, {0x5, 0x3, 0x100, 0x3}, {0xba, 0x4, 0x2, 0xe}, {0x1, 0x5, 0x43, 0x8001}, {0x6, 0x2, 0x7, 0x8000}, {0x3, 0x0, 0x0, 0x378b}, {0x7fffffff, 0x2, 0x5, 0x2}, {0x40, 0x4}, {0xd, 0x0, 0xfadd, 0x5}, {0xd, 0x1, 0x2, 0xffffff01}, {0x1, 0x0, 0xe}, {0x4, 0x0, 0x7, 0x4}, {0xfffffff7, 0x6, 0x0, 0x94ab}, {0xf, 0x1ff, 0x7, 0x4349}, {0x7, 0x5, 0x3ff, 0x1}, {0x80, 0x4c, 0x5, 0xea0}, {0x0, 0x5d9a, 0x0, 0x242}, {0x1, 0x5, 0xb8, 0x800}, {0x5, 0x7, 0x1, 0x7fff}, {0x7ff, 0x1, 0x2, 0x7}, {0x6, 0x10001, 0x3, 0x9}, {0xd, 0x40, 0xffffff00, 0x400}, {0x1, 0x7ff, 0x9, 0x6}, {0x101, 0x5, 0xffffff2b, 0x7}, {0x800, 0x97a, 0x2, 0x5}, {0x0, 0x3, 0xa, 0x4}, {0x9, 0x401, 0x8, 0xc}, {0xe1, 0xd1af, 0x5, 0x1}, {0x7, 0x7704, 0x10001, 0xffffffff}, {0x87d, 0x4, 0x965, 0xa6c}, {0x7, 0x0, 0xff, 0xa21}, {0x85, 0x8000, 0x2, 0x5}, {0x7, 0x80000001, 0x0, 0x200}, {0x7, 0x0, 0x9, 0x5}, {0xc, 0x6, 0x37c, 0x4fbe}, {0x10, 0x6, 0x401, 0x162}, {0x5, 0x5, 0x92, 0x9}, {0x3, 0x40, 0xffff}, {0xb, 0x3, 0x22, 0x800}, {0x1000, 0x8e, 0x7, 0x3}, {0xff, 0xd1, 0xd, 0x7}, {0xb, 0x9, 0x80, 0xfff}, {0xfffffff6, 0x3, 0x7ff, 0x1}, {0xc810, 0x8, 0x2, 0x54}, {0x80000000, 0x40000000, 0x3, 0x7}, {0x3, 0x4, 0x400, 0x2}, {0x3, 0x6, 0x8, 0x80000000}, {0x3, 0x100, 0x74, 0x401}, {0x9, 0x1, 0x9, 0x5}, {0x3ff, 0x8001, 0x2, 0xfc9e}, {0x8, 0x9, 0x9, 0x6}, {0x3367, 0x8, 0x101, 0x7fff}, {0x10000, 0x2b, 0x1, 0x9}, {0x8, 0x4, 0x3, 0x7}, {0x739, 0xae8, 0x7fff, 0x3}, {0x8001, 0x8, 0x1, 0x8}, {0x6, 0x0, 0x1000, 0x3}, {0x6, 0x8, 0x9, 0x200}, {0xa7, 0x10, 0x7, 0xc}, {0x9, 0x9, 0xfffffffd, 0x200}, {0x9, 0x0, 0x3, 0x4}, {0x3, 0x80, 0x7}, {0x2, 0xfffffffd, 0x7f39d11c, 0xfffffffe}, {0x5, 0x1ff, 0x7, 0x6}, {0x2, 0x8, 0xc, 0x7f58}, {0x1, 0x3, 0x6, 0xfffffffc}, {0x2, 0x8, 0x2}, {0x3, 0x7036, 0x100}, {0xb, 0x4, 0x7ff, 0xffffffff}, {0x2, 0x8, 0x800, 0x917}, {0x7fff, 0xe5, 0x1, 0xfff}, {0x3ff, 0xfffffbff, 0x8000}, {0x0, 0x8, 0x7, 0x81}, {0x7ff, 0x8, 0x7f, 0x1}, {0x9, 0x6, 0x1, 0x6}, {0xffffffff, 0x6, 0x2, 0x7fffffff}, {0x3, 0x9, 0x9, 0x2}, {0x3, 0x7df, 0x3, 0xfffff610}, {0x87, 0x5, 0x8000, 0x1}, {0x7, 0x3, 0x400, 0x3}, {0x2, 0x7fffffff, 0x40, 0x7}, {0x9, 0x7, 0x557, 0x2}, {0x5, 0x9, 0x6, 0xfffffffd}, {0xffffff80, 0x9, 0x56, 0x80010}, {0x346d7d12, 0x8, 0x1, 0xfffff000}, {0x80000001, 0x4, 0x81, 0x8}, {0x0, 0x7, 0x58d, 0xedd}, {0xb5ef, 0xa1, 0x6, 0x1}, {0x8000, 0xfffffff7, 0xe2, 0xfff}, {0x5, 0x0, 0x101, 0x6ddead73}, {0x7ff, 0x7fff, 0x6, 0x9}, {0x1000, 0x0, 0x2, 0x9}, {0x7, 0x401, 0x8001, 0x7}, {0xb, 0x3, 0x8000, 0x1}, {0x8, 0x7fff, 0x7, 0xffffffff}, {0xf7, 0x0, 0xffffffff}, {0x1, 0x6, 0x94c, 0x2}, {0x3, 0xa96, 0x3, 0xc8}, {0x8819, 0x80000000, 0x7, 0x2}, {0x3, 0x5, 0x7fff, 0xb30}, {0x1c, 0xfffffff4, 0x6, 0x7f}, {0x8c000000, 0x3, 0x4, 0x1000}, {0x7, 0x5, 0x1, 0x800}, {0x6, 0x5, 0x9, 0x4}, {0xfffffeff, 0x5, 0x5, 0x6}, {0x8, 0x101, 0x0, 0x3ff}, {0x80000000, 0x6, 0x3, 0x5}, {0x8, 0x7, 0x0, 0x6}, {0x7f, 0x0, 0x2, 0x1}, {0x2, 0x7fff, 0xffffffff, 0x3}, {0x6, 0x9, 0x6, 0xfff}, {0x9, 0x0, 0x6, 0x3}, {0x4, 0x7f, 0x6, 0x838}, {0x1, 0x2, 0x10001, 0x6}, {0xffffffff, 0x3, 0xc0, 0x1}, {0x0, 0x2f9, 0x4, 0x3}, {0x40, 0x1, 0x8f, 0x8}, {0x6, 0x3, 0x400, 0x7f}, {0x9, 0x2, 0x3, 0x6}, {0x1, 0x3, 0x9, 0xdf4}, {0x6, 0x5, 0xfffffff5, 0xfcc}, {0x9, 0x1, 0x1, 0x7ff}, {0x3, 0x7, 0x7, 0x81}, {0x4, 0xfffffbff, 0x4, 0x6}, {0x5, 0x80000001, 0x6, 0x8}, {0x1, 0x0, 0x2, 0x8}, {0x5, 0x3, 0xe0aa, 0x1}, {0xca16, 0x6, 0x40, 0x1b4}, {0x5, 0x3, 0x400, 0x9}, {0x4, 0x3, 0x3, 0x1}, {0x7fffffff, 0xffffffff, 0x5, 0x3}, {0x800, 0x0, 0xfff, 0x8}, {0x3, 0x0, 0x4, 0x3ff}, {0x7b2, 0xb8, 0x6, 0x7}, {0xffffffc0, 0x8000, 0x8000, 0xb76d}, {0x756, 0x2, 0x2, 0x8}, {0x10000, 0x0, 0x3, 0xfbe6}, {0x2, 0x1, 0x5, 0x800}, {0x6, 0x5, 0xe000, 0x10001}, {0x8, 0xdf94, 0x3, 0xf}, {0x8001, 0x0, 0x7, 0xfffffffd}, {0x3, 0x24, 0x80000000, 0x200}, {0x1, 0x9, 0x4, 0x5}, {0x7f, 0x1ff, 0x100, 0x8}, {0x5, 0x3, 0x7fff, 0x80000000}, {0x0, 0x2, 0x9}, {0x7, 0x10001, 0xffffff81, 0x7}, {0x3ff, 0x4, 0x800, 0x8}, {0x80000000, 0x2, 0x547b, 0x3}, {0x1, 0x79, 0x40, 0x10000}, {0x6, 0x800, 0x1, 0xea}, {0x5, 0x70e, 0xd0e, 0x6b}, {0x1, 0x9, 0x4, 0x17}, {0x4, 0x7fffffff, 0x3ff, 0x8}, {0x2, 0x2, 0x5, 0x4}, {0x4, 0x18000, 0x6, 0x8b}, {0xf9e, 0x4, 0x4cd3, 0x4}, {0x9, 0x1000, 0xac1, 0xfffffff8}, {0xdc, 0x40, 0x10000, 0x7}, {0x0, 0xe, 0x7f, 0x3}, {0x1, 0x4, 0x0, 0x4}, {0x5, 0x9, 0x9, 0x9}, {0xfffffffa, 0x3, 0x9, 0x3}, {0x33, 0x1, 0xfff, 0x5}, {0x0, 0x9, 0x6, 0xfff}, {0xc7a5, 0x7, 0x1, 0x1}, {0x7, 0x84, 0x1, 0x9}, {0x4f, 0xd88b, 0x200000, 0x6}, {0x6, 0xb87, 0x5, 0x99}, {0x4, 0x8, 0x0, 0x80}, {0x6, 0x6, 0xfffffffb, 0x100}, {0x6, 0x10000, 0x6, 0x5}, {0xcab, 0x7ff, 0x5, 0x7fff}, {0xe, 0xf, 0x3, 0xe9}, {0xfffff446, 0xe, 0xd9af, 0xc}, {0x5, 0x7f, 0x4, 0xe4}, {0xff, 0x2, 0x6, 0x5}, {0x5, 0x400, 0xe, 0x65d}, {0x7, 0x7ff, 0xfffffff8, 0xf9}, {0xfff, 0xffff, 0x2, 0x4}, {0x40, 0x2, 0x3b3, 0x1}, {0x0, 0x3, 0x510e, 0x4}, {0x9, 0x8, 0xfffffffc}, {0x7, 0x3, 0x4, 0xcc1d}, {0x7f, 0x0, 0x5, 0x17c}, {0x41, 0x2, 0x9e, 0x5}, {0x4baa, 0x1, 0x3, 0x2}, {0x2, 0x8, 0x10000, 0x512}, {0x7fffffff, 0x7ff, 0x5, 0x28}, {0x5, 0x7, 0x6, 0x1}, {0xafeb, 0x0, 0x7ff, 0x81}, {0x2, 0x0, 0x6, 0x67285720}, {0x100, 0x4, 0xb, 0x4}, {0x7, 0x3ff, 0x6, 0x6}, {0x6717, 0x0, 0x92, 0xff}, {0xc, 0x78, 0x6, 0x1}, {0x3, 0x2, 0x9, 0x80}, {0xff, 0x7, 0x401, 0x1}, {0x80, 0xf1bc, 0x3, 0x4}, {0xffffff2c, 0x40, 0x0, 0x7}, {0x5, 0x1, 0x1, 0x8}, {0xc, 0x2, 0x5, 0x2}, {0x3, 0x4, 0x4a0a2b9e, 0x2}, {0xd4c, 0x0, 0x6, 0x7fff}, {0x80000000, 0x0, 0x7fff, 0x7}, {0xff, 0x6, 0x5ad, 0x2}, {0x163, 0x6, 0x7, 0x19b4}, {0xffff, 0x2, 0x6, 0xc}, {0x9, 0x4, 0xd0a4, 0x8}, {0x3, 0x0, 0x4, 0x8}, {0xe, 0xfffffffa, 0xd11, 0x4}, {0x4, 0x8527, 0x200, 0x5}, {0x9, 0x7f, 0xe, 0x1}, {0xfffffffa, 0xb862, 0x2ee0, 0x8000}, {0x2, 0x5, 0x800, 0x6}, {0x1c74, 0x10, 0x7, 0x4}, {0x4, 0x6, 0x9, 0x8}, {0x3c4c, 0x8, 0x1}, {0x401, 0x3, 0xffffffff, 0x3}, {0x9, 0x0, 0xfff, 0x1}, {0xfff, 0x8, 0xffffffff, 0x9}, {0x43, 0x80000000, 0x6a6}, {0x1, 0x8, 0x1, 0x1}, {0x35, 0x0, 0x6, 0x5}, {0x1, 0x0, 0x7, 0x5}, {0x0, 0xfffffff7, 0x1f25, 0x8}, {0x6, 0x7, 0x2, 0xffffffff}, {0x8, 0x401, 0x7, 0x6}, {0x75, 0x2, 0x0, 0x101}, {0x5b, 0x100, 0x3, 0x3}, {0x10, 0x5, 0x5, 0x3}, {0xe, 0xdd4a, 0x8dfd, 0x9}, {0x7, 0x5, 0x1, 0xbe8}, {0x400, 0x4, 0xe, 0x7}, {0x7, 0x401, 0x2, 0x9}, {0xfffff000, 0x1, 0x7, 0x1ff}, {0xa, 0x2, 0x32, 0x6}, {0x800, 0x4, 0xff, 0x4}, {0x3, 0x7, 0x80000000}, {0x7, 0xa71, 0x18, 0x6}, {0x9, 0x6, 0xf, 0x9}, {0xef98, 0x3, 0x0, 0x401}, {0x1, 0xd6, 0x1, 0x6}, {0x7, 0x10000, 0x5, 0x9}, {0x7fffffff, 0x6, 0x6, 0x5}, {0x6, 0x2, 0x4, 0x7}, {0x9, 0x8, 0x8, 0x10001}, {0x3, 0x8000, 0x101, 0xf}, {0xffffffff, 0x8, 0x2, 0x6}, {0x8, 0x8001, 0x100, 0x7fffffff}, {0x66b2, 0x7d6, 0xffff, 0x9}, {0x7, 0x10, 0x81, 0x8}, {0x0, 0x6, 0x7, 0x8}, {0x9, 0xf, 0x3, 0x8}, {0x8, 0x9, 0x3, 0x6}, {0x2, 0x0, 0x5, 0x6767}, {0x80, 0x0, 0xfffffff6, 0xd7f}, {0x0, 0x5, 0x2, 0x380}, {0x5, 0x2, 0x2, 0x609}, {0x3, 0x1000, 0x4, 0x8}, {0x1, 0x9, 0xbb6, 0x3}, {0x8, 0x37275d3c, 0x8, 0x2b862a6b}, {0x5, 0x13bc55ac, 0x8, 0x4}, {0x7fff, 0x10, 0x80000001, 0x1}, {0x101, 0x1, 0x10000, 0xe}, {0x96, 0x1, 0x9, 0x5}, {0x7, 0xf0f0a97c, 0x5, 0x401}, {0x7ff, 0xffffff01, 0x3, 0xe}, {0x3, 0x7, 0xe, 0x40}, {0xe, 0x7, 0x9, 0x9}, {0x7, 0x3, 0x6, 0x6}, {0x7, 0x9cf, 0x5, 0x100}, {0x401, 0x80000001, 0x2ce, 0xc387}, {0x7, 0x1, 0x95faaf1}, {0x3, 0x9, 0x6, 0x9}, {0xe3, 0x480, 0x4, 0x1}, {0x0, 0x100, 0x0, 0xee}, {0x8001, 0x6, 0x9, 0xfffffeff}, {0xb, 0x4, 0x10, 0x8}, {0x2, 0x2, 0x9, 0x5}, {0x10000, 0x2, 0x733, 0x2}, {0xe15, 0x5, 0x7, 0x7}, {0xb44, 0x1, 0x4, 0xfffffffc}, {0xe, 0x68a, 0x1c000, 0x9}, {0xfffff001, 0x0, 0x7, 0xfffffff7}, {0x1, 0x8, 0x0, 0xc}, {0xc9162c9, 0x5, 0x5, 0x7fff}, {0x40, 0x7, 0x1, 0x8}, {0x2, 0xdea, 0x3, 0x1000}, {0xffff, 0x100, 0x463, 0x8}, {0x8001, 0x7, 0xd3, 0xc8b}, {0x6, 0x81, 0x7f, 0x7}, {0x20000000, 0x9, 0x1, 0xfffffff9}, {0x92e, 0x5d, 0x3, 0x8}, {0x66, 0x5748, 0x2, 0x80000000}, {0x2, 0x2, 0x1, 0x3}, {0xfff, 0x8, 0x1000, 0xd}, {0x5, 0x8c9b, 0x7, 0x9}, {0x18000000, 0x7ff, 0x7, 0x400}, {0x5, 0xb, 0xb5, 0xffffffff}, {0xffffffff, 0x1, 0x2, 0x101}, {0x101, 0x3, 0x4, 0xffffffff}, {0x5, 0x8, 0x99, 0x100}, {0x9f, 0x6, 0x7fffffff, 0x1}, {0x3, 0x89, 0x3, 0x5}, {0x18a, 0x8, 0x9, 0xa1}, {0x5, 0xbb, 0x1, 0x7}, {0x5, 0x0, 0xcdc8, 0x3}, {0x8, 0x3, 0x1, 0xffff}, {0x9, 0x2, 0x400, 0x1}, {0x6, 0x8001, 0xf1, 0x3}, {0x0, 0x2, 0xffff, 0x101}, {0x7, 0x1, 0x101, 0x5}, {0x1, 0x3, 0x10001, 0xac40}, {0x4, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x4, 0xe}, {0x9, 0xfffffff8, 0x5}, {0x6, 0x9, 0x6, 0xf5}, {0x58, 0xfffffff3, 0x0, 0x100}, {0x1e, 0x7, 0x5, 0x4}, {0x2, 0x7fff, 0x2}, {0x4e, 0x7, 0x7fff, 0x4}, {0x0, 0xb, 0x5, 0x4}, {0x8, 0x1, 0x0, 0x8}, {0x8, 0x4, 0x1, 0x80}, {0x1, 0x8d, 0x6, 0x2}, {0x8c, 0x401, 0xffff, 0x3}, {0x6, 0x0, 0x3, 0x7}, {0x3, 0xfffffff8, 0x5, 0x40}, {0x5c0, 0x7, 0x8001, 0x80}, {0x9, 0x7a78, 0x2, 0x47}, {0xfe52, 0x38, 0x8998, 0x7}, {0x515bc94, 0xae6, 0x2, 0x3}, {0x5, 0x7, 0x6, 0x7}, {0x4, 0x0, 0x78, 0xa08}, {0x9, 0x6, 0x7, 0x3}, {0x4, 0xd, 0x25c, 0x9}, {0x0, 0x7b, 0xe, 0x7}, {0x8, 0x400, 0x7, 0x8}, {0x401, 0x2, 0x401, 0x1}, {0x804, 0x2, 0x9}, {0xfffffffb, 0x2, 0x8, 0x1}, {0x8, 0xb, 0x9, 0x75}, {0x2, 0x7, 0xf, 0x2}, {0x2, 0x7, 0x8, 0xffffff81}, {0x4, 0xfe11, 0x1000, 0x401}, {0x7, 0x0, 0x80000001, 0xb}, {0x3, 0x9, 0x6, 0x1}, {0x100, 0x8, 0x4, 0x10000}, {0x1000, 0x1, 0x3, 0x8000}, {0x9, 0x750, 0x1, 0x6}, {0x7, 0x2000, 0x3, 0xfffffffe}, {0x0, 0x2, 0x7fff, 0x1c}, {0x80000000, 0x1, 0xb1b, 0x6}, {0xfffffff8, 0x4, 0x0, 0xffffff91}, {0xbf95, 0xb752, 0x4, 0x4}, {0x7fffffff, 0xfffffe6c, 0x4, 0x4}, {0x8, 0xfffffffa, 0xff, 0x7}, {0xb2cf, 0x7, 0x945, 0x3}, {0x5, 0x5, 0x2, 0x1}, {0x1ff, 0xfffffffa, 0x7, 0x1}, {0x1, 0xa, 0x5, 0x6317fee3}, {0x4, 0x8, 0x4f, 0xfffffff8}, {0x6, 0x8, 0xd88, 0x3}, {0x101, 0x2000000, 0x7fffffff, 0x5}, {0x401, 0x5, 0x7, 0x9}, {0x8, 0x1, 0x5, 0x7}, {0x2, 0x8, 0x401, 0x1}, {0x1, 0x80000000, 0x6}, {0x81, 0x3, 0x1ff, 0x8}, {0x3, 0x2, 0x10001, 0xff}, {0x6, 0xa613, 0xe, 0xc2d}, {0x5, 0x5, 0x3ff, 0x7}, {0x7, 0xd, 0xb4, 0x1}, {0xfb1, 0xfad8, 0x1, 0xa}, {0xffff, 0xba, 0x4f, 0x31}, {0x5, 0x7, 0x4, 0x1}, {0x57c7, 0xf, 0xff, 0xf}, {0x5, 0x0, 0x8, 0x3ff}, {0x7, 0x6, 0x64, 0x18}, {0x9, 0xfffffffb, 0xfffffff9, 0x7}, {0x61c84729, 0x7, 0xd838, 0x84}, {0x1, 0x0, 0xdbf, 0x81}, {0x0, 0x1, 0xffff, 0x8}, {0x3, 0x80000001, 0x3, 0x5}, {0x200, 0x8, 0x3, 0x7}, {0x4, 0x3, 0x7, 0x1}, {0x8, 0x6, 0x80000001, 0x6}, {0x2, 0x100, 0x8, 0x6}, {0x1, 0x4, 0x1, 0x101}, {0x45f, 0xbdbf, 0x0, 0x8}, {0x5, 0xfffffe01, 0x1, 0x8}, {0x7, 0x80, 0x3, 0x9}, {0x36, 0x20000, 0x3, 0x5}, {0x9, 0x2f2, 0xa, 0x8}, {0xe74, 0x7, 0xa61, 0x1}, {0x5, 0x600000, 0x4b, 0x9527}, {0x9, 0x0, 0x5}, {0x2695, 0x5}, {0x2, 0x80000000, 0x7f, 0xa4c}, {0x64, 0x0, 0x6, 0x9}, {0x1, 0x4, 0x3365, 0x1}, {0x4, 0x80000000, 0x7, 0x7}, {0x2, 0x0, 0x1, 0x4}, {0x2b, 0x4, 0x1, 0x6}, {0x2, 0x5, 0xd58}, {0xa40, 0x7b8a, 0x1, 0x9}, {0x6, 0x1, 0x3, 0xf9fb}, {0x60, 0xa, 0x0, 0x2}, {0x8, 0x1, 0x299f, 0x6}, {0x4, 0x4, 0x9, 0x6}, {0x0, 0x1, 0x40}, {0x1, 0x80000000, 0x5, 0x5f}, {0x2, 0x2, 0x0, 0x7}, {0x5da4, 0x7, 0x9c3d, 0x7fff}, {0xc, 0x3, 0x7, 0x2}, {0x4, 0x2, 0x5a21b92b, 0x8}, {0x0, 0x6, 0x8, 0xe}, {0x9, 0x9, 0xfffffff7, 0x2}, {0xb6, 0x9, 0x7}, {0x2, 0x2c86, 0x80000001, 0x6}, {0x0, 0x7, 0x8, 0x5}, {0x0, 0xfffffffa, 0x8, 0x401}, {0x5, 0x10001, 0x1, 0x7ff}, {0xc, 0xe5e0, 0x8, 0x3}, {0xfffffffe, 0x101, 0x8, 0x3}, {0x0, 0x990, 0x3, 0xfffffffc}, {0x6, 0xfffffc00, 0xed7, 0xf399}, {0x216a, 0x6, 0x4, 0x1}, {0x800, 0xa5, 0x5, 0xe}, {0xabcd, 0x9, 0x1, 0x70000000}, {0x5, 0x800, 0x3, 0x1}, {0x1, 0x8d2, 0x6, 0xdf08}, {0x0, 0x4, 0x0, 0xa}, {0x5, 0x960b, 0x2, 0x3}, {0x4, 0x5, 0xa, 0x9}, {0x5, 0x8, 0x6, 0x3}, {0x5670, 0x7, 0x9}, {0xa, 0x2, 0x10, 0x8e38}, {0x401, 0x2cc0, 0x1, 0xc}, {0xfffeffff, 0x7, 0x1, 0x7}, {0xffffffff, 0x4, 0x732, 0xc8c}, {0xfff, 0x4, 0x68, 0x81}, {0x6, 0xc8a, 0x10, 0x8}, {0x4, 0xfff, 0x5, 0x9}, {0x5, 0x7fffffff, 0xc5a, 0x4}, {0x124b2eed, 0x6, 0x100}, {0x0, 0x100, 0x553, 0x4}, {0x0, 0x4, 0xb, 0x16f9}, {0x4, 0x1, 0xc8, 0x263e}, {0xf7, 0x3ea9, 0x2, 0x234}, {0x0, 0x59e7, 0x5, 0x7f}, {0x6fd9, 0x7, 0xf, 0x3}, {0x4, 0x0, 0x4a6, 0x7259}, {0x2, 0x6, 0xb, 0x8}, {0x5, 0xffffffff, 0x8, 0xf3a7}, {0x2f5ce328, 0x1000, 0x6, 0x9}, {0x4, 0x65, 0x4, 0xcc}, {0x3, 0x3, 0x8, 0x3}, {0x21, 0x4, 0xfffffffe, 0x3}, {0x19e, 0x1, 0x2, 0x1}, {0x5794, 0x2, 0x3, 0x9}, {0x58, 0x9, 0x2, 0xe4c}, {0x9, 0x2, 0x3, 0x3}, {0x9c2, 0x3ff, 0x80, 0x6}, {0x3, 0x5, 0xa, 0x8}, {0x7, 0x5, 0x6, 0x100}, {0x5, 0xec, 0x100, 0x2}, {0xfff, 0x1, 0x0, 0x4}, {0x8, 0x3, 0x0, 0xc636}, {0x80000000, 0x0, 0x5, 0x7}, {0x100, 0x3, 0x2, 0x1ff}, {0x800, 0x4524, 0x5, 0xfffffffd}, {0x5, 0x3eb6, 0xff, 0x8b}, {0x5a4, 0x1, 0xb, 0x2}, {0xfffffff9, 0x9c55, 0x1000, 0x2}, {0xfffffffa, 0xba, 0xce6, 0x2}, {0x1, 0x478, 0x0, 0x10}, {0x200, 0x3, 0x200, 0x212e}, {0x7, 0x9, 0x10000, 0xff}, {0x3, 0x100, 0x5, 0x4}, {0x99d5, 0x9, 0x8, 0x8}, {0x7055, 0x4, 0x2, 0x9}, {0x2, 0xac, 0xa91, 0x6}, {0x82, 0xf, 0xfffffffd, 0x5}, {0xa11, 0x3, 0xfffffe00, 0x2}, {0x4, 0xfffffffe, 0x6, 0x2}, {0xffffffc0, 0x5ec, 0x1}, {0x1ff, 0xfffffffc, 0x9, 0x81}, {0x9, 0x9, 0x391}, {0x6, 0x66, 0x2, 0x4}, {0x1, 0x400, 0x6, 0x6}, {0x200, 0x7fff, 0x3, 0x7620}, {0x5bc, 0x0, 0x9, 0x9}, {0x8054, 0x0, 0x5}, {0x2, 0xae, 0x8000, 0x3ff}, {0xed6c, 0x5, 0x0, 0x9}, {0x3, 0x4, 0x0, 0x8}, {0x1, 0x99, 0xad9, 0x3}, {0x4, 0x6, 0x8, 0x7}, {0x2, 0xf2c8, 0x6, 0x3f5afc32}, {0x8, 0x8, 0x9, 0xa90c}, {0x0, 0x1, 0x2, 0x2}, {0xd403, 0x7, 0x4, 0x10}, {0xfffff801, 0x0, 0x7, 0x7}, {0xffffff37, 0x60000, 0x6, 0xfffffff7}, {0x9, 0xfffffffd, 0xfffffff7, 0x9}, {0x400, 0x1, 0x2}, {0x1, 0x1, 0xffffffff, 0x36}, {0x200, 0x100, 0xff, 0x2}, {0x414, 0x9, 0xb685, 0x10}, {0xd354, 0x4000000, 0x79c9ee72, 0x101}, {0x6, 0x4, 0x2a, 0x10001}, {0x3, 0x9, 0x7, 0xffffff01}, {0x0, 0x6, 0x9, 0x7}, {0x101, 0x2ece, 0x9, 0x8}, {0xb, 0x3, 0xb, 0xe}, {0x7, 0xffffff00, 0x1, 0xf711}, {0x0, 0x8, 0x0, 0x387d2209}, {0x2, 0x10000, 0x101, 0x3}, {0xa, 0x0, 0xfffffffa}, {0x2, 0x80000000, 0x5, 0x2ef}, {0x954, 0xa0000, 0x1000, 0x9}, {0x7, 0x1, 0xd}, {0x6974000, 0x5b17, 0x0, 0x34a3}, {0xdcec, 0xb5, 0x800}, {0xff, 0xd1, 0x7939, 0xfffffffb}, {0x1, 0x9b, 0x5, 0x3}, {0x7fffffff, 0x1, 0xa, 0xd}, {0x9, 0x3, 0x3, 0x3}, {0x7f, 0x8, 0x6, 0xa}, {0x2, 0x80000000, 0x7, 0x7fff}, {0x80000000, 0x36, 0x6, 0x70000000}, {0x80000000, 0x4, 0x0, 0x200}, {0xfffffffd, 0x8, 0xffff, 0x1}, {0x9, 0x0, 0xffff, 0x7a9}, {0xffff, 0x0, 0x3, 0xfffffff8}, {0xeb8, 0x7, 0x3, 0x8}, {0xd53, 0x101, 0x7, 0x6}, {0x7ff, 0x5, 0x0, 0xb42e}, {0x9, 0x0, 0x9, 0x5}, {0x8, 0x39800000, 0x2, 0x4}]}, 0x3c9e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6(0xa, 0x200000000003, 0x87) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0) 14m15.695203723s ago: executing program 4 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) memfd_create(0x0, 0x0) socket(0x2, 0x80805, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f00000017c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) recvfrom(r5, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25003900000000000000000000000000000000bb00000000000000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 14m11.292974766s ago: executing program 4 (id=187): r0 = landlock_create_ruleset(&(0x7f0000000300)={0x3d5966f7cc08cb29, 0x0, 0x3}, 0x18, 0x2) readv(r0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f00000007c0)=""/218, 0xda}], 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000a00)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) syz_emit_ethernet(0x6e, &(0x7f0000000c40)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x33, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts]}}}}}}}, 0x0) shutdown(r1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000180)=0x84) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ff0300000000fddbdf2530000000050036000000000005003300040000000800020067f89ce3daea3dc91efc484ed9", @ANYRES32=r7, @ANYBLOB="0500350007000000"], 0x34}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) ptrace$setregs(0xf, r8, 0x9, &(0x7f0000000200)="ff8a01c12553008741ecf4c91849545622190cf6181fad24b7bd4b71899c3c64ad9fc1ba4b8dd8a8fd9f09872e4a3566af885685f45f36c582cc948f218bf2a82edecc04b5ad939b28538dd306d81fc25314556fe0b914acfe4ec8490e9b63d36b5812d5542229bb6e77a23578f44e6842bb6157ce6f9cd1f66874fa000f61ba472e74ef648a7a5328376be50482f5d6ca041db54e62692ba991d519ad086844c126ffd93e0c7c8a7ec3") socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 14m9.178733452s ago: executing program 34 (id=187): r0 = landlock_create_ruleset(&(0x7f0000000300)={0x3d5966f7cc08cb29, 0x0, 0x3}, 0x18, 0x2) readv(r0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f00000007c0)=""/218, 0xda}], 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000a00)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) syz_emit_ethernet(0x6e, &(0x7f0000000c40)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x33, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts]}}}}}}}, 0x0) shutdown(r1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000180)=0x84) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ff0300000000fddbdf2530000000050036000000000005003300040000000800020067f89ce3daea3dc91efc484ed9", @ANYRES32=r7, @ANYBLOB="0500350007000000"], 0x34}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) ptrace$setregs(0xf, r8, 0x9, &(0x7f0000000200)="ff8a01c12553008741ecf4c91849545622190cf6181fad24b7bd4b71899c3c64ad9fc1ba4b8dd8a8fd9f09872e4a3566af885685f45f36c582cc948f218bf2a82edecc04b5ad939b28538dd306d81fc25314556fe0b914acfe4ec8490e9b63d36b5812d5542229bb6e77a23578f44e6842bb6157ce6f9cd1f66874fa000f61ba472e74ef648a7a5328376be50482f5d6ca041db54e62692ba991d519ad086844c126ffd93e0c7c8a7ec3") socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 8.317277851s ago: executing program 7 (id=1626): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 8.087834371s ago: executing program 3 (id=1628): syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x126003) 7.962374899s ago: executing program 3 (id=1630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) 7.80603363s ago: executing program 3 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000020057ad070000022000018014000400fc020000000000000000000000000001060001000a"], 0x34}}, 0x0) 7.695679786s ago: executing program 7 (id=1634): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0x2, 0x4a732f64, 0x8, 0x9, 0xc, 0x2, 0x12a0, 0x6, 0xf477, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x4, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x2, 0x7fff, 0x5, 0x8, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x40083, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0x80a8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x40400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff800, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x80000002, 0x400, 0x100, 0x6, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x200006, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0xfffffe01, 0x7b, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'ip6erspan0\x00', &(0x7f0000000280)=@ethtool_test={0x1a, 0xffff}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.661602715s ago: executing program 3 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 7.362841604s ago: executing program 3 (id=1636): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.187843504s ago: executing program 3 (id=1637): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0088f71327c9167c643c4a1b7880", 0x23, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0014f9f4070009040081000000000140", 0x17) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0xfffffff8, 0x25, 0x0, 0x0, 0x6, 0xc0000, 0x0, 0x1e, 0x68e, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x4, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0xd10, 0x2, 0xf7, 0x0, 0x7f, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.752051581s ago: executing program 7 (id=1640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.896135343s ago: executing program 5 (id=1643): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 4.851003293s ago: executing program 6 (id=1644): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x1947, 0xfffffffd, 0x2}) 4.670324863s ago: executing program 5 (id=1645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.669424938s ago: executing program 7 (id=1646): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.564084816s ago: executing program 7 (id=1647): syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x1, [{0xf8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}]}) 3.623918639s ago: executing program 5 (id=1650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) 3.595103382s ago: executing program 5 (id=1651): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x9, 0x1, [0x0], [], [], [0x0, 0x100000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r7}) 3.474415508s ago: executing program 5 (id=1652): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) 3.139968847s ago: executing program 5 (id=1653): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x48a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.763691255s ago: executing program 1 (id=1654): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 2.648632383s ago: executing program 1 (id=1655): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) connect(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x1}, 0x80) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x40) 2.543119994s ago: executing program 1 (id=1656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001040)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046b4c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000001100)=""/4091, &(0x7f00000010c0)=0xfffffffffffffee0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x4000000000c, 0x8000000000005, 0x800040068], 0x2000, 0x90}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.316900439s ago: executing program 1 (id=1657): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.231827078s ago: executing program 1 (id=1658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x6, 0xc052) 1.776228364s ago: executing program 6 (id=1659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.484791336s ago: executing program 7 (id=1660): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) setresgid(0x0, 0x0, 0xee01) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f00000024c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_UNALIGN(0x5, 0x0) setreuid(0x0, r7) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x47524247}}) lchown(&(0x7f0000000100)='./file0\x00', r7, 0xffffffffffffffff) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) getgroups(0x3, &(0x7f00000000c0)=[0xee01, 0x0, 0xee01]) setfsgid(r9) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) 1.251779438s ago: executing program 6 (id=1661): write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=@unlock_all, 0xb) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04000b20"], 0x7) chown(0x0, 0xee01, 0x0) 1.10789002s ago: executing program 6 (id=1662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 334.693912ms ago: executing program 1 (id=1663): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 109.569241ms ago: executing program 6 (id=1664): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 0s ago: executing program 6 (id=1665): sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x80) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 50.163430][ T37] audit: type=1326 audit(1758650408.902:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.163469][ T37] audit: type=1326 audit(1758650408.902:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.163497][ T37] audit: type=1326 audit(1758650408.902:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.163519][ T37] audit: type=1326 audit(1758650408.902:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.163541][ T37] audit: type=1326 audit(1758650408.902:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e831caf79 code=0x7ffc0000 [ 850.163563][ T37] audit: type=1326 audit(1758650408.902:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.163585][ T37] audit: type=1326 audit(1758650408.902:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.163608][ T37] audit: type=1326 audit(1758650408.902:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.163630][ T37] audit: type=1326 audit(1758650408.902:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11137 comm="syz.3.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 850.652130][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1204'. [ 850.927654][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.927670][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.927697][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.192861][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.192877][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.192901][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.937117][ T8597] Bluetooth: hci5: command tx timeout [ 853.093143][T11056] hsr_slave_0: entered promiscuous mode [ 853.093921][T11056] hsr_slave_1: entered promiscuous mode [ 853.094426][T11056] debugfs: 'hsr0' already exists in 'hsr' [ 853.094442][T11056] Cannot create hsr debugfs directory [ 853.751812][T11158] usb usb8: usbfs: process 11158 (syz.1.1208) did not claim interface 7 before use [ 854.016497][ T8597] Bluetooth: hci5: command tx timeout [ 854.085086][T11163] netlink: 'syz.1.1211': attribute type 62 has an invalid length. [ 854.268289][T11128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 854.298370][T11128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 854.318147][T11128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 854.320093][T11128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 854.322304][T11128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 854.866286][T11124] chnl_net:caif_netlink_parms(): no params data found [ 856.096519][T11128] Bluetooth: hci5: command tx timeout [ 856.250528][ T12] bridge_slave_1: left allmulticast mode [ 856.250560][ T12] bridge_slave_1: left promiscuous mode [ 856.250828][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.435432][T11128] Bluetooth: hci0: command tx timeout [ 856.468260][ T12] bridge_slave_0: left allmulticast mode [ 856.468293][ T12] bridge_slave_0: left promiscuous mode [ 856.468596][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.698891][T11128] Bluetooth: hci0: command tx timeout [ 861.489375][T11128] Bluetooth: hci0: command tx timeout [ 863.536844][T11128] Bluetooth: hci0: command tx timeout [ 863.747038][T10224] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 863.896405][T10224] usb 2-1: Using ep0 maxpacket: 8 [ 863.900860][T10224] usb 2-1: unable to get BOS descriptor or descriptor too short [ 863.902450][T10224] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 863.902474][T10224] usb 2-1: config 0 has no interface number 0 [ 863.902529][T10224] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 863.902556][T10224] usb 2-1: config 0 interface 88 has no altsetting 0 [ 863.952103][T10224] usb 2-1: string descriptor 0 read error: -22 [ 863.952282][T10224] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 863.952305][T10224] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 863.958409][T10224] usb 2-1: config 0 descriptor?? [ 863.999602][T10224] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input8 [ 864.173363][ T1570] usb 2-1: USB disconnect, device number 47 [ 865.967549][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.047220][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.116044][ T12] bond0 (unregistering): Released all slaves [ 867.406814][T10224] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 867.570241][T10224] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 867.570270][T10224] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 867.570284][T10224] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 867.573751][T10224] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.573779][T10224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.573805][T10224] usb 2-1: Product: syz [ 867.573863][T10224] usb 2-1: Manufacturer: syz [ 867.573871][T10224] usb 2-1: SerialNumber: syz [ 867.649744][T11237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 867.692584][ T12] hsr_slave_0: left promiscuous mode [ 867.727409][ T12] hsr_slave_1: left promiscuous mode [ 867.728489][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.763419][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.855884][T11236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 867.856001][T11236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.460007][T11236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.460082][T11236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.661501][T10224] cdc_ncm 2-1:1.0: failed to get mac address [ 869.920603][T10224] cdc_ncm 2-1:1.0: bind() failure [ 869.933316][T10224] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 869.937632][T10224] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 869.964091][T10224] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 870.089193][T10224] usb 2-1: USB disconnect, device number 48 [ 871.939217][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 871.939287][T11253] openvswitch: netlink: Flow actions attr not present in new flow. [ 873.269759][ T12] team0 (unregistering): Port device team_slave_1 removed [ 874.058665][ T12] team0 (unregistering): Port device team_slave_0 removed [ 874.235821][ T9101] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 874.396546][ T9101] usb 2-1: Using ep0 maxpacket: 16 [ 874.398954][ T9101] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.398977][ T9101] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.403478][ T9101] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 874.403499][ T9101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.403510][ T9101] usb 2-1: Product: syz [ 874.403517][ T9101] usb 2-1: Manufacturer: syz [ 874.403524][ T9101] usb 2-1: SerialNumber: syz [ 874.423247][ T9101] usb 2-1: config 0 descriptor?? [ 875.222096][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.222163][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.958425][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.958570][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.958799][T11124] bridge_slave_0: entered allmulticast mode [ 875.961748][T11124] bridge_slave_0: entered promiscuous mode [ 875.999445][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.999664][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.999873][T11124] bridge_slave_1: entered allmulticast mode [ 876.002687][T11124] bridge_slave_1: entered promiscuous mode [ 876.433192][T11124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.440967][T11124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.596277][T10224] usb 2-1: USB disconnect, device number 49 [ 877.640156][T11124] team0: Port device team_slave_0 added [ 877.676840][T11124] team0: Port device team_slave_1 added [ 884.232653][T11124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.232670][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.232696][T11124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.739276][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 884.917513][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 884.994073][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 884.994226][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32768, setting to 1024 [ 884.994445][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 884.994494][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.050071][ T10] usb 2-1: config 0 descriptor?? [ 885.238113][T11124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.238131][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.238156][T11124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.315931][T11165] chnl_net:caif_netlink_parms(): no params data found [ 885.464754][ T10] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 885.464778][ T10] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 885.464793][ T10] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 885.464808][ T10] konepure 0003:1E7D:2DB4.0006: unknown main item tag 0x0 [ 885.500362][ T10] konepure 0003:1E7D:2DB4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 885.735268][T11124] hsr_slave_0: entered promiscuous mode [ 885.736232][T11124] hsr_slave_1: entered promiscuous mode [ 885.750118][T11124] debugfs: 'hsr0' already exists in 'hsr' [ 885.750143][T11124] Cannot create hsr debugfs directory [ 885.989218][T11056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 886.190415][T11056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 886.358082][T11056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 886.537647][T11165] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.537778][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.542541][T11165] bridge_slave_0: entered allmulticast mode [ 886.545319][T11165] bridge_slave_0: entered promiscuous mode [ 886.715493][T11056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 886.757599][T11165] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.757955][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.758155][T11165] bridge_slave_1: entered allmulticast mode [ 886.765515][T11165] bridge_slave_1: entered promiscuous mode [ 886.886064][ T9101] usb 2-1: USB disconnect, device number 50 [ 887.399876][T11165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.422845][T11165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.346509][ T6335] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 888.496525][ T6335] usb 2-1: Using ep0 maxpacket: 16 [ 888.499389][ T6335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.499413][ T6335] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 888.501736][ T6335] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 888.501762][ T6335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.501786][ T6335] usb 2-1: Product: syz [ 888.501800][ T6335] usb 2-1: Manufacturer: syz [ 888.501813][ T6335] usb 2-1: SerialNumber: syz [ 888.505180][ T6335] usb 2-1: config 0 descriptor?? [ 888.570216][T11323] vlan2: entered promiscuous mode [ 888.570395][T11323] vlan2: entered allmulticast mode [ 888.570419][T11323] hsr_slave_1: entered allmulticast mode [ 888.618818][T11165] team0: Port device team_slave_0 added [ 888.652911][T11165] team0: Port device team_slave_1 added [ 889.449533][T11165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.449549][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.449574][T11165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.758476][T11165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.758492][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.758517][T11165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.862903][T11336] openvswitch: netlink: Flow actions attr not present in new flow. [ 890.774290][T11338] 9pnet_fd: Insufficient options for proto=fd [ 890.891562][T11339] IPv6: addrconf: prefix option has invalid lifetime [ 891.033081][T11165] hsr_slave_0: entered promiscuous mode [ 891.033923][T11165] hsr_slave_1: entered promiscuous mode [ 891.034511][T11165] debugfs: 'hsr0' already exists in 'hsr' [ 891.034526][T11165] Cannot create hsr debugfs directory [ 891.241258][ T6335] usb 2-1: USB disconnect, device number 51 [ 891.245779][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 894.243717][ T12] bridge_slave_1: left allmulticast mode [ 894.243750][ T12] bridge_slave_1: left promiscuous mode [ 894.244015][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.319696][ T12] bridge_slave_0: left allmulticast mode [ 894.319727][ T12] bridge_slave_0: left promiscuous mode [ 894.319970][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.408893][ T12] bridge_slave_1: left allmulticast mode [ 894.408914][ T12] bridge_slave_1: left promiscuous mode [ 894.409063][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.493065][ T12] bridge_slave_0: left allmulticast mode [ 894.493096][ T12] bridge_slave_0: left promiscuous mode [ 894.493381][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.826889][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.906909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.270155][ T12] bond0 (unregistering): Released all slaves [ 895.418575][T11375] openvswitch: netlink: Flow actions attr not present in new flow. [ 895.692336][ T8597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 895.753535][ T8597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 895.770442][ T8597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 895.822642][ T8597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 895.873700][ T8597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 896.334655][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.757893][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.892234][ T12] bond0 (unregistering): Released all slaves [ 897.806670][ T12] hsr_slave_0: left promiscuous mode [ 897.846520][ T12] hsr_slave_1: left promiscuous mode [ 897.848409][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.874496][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.935579][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1265'. [ 897.936536][T11128] Bluetooth: hci2: command tx timeout [ 898.076671][ T12] hsr_slave_0: left promiscuous mode [ 898.139994][ T12] hsr_slave_1: left promiscuous mode [ 898.140830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.167307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.440868][T11395] netlink: 42 bytes leftover after parsing attributes in process `syz.1.1268'. [ 899.703516][T11397] nvme_fabrics: unknown parameter or missing value '00000000000000000001' in ctrl creation request [ 899.870409][ T37] kauditd_printk_skb: 305 callbacks suppressed [ 899.870426][ T37] audit: type=1326 audit(1758650458.612:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.870954][ T37] audit: type=1326 audit(1758650458.612:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.871099][ T37] audit: type=1326 audit(1758650458.612:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.871242][ T37] audit: type=1326 audit(1758650458.612:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.871571][ T37] audit: type=1326 audit(1758650458.612:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.871745][ T37] audit: type=1326 audit(1758650458.612:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.871878][ T37] audit: type=1326 audit(1758650458.612:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.872311][ T37] audit: type=1326 audit(1758650458.612:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc579fad710 code=0x7ffc0000 [ 899.872672][ T37] audit: type=1326 audit(1758650458.612:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 899.872900][ T37] audit: type=1326 audit(1758650458.612:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11400 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 900.016679][T11128] Bluetooth: hci2: command tx timeout [ 900.125942][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 900.183232][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 900.217252][ T12] team0 (unregistering): Port device team_slave_1 removed [ 900.368714][ T12] team0 (unregistering): Port device team_slave_0 removed [ 901.476508][ T12] team0 (unregistering): Port device team_slave_1 removed [ 901.601577][ T12] team0 (unregistering): Port device team_slave_0 removed [ 902.096625][T11128] Bluetooth: hci2: command tx timeout [ 903.174534][T11124] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 903.254513][T11124] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 903.334045][T11124] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 903.372625][T11373] chnl_net:caif_netlink_parms(): no params data found [ 903.419618][T11429] overlayfs: failed to clone upperpath [ 903.445097][T11124] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 903.496694][ T1570] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 903.658948][ T1570] usb 2-1: Using ep0 maxpacket: 8 [ 903.663937][ T1570] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.663968][ T1570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 903.663994][ T1570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 903.668364][ T1570] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 903.668389][ T1570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.668407][ T1570] usb 2-1: Product: syz [ 903.668421][ T1570] usb 2-1: Manufacturer: syz [ 903.668434][ T1570] usb 2-1: SerialNumber: syz [ 903.675471][ T1570] usb 2-1: config 0 descriptor?? [ 904.179709][T11128] Bluetooth: hci2: command tx timeout [ 904.208177][ T1570] usb 2-1: USB disconnect, device number 52 [ 904.255082][T11165] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 904.290676][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.291572][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.291754][T11373] bridge_slave_0: entered allmulticast mode [ 904.294465][T11373] bridge_slave_0: entered promiscuous mode [ 904.524858][T11165] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 904.552691][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.552888][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.553017][T11373] bridge_slave_1: entered allmulticast mode [ 904.554497][T11373] bridge_slave_1: entered promiscuous mode [ 905.421574][T11165] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 905.628892][T11165] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 905.797749][T11373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.810555][T11373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.239419][T11373] team0: Port device team_slave_0 added [ 906.244954][T11373] team0: Port device team_slave_1 added [ 906.687503][T11373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.687519][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.687545][T11373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.848953][T11373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.848969][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.848996][T11373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.067545][ T8597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 907.070717][ T8597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 907.072659][ T8597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 907.116941][ T8597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 907.123759][ T8597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 907.328796][ T9101] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 907.484376][ T9101] usb 2-1: unable to get BOS descriptor or descriptor too short [ 907.485466][ T9101] usb 2-1: not running at top speed; connect to a high speed hub [ 907.495830][ T9101] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.495854][ T9101] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.502427][ T9101] usb 2-1: string descriptor 0 read error: -22 [ 907.502574][ T9101] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.502596][ T9101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.526172][ T9101] usb 2-1: 0:2 : does not exist [ 907.789638][T11373] hsr_slave_0: entered promiscuous mode [ 907.794663][T11373] hsr_slave_1: entered promiscuous mode [ 907.800643][T11373] debugfs: 'hsr0' already exists in 'hsr' [ 907.800726][T11373] Cannot create hsr debugfs directory [ 908.198339][T11469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.198686][T11469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.216437][ T8597] Bluetooth: hci3: command tx timeout [ 912.403323][ T9101] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 912.419692][ T9101] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 912.436711][ T9101] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 912.517756][ T9101] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 912.523641][ T9101] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 912.543414][ T9101] usb 2-1: USB disconnect, device number 53 [ 912.763265][T11489] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 912.763285][T11489] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 912.763292][T11489] overlayfs: missing 'lowerdir' [ 913.000287][T11495] random: crng reseeded on system resumption [ 913.431754][ T1570] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 913.592968][ T1570] usb 2-1: device descriptor read/64, error -71 [ 913.899196][ T1570] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 914.047397][ T1570] usb 2-1: device descriptor read/64, error -71 [ 914.167472][ T1570] usb usb2-port1: attempt power cycle [ 914.257897][T11128] Bluetooth: hci3: command tx timeout [ 914.566859][ T1570] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 914.590069][ T1570] usb 2-1: device descriptor read/8, error -71 [ 914.836712][ T1570] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 914.879109][ T1570] usb 2-1: device descriptor read/8, error -71 [ 915.002509][ T1570] usb usb2-port1: unable to enumerate USB device [ 916.378958][T11128] Bluetooth: hci3: command tx timeout [ 918.416569][T11128] Bluetooth: hci3: command tx timeout [ 918.883443][ T8597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 918.895878][ T8597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 918.899629][ T8597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 918.900677][ T8597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 918.902459][ T8597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 920.043736][T11531] hub 9-0:1.0: USB hub found [ 920.043961][T11531] hub 9-0:1.0: 1 port detected [ 920.426496][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 920.426523][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 921.860419][ T8597] Bluetooth: hci5: command tx timeout [ 923.936479][ T8597] Bluetooth: hci5: command tx timeout [ 925.386148][T11466] chnl_net:caif_netlink_parms(): no params data found [ 926.017256][ T8597] Bluetooth: hci5: command tx timeout [ 927.524137][T11577] netlink: 'syz.3.1312': attribute type 25 has an invalid length. [ 927.524151][T11577] netlink: 'syz.3.1312': attribute type 7 has an invalid length. [ 927.566500][T11576] netlink: 'syz.3.1312': attribute type 25 has an invalid length. [ 927.566520][T11576] netlink: 'syz.3.1312': attribute type 7 has an invalid length. [ 927.930873][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 927.931793][ T37] audit: type=1326 audit(2000000020.159:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e831caf79 code=0x7ffc0000 [ 927.931842][ T37] audit: type=1326 audit(2000000020.169:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 927.931878][ T37] audit: type=1326 audit(2000000020.169:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 927.931918][ T37] audit: type=1326 audit(2000000020.169:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 927.931955][ T37] audit: type=1326 audit(2000000020.169:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 928.065620][ T37] audit: type=1326 audit(2000000020.229:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 928.065671][ T37] audit: type=1326 audit(2000000020.289:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 928.065710][ T37] audit: type=1326 audit(2000000020.299:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 928.154799][ T8597] Bluetooth: hci5: command tx timeout [ 928.156368][ T37] audit: type=1326 audit(2000000020.369:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x7ffc0000 [ 928.156473][ T37] audit: type=1326 audit(2000000020.379:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11583 comm="syz.3.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e831caf79 code=0x7ffc0000 [ 928.609208][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.609437][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.609682][T11466] bridge_slave_0: entered allmulticast mode [ 928.612593][T11466] bridge_slave_0: entered promiscuous mode [ 928.667484][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.667647][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.667900][T11466] bridge_slave_1: entered allmulticast mode [ 928.674256][T11466] bridge_slave_1: entered promiscuous mode [ 928.944430][ T12] bridge_slave_1: left allmulticast mode [ 928.944548][ T12] bridge_slave_1: left promiscuous mode [ 928.944794][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.038513][ T12] bridge_slave_0: left allmulticast mode [ 929.038545][ T12] bridge_slave_0: left promiscuous mode [ 929.038856][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.281059][ T12] bridge_slave_1: left allmulticast mode [ 929.281095][ T12] bridge_slave_1: left promiscuous mode [ 929.281353][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.349680][ T12] bridge_slave_0: left allmulticast mode [ 930.349703][ T12] bridge_slave_0: left promiscuous mode [ 930.349857][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.551142][T11610] hub 9-0:1.0: USB hub found [ 931.551508][T11610] hub 9-0:1.0: 1 port detected [ 931.979191][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.069880][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.134067][ T12] bond0 (unregistering): Released all slaves [ 933.840239][T11626] trusted_key: encrypted_key: master key parameter 'defaultjì¦-ox}ÑjÝj!9Lp}‹a’Rh„ÂEàï¯âæç:Øj<õ’5«¬»AJù.ÃÍencrypted' is invalid [ 934.109515][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 934.109540][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 934.589107][T11628] trusted_key: encrypted_key: master key parameter 'defaultjì¦-ox}ÑjÝj!9Lp}‹a’Rh„ÂEàï¯âæç:Øj<õ’5«¬»AJù.ÃÍencrypted' is invalid [ 934.770747][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.831217][ T37] kauditd_printk_skb: 137 callbacks suppressed [ 934.831234][ T37] audit: type=1326 audit(2000000027.059:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 934.831266][ T37] audit: type=1326 audit(2000000027.059:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 934.831289][ T37] audit: type=1326 audit(2000000027.059:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 934.831310][ T37] audit: type=1326 audit(2000000027.069:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 934.831331][ T37] audit: type=1326 audit(2000000027.069:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 934.831353][ T37] audit: type=1326 audit(2000000027.069:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 934.834469][ T37] audit: type=1326 audit(2000000027.069:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 934.834929][ T37] audit: type=1326 audit(2000000027.069:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 934.835400][ T37] audit: type=1326 audit(2000000027.069:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 934.836201][ T37] audit: type=1326 audit(2000000027.069:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11634 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 934.992132][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.153281][ T12] bond0 (unregistering): Released all slaves [ 936.664225][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.664299][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.892642][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 936.892669][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 937.429501][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.607606][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.739977][T11518] chnl_net:caif_netlink_parms(): no params data found [ 938.744105][T11662] netlink: 'syz.1.1337': attribute type 5 has an invalid length. [ 938.788958][T11466] team0: Port device team_slave_0 added [ 938.865465][T11466] team0: Port device team_slave_1 added [ 939.306616][ T12] hsr_slave_0: left promiscuous mode [ 939.662965][ T12] hsr_slave_1: left promiscuous mode [ 939.721113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.508407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.813088][ T12] hsr_slave_0: left promiscuous mode [ 942.341646][ T12] hsr_slave_1: left promiscuous mode [ 942.342563][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.629773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.724951][ T37] kauditd_printk_skb: 165 callbacks suppressed [ 942.725009][ T37] audit: type=1326 audit(2000000034.959:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 942.725968][ T37] audit: type=1326 audit(2000000034.959:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 942.797403][ T37] audit: type=1326 audit(2000000035.019:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 942.797454][ T37] audit: type=1326 audit(2000000035.019:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 942.797495][ T37] audit: type=1326 audit(2000000035.019:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 942.797537][ T37] audit: type=1326 audit(2000000035.019:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 942.797577][ T37] audit: type=1326 audit(2000000035.019:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 942.797619][ T37] audit: type=1326 audit(2000000035.019:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 942.797659][ T37] audit: type=1326 audit(2000000035.019:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 942.797699][ T37] audit: type=1326 audit(2000000035.019:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11690 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 943.692281][T11701] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1349'. [ 944.163052][ T12] team0 (unregistering): Port device team_slave_1 removed [ 944.354358][ T12] team0 (unregistering): Port device team_slave_0 removed [ 945.677310][ T12] team0 (unregistering): Port device team_slave_1 removed [ 945.817185][ T12] team0 (unregistering): Port device team_slave_0 removed [ 946.700853][T11466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.700868][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.700893][T11466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.706445][T11373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 946.805575][T11466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.805590][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.805614][T11466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.902237][T11373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 947.378717][T11373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 947.509894][T11373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 947.643195][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.643410][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.643598][T11518] bridge_slave_0: entered allmulticast mode [ 947.651083][T11518] bridge_slave_0: entered promiscuous mode [ 947.921882][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.922001][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.923352][T11518] bridge_slave_1: entered allmulticast mode [ 947.924968][T11518] bridge_slave_1: entered promiscuous mode [ 949.129876][T11466] hsr_slave_0: entered promiscuous mode [ 949.134293][T11466] hsr_slave_1: entered promiscuous mode [ 949.135196][T11466] debugfs: 'hsr0' already exists in 'hsr' [ 949.135219][T11466] Cannot create hsr debugfs directory [ 949.168512][T11730] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1355'. [ 949.223367][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1355'. [ 949.245405][T11724] C: renamed from lo (while UP) [ 949.286045][T11724] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 949.317772][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.366130][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.925928][T11518] team0: Port device team_slave_0 added [ 949.953568][T11518] team0: Port device team_slave_1 added [ 950.711416][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.711427][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.711440][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.780495][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.780511][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.780536][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.634223][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 952.634248][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 952.688994][T11761] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1364'. [ 952.812653][T11518] hsr_slave_0: entered promiscuous mode [ 952.813943][T11518] hsr_slave_1: entered promiscuous mode [ 952.814825][T11518] debugfs: 'hsr0' already exists in 'hsr' [ 952.814847][T11518] Cannot create hsr debugfs directory [ 956.164006][T11466] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 956.208001][T11466] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 956.248561][T11466] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 956.321305][T11466] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 957.742044][T11128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 957.756427][T11128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 957.766899][T11128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 957.777168][T11128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 957.780875][ T12] bridge_slave_1: left allmulticast mode [ 957.780906][ T12] bridge_slave_1: left promiscuous mode [ 957.781203][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.797422][T11128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 957.910095][ T12] bridge_slave_0: left allmulticast mode [ 957.910128][ T12] bridge_slave_0: left promiscuous mode [ 957.910414][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.106577][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 958.272381][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 958.274243][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 958.274269][ T10] usb 2-1: config 0 has no interface number 0 [ 958.274315][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 958.303568][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 958.303596][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.303615][ T10] usb 2-1: Product: syz [ 958.303629][ T10] usb 2-1: Manufacturer: syz [ 958.303643][ T10] usb 2-1: SerialNumber: syz [ 958.340322][ T10] usb 2-1: config 0 descriptor?? [ 958.369575][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 958.369611][ T10] em28xx 2-1:0.89: Video interface 89 found: bulk [ 958.617065][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 958.643312][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.712629][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 958.712659][ T10] em28xx 2-1:0.89: board has no eeprom [ 958.766697][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 958.766739][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 958.768644][ T9] em28xx 2-1:0.89: Registering V4L2 extension [ 958.792642][ T10] usb 2-1: USB disconnect, device number 58 [ 958.798330][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 958.857045][ T9] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 958.857067][ T9] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 958.857080][ T9] em28xx 2-1:0.89: No AC97 audio processor [ 958.954223][ T9] usb 2-1: Decoder not found [ 958.954241][ T9] em28xx 2-1:0.89: failed to create media graph [ 958.954295][ T9] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 958.995452][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.023442][ T9] em28xx 2-1:0.89: Registering snapshot button... [ 959.856495][ T8597] Bluetooth: hci0: command tx timeout [ 959.906761][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 959.938027][ T9] em28xx 2-1:0.89: Remote control support is not available for this card. [ 959.938413][ T10] em28xx 2-1:0.89: Closing input extension [ 959.941071][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 959.956774][ T12] bond0 (unregistering): Released all slaves [ 961.267287][ T10] em28xx 2-1:0.89: Freeing device [ 961.334165][T11838] netlink: 'syz.1.1384': attribute type 11 has an invalid length. [ 961.566515][ T12] hsr_slave_0: left promiscuous mode [ 961.606485][ T12] hsr_slave_1: left promiscuous mode [ 961.607379][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.648498][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.716634][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 961.876542][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 961.883160][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.883185][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.898703][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 961.898729][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.898748][ T10] usb 2-1: Product: syz [ 961.898762][ T10] usb 2-1: Manufacturer: syz [ 961.898775][ T10] usb 2-1: SerialNumber: syz [ 961.940524][ T8597] Bluetooth: hci0: command tx timeout [ 962.119179][T11837] fuse: Bad value for 'fd' [ 962.266693][ T10] usb 2-1: USB disconnect, device number 59 [ 962.937534][ T37] kauditd_printk_skb: 84 callbacks suppressed [ 962.937552][ T37] audit: type=1326 audit(2000000055.159:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11854 comm="syz.3.1390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x0 [ 963.168254][ T12] team0 (unregistering): Port device team_slave_1 removed [ 963.327728][ T12] team0 (unregistering): Port device team_slave_0 removed [ 964.632368][ T8597] Bluetooth: hci0: command tx timeout [ 965.095045][ T37] audit: type=1326 audit(2000000057.329:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.095195][ T37] audit: type=1326 audit(2000000057.329:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.095749][ T37] audit: type=1326 audit(2000000057.329:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.095884][ T37] audit: type=1326 audit(2000000057.329:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.096080][ T37] audit: type=1326 audit(2000000057.329:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.143156][ T37] audit: type=1326 audit(2000000057.359:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.143445][ T37] audit: type=1326 audit(2000000057.359:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.143672][ T37] audit: type=1326 audit(2000000057.359:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 965.143925][ T37] audit: type=1326 audit(2000000057.359:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11869 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 966.670759][ T8597] Bluetooth: hci0: command tx timeout [ 968.287826][T11894] comedi comedi0: adq12b: I/O port conflict (0x4,16) [ 969.200335][T11128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 969.263289][T11128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 969.265637][T11128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 969.327338][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.436610][T11128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 969.439778][T11128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 969.487589][T11800] chnl_net:caif_netlink_parms(): no params data found [ 969.501688][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 969.501703][ T37] audit: type=1326 audit(2000000061.739:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11906 comm="syz.3.1399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x0 [ 970.204434][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.679772][T11922] 9pnet_fd: Insufficient options for proto=fd [ 970.753864][T11800] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.754078][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.754264][T11800] bridge_slave_0: entered allmulticast mode [ 970.765220][T11800] bridge_slave_0: entered promiscuous mode [ 970.801017][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.814083][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.814304][T11800] bridge_slave_1: entered allmulticast mode [ 970.824715][T11800] bridge_slave_1: entered promiscuous mode [ 971.122345][ C0] vkms_vblank_simulate: vblank timer overrun [ 971.522333][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.037489][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.076328][T11128] Bluetooth: hci2: command tx timeout [ 972.252210][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.322642][T11518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 972.394474][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.617270][T11128] Bluetooth: hci2: command tx timeout [ 974.651042][T11800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.663782][T11518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 974.924168][T11800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.046968][T11518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 975.108751][T11944] netlink: 'syz.1.1406': attribute type 3 has an invalid length. [ 975.270550][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 975.270574][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 975.327437][T11941] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1405'. [ 975.371610][T11518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 975.705760][T11800] team0: Port device team_slave_0 added [ 975.849347][T11800] team0: Port device team_slave_1 added [ 976.617250][T11800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.617266][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.617292][T11800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.666364][ T8597] Bluetooth: hci2: command tx timeout [ 976.914410][T11800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.914426][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.914452][T11800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.864146][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 977.864172][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 978.370005][T11903] chnl_net:caif_netlink_parms(): no params data found [ 978.960429][ T8597] Bluetooth: hci2: command tx timeout [ 979.797451][T11128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 979.827745][T11128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 979.830133][T11128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 979.832005][T11128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 979.832859][T11128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 979.970545][T11800] hsr_slave_0: entered promiscuous mode [ 979.971837][T11800] hsr_slave_1: entered promiscuous mode [ 979.972702][T11800] debugfs: 'hsr0' already exists in 'hsr' [ 979.972726][T11800] Cannot create hsr debugfs directory [ 980.962160][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 981.288630][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 981.288664][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 981.288692][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 981.331094][ T9] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 981.331123][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.331142][ T9] usb 2-1: Product: syz [ 981.331156][ T9] usb 2-1: Manufacturer: syz [ 981.331170][ T9] usb 2-1: SerialNumber: syz [ 981.379163][ T9] usb 2-1: config 0 descriptor?? [ 981.380138][T11975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 981.401363][ T9] option 2-1:0.0: GSM modem (1-port) converter detected [ 982.118288][T11128] Bluetooth: hci3: command tx timeout [ 983.563719][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.564266][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.564450][T11903] bridge_slave_0: entered allmulticast mode [ 983.580087][T11903] bridge_slave_0: entered promiscuous mode [ 983.622685][ T6335] usb 2-1: USB disconnect, device number 60 [ 983.637709][ T6335] option 2-1:0.0: device disconnected [ 983.679624][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.679791][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.679995][T11903] bridge_slave_1: entered allmulticast mode [ 983.682684][T11903] bridge_slave_1: entered promiscuous mode [ 983.872476][ T37] audit: type=1326 audit(2000000076.109:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12004 comm="syz.3.1418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x0 [ 984.231899][ T8597] Bluetooth: hci3: command tx timeout [ 984.272167][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 984.272191][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 984.973904][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.085567][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.257322][ T8597] Bluetooth: hci3: command tx timeout [ 986.341331][T12025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1423'. [ 986.449680][T11903] team0: Port device team_slave_0 added [ 986.692897][T11903] team0: Port device team_slave_1 added [ 986.942693][T12039] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1427'. [ 987.093976][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.093989][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.094004][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.148662][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.148678][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.148704][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.010218][ T37] audit: type=1326 audit(2000000080.249:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.1.1431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x0 [ 988.274657][T11903] hsr_slave_0: entered promiscuous mode [ 988.276092][T11903] hsr_slave_1: entered promiscuous mode [ 988.278260][T11903] debugfs: 'hsr0' already exists in 'hsr' [ 988.278283][T11903] Cannot create hsr debugfs directory [ 988.346548][ T8597] Bluetooth: hci3: command tx timeout [ 988.787150][T11976] chnl_net:caif_netlink_parms(): no params data found [ 989.747776][ T1570] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 989.771712][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.772093][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.774200][T11976] bridge_slave_0: entered allmulticast mode [ 989.777552][T11976] bridge_slave_0: entered promiscuous mode [ 989.831313][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.832005][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.832142][T11976] bridge_slave_1: entered allmulticast mode [ 989.835636][T11976] bridge_slave_1: entered promiscuous mode [ 989.870431][ T12] bridge_slave_1: left allmulticast mode [ 989.870461][ T12] bridge_slave_1: left promiscuous mode [ 989.870741][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.900023][ T1570] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 989.900051][ T1570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.906067][ T1570] usb 2-1: config 0 descriptor?? [ 989.979615][ T12] bridge_slave_0: left allmulticast mode [ 989.979720][ T12] bridge_slave_0: left promiscuous mode [ 989.979928][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.058586][ T12] bridge_slave_1: left allmulticast mode [ 990.058672][ T12] bridge_slave_1: left promiscuous mode [ 990.059019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.111910][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.112668][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.114972][ T1570] usb 2-1: can't set first interface for hiFace device. [ 990.115019][ T1570] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 990.154699][ T12] bridge_slave_0: left allmulticast mode [ 990.163836][ T12] bridge_slave_0: left promiscuous mode [ 990.164290][ T1570] usb 2-1: USB disconnect, device number 61 [ 990.173459][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.090203][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.163455][T12075] netlink: 'syz.3.1435': attribute type 6 has an invalid length. [ 992.198388][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.231221][T12078] FAULT_INJECTION: forcing a failure. [ 992.231221][T12078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.231254][T12078] CPU: 1 UID: 0 PID: 12078 Comm: syz.1.1436 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 992.231275][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 992.231287][T12078] Call Trace: [ 992.231294][T12078] [ 992.231301][T12078] dump_stack_lvl+0x189/0x250 [ 992.231330][T12078] ? __pfx____ratelimit+0x10/0x10 [ 992.231355][T12078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.231378][T12078] ? __pfx__printk+0x10/0x10 [ 992.231410][T12078] should_fail_ex+0x46c/0x600 [ 992.231443][T12078] strncpy_from_user+0x36/0x290 [ 992.231470][T12078] getname_flags+0xf3/0x540 [ 992.231498][T12078] do_sys_openat2+0xbc/0x1c0 [ 992.231519][T12078] ? __pfx_do_sys_openat2+0x10/0x10 [ 992.231538][T12078] ? ksys_write+0x230/0x260 [ 992.231561][T12078] ? __pfx_ksys_write+0x10/0x10 [ 992.231579][T12078] ? rcu_is_watching+0x15/0xb0 [ 992.231608][T12078] __x64_sys_creat+0x8f/0xc0 [ 992.231630][T12078] do_syscall_64+0xfa/0x3b0 [ 992.231646][T12078] ? lockdep_hardirqs_on+0x9c/0x150 [ 992.231669][T12078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.231686][T12078] ? clear_bhb_loop+0x60/0xb0 [ 992.231708][T12078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.231725][T12078] RIP: 0033:0x7fc579faeec9 [ 992.231742][T12078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.231757][T12078] RSP: 002b:00007fc57820e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 992.231776][T12078] RAX: ffffffffffffffda RBX: 00007fc57a205fa0 RCX: 00007fc579faeec9 [ 992.231790][T12078] RDX: 0000000000000000 RSI: c9028ba210c11ff0 RDI: 00002000000000c0 [ 992.231802][T12078] RBP: 00007fc57820e090 R08: 0000000000000000 R09: 0000000000000000 [ 992.231813][T12078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.231823][T12078] R13: 00007fc57a206038 R14: 00007fc57a205fa0 R15: 00007fffd692bfc8 [ 992.231854][T12078] [ 992.446217][ T12] bond0 (unregistering): Released all slaves [ 992.559105][T12081] random: crng reseeded on system resumption [ 993.137380][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 993.288954][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 993.320375][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 993.320432][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.320499][ T9] usb 2-1: Product: syz [ 993.320549][ T9] usb 2-1: Manufacturer: syz [ 993.320563][ T9] usb 2-1: SerialNumber: syz [ 993.455548][ T9] usb 2-1: config 0 descriptor?? [ 996.151316][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.259469][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.338551][ T12] bond0 (unregistering): Released all slaves [ 996.545479][ T37] audit: type=1326 audit(2000000088.779:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12089 comm="syz.3.1439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e8322eec9 code=0x0 [ 996.889523][ T9] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 996.889550][ T9] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 997.311120][ T9] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 997.311541][T11976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.372864][ T9] usb 2-1: USB disconnect, device number 62 [ 997.415086][T11976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.521249][ T12] hsr_slave_0: left promiscuous mode [ 997.589454][ T12] hsr_slave_1: left promiscuous mode [ 997.590427][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.637201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.104518][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.104594][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.113482][ T12] hsr_slave_0: left promiscuous mode [ 998.611297][T12098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 998.763860][T12098] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 999.034155][ T12] hsr_slave_1: left promiscuous mode [ 999.039037][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.068381][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.033494][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1000.156995][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1001.477788][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1001.629354][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1002.451178][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 1002.838117][ T5919] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1004.152664][T11976] team0: Port device team_slave_0 added [ 1004.156203][T11976] team0: Port device team_slave_1 added [ 1004.166388][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1004.183776][ T5919] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1004.183805][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.215550][ T5919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1004.215570][ T5919] pvrusb2: ********** [ 1004.215577][ T5919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1004.215589][ T5919] pvrusb2: Important functionality might not be entirely working. [ 1004.215598][ T5919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1004.215609][ T5919] pvrusb2: ********** [ 1004.364406][T12116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 1004.433891][ T2365] pvrusb2: Invalid write control endpoint [ 1004.581372][ T2365] pvrusb2: Invalid write control endpoint [ 1004.581389][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1004.581398][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1004.581406][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1004.581416][ T2365] pvrusb2: Device being rendered inoperable [ 1004.615444][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1004.622967][T12107] pvrusb2: Attempted to execute control transfer when device not ok [ 1004.623005][T12107] FAULT_INJECTION: forcing a failure. [ 1004.623005][T12107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.623032][T12107] CPU: 0 UID: 0 PID: 12107 Comm: syz.1.1444 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1004.623051][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1004.623062][T12107] Call Trace: [ 1004.623068][T12107] [ 1004.623076][T12107] dump_stack_lvl+0x189/0x250 [ 1004.623103][T12107] ? __pfx____ratelimit+0x10/0x10 [ 1004.623127][T12107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.623149][T12107] ? __pfx__printk+0x10/0x10 [ 1004.623183][T12107] should_fail_ex+0x46c/0x600 [ 1004.623213][T12107] _copy_to_user+0x31/0xb0 [ 1004.623236][T12107] simple_read_from_buffer+0xe1/0x170 [ 1004.623264][T12107] proc_fail_nth_read+0x1b6/0x220 [ 1004.623286][T12107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.623306][T12107] ? rw_verify_area+0x2ac/0x4e0 [ 1004.623334][T12107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.623353][T12107] vfs_read+0x206/0xa30 [ 1004.623383][T12107] ? __pfx_vfs_read+0x10/0x10 [ 1004.623399][T12107] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1004.623429][T12107] ? mutex_lock_nested+0x154/0x1d0 [ 1004.623447][T12107] ? fdget_pos+0x253/0x320 [ 1004.623478][T12107] ksys_read+0x14b/0x260 [ 1004.623500][T12107] ? __pfx_ksys_read+0x10/0x10 [ 1004.623518][T12107] ? rcu_is_watching+0x15/0xb0 [ 1004.623554][T12107] ? do_syscall_64+0xbe/0x3b0 [ 1004.623573][T12107] do_syscall_64+0xfa/0x3b0 [ 1004.623588][T12107] ? lockdep_hardirqs_on+0x9c/0x150 [ 1004.623611][T12107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.623626][T12107] ? clear_bhb_loop+0x60/0xb0 [ 1004.623648][T12107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.623664][T12107] RIP: 0033:0x7fc579fad8dc [ 1004.623679][T12107] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1004.623692][T12107] RSP: 002b:00007fc57820e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1004.623711][T12107] RAX: ffffffffffffffda RBX: 00007fc57a205fa0 RCX: 00007fc579fad8dc [ 1004.623724][T12107] RDX: 000000000000000f RSI: 00007fc57820e0a0 RDI: 0000000000000005 [ 1004.623735][T12107] RBP: 00007fc57820e090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.623746][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.623756][T12107] R13: 00007fc57a206038 R14: 00007fc57a205fa0 R15: 00007fffd692bfc8 [ 1004.623786][T12107] [ 1004.639970][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1004.642928][ T2365] pvrusb2: Attached sub-driver cx25840 [ 1004.642946][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1004.642955][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1004.675985][ T9] usb 2-1: USB disconnect, device number 63 [ 1004.961066][T11976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.961081][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.961105][T11976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.975085][T11976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.975100][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.975125][T11976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.843365][ T37] audit: type=1326 audit(2000000101.079:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.1.1449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x0 [ 1008.857830][T11976] hsr_slave_0: entered promiscuous mode [ 1008.860762][T11976] hsr_slave_1: entered promiscuous mode [ 1008.861647][T11976] debugfs: 'hsr0' already exists in 'hsr' [ 1008.861670][T11976] Cannot create hsr debugfs directory [ 1009.184362][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 1009.184387][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 1009.239700][T12132] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1448'. [ 1011.554304][T11800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1011.592854][T11800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1011.596765][ T6335] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1011.724465][T11800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1011.805014][ T6335] usb 2-1: Using ep0 maxpacket: 16 [ 1011.810664][ T6335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.810687][ T6335] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1011.815436][ T6335] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1011.815462][ T6335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.815480][ T6335] usb 2-1: Product: syz [ 1011.815493][ T6335] usb 2-1: Manufacturer: syz [ 1011.815506][ T6335] usb 2-1: SerialNumber: syz [ 1011.821162][ T6335] usb 2-1: config 0 descriptor?? [ 1012.079685][T11800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1014.000102][T11903] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1014.106455][T11903] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1014.628830][ T1570] usb 2-1: USB disconnect, device number 64 [ 1014.841671][T11903] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1014.950493][T11903] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1015.183312][ T37] audit: type=1326 audit(2000000107.419:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 1015.186505][ T37] audit: type=1326 audit(2000000107.419:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 1015.186552][ T37] audit: type=1326 audit(2000000107.419:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 1015.186771][ T37] audit: type=1326 audit(2000000107.419:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 1015.186818][ T37] audit: type=1326 audit(2000000107.419:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 1015.251943][ T37] audit: type=1326 audit(2000000107.419:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 1015.252237][ T37] audit: type=1326 audit(2000000107.489:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 1015.297794][ T37] audit: type=1326 audit(2000000107.489:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 1015.297845][ T37] audit: type=1326 audit(2000000107.489:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc579faeec9 code=0x7ffc0000 [ 1015.297885][ T37] audit: type=1326 audit(2000000107.489:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12167 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc579f4af79 code=0x7ffc0000 [ 1016.525253][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.536749][ T12] bridge_slave_1: left allmulticast mode [ 1016.536780][ T12] bridge_slave_1: left promiscuous mode [ 1016.537043][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.599510][ T12] bridge_slave_0: left allmulticast mode [ 1016.599540][ T12] bridge_slave_0: left promiscuous mode [ 1016.599788][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.377370][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.497263][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.548794][ T12] bond0 (unregistering): Released all slaves [ 1017.946718][ T12] hsr_slave_0: left promiscuous mode [ 1017.992057][ T12] hsr_slave_1: left promiscuous mode [ 1017.992685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.054699][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.577413][T11128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1018.616508][T11128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1018.619227][T11128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1018.620825][T11128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1018.621553][T11128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1019.862224][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1020.119713][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1021.516677][T11128] Bluetooth: hci0: command tx timeout [ 1023.287235][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.540952][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.547396][T11128] Bluetooth: hci0: command tx timeout [ 1023.571510][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.571670][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.796914][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.797070][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.170612][T11976] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1024.232367][T11976] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1024.280435][T11976] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1024.328037][T11976] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1024.377601][T12195] chnl_net:caif_netlink_parms(): no params data found [ 1025.206447][ T1570] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1025.233095][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.233241][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.233493][T12195] bridge_slave_0: entered allmulticast mode [ 1025.237201][T12195] bridge_slave_0: entered promiscuous mode [ 1025.258225][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.259099][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.259327][T12195] bridge_slave_1: entered allmulticast mode [ 1025.262243][T12195] bridge_slave_1: entered promiscuous mode [ 1025.378172][ T1570] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.378226][ T1570] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1025.390310][ T1570] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1025.390338][ T1570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.390356][ T1570] usb 2-1: Product: syz [ 1025.390369][ T1570] usb 2-1: Manufacturer: syz [ 1025.390383][ T1570] usb 2-1: SerialNumber: syz [ 1025.449500][ T1570] cdc_mbim 2-1:1.0: skipping garbage [ 1025.616355][T11128] Bluetooth: hci0: command tx timeout [ 1025.667573][T12245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1025.780693][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.827466][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.285321][T12245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1026.285696][ T1570] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1026.285709][ T1570] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1026.315247][T12195] team0: Port device team_slave_0 added [ 1026.327749][T12195] team0: Port device team_slave_1 added [ 1026.487321][ T1570] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1026.504842][ T1570] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1026.523974][ T1570] wwan wwan0: port wwan0mbim0 attached [ 1026.573557][ T1570] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:1a:97:fe:13:5e [ 1026.574563][T12195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.574577][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.574603][T12195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.644754][T12195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.644764][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.644779][T12195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.854104][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.901943][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.902642][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.038353][T12195] hsr_slave_0: entered promiscuous mode [ 1027.044902][T12195] hsr_slave_1: entered promiscuous mode [ 1027.045816][T12195] debugfs: 'hsr0' already exists in 'hsr' [ 1027.045839][T12195] Cannot create hsr debugfs directory [ 1027.415724][ T12] bridge_slave_1: left allmulticast mode [ 1027.415754][ T12] bridge_slave_1: left promiscuous mode [ 1027.416022][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.497836][ T12] bridge_slave_0: left allmulticast mode [ 1027.497867][ T12] bridge_slave_0: left promiscuous mode [ 1027.498206][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.696532][T11128] Bluetooth: hci0: command tx timeout [ 1027.714447][ T44] usb 2-1: USB disconnect, device number 65 [ 1027.723340][ T44] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1029.583191][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.740812][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.853418][ T12] bond0 (unregistering): Released all slaves [ 1029.912265][ T8597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1029.952349][ T8597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1029.954175][ T8597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1029.955618][ T8597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1029.960605][ T8597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1030.246958][ T44] wwan wwan0: port wwan0mbim0 disconnected [ 1030.516543][ T12] hsr_slave_0: left promiscuous mode [ 1030.556537][ T12] hsr_slave_1: left promiscuous mode [ 1030.557434][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.588644][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.733865][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1031.898605][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1032.032702][T11128] Bluetooth: hci5: command tx timeout [ 1032.563789][T12286] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1032.847782][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'. [ 1033.159132][T11976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.820916][T11976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.019333][ T2314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.019491][ T2314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.096510][T11128] Bluetooth: hci5: command tx timeout [ 1034.293951][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.294196][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.190881][T12279] chnl_net:caif_netlink_parms(): no params data found [ 1036.128178][T12359] lo: entered allmulticast mode [ 1036.148262][T12359] tunl0: entered allmulticast mode [ 1036.173717][T12359] gre0: entered allmulticast mode [ 1036.176368][T11128] Bluetooth: hci5: command tx timeout [ 1036.237086][T12359] gretap0: entered allmulticast mode [ 1036.287223][T12359] erspan0: entered allmulticast mode [ 1036.302592][T12359] ip_vti0: entered allmulticast mode [ 1036.308812][T12359] ip6_vti0: entered allmulticast mode [ 1036.315608][T12359] sit0: entered allmulticast mode [ 1036.343902][T12359] ip6tnl0: entered allmulticast mode [ 1036.368604][T12359] ip6gre0: entered allmulticast mode [ 1036.402128][T12359] syz_tun: entered allmulticast mode [ 1036.437127][T12359] ip6gretap0: entered allmulticast mode [ 1036.441541][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.441743][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.442480][T12359] bridge0: entered allmulticast mode [ 1036.494458][T12359] vcan0: entered allmulticast mode [ 1036.513150][T12359] bond0: entered allmulticast mode [ 1036.513172][T12359] bond_slave_0: entered allmulticast mode [ 1036.513194][T12359] bond_slave_1: entered allmulticast mode [ 1036.536274][T12359] team0: entered allmulticast mode [ 1036.536294][T12359] team_slave_0: entered allmulticast mode [ 1036.536315][T12359] team_slave_1: entered allmulticast mode [ 1036.542530][T12359] dummy0: entered allmulticast mode [ 1036.598232][T12359] nlmon0: entered allmulticast mode [ 1036.600942][T12359] caif0: entered allmulticast mode [ 1036.601773][T12359] veth0: entered allmulticast mode [ 1036.605771][T12359] veth1: entered allmulticast mode [ 1036.718365][T12359] wg0: entered allmulticast mode [ 1036.836872][T12359] wg1: entered allmulticast mode [ 1036.946790][T12359] wg2: entered allmulticast mode [ 1036.957310][T12359] veth0_to_bridge: entered allmulticast mode [ 1036.984098][T12359] veth1_to_bridge: entered allmulticast mode [ 1037.001636][T12359] veth0_to_bond: entered allmulticast mode [ 1037.013706][T12359] veth1_to_bond: entered allmulticast mode [ 1037.024450][T12359] veth0_to_team: entered allmulticast mode [ 1037.045847][T12359] veth1_to_team: entered allmulticast mode [ 1037.064956][T12359] veth0_to_batadv: entered allmulticast mode [ 1037.074895][T12359] batadv_slave_0: entered allmulticast mode [ 1037.090776][T12359] veth1_to_batadv: entered allmulticast mode [ 1037.109143][T12359] batadv_slave_1: entered allmulticast mode [ 1037.113396][T12359] xfrm0: entered allmulticast mode [ 1037.117478][T12359] veth0_to_hsr: entered allmulticast mode [ 1037.134143][T12359] hsr_slave_0: entered allmulticast mode [ 1037.144397][T12359] veth1_to_hsr: entered allmulticast mode [ 1037.164063][T12359] hsr0: left promiscuous mode [ 1037.168703][T12359] hsr0: entered allmulticast mode [ 1037.176347][T12359] veth1_virt_wifi: entered allmulticast mode [ 1037.188016][T12359] veth0_virt_wifi: entered allmulticast mode [ 1037.194675][T12359] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1037.195641][T12359] veth1_vlan: entered allmulticast mode [ 1037.205265][T12359] veth0_vlan: entered allmulticast mode [ 1037.220787][T12359] vlan1: entered allmulticast mode [ 1037.236539][T12359] macvlan0: entered allmulticast mode [ 1037.276432][T12359] macvlan1: entered allmulticast mode [ 1037.281333][T12359] ipvlan0: entered allmulticast mode [ 1037.281537][T12359] ipvlan1: entered allmulticast mode [ 1037.282190][T12359] veth1_macvtap: entered allmulticast mode [ 1037.283189][T12359] veth0_macvtap: entered allmulticast mode [ 1037.378260][T12359] macvtap0: entered allmulticast mode [ 1037.383865][T12359] macsec0: entered allmulticast mode [ 1037.438413][T12359] geneve0: entered allmulticast mode [ 1037.526502][T12359] geneve1: entered allmulticast mode [ 1037.587601][T12359] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1037.657992][T12359] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1037.716631][T12359] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1037.830779][T12359] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 1037.944049][T12359] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1037.978550][T12359] vlan2: left promiscuous mode [ 1037.984102][T12359] bond1: entered allmulticast mode [ 1037.984116][T12359] ip6gretap1: entered allmulticast mode [ 1038.010163][T12359] bond2: entered allmulticast mode [ 1038.010186][T12359] gretap1: entered allmulticast mode [ 1038.063781][T12359] gretap1: left promiscuous mode [ 1038.166092][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.181267][T12195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1038.257122][T11128] Bluetooth: hci5: command tx timeout [ 1038.477973][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.478199][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.478436][T12279] bridge_slave_0: entered allmulticast mode [ 1038.481366][T12279] bridge_slave_0: entered promiscuous mode [ 1038.484786][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.486132][T12195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1038.560092][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.560243][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.560420][T12279] bridge_slave_1: entered allmulticast mode [ 1038.561877][T12279] bridge_slave_1: entered promiscuous mode [ 1038.562888][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.564475][T12195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1038.724640][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.725043][T12195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1039.119781][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.131839][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.344875][T12279] team0: Port device team_slave_0 added [ 1039.374641][T12279] team0: Port device team_slave_1 added [ 1039.599362][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.599378][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.599402][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.643851][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.643866][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.643897][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.122068][ T8597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1040.127960][ T8597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1040.129929][ T8597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1040.143704][ T8597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.145289][ T8597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1040.216117][T12279] hsr_slave_0: entered promiscuous mode [ 1040.223920][T12279] hsr_slave_1: entered promiscuous mode [ 1040.224803][T12279] debugfs: 'hsr0' already exists in 'hsr' [ 1040.224827][T12279] Cannot create hsr debugfs directory [ 1040.271714][ T43] bridge_slave_1: left allmulticast mode [ 1040.271745][ T43] bridge_slave_1: left promiscuous mode [ 1040.271993][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.339503][ T43] bridge_slave_0: left allmulticast mode [ 1040.339534][ T43] bridge_slave_0: left promiscuous mode [ 1040.339783][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.017313][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.078650][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.101487][ T43] bond0 (unregistering): Released all slaves [ 1042.229343][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 1042.276390][T11128] Bluetooth: hci2: command tx timeout [ 1042.487913][ T44] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1042.636454][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 1042.640116][ T44] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1042.640141][ T44] usb 2-1: config 0 has no interface number 0 [ 1042.640190][ T44] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1042.644518][ T44] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1042.644544][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.644563][ T44] usb 2-1: Product: syz [ 1042.644584][ T44] usb 2-1: Manufacturer: syz [ 1042.644598][ T44] usb 2-1: SerialNumber: syz [ 1042.707226][ T44] usb 2-1: config 0 descriptor?? [ 1042.746405][ T43] hsr_slave_0: left promiscuous mode [ 1042.768787][ T43] hsr_slave_1: left promiscuous mode [ 1042.769638][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.807752][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.125043][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1043.135540][ T44] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1043.135592][ T44] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1043.135609][ T44] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1043.135704][ T44] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1043.172722][ T44] usb 2-1: USB disconnect, device number 66 [ 1043.466560][ T44] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1043.626631][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 1043.629443][ T44] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.629475][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1043.629509][ T44] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1043.629532][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.635172][ T44] usb 2-1: config 0 descriptor?? [ 1043.987411][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1044.090574][ T44] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1044.285492][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1044.336361][T11128] Bluetooth: hci2: command tx timeout [ 1044.511976][ T44] usb 2-1: USB disconnect, device number 67 [ 1045.837522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.416517][ T8597] Bluetooth: hci2: command tx timeout [ 1047.370639][T12195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.532789][T12195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.720155][ T2314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.720522][ T2314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.721471][T12416] tipc: Enabled bearer , priority 0 [ 1047.723721][T12386] chnl_net:caif_netlink_parms(): no params data found [ 1047.927616][T12417] tipc: Resetting bearer [ 1047.958170][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 1047.958192][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 1047.960703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.962829][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.036696][T12415] tipc: Resetting bearer [ 1048.496692][ T8597] Bluetooth: hci2: command 0x0419 tx timeout [ 1048.749826][ T44] tipc: Node number set to 2506392320 [ 1049.355797][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.554809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.641220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1050.104409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1050.576294][T11128] Bluetooth: hci2: command 0x0419 tx timeout [ 1058.945363][T12415] tipc: Disabling bearer [ 1059.213447][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 1059.213469][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 1059.242091][ T9414] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.266387][ T9414] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.297566][ T9414] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.343188][ T9412] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.540791][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.540838][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.947902][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.954116][T12386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.954364][T12386] bridge_slave_0: entered allmulticast mode [ 1059.958950][T12386] bridge_slave_0: entered promiscuous mode [ 1060.031255][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.031470][T12386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.031663][T12386] bridge_slave_1: entered allmulticast mode [ 1060.037204][T12386] bridge_slave_1: entered promiscuous mode [ 1060.517978][T12386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.518543][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 1060.518563][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 1060.531310][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 1060.531330][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 1060.541882][T12386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.085748][T12386] team0: Port device team_slave_0 added [ 1061.118627][T12386] team0: Port device team_slave_1 added [ 1061.290308][T12279] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1061.367437][T12473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1061.677078][T12279] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1061.767576][T12386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.767593][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.767618][T12386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.768586][T12279] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1061.878139][T12386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.878154][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.878177][T12386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.881282][T12279] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1062.228810][T12499] binder: 12497:12499 ioctl c0306201 200000002800 returned -14 [ 1062.390688][T12503] bond3: option mode: unable to set because the bond device is up [ 1062.414925][T12386] hsr_slave_0: entered promiscuous mode [ 1062.421148][T12386] hsr_slave_1: entered promiscuous mode [ 1062.423198][T12386] debugfs: 'hsr0' already exists in 'hsr' [ 1062.423220][T12386] Cannot create hsr debugfs directory [ 1062.930463][ T43] bridge_slave_1: left allmulticast mode [ 1062.930494][ T43] bridge_slave_1: left promiscuous mode [ 1062.930743][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.008926][ T43] bridge_slave_0: left allmulticast mode [ 1063.008958][ T43] bridge_slave_0: left promiscuous mode [ 1063.009207][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.910173][T12529] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1064.130429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1064.897765][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.956896][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.979290][ T43] bond0 (unregistering): Released all slaves [ 1065.044420][T12524] syzkaller1: entered promiscuous mode [ 1065.044449][T12524] syzkaller1: entered allmulticast mode [ 1065.538537][ T43] hsr_slave_0: left promiscuous mode [ 1065.580383][ T43] hsr_slave_1: left promiscuous mode [ 1065.581446][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.585505][T12539] Bluetooth: MGMT ver 1.23 [ 1065.633031][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.684085][ T37] kauditd_printk_skb: 261 callbacks suppressed [ 1065.684103][ T37] audit: type=1800 audit(2000000157.919:2824): pid=12541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1566" name="bus" dev="overlay" ino=3891 res=0 errno=0 [ 1066.236450][ T5919] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1066.429204][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 1066.432102][ T5919] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1066.432126][ T5919] usb 2-1: config 0 has no interface number 0 [ 1066.434310][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1066.434335][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.434354][ T5919] usb 2-1: Product: syz [ 1066.434367][ T5919] usb 2-1: Manufacturer: syz [ 1066.434380][ T5919] usb 2-1: SerialNumber: syz [ 1066.497094][ T5919] usb 2-1: config 0 descriptor?? [ 1066.723038][ T5919] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1066.723076][ T5919] usb 2-1: No valid video chain found. [ 1066.740563][ T5919] usb 2-1: USB disconnect, device number 68 [ 1066.827136][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1067.028913][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1069.039823][T12195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.823347][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.092092][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.281896][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.282029][ T6224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.426715][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.426874][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.497453][T12195] veth0_vlan: entered promiscuous mode [ 1070.755377][T12195] veth1_vlan: entered promiscuous mode [ 1071.154188][T12195] veth0_macvtap: entered promiscuous mode [ 1071.213219][T12195] veth1_macvtap: entered promiscuous mode [ 1071.354238][T12386] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1071.416226][T12386] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1071.460431][T12386] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1071.509481][T12386] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1071.572612][T12195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.634058][T12195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.691762][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.703293][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.711836][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.732683][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.735683][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.340791][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.340810][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.510136][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.510156][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.527134][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.692993][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.748310][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.748511][ T9412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.865560][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.865827][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.937964][T12279] veth0_vlan: entered promiscuous mode [ 1073.023468][T12279] veth1_vlan: entered promiscuous mode [ 1074.006184][T12279] veth0_macvtap: entered promiscuous mode [ 1074.037144][T12279] veth1_macvtap: entered promiscuous mode [ 1074.143042][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.193951][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.235947][ T6224] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.259798][ T6224] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.262667][ T6224] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.294467][ T6224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.767713][ T37] audit: type=1800 audit(2000000166.999:2825): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1604" name="bus" dev="overlay" ino=3977 res=0 errno=0 [ 1074.900889][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.900908][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.248856][T12386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.279758][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.279777][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.600734][ T37] audit: type=1800 audit(2000000167.839:2826): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1614" name="bus" dev="overlay" ino=41 res=0 errno=0 [ 1076.866456][ T6335] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1077.020576][ T6335] usb 2-1: Using ep0 maxpacket: 32 [ 1077.022910][ T6335] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 1077.022937][ T6335] usb 2-1: config 0 has no interface number 0 [ 1077.022971][ T6335] usb 2-1: config 0 interface 131 has no altsetting 0 [ 1077.026452][ T6335] usb 2-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13 [ 1077.026477][ T6335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.026496][ T6335] usb 2-1: Product: syz [ 1077.026509][ T6335] usb 2-1: Manufacturer: syz [ 1077.026523][ T6335] usb 2-1: SerialNumber: syz [ 1077.034422][ T6335] usb 2-1: config 0 descriptor?? [ 1077.064337][T12386] veth0_vlan: entered promiscuous mode [ 1077.117744][ T6335] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 1077.118393][ T6335] dvb-usb: bulk message failed: -22 (2/0) [ 1077.118421][ T6335] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1077.123517][ T6335] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 1077.123720][ T6335] usb 2-1: media controller created [ 1077.132632][T12386] veth1_vlan: entered promiscuous mode [ 1077.135099][ T6335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1077.205294][ T6335] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1077.231495][ T6335] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1077.275715][T12386] veth0_macvtap: entered promiscuous mode [ 1077.324855][T12386] veth1_macvtap: entered promiscuous mode [ 1077.380723][T12386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.417400][T12386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.459332][ T6224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.465222][ T6224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.465267][ T6224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.465302][ T6224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.479429][ T6335] rc_core: IR keymap rc-dtt200u not found [ 1077.479449][ T6335] Registered IR keymap rc-empty [ 1077.481725][ T6335] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1077.491631][ T6335] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10 [ 1077.513867][ T6335] dvb-usb: schedule remote query interval to 300 msecs. [ 1077.513890][ T6335] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 1077.521140][ T6335] usb 2-1: USB disconnect, device number 69 [ 1077.901323][ T6335] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 1078.303835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.326872][T12671] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1078.372507][ T1551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.372527][ T1551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.462326][ T6224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.462345][ T6224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.508841][T12671] usb 7-1: Using ep0 maxpacket: 8 [ 1078.530292][T12671] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1078.530323][T12671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.530344][T12671] usb 7-1: Product: syz [ 1078.530358][T12671] usb 7-1: Manufacturer: syz [ 1078.530373][T12671] usb 7-1: SerialNumber: syz [ 1078.576078][T12671] usb 7-1: config 0 descriptor?? [ 1078.601829][T12671] gspca_main: se401-2.14.0 probing 047d:5003 [ 1079.162321][T12671] gspca_se401: Frame size: 0x2 1/4th janggu [ 1079.162342][T12671] gspca_se401: Frame size: 0x127 bayer [ 1079.162353][T12671] gspca_se401: Frame size: 256x0 bayer [ 1079.162362][T12671] gspca_se401: Frame size: 0x0 1/16th janggu [ 1079.162374][T12671] gspca_se401: Frame size: 0x4 bayer [ 1079.420234][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35'. [ 1079.420447][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.421080][T12765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.683236][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.683266][T12765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.685597][T12671] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 1079.803660][T12671] usb 7-1: USB disconnect, device number 2 [ 1080.276430][ T5846] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1080.452315][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.452349][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.452372][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1080.452414][ T5846] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.452438][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.462883][ T5846] usb 2-1: config 0 descriptor?? [ 1080.585279][ T8597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1080.602897][ T8597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1080.613769][ T8597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1080.620285][ T8597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1080.623480][ T8597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1080.999658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.007154][ T5846] usbhid 2-1:0.0: can't add hid device: -71 [ 1081.007272][ T5846] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1081.029376][ T5846] usb 2-1: USB disconnect, device number 70 [ 1081.218979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.294003][ T5844] syz_tun (unregistering): left promiscuous mode [ 1081.408726][ T6335] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1081.561182][ T6335] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1081.561248][ T6335] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1081.561297][ T6335] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1081.561321][ T6335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.615334][ T6335] usb 7-1: config 0 descriptor?? [ 1081.636690][ T6335] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1082.032089][ T2314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.032124][ T2314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.176506][ T6335] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1082.339552][ T6335] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1082.339579][ T6335] usb 2-1: config 0 has no interface number 0 [ 1082.339626][ T6335] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1082.339649][ T6335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.384170][ T6335] usb 2-1: config 0 descriptor?? [ 1082.395576][ T6335] usb 2-1: selecting invalid altsetting 1 [ 1082.404639][ T6335] dvb_ttusb_budget: ttusb_init_controller: error [ 1082.404658][ T6335] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1082.470379][ T2314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.470413][ T2314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.512703][ T6335] DVB: Unable to find symbol cx22700_attach() [ 1082.580497][ T6335] DVB: Unable to find symbol tda10046_attach() [ 1082.580511][ T6335] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1082.621319][T11822] usb 2-1: USB disconnect, device number 71 [ 1082.819159][T11128] Bluetooth: hci3: command tx timeout [ 1082.861376][ T2314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1082.861410][ T2314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.917926][T12773] chnl_net:caif_netlink_parms(): no params data found [ 1083.189578][ T2314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.189613][ T2314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.508622][T12773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.508900][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.509107][T12773] bridge_slave_0: entered allmulticast mode [ 1083.513846][T12773] bridge_slave_0: entered promiscuous mode [ 1083.525566][T12773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.525777][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.525989][T12773] bridge_slave_1: entered allmulticast mode [ 1083.533554][T12773] bridge_slave_1: entered promiscuous mode [ 1083.771757][T12773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.826676][T12773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.936468][ T44] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1084.028236][T12773] team0: Port device team_slave_0 added [ 1084.032230][T12773] team0: Port device team_slave_1 added [ 1084.097404][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 1084.100620][ T44] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.100653][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1084.100687][ T44] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1084.100710][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.116744][ T5846] usb 7-1: USB disconnect, device number 3 [ 1084.153338][ T44] usb 2-1: config 0 descriptor?? [ 1084.320420][T12773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.320436][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.320467][T12773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.322594][T12773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.322606][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.322631][T12773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.473793][ T2314] bridge_slave_1: left allmulticast mode [ 1084.473826][ T2314] bridge_slave_1: left promiscuous mode [ 1084.474275][ T2314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.560759][ T2314] bridge_slave_0: left allmulticast mode [ 1084.560793][ T2314] bridge_slave_0: left promiscuous mode [ 1084.561670][ T2314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.612372][ T44] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1084.906510][T11128] Bluetooth: hci3: command tx timeout [ 1085.047844][T12671] usb 2-1: USB disconnect, device number 72 [ 1085.296470][ T2314] ip6gretap0 (unregistering): left promiscuous mode [ 1085.986718][T11128] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1085.986744][T11128] CPU: 1 UID: 0 PID: 11128 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1085.986771][T11128] Hardware name: Google Goo[ 1085.986771][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1085.986785][T11128] Workqueue: hci0 hci_rx_work [ 1085.986815][T11128] Call Trace: [ 1085.986823][T11128] [ 1085.986831][T11128] dump_stack_lvl+0x189/0x250 [ 1085.986867][T11128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1085.986896][T11128] ? __pfx__printk+0x10/0x10 [ 1085.986924][T11128] ? kernfs_path_from_node+0x2c/0x280 [ 1085.986944][T11128] ? kernfs_path_from_node+0x243/0x280 [ 1085.986963][T11128] ? kernfs_path_from_node+0x2c/0x280 [ 1085.986986][T11128] sysfs_create_dir_ns+0x259/0x280 [ 1085.987006][T11128] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1085.987032][T11128] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1085.987057][T11128] ? rt_spin_unlock+0x65/0x80 [ 1085.987087][T11128] kobject_add_internal+0x5a5/0xb50 [ 1085.987118][T11128] kobject_add+0x155/0x220 [ 1085.987145][T11128] ? __pfx_kobject_add+0x10/0x10 [ 1085.987174][T11128] ? get_device_parent+0x370/0x3a0 [ 1085.987199][T11128] device_add+0x408/0xb50 [ 1085.987224][T11128] hci_conn_add_sysfs+0xd5/0x1e0 [ 1085.987252][T11128] le_conn_complete_evt+0xc3a/0x1220 [ 1085.987294][T11128] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1085.987337][T11128] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1085.987366][T11128] ? lockdep_hardirqs_on+0x9c/0x150 [ 1085.987401][T11128] ? skb_pull_data+0xfb/0x200 [ 1085.987429][T11128] hci_le_conn_complete_evt+0x187/0x450 [ 1085.987465][T11128] hci_event_packet+0x78f/0x1200 [ 1085.987493][T11128] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1085.987523][T11128] ? __pfx_hci_event_packet+0x10/0x10 [ 1085.987546][T11128] ? __pfx_migrate_enable+0x10/0x10 [ 1085.987585][T11128] ? hci_send_to_monitor+0xe2/0x570 [ 1085.987618][T11128] hci_rx_work+0x46a/0xe80 [ 1085.987651][T11128] ? process_scheduled_works+0x9ef/0x17b0 [ 1085.987678][T11128] process_scheduled_works+0xade/0x17b0 [ 1085.987736][T11128] ? __pfx_process_scheduled_works+0x10/0x10 [ 1085.987781][T11128] worker_thread+0x8a0/0xda0 [ 1085.987810][T11128] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1085.987849][T11128] ? __kthread_parkme+0x7b/0x200 [ 1085.987886][T11128] kthread+0x70e/0x8a0 [ 1085.987919][T11128] ? __pfx_worker_thread+0x10/0x10 [ 1085.987943][T11128] ? __pfx_kthread+0x10/0x10 [ 1085.987977][T11128] ? __pfx_kthread+0x10/0x10 [ 1085.988007][T11128] ret_from_fork+0x436/0x7d0 [ 1085.988035][T11128] ? __pfx_ret_from_fork+0x10/0x10 [ 1085.988068][T11128] ? __switch_to_asm+0x39/0x70 [ 1085.988085][T11128] ? __switch_to_asm+0x33/0x70 [ 1085.988103][T11128] ? __pfx_kthread+0x10/0x10 [ 1085.988133][T11128] ret_from_fork_asm+0x1a/0x30 [ 1085.988170][T11128] [ 1085.988299][T11128] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1085.988340][T11128] Bluetooth: hci0: failed to register connection device [ 1086.055373][T11128] ================================================================== [ 1086.055390][T11128] BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x656/0x1040 [ 1086.055430][T11128] Read of size 4 at addr deacfffffffffc0c by task kworker/u9:3/11128 [ 1086.055448][T11128] [ 1086.055459][T11128] CPU: 1 UID: 0 PID: 11128 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1086.055483][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1086.055498][T11128] Workqueue: hci0 hci_rx_work [ 1086.055522][T11128] Call Trace: [ 1086.055531][T11128] [ 1086.055540][T11128] dump_stack_lvl+0x189/0x250 [ 1086.055580][T11128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1086.055609][T11128] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1086.055643][T11128] ? __virt_addr_valid+0x7c/0x5c0 [ 1086.055666][T11128] ? l2cap_connect_cfm+0x656/0x1040 [ 1086.055695][T11128] kasan_report+0x118/0x150 [ 1086.055722][T11128] ? l2cap_connect_cfm+0x656/0x1040 [ 1086.055752][T11128] kasan_check_range+0x2b0/0x2c0 [ 1086.055778][T11128] l2cap_connect_cfm+0x656/0x1040 [ 1086.055812][T11128] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1086.055845][T11128] ? mutex_lock_nested+0x154/0x1d0 [ 1086.055866][T11128] ? hci_connect_cfm+0x2c/0x140 [ 1086.055891][T11128] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1086.055918][T11128] hci_connect_cfm+0x92/0x140 [ 1086.055944][T11128] le_conn_complete_evt+0xcd3/0x1220 [ 1086.055975][T11128] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1086.056001][T11128] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1086.056026][T11128] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.056047][T11128] ? skb_pull_data+0xfb/0x200 [ 1086.056069][T11128] hci_le_conn_complete_evt+0x187/0x450 [ 1086.056098][T11128] hci_event_packet+0x78f/0x1200 [ 1086.056121][T11128] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1086.056147][T11128] ? __pfx_hci_event_packet+0x10/0x10 [ 1086.056165][T11128] ? __pfx_migrate_enable+0x10/0x10 [ 1086.056194][T11128] ? hci_send_to_monitor+0xe2/0x570 [ 1086.056222][T11128] hci_rx_work+0x46a/0xe80 [ 1086.056245][T11128] ? process_scheduled_works+0x9ef/0x17b0 [ 1086.056269][T11128] process_scheduled_works+0xade/0x17b0 [ 1086.056303][T11128] ? __pfx_process_scheduled_works+0x10/0x10 [ 1086.056331][T11128] worker_thread+0x8a0/0xda0 [ 1086.056355][T11128] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1086.056386][T11128] ? __kthread_parkme+0x7b/0x200 [ 1086.056409][T11128] kthread+0x70e/0x8a0 [ 1086.056433][T11128] ? __pfx_worker_thread+0x10/0x10 [ 1086.056455][T11128] ? __pfx_kthread+0x10/0x10 [ 1086.056483][T11128] ? __pfx_kthread+0x10/0x10 [ 1086.056510][T11128] ret_from_fork+0x436/0x7d0 [ 1086.056535][T11128] ? __pfx_ret_from_fork+0x10/0x10 [ 1086.056562][T11128] ? __switch_to_asm+0x39/0x70 [ 1086.056589][T11128] ? __switch_to_asm+0x33/0x70 [ 1086.056606][T11128] ? __pfx_kthread+0x10/0x10 [ 1086.056634][T11128] ret_from_fork_asm+0x1a/0x30 [ 1086.056659][T11128] [ 1086.056666][T11128] ================================================================== [ 1086.056865][T11128] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1086.056881][T11128] CPU: 1 UID: 0 PID: 11128 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1086.056906][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1086.056919][T11128] Workqueue: hci0 hci_rx_work [ 1086.056943][T11128] Call Trace: [ 1086.056951][T11128] [ 1086.056960][T11128] dump_stack_lvl+0x99/0x250 [ 1086.056986][T11128] ? __asan_memcpy+0x40/0x70 [ 1086.057004][T11128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1086.057028][T11128] ? __pfx__printk+0x10/0x10 [ 1086.057053][T11128] vpanic+0x281/0x750 [ 1086.057079][T11128] ? preempt_schedule+0xae/0xc0 [ 1086.057106][T11128] ? __pfx_vpanic+0x10/0x10 [ 1086.057132][T11128] ? preempt_schedule_common+0x83/0xd0 [ 1086.057158][T11128] ? preempt_schedule+0xae/0xc0 [ 1086.057183][T11128] ? __pfx_preempt_schedule+0x10/0x10 [ 1086.057213][T11128] panic+0xb9/0xc0 [ 1086.057239][T11128] ? __pfx_panic+0x10/0x10 [ 1086.057268][T11128] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1086.057302][T11128] ? l2cap_connect_cfm+0x656/0x1040 [ 1086.057330][T11128] check_panic_on_warn+0x89/0xb0 [ 1086.057353][T11128] ? l2cap_connect_cfm+0x656/0x1040 [ 1086.057380][T11128] end_report+0x78/0x160 [ 1086.057400][T11128] kasan_report+0x129/0x150 [ 1086.057423][T11128] ? l2cap_connect_cfm+0x656/0x1040 [ 1086.057454][T11128] kasan_check_range+0x2b0/0x2c0 [ 1086.057488][T11128] l2cap_connect_cfm+0x656/0x1040 [ 1086.057523][T11128] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1086.057553][T11128] ? mutex_lock_nested+0x154/0x1d0 [ 1086.057582][T11128] ? hci_connect_cfm+0x2c/0x140 [ 1086.057609][T11128] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1086.057637][T11128] hci_connect_cfm+0x92/0x140 [ 1086.057664][T11128] le_conn_complete_evt+0xcd3/0x1220 [ 1086.057698][T11128] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1086.057726][T11128] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1086.057756][T11128] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.057788][T11128] ? skb_pull_data+0xfb/0x200 [ 1086.057813][T11128] hci_le_conn_complete_evt+0x187/0x450 [ 1086.057842][T11128] hci_event_packet+0x78f/0x1200 [ 1086.057864][T11128] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1086.057893][T11128] ? __pfx_hci_event_packet+0x10/0x10 [ 1086.057914][T11128] ? __pfx_migrate_enable+0x10/0x10 [ 1086.057941][T11128] ? hci_send_to_monitor+0xe2/0x570 [ 1086.057976][T11128] hci_rx_work+0x46a/0xe80 [ 1086.058000][T11128] ? process_scheduled_works+0x9ef/0x17b0 [ 1086.058075][T11128] process_scheduled_works+0xade/0x17b0 [ 1086.058112][T11128] ? __pfx_process_scheduled_works+0x10/0x10 [ 1086.058143][T11128] worker_thread+0x8a0/0xda0 [ 1086.058167][T11128] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1086.058201][T11128] ? __kthread_parkme+0x7b/0x200 [ 1086.058237][T11128] kthread+0x70e/0x8a0 [ 1086.058268][T11128] ? __pfx_worker_thread+0x10/0x10 [ 1086.058292][T11128] ? __pfx_kthread+0x10/0x10 [ 1086.058322][T11128] ? __pfx_kthread+0x10/0x10 [ 1086.058355][T11128] ret_from_fork+0x436/0x7d0 [ 1086.058381][T11128] ? __pfx_ret_from_fork+0x10/0x10 [ 1086.058405][T11128] ? __switch_to_asm+0x39/0x70 [ 1086.058420][T11128] ? __switch_to_asm+0x33/0x70 [ 1086.058441][T11128] ? __pfx_kthread+0x10/0x10 [ 1086.058467][T11128] ret_from_fork_asm+0x1a/0x30 [ 1086.058492][T11128] [ 1086.059215][T11128] Kernel Offset: disabled