last executing test programs: 16m54.494321229s ago: executing program 0 (id=1056): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0x10) fsopen(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) 16m52.82760158s ago: executing program 0 (id=1058): r0 = request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x261c, 0x800, 0x7, 0x3b3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x30, 0x0, r1, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x0, 0x2000c000}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16m50.145346995s ago: executing program 0 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl(r3, 0x2202, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000000000000000000014000200fe800000000000"], 0x44}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="10", 0x1, r5) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) 16m49.614555916s ago: executing program 0 (id=1065): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x20440) ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000140)=@usbdevfs_driver={0xe72d, 0x3, &(0x7f0000000980)="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"}) listen(r0, 0x7) accept4$x25(r0, 0x0, 0x0, 0x80800) r2 = syz_io_uring_setup(0x23c, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2f6a, 0x3fff, 0x0, 0x0, 0xffffffffffffffcf) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000002980)={{0x0, 0x0, 0x80}}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r10 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r10, 0xffff, 0x2, r10}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 16m49.599387436s ago: executing program 4 (id=1066): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x60}}, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0xc, 0x8010, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet(r5, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001440)={'ip6erspan0\x00', 0x2}) 16m48.334398917s ago: executing program 0 (id=1069): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 16m48.084706162s ago: executing program 4 (id=1070): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x20440) ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f0000000140)=@usbdevfs_driver={0xe72d, 0x3, &(0x7f0000000980)="a1226a35079eeadba34ff7e22b45ca72273e439c8b6a99a22dd2dea9c4a6d53251d9d6aea19a1aae872f38f22cc9128c7582f2a8ac836e0200235260c764a005c686191326f98dd3c822b1ad3c8691cbd4e5f76dfce4feed27b4ccd20957b05d9ef3611afb12da5bd7526e5b1c033ccc8ca890dcacc20fc5a73675dfd68b3927603a2a8500be1f6e153ba524a4cf6fdb126bf68ef5f377193f4300a18cbd0d4f11ea6694daddbbadc194cd860b43c3f80a5ee733712af87298e912009ed1532322c7b6d7c4dcee95a970e8ae7f48555f0c4a82386ca090af61e741f6d4d1b755db4b0d5541ad47ee96ae3abaf5af8fcbe9e34d43990134efee3cc523399a18b86a060bd8f84f7663f14738a29999aef3b1c320132beaa3d8b72316b264ab11ab8eba3186d502c4e3d8dbc730aecd7ae896344822bdb3425b1706a7ca855f1dae3801f18221524ae3c097fa7b1b9ada72ca3e10aadf110943e238cef9dea2b31a95d461a5dc6d39f511fed8aeb6f52d3aa483439689e9c72a0c3c3944c028ed6deb2bf3a2fd5e4c28b030290f41ef7542a386230b8cbe3768da656faf613ff6be397e4c6589885486a55048dafe997a806c28cb61a8b7afc5b6c0a9f2ccd08ee1b0e58150089a7425b3711650d8188be09a1c13c3833f038e30543a290864c11b8564f020fe6785bbb47fa1a6545c0858fb19d41f9ac59c90deec254a13ca702535aca24f99fd38282b77209773cdad63016b20788e15b039282f1f4e32bcc992f20554f02a0f6493f6820de7181df1415ab4f24d162b7079663fa50ce59993a404f62424ddb7d66f0b20ecb6566c18314c3c16e361bf2b4bdadf6c31a91df87c9434731748caedad93d91afa3ea914db58d970ec0f760f67c8f0a79c548c287e137b32e531a3974e59452e660ed2b462efded49f256b604c4b0290f173e1f53cc9bd9a49041a92008b8c13ac36f30bcba430eb494a88757c3b72235231aef61974cd42c77382128617241bc5f6089c1b8a41c22d12185f1b5c2850ecdc113fec1bc5a11481a3ae18cad578def97840d4867cf2e5147581c4ffb5212d6462ab194361adaffd55725e24ac72318ed7c37a841ddf13799270d0123e77bf69c7f0d02ab843e4547daa59aa10dd9e96881cd5dc753ec091babec57b3879e2b9cf73cc8d680a33fb5e190627a0fa9abb75657d875239bd2511a7c4abd04325516e25823758150e32d8231d92128106ca5710aa3fb5489f01eba3a4d1aa8b7fa54f55a3968a6046efd459e7429021556ace74bfb25b9df09973feaf550110b3c62c81ed63e160f5f2704f20e3467eab8b4e54bf7ad968795b0e5d74385986f24eea0ea1a005d6c8b6837e877a1420da485ee89a9db764ccb03bac1ec25169dbeee37588467de4c08c5e40104c853891dc5154e3723fd02ed2b90b897e3985da1df0367a52d2e27c6d69fc2715478f1fc7dfe317420ec35566ac1a281fce9e3e011cb8735f056de8adedb82341288f4fd7f4a88bed3e7bc624570cdaade43ae50358a3a239cc963c28167673441ddfcd3ec1286ee66287a4f897eff8f24dea0e652b9b9a292aa1d3bb5d3ad33ccc68b7f2fed226ee58d0a423e2124b4db261b3c294ea03af93a672ae667f9a26de92a39d9791af5888d876715f4dbf27e79c07eefd7378b5d6807ba76fe30acf41b86720de5dcd297ac4c2b51ebc29ff507727c984cae9f3edf1b14448bcf14e5354c49b62c6677a11f2e63ec5ea467822b1746670ddfc15d09c956f478a0663f1b778aea34565661a1d092cecab8b13dc77ab73d18e1da10c89d54865ba971591e6bcce29bbdaab3e1b2c04e3e53899399ac1cebef957e484d637d87833314d3a9494479e3742b522337f000d09144c92156b6117e1c3518f52fd69d270d6b026c3345e432c291e2cb1aab2a9db7529664b442fe9db6bd0931184f96bf614a4657f78e528a61fb7083d1a662c2e4c11b38bd17ee3cffdde313d2421cd3bbc5c2a50f73cde69c778ed54372d6d2bfbd29fc14c7310641f1762bcd3d58a66755f2182587c547afbcaef94a58c4f348edb136709d5456195253f88f69bd83c4f3c8156427fd92e099e3b8df29de7ed8d9bdad3f914f1055cf1db57e1ba97ad2dd699771b43da2f8f58b3c036096ef7df0874a47da52f90a947c710107a7b0d8fd2918802f9c89008f60986e5e4a6d9f3f19b8334a7dcca5be08107d1b0826b5f4dba13e21fb758960f485186728596f583b7168278bd277ec099e2bfde401d559a8424f1bcb6fa530322bd25b7755bee103601e12494bd7ffc01a81f13afd0f0bdb985122312001d7a93e97731139415e242a480959d9c062524f0eb081e507074a00362c6266fbc3b5af7617c2ea8e9a197105350df80a3940e297c4ea3e17018b26dff0d9b7e4a819f06b46bc48359c24a2fe78417efa3256bc35003c622705a43ca5a08a86b50eef6e3acd9ad2489019d3519d66adcdd9d44ae3c581c81146c2d7e7091a5a15de4c952c8400857d51473a16619b653e566d82f68a5ec79c621c0dbc45c03fcba230c8ac52e36a50de04ab95186c4b184f6e7baca2ea098274645601e976d43456cd26745979bc9e481ff2e7a52fcb36e67acdec0cefc8cfae63a30c425bd238d99dda20eac8acc3132113098c34bd39c5f8df8068a710d717ff6f3cf0adf6f68be172ead03f8e7692a577a53d01c69e5a250cac1f06445e14f76d7ec1fcde0512858a4f1f812329c038a0b6579a7eac14c8e576134ed05590f64cb6e977c099fcf46b9dc2529190bd663f69ce8e9074edd9224ff2061d927be42c315102a36a7ac6286297c32123324e514483dd8a54a812b1a057a146a81b3529471f7403155cbf27cdbaa841854b42d79f180f5c5b9c0a09c2753a77db7f697cc1dba94b11ed5fb7ebbb7d97a54d988cab10abe9822f9ac03259e6a85e18e368d382bb5ce4fc083da57b21b2e33021a3f74109dc93520c3b322dd45c8a07ef91a7255828c0c2227e2e72fc5dc946f8bb8d5f3b5676a55aaee1d8ab91a9ec2ba1429605453caa6e672dcad6464fe0c022b9aacd53b50eac5e9de2f6f5835243d3a9a0a29b3792ef3d73c47875ac89966f84fa9464ca0ea0b1883311667cd21277cc81b74faeee30ab40fd78fdb15901145ef0354fc05a07866cd8bf61ad7c45b761aafe90781e2c70a5512b476bb6a63c358b2ac305ccb9d4d8f47cda287d42848db6fad94e1a4798c973323fe0b18c4a5e55177e3c663f56eca7f8bf43106212c878dff3f4658c65507ecd6004001267e5134aa37d78a984b8282da4ad598a3e2d259750e8618dc59dcd3c3f3877ec34f63a208926b946ebf337434309a61808ad01ab1fbaefe728cf42a341add131f603429a867f2e5519087d3a88cfd554a5015d8f06f8b76df6f1c542fc6fae97b0c9bee11d849b260b0a07d458cab436d21c308ef1aa822520a807af853da3452b88c97be981a250cb4a639d3814002c92a1e0dccd4e57e8d19c40efd479adf51c03f13ee105a7bdb103f80e4015a0c84e050cf73bdba1dce2569c67360442f3faf463619ceaad2ac89faba5796c632424fe22693fe59b4708e46a17a6aa611e08ec1825a6ee070fcdbc184387c0e70e4323d625a17b30c1dd194f49997ca94fdbd1571944d1dd97dc57569c5fdbf82c53b8f7b6b51e43910c1c8b4940d6fbbadec20aaffc090b233e1d3f13d44a7d9133547a4d45d5e5d104a69b88d89e4c8da710bc6df6abb4f9b99df9ba8eb1174e03c1bc8dbc63cee630d48614efd65861ffb5ad47113693779050e87d910553176b33850bc6199cd8db863bcac798ec582e13160d2243a6bd574e7c64299d1d44fc50d0e23cbba4207f3e36c1567f0ccbb9e1ed4753729906caaa47d289c0955f37b209367b9b640edb8bea3e5e20e5d381e8c250ac3a77f06ad55d91ea8848269d9ba6fea92fc9ea9e9d081141f2f2d2b91f8297234e864cdf4c05c09488bce8da8a9367c4851eb240bb250604e0d1fb6d336915e60b72b73ea5c8a0f705b260a176cfe781630e4e4d2d829e0816822451eee3bacc71c8287a00995571ce29803885ccd3fe164093fcb15f6ef495d6b7ff886be879bc153ccdacaf5acbe8f05f562ff0a0526c381a4a386b69ce8ed38f33171c500b251d539e58f22ac23950969f255d0e2f82b459055d8d27a618e1880da5640e327f5088dc12d97ec47da0e5053fce35b8023adf8c99f1ce020acf03483eeb67616b00cd38ec78cf813bc3b1cd1770f4400ad090089fed444238585618e69326cb16b17f18e36032f90267b7efb267c3fb2e5f98a86274e2cf9ddd73af670790805b709525023a3035522f857499fc5fd58b3767e9103bda4a327dd8ecdbc9846d7c32dfb648c9652bb5b91ff06a3a94f187d8651ddb0d0ea54a09ad5514e86cd23e8dd6dde8d30bfa7b3aa7228448239067c8d11cd418400fd2ec226c50ab63c205161e400504e73fdb9419ebc5ae1d63ba7de2460ce638c77538dc20ad39358230040471a0c4bb45b6bb27482addc16e5eb6297029a24301bdf42f6899d549072aa5f2764471617223aa14ec87e2b9e41850553f679bb20d00fb5805b19db4d17cfbf46d8654708f2948d2d504cc97db304141a1bf016895e99dc3677a5e922ad38270e0e10d8e49954fc399ade2593067ef9d0544ae27dbe55a85db05bf8a17a1ebb6e724c6ae7fecd2c9c48049444c348befd36bc380af421de97761d15fc27e92021220f2b5aaef81a58af612451fd17b1e5ba077179601893b08c2cae6cf6988334a6b6ce786ed7097490c13818cac192c63d60a150efd4de3c6a51b7b6226a4982d12a4acc8bcbbc6bcffb87fe8d0b766c9751b09d811c6f15d44eb9418d671bc981eaded4e89d5da42f094caa8908e4132044edcc1c7eb0d162be5aa433677202a098f14112b4e2cb5257dd35f57cea2a3d5a365f748eb99ad48706c6609452df1dec2679b0d504187f661f0210987462cc8e0130f52a87be9e164d7cce883ef9a93d9c3a1e6802ce8b4787e24df2c97de7e08b3973b2d5d690dac14d880e0bbafeec362957cca5fc5993b779c42717850d8e2d8a94ef02b08bfe7babf4cf1b4cc4c3b44bc72f3daf0f856215aa30e9a91ff6534ee0335aa9c2e1ced5bd14093f1bbe36019fdb978ed7086c6052f0220a5bf4e3c8564512ffe509c93ecfd314e2eae164f672e82b28db304e106998e9db858fceeef4695a8a2868425ec2bb07daf92da36bf8121c76b97d9dd1bf14b8f87951d532758372aff2b5d670936675c3a05004947fc6f0d815e4f76021c17840432598ee6fd4daa8d50993fd875661ea7a8cce3418b62c75f4b55d416e3fb8b2ae81789dcc3d980fec13bf420251e08e6f18435d9ba89e0a6c7b2c3267301f4093cd6eb819615e8c6ce0d8fa8cad1a2ec4fdf8ad7415009d55bb7903d38d610234b90d07380d4d011535e1ce49836eefea55961f1e211c53fd557b2eaf08e9373dda4c12e5a366b454f8a70f4ed23ff7baf8dbeca3dc6df488e874d453b7e55d89fe3bf557473848ead0a9e67f0d5e9457c5dbe19682e25a04794d8c868ed04b9f22ec5918507fa246f12d75f989b90beab1ea7de70fc209eb4cba3f7573a1c1e26aa603848cc3a9a267ea946a42485fae48ca44097ef702702bcea031252db32442a0f3685e035b2acd9b1acb6a434a6a8ef223ba2c40aaa35c082109fdc3f83b2b294f5088cc00c4aef7eba889083a9d8c56613a2ae2c81838bd484ae66400d25ce45fdb4c7900c8c61f6099"}) listen(r0, 0x7) accept4$x25(r0, 0x0, 0x0, 0x80800) r2 = syz_io_uring_setup(0x23c, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2f6a, 0x3fff, 0x0, 0x0, 0xffffffffffffffcf) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000002980)={{0x0, 0x0, 0x80}}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r10 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r10, 0xffff, 0x2, r10}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 16m45.461989161s ago: executing program 4 (id=1075): r0 = request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x261c, 0x800, 0x7, 0x3b3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x30, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x0, 0x2000c000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000930018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16m43.599632066s ago: executing program 4 (id=1079): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000004) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8000, 0x0) syz_open_dev$mouse(0x0, 0x2, 0x80) 16m43.550660189s ago: executing program 0 (id=1080): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x27, 0x6, 0x80000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) socket(0x10, 0x3, 0x0) 16m42.038402823s ago: executing program 4 (id=1083): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0xd0, 0x0, 0x1, 0x470bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "eea5a369a08f4284ec9ff4bb57e759ef"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b58de79d01a091ab6c7725be26b94e6b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "488a9a0125377d9c463476c3abbd04c6773e7145c9ef1ad9140eddd78e4e2d3b"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c1085a6dc09616aa2eaf715afe63954b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5cd4a6f55609cf103e7332c15d8f02f08208ec5fa9a52273ea26da65676dca43"}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004020}, 0x4000004) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 16m40.89496277s ago: executing program 4 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x27, 0x6, 0x80000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r6) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) 16m28.397413641s ago: executing program 32 (id=1080): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x27, 0x6, 0x80000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) socket(0x10, 0x3, 0x0) 16m24.805780993s ago: executing program 33 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x27, 0x6, 0x80000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r6) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) 13m17.147395549s ago: executing program 1 (id=1530): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40c00, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r3, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 13m15.917528585s ago: executing program 1 (id=1533): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 13m12.441402542s ago: executing program 1 (id=1538): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 13m10.700266546s ago: executing program 1 (id=1541): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc", @ANYRESHEX, @ANYBLOB=',\x00']) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 13m9.793619739s ago: executing program 1 (id=1544): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, &(0x7f0000000180), 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 13m8.823600916s ago: executing program 1 (id=1546): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r0, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, &(0x7f0000000180), 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 13m7.848537695s ago: executing program 34 (id=1546): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r0, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, &(0x7f0000000180), 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 45.106384361s ago: executing program 6 (id=3031): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x840880, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x62040200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x8b}, 0x0) 41.03508547s ago: executing program 6 (id=3035): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x2, 0x7, 0x13) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, &(0x7f0000000440)=ANY=[]) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) 38.733557271s ago: executing program 6 (id=3039): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bff7f000000009fa4ccdb76c6a1da0fec3f6582", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x6044850) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) 37.720982771s ago: executing program 5 (id=3043): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40c00, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 36.582372909s ago: executing program 6 (id=3044): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x10, 0x11, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, @generic={0x7, 0x1, 0x7, 0x9, 0x4}, @call={0x85, 0x0, 0x0, 0xba}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5aa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000004c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x16, r4, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xf, 0xd0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), &(0x7f0000001800)=[{0x1, 0x5, 0x5, 0x5}, {0x4, 0x3, 0x0, 0x8}, {0x0, 0x1, 0xa, 0x9}, {0x0, 0x3, 0x10, 0x8}, {0x0, 0x4, 0xe, 0x8}, {0x3, 0x2, 0xc, 0x3}, {0x5, 0x2, 0x6, 0x5}, {0x5, 0x2, 0xe, 0x7}], 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 36.461706092s ago: executing program 5 (id=3045): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40c00, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 35.36302726s ago: executing program 5 (id=3047): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$usbfs(0x0, 0x2, 0x20440) listen(r1, 0x7) accept4$x25(r1, 0x0, 0x0, 0x80800) r2 = syz_io_uring_setup(0x23c, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2f6a, 0x3fff, 0x0, 0x0, 0xffffffffffffffcf) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000002980)={{0x0, 0x0, 0x80}}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r7 = eventfd2(0x8, 0x80800) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r7, 0xffff, 0x2, r7}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 33.602609324s ago: executing program 5 (id=3051): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_procfs(0x0, &(0x7f0000000380)='smaps_rollup\x00') 30.812665706s ago: executing program 6 (id=3054): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 29.608520169s ago: executing program 5 (id=3056): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200, 0x104, 0x16}, 0x18) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x3cd842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30000000000800410073697700140033006c6f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x5b4230ff, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 28.881693048s ago: executing program 6 (id=3058): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x840880, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x62040200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x8b}, 0x0) 23.180694194s ago: executing program 5 (id=3065): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x840880, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) socket$vsock_stream(0x28, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x62040200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x8b}, 0x0) 21.08170321s ago: executing program 2 (id=3066): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2026cc, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101280) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x418bb}) setsockopt$inet_buf(r5, 0x0, 0x2e, 0x0, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x4a7, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0xb8, 0xa, 0x2a, 0x40, 0x45e, 0x46e, 0x956f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x495, 0x4, 0x81, 0x9, 0x20, 0x9, [{{0x9, 0x4, 0x8a, 0x3, 0x9, 0x9d, 0xf1, 0xd3, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x5777, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x9}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x1, 0x4a}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "13a0e14b1d12"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0x8d7, 0x30}, [@mdlm_detail={0xbf, 0x24, 0x13, 0x0, "a7d90e8d19182f1bdd3b19300b27b3bfc11c01e7ffc580a8cabd12b50943545c395f9f87f04f985cc1a13efd56c7d7095960d3b3e93c88d125f4fc3badb464564c81a674d04f3f7330f25f1c08841481d7b66e4d5424d337409fbe725db2c4187a3c3c9dcb69d692c04dd63319d3ff5ba91082cb01b0fb09c3ea3fd90f04656433c06698ec3d9618ea2c7eaa15989fa95b65c210a2108dd843d5633e1b74dc592a09551017595354e7b3b1cac1688b880ed2950f3522cef3bb728d"}]}], [{{0x9, 0x5, 0x81, 0x8, 0x200, 0xe8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0xe8, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0x0, 0x80}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x5, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xa, 0xce, 0xb, [@generic={0x2c, 0x2f, "a42fd73b2ceb4c34ec7541f88b2ac5433daeef576be2ccd662e71a17247d08c7cd7692944cb59afbaf1d"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x4, 0x4, 0x7f, [@generic={0x68, 0x3, "82e659158e366d76f940acf1e0a4fd0435ed9ab035687b56a7fcf23b0eb50b89b799055a2afe3ab963287dec2a4b53c4188e4a28e1b7e49e9a53b5989bec485e79759b0309c2906eca95752c92f24f3d4ae638e1af44e9cb7a2a9a06b120008b34e3fb94abfb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0xb, 0x9, [@generic={0x89, 0x11, "3a2e32112969546468769ab6d0e1bc4d807046250e9d49342cc0cdb2060ba3aca6a5f54664f1526127d45e89647dad6f46bf4b909585c4c38ddbc04d01982e307ae6313a95a880af10bb9edfb7a2103e624d3aa50a83928c502548ac06821b9c93c5d1fb0fcb6826c88c5b6b0f174a8292dd0648de33cf03bca4b44dd001c478c8215bf91592c3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x18, 0xa, 0xd7}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x47, 0x5, [@generic={0x2, 0xa}, @generic={0xea, 0x9, "224049af1a34b07ddd75db147c2899e868c6e066093779e70bc338279e31f836e527989626100def08f1e17b3603ff12f4387a47c49e1eae74ba25496070fa8e212d504a2bed560d7b2f7d94c37a6bb3b88a12edd3f904bdaa4ec3e113dc68def50c9eed8c5244f69e67fb08a5326c441e8b1c62fb959de99a04b3b8032b75ef56554aa460a463e3483c53f3c1b5334f93e38d76cc8a6d6aa3cbd4ade6e166dfe56b729eb91ab97a569f48094258589f78f6ed5fd63146ed833de9a81da50a2c6ef9359b6db52c94bfca2587ed547df1be34ee72b3c3091377643450a70c489508efba89f51a585f"}]}}]}}, {{0x9, 0x4, 0x73, 0x80, 0x4, 0xff, 0xff, 0xff, 0xf, [], [{{0x9, 0x5, 0x2, 0xc, 0x40, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x84, 0xd}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x3, 0x2, 0x0, [@generic={0xd7, 0x21, "f543e9173b0e8b0a2ed9d68ff3aeb6bdf0a44fe4ff3ac41e4f380d024e02a09ca67bc2f448185294af894748b5c862fd1ca72f6e18c663952a137020b79f30b340a31122c11142d696a778a5cdbdf1704a98281812178cbd2ab65fe6685693b362e30618676449c805ab742b8e52f57096d78984a66551506e1a5834fea1476f64d6d337cbe6abf3c292ec7cf279990af0adf5efa1fa146437331d0275001c51860cc3c17e94f9454fc9bf614600515758eb50557a1099b81825fbaf0f965f39a26c70976a3b08840d407c3f6cd000c38f7489f82e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xfb, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x200}]}}]}}, {{0x9, 0x4, 0xc8, 0x8, 0x0, 0xff, 0x86, 0x7e, 0x4}}, {{0x9, 0x4, 0x55, 0x1c, 0x0, 0x84, 0x13, 0x1e, 0x3a}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf, 0x9, 0x0, 0xff, 0x61}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x8d, &(0x7f00000003c0)=@string={0x8d, 0x3, "6cc10ecf2559bdbf17f81d0f042d660fe3d3841eb941b68a7373bd3bdce2fa309016eadd2964b6a16e34320a999a95b01cedb113f5bffe35ac321057dfc9005534715e0272156c5febdcc75e05b9ffce4b315662af573efcf4615fb72bfd7d2eb52ceaa38c7da80599c61d6d1186ce8353b48816e58fae7e68a898eef514526c1d71a123bef31bd96b34a0"}}, {0x29, &(0x7f0000000200)=@string={0x29, 0x3, "70013a4e1c813fe61745e50d16413e256e9e270f6a045b30e9ed4c417af27cd8a30e410ea7aa94"}}, {0xb0, &(0x7f0000000500)=@string={0xb0, 0x3, "ee812fd784d0cbb14c7d65832112295bea7daabf70ffd49dce607a5b4483c8979a680349febd13e4fa2d70503d467c1edf028b573b7bc3ebe16282cbd0cc52ae853105593f3fe48968471526be1f0473b42e9fdc19d1bcdcf0b6066f1213e721074e532418ea9ba9bde40871ddb1ba735b9c0c7fd138af84a375f1067b92f48cfceba2a21abe3dd6ec36fc8229b215508a9b8610dd1308d99b25679ceec9adfd7425a64d3f7cf07e909dac948633"}}, {0xb0, &(0x7f00000005c0)=@string={0xb0, 0x3, "7e83335a4db67195e55bfbb8da52e0c4dc9ebf7b74852c76b6ccf42c03098db0d571423d06c8b8605c4ea34a04b73b86e2a8b9baece92a8ddaf35b12ea6f3462992f0876c8513305fcc4debdd42eed6ca910dc92a4be5d8a93160f27aa6ec83bade2d52dedaee10d6006febc26b86377505e59f55679b1025a09ae2a720ae4dd2e68603fd195ce783cd02c498666ff840f8e4870fdf6d81b469ec1c752e293ee21513fc4b0f28fe206f903ca8cba"}}, {0x83, &(0x7f0000000680)=@string={0x83, 0x3, "37f88e1ad88b62727aad0f097239981918019e7ff379a6e0d1519d1ebd67b131b46d55452c1b0088c0d8e3fef69f8958d6021fd75e59c1dfce9d2a00f7ab2a9502feac818193dfe804c9f0643bcc7a8e8fb7c3bc4a0be063252da2101983181ec90a69a322a8da1bfaee8685f01cbc68bfd1a8f78b7828e1618beee6550edb2a41"}}, {0x63, &(0x7f0000000740)=@string={0x63, 0x3, "0ba6e246f9199a3d0da636e9a216153167710318833651d0abb6d7fa1c06bb1ce2548c3b3dd6865b9e242effc22ffead520a2b0016a269fccb7e515de7c1b74f4f7700f675d4e5b736759fda648ff34180774d518174e9385e524d8c1310c1f414"}}]}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) 16.862386298s ago: executing program 2 (id=3071): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/connector\x00') setns(0xffffffffffffffff, 0x4000000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) io_submit(r4, 0x0, &(0x7f0000004540)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 13.6312363s ago: executing program 35 (id=3058): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x840880, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x62040200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x8b}, 0x0) 12.874503521s ago: executing program 2 (id=3073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 11.853873745s ago: executing program 2 (id=3074): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x840880, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x62040200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x8b}, 0x0) 9.881472581s ago: executing program 7 (id=3077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='smaps_rollup\x00') 8.994310963s ago: executing program 3 (id=3078): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 8.088341847s ago: executing program 36 (id=3065): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x840880, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) socket$vsock_stream(0x28, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x62040200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x8b}, 0x0) 8.049981188s ago: executing program 7 (id=3080): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/connector\x00') setns(0xffffffffffffffff, 0x4000000) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) io_submit(r4, 0x0, &(0x7f0000004540)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 7.859931634s ago: executing program 3 (id=3081): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2026cc, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101280) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x418bb}) setsockopt$inet_buf(r5, 0x0, 0x2e, 0x0, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x4a7, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0xb8, 0xa, 0x2a, 0x40, 0x45e, 0x46e, 0x956f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x495, 0x4, 0x81, 0x9, 0x20, 0x9, [{{0x9, 0x4, 0x8a, 0x3, 0x9, 0x9d, 0xf1, 0xd3, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x5777, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x9}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x1, 0x4a}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "13a0e14b1d12"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0x8d7, 0x30}, [@mdlm_detail={0xbf, 0x24, 0x13, 0x0, "a7d90e8d19182f1bdd3b19300b27b3bfc11c01e7ffc580a8cabd12b50943545c395f9f87f04f985cc1a13efd56c7d7095960d3b3e93c88d125f4fc3badb464564c81a674d04f3f7330f25f1c08841481d7b66e4d5424d337409fbe725db2c4187a3c3c9dcb69d692c04dd63319d3ff5ba91082cb01b0fb09c3ea3fd90f04656433c06698ec3d9618ea2c7eaa15989fa95b65c210a2108dd843d5633e1b74dc592a09551017595354e7b3b1cac1688b880ed2950f3522cef3bb728d"}]}], [{{0x9, 0x5, 0x81, 0x8, 0x200, 0xe8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x6, 0x0, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0xe8, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x5, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xa, 0xce, 0xb, [@generic={0x2c, 0x2f, "a42fd73b2ceb4c34ec7541f88b2ac5433daeef576be2ccd662e71a17247d08c7cd7692944cb59afbaf1d"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x4, 0x4, 0x7f, [@generic={0x68, 0x3, "82e659158e366d76f940acf1e0a4fd0435ed9ab035687b56a7fcf23b0eb50b89b799055a2afe3ab963287dec2a4b53c4188e4a28e1b7e49e9a53b5989bec485e79759b0309c2906eca95752c92f24f3d4ae638e1af44e9cb7a2a9a06b120008b34e3fb94abfb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0xb, 0x9, [@generic={0x89, 0x11, "3a2e32112969546468769ab6d0e1bc4d807046250e9d49342cc0cdb2060ba3aca6a5f54664f1526127d45e89647dad6f46bf4b909585c4c38ddbc04d01982e307ae6313a95a880af10bb9edfb7a2103e624d3aa50a83928c502548ac06821b9c93c5d1fb0fcb6826c88c5b6b0f174a8292dd0648de33cf03bca4b44dd001c478c8215bf91592c3"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x18, 0xa, 0xd7}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x47, 0x5, [@generic={0x2, 0xa}, @generic={0xea, 0x9, "224049af1a34b07ddd75db147c2899e868c6e066093779e70bc338279e31f836e527989626100def08f1e17b3603ff12f4387a47c49e1eae74ba25496070fa8e212d504a2bed560d7b2f7d94c37a6bb3b88a12edd3f904bdaa4ec3e113dc68def50c9eed8c5244f69e67fb08a5326c441e8b1c62fb959de99a04b3b8032b75ef56554aa460a463e3483c53f3c1b5334f93e38d76cc8a6d6aa3cbd4ade6e166dfe56b729eb91ab97a569f48094258589f78f6ed5fd63146ed833de9a81da50a2c6ef9359b6db52c94bfca2587ed547df1be34ee72b3c3091377643450a70c489508efba89f51a585f"}]}}]}}, {{0x9, 0x4, 0x73, 0x80, 0x4, 0xff, 0xff, 0xff, 0xf, [], [{{0x9, 0x5, 0x2, 0xc, 0x40, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x84, 0xd}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x3, 0x2, 0x0, [@generic={0xd7, 0x21, "f543e9173b0e8b0a2ed9d68ff3aeb6bdf0a44fe4ff3ac41e4f380d024e02a09ca67bc2f448185294af894748b5c862fd1ca72f6e18c663952a137020b79f30b340a31122c11142d696a778a5cdbdf1704a98281812178cbd2ab65fe6685693b362e30618676449c805ab742b8e52f57096d78984a66551506e1a5834fea1476f64d6d337cbe6abf3c292ec7cf279990af0adf5efa1fa146437331d0275001c51860cc3c17e94f9454fc9bf614600515758eb50557a1099b81825fbaf0f965f39a26c70976a3b08840d407c3f6cd000c38f7489f82e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xfb, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x200}]}}]}}, {{0x9, 0x4, 0xc8, 0x8, 0x0, 0xff, 0x86, 0x7e, 0x4}}, {{0x9, 0x4, 0x55, 0x1c, 0x0, 0x84, 0x13, 0x1e, 0x3a}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf, 0x9, 0x0, 0xff, 0x61}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x8d, &(0x7f00000003c0)=@string={0x8d, 0x3, "6cc10ecf2559bdbf17f81d0f042d660fe3d3841eb941b68a7373bd3bdce2fa309016eadd2964b6a16e34320a999a95b01cedb113f5bffe35ac321057dfc9005534715e0272156c5febdcc75e05b9ffce4b315662af573efcf4615fb72bfd7d2eb52ceaa38c7da80599c61d6d1186ce8353b48816e58fae7e68a898eef514526c1d71a123bef31bd96b34a0"}}, {0x29, &(0x7f0000000200)=@string={0x29, 0x3, "70013a4e1c813fe61745e50d16413e256e9e270f6a045b30e9ed4c417af27cd8a30e410ea7aa94"}}, {0xb0, &(0x7f0000000500)=@string={0xb0, 0x3, "ee812fd784d0cbb14c7d65832112295bea7daabf70ffd49dce607a5b4483c8979a680349febd13e4fa2d70503d467c1edf028b573b7bc3ebe16282cbd0cc52ae853105593f3fe48968471526be1f0473b42e9fdc19d1bcdcf0b6066f1213e721074e532418ea9ba9bde40871ddb1ba735b9c0c7fd138af84a375f1067b92f48cfceba2a21abe3dd6ec36fc8229b215508a9b8610dd1308d99b25679ceec9adfd7425a64d3f7cf07e909dac948633"}}, {0xb0, &(0x7f00000005c0)=@string={0xb0, 0x3, "7e83335a4db67195e55bfbb8da52e0c4dc9ebf7b74852c76b6ccf42c03098db0d571423d06c8b8605c4ea34a04b73b86e2a8b9baece92a8ddaf35b12ea6f3462992f0876c8513305fcc4debdd42eed6ca910dc92a4be5d8a93160f27aa6ec83bade2d52dedaee10d6006febc26b86377505e59f55679b1025a09ae2a720ae4dd2e68603fd195ce783cd02c498666ff840f8e4870fdf6d81b469ec1c752e293ee21513fc4b0f28fe206f903ca8cba"}}, {0x83, &(0x7f0000000680)=@string={0x83, 0x3, "37f88e1ad88b62727aad0f097239981918019e7ff379a6e0d1519d1ebd67b131b46d55452c1b0088c0d8e3fef69f8958d6021fd75e59c1dfce9d2a00f7ab2a9502feac818193dfe804c9f0643bcc7a8e8fb7c3bc4a0be063252da2101983181ec90a69a322a8da1bfaee8685f01cbc68bfd1a8f78b7828e1618beee6550edb2a41"}}, {0x63, &(0x7f0000000740)=@string={0x63, 0x3, "0ba6e246f9199a3d0da636e9a216153167710318833651d0abb6d7fa1c06bb1ce2548c3b3dd6865b9e242effc22ffead520a2b0016a269fccb7e515de7c1b74f4f7700f675d4e5b736759fda648ff34180774d518174e9385e524d8c1310c1f414"}}]}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) 4.639860847s ago: executing program 7 (id=3082): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/netstat\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xa6) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000000)="6c8aecaaeeb15477e6aee83745bf933b6aebe16df169f0be90247983e7ac8c93a9ca747fdafc961149792d99701549a3c188817ee63d72acf4eb89dc1e3d9d90032640ec4e55c4a457a6b73d4f71a2eb913afc7552f45689ab55151a6f2ea0ec1bd7123ce4b8d6c272707dff54b5192ea4120644f2266cf384af014abbb6977c168dd88fa6b25f40453c3119a27214e9a907", &(0x7f00000000c0)="a5835b5a5aaf1b90f96c10f4238b8660a1abb6ff5b9621d8722a40fac2b46a8dd9723a821c79418c31f6597e8281611f79d9f6e12edb641a6d9ee10b609af4281d70f8acfb331852e2c2361aa26663680eac96d18aba9572", 0x92, 0x58}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'veth1\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x5, 0x1, 0x1, [0x3, 0xfffb, 0xd27f, 0xb, 0x8000, 0x7, 0x8, 0x200, 0x8000, 0xffff, 0xfff9, 0x6, 0x2, 0x5, 0xa37, 0x9], 0xd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r3}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x32, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}}, 0x8000) 4.299587373s ago: executing program 7 (id=3083): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0x58, "09937e220d27b0964c5311128e76b11ec5241157103801d7ed077d3a7067e428de9457b585b7cb64c051a56b3473a953c2a1a522982fa249d446a1063576c897cc0217cad456ce184545c81593ee6461fa106a75bda4893f"}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x1c, r5, 0x3bd7dda74594d063, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x20, &(0x7f0000000180), 0x0) fcntl$addseals(r2, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, 0x0) 3.251065141s ago: executing program 3 (id=3084): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.215184431s ago: executing program 7 (id=3085): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x10, 0x11, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, @generic={0x7, 0x1, 0x7, 0x9, 0x4}, @call={0x85, 0x0, 0x0, 0xba}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5aa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000004c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x16, r4, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xf, 0xd0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), &(0x7f0000001800)=[{0x1, 0x5, 0x5, 0x5}, {0x4, 0x3, 0x0, 0x8}, {0x0, 0x1, 0xa, 0x9}, {0x0, 0x3, 0x10, 0x8}, {0x0, 0x4, 0xe, 0x8}, {0x3, 0x2, 0xc, 0x3}, {0x5, 0x2, 0x6, 0x5}, {0x5, 0x2, 0xe, 0x7}], 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 2.216675774s ago: executing program 3 (id=3086): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.161018388s ago: executing program 7 (id=3087): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x3) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.117321225s ago: executing program 2 (id=3088): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x3) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 836.621097ms ago: executing program 3 (id=3089): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8}]}, 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x10}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4a01) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4011) 780.016265ms ago: executing program 2 (id=3090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x109242, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffffc6"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xa, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) pread64(0xffffffffffffffff, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)=@userptr={0xd, 0x3, 0x0, 0xe000, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x5, 0x2, 0x9, 0x20, "ce7f9a90"}, 0x7fffffff, 0x2, {&(0x7f0000000300)}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r10, 0x100, 0x70bd26}, 0x14}}, 0x0) 0s ago: executing program 3 (id=3091): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x840880, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x80, 0x9, 0x8, 0xfffffffffffff4e5, 0x7ffffffc}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x62040200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x8b}, 0x0) kernel console output (not intermixed with test programs): ver hub failed with error -5 [ 1077.923780][T15571] 9pnet_fd: Insufficient options for proto=fd [ 1078.056994][ T5967] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1078.063422][ T5967] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 1079.147036][ T5967] usb 7-1: Failed to create links for entity 6 [ 1079.153299][ T5967] usb 7-1: Failed to register entities (-22). [ 1079.574112][ T5967] usb 7-1: USB disconnect, device number 23 [ 1081.986844][T15592] misc userio: Invalid payload size [ 1087.826892][ T5967] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1087.998460][ T5967] usb 7-1: Using ep0 maxpacket: 8 [ 1088.013617][ T5967] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1088.035673][ T5967] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1088.050234][ T5967] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1088.058840][ T5967] usb 7-1: Product: syz [ 1088.063012][ T5967] usb 7-1: Manufacturer: syz [ 1088.071110][ T5967] usb 7-1: SerialNumber: syz [ 1088.541326][ T5967] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1088.572202][T15641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2151'. [ 1088.590556][ T5967] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1089.096765][T15647] siw: device registration error -23 [ 1092.716688][ T5875] usb 7-1: USB disconnect, device number 24 [ 1093.594888][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2155'. [ 1093.704366][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2156'. [ 1096.087690][T15693] overlayfs: overlapping lowerdir path [ 1096.619553][T15696] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1098.797187][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2161'. [ 1098.966688][ T5882] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1100.783377][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 1100.812972][ T5882] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1100.834861][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.953916][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1100.996527][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1101.046507][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.163130][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1101.187166][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.673075][ T5882] usb 3-1: GET_CAPABILITIES returned 0 [ 1101.693078][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 1102.473596][ T24] usb 3-1: USB disconnect, device number 45 [ 1102.842334][T15754] overlayfs: overlapping lowerdir path [ 1102.974721][T15759] overlayfs: overlapping lowerdir path [ 1103.121478][T15759] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1103.873061][T15774] overlayfs: overlapping lowerdir path [ 1104.300967][T15776] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1104.853907][T15779] program syz.2.2176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.909750][T15779] No control pipe specified [ 1109.371255][T15802] overlayfs: missing 'lowerdir' [ 1109.504728][T15803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2180'. [ 1111.686542][T10864] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1111.752293][ T30] audit: type=1400 audit(1749924407.003:337): avc: denied { watch_mount } for pid=15828 comm="syz.3.2188" path="/438" dev="tmpfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1111.788550][T15818] kvm: kvm [15815]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5e7d [ 1112.836637][T10864] usb 8-1: Using ep0 maxpacket: 8 [ 1112.837502][T15818] kvm: kvm [15815]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa3b1 [ 1113.820368][T10864] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1113.820453][T10864] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1113.820475][T10864] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1113.820496][T10864] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1113.820515][T10864] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.820548][T10864] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1113.820569][T10864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.835637][T15818] kvm: kvm [15815]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x9681 [ 1113.843056][T15818] kvm_intel: kvm [15815]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1113.849955][T15818] kvm_intel: kvm [15815]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbe81 [ 1114.105154][T10864] usb 8-1: GET_CAPABILITIES returned 0 [ 1114.105192][T10864] usbtmc 8-1:16.0: can't read capabilities [ 1114.175392][T15842] program syz.2.2190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.190216][T15842] No control pipe specified [ 1114.313811][ T5941] usb 8-1: USB disconnect, device number 22 [ 1115.698913][T15846] lo speed is unknown, defaulting to 1000 [ 1115.702378][T15846] syzkaller0 speed is unknown, defaulting to 1000 [ 1115.778907][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.778996][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.495873][T15818] kvm_intel: kvm [15815]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1117.825429][T15853] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1117.825601][T15853] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1117.825670][T15853] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1118.023640][T15859] lo speed is unknown, defaulting to 1000 [ 1118.029680][T15859] syzkaller0 speed is unknown, defaulting to 1000 [ 1118.984655][T15844] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1118.994957][T15855] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1119.589235][T15872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2195'. [ 1119.696407][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2195'. [ 1120.063553][T15870] openvswitch: : Dropping previously announced user features [ 1120.302042][T15879] program syz.7.2199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1122.863929][ T5941] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1123.903712][ T5941] usb 8-1: device descriptor read/all, error -71 [ 1124.340147][T15906] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2205'. [ 1125.063566][T15914] program syz.6.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1125.076563][ T5941] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1126.076523][ T5941] usb 8-1: Using ep0 maxpacket: 8 [ 1126.089502][ T5941] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1126.099111][ T5941] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1126.117307][ T5941] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1126.136520][ T5941] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1126.147004][ T5941] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1126.166719][ T5941] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1126.196624][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.197177][T11723] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1126.324401][T15909] Process accounting resumed [ 1126.403717][T11723] usb 7-1: config 129 has an invalid interface number: 138 but max is 3 [ 1126.420550][ T5941] usb 8-1: GET_CAPABILITIES returned 0 [ 1126.426224][T11723] usb 7-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.442760][ T5941] usbtmc 8-1:16.0: can't read capabilities [ 1126.448887][T11723] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1126.539200][ T1208] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1126.603178][T11723] usb 7-1: config 129 has no interface number 0 [ 1126.609773][T11723] usb 7-1: config 129 has no interface number 1 [ 1126.616076][T11723] usb 7-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1126.629550][T11723] usb 7-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1126.642999][T11723] usb 7-1: config 129 interface 138 has no altsetting 0 [ 1126.666502][T11723] usb 7-1: config 129 interface 2 has no altsetting 0 [ 1126.675895][T11723] usb 7-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1126.686153][T11723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.726513][T11723] usb 7-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1126.812294][ T5875] usb 8-1: USB disconnect, device number 24 [ 1126.963905][T15901] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 1127.080696][T15924] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1127.124128][ T1208] usb 3-1: Using ep0 maxpacket: 8 [ 1127.142667][ T1208] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1127.152042][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.156001][T11723] usb 7-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1127.160162][ T1208] usb 3-1: Product: syz [ 1127.160180][ T1208] usb 3-1: Manufacturer: syz [ 1127.160195][ T1208] usb 3-1: SerialNumber: syz [ 1127.162707][ T1208] usb 3-1: config 0 descriptor?? [ 1127.194504][ T1208] gspca_main: se401-2.14.0 probing 047d:5003 [ 1127.200819][T11723] usb 7-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1127.468508][T15912] No control pipe specified [ 1127.489910][T11723] usb 7-1: USB disconnect, device number 25 [ 1127.637484][ T1208] gspca_se401: Bayer format not supported! [ 1131.393333][ T1208] usb 3-1: USB disconnect, device number 46 [ 1138.136314][T16015] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2232'. [ 1138.535241][T16028] overlay: Unknown parameter '/' [ 1141.070420][T16051] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1141.091315][T16045] Process accounting resumed [ 1143.461133][T16066] Process accounting resumed [ 1143.571443][T16069] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2242'. [ 1144.786636][T10864] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1144.966672][T10864] usb 7-1: Using ep0 maxpacket: 8 [ 1144.981498][T10864] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1145.026212][T10864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.094999][T16093] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1145.101284][T10864] usb 7-1: Product: syz [ 1145.119871][T10864] usb 7-1: Manufacturer: syz [ 1145.124505][T10864] usb 7-1: SerialNumber: syz [ 1145.573654][T10864] usb 7-1: config 0 descriptor?? [ 1146.122986][T10864] gspca_main: se401-2.14.0 probing 047d:5003 [ 1146.371411][T10864] gspca_se401: Bayer format not supported! [ 1146.555926][T16107] program syz.7.2252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1146.896744][ T5875] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1147.072501][T11723] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1149.096682][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 1149.125585][ T5875] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1149.184148][T16106] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1149.195315][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.378696][T10864] usb 7-1: USB disconnect, device number 26 [ 1149.406592][T11723] usb 8-1: config 129 has an invalid interface number: 138 but max is 3 [ 1149.416511][ T5875] usb 4-1: Product: syz [ 1149.436005][T16106] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1149.443685][T11723] usb 8-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.458010][ T5875] usb 4-1: Manufacturer: syz [ 1149.467363][ T5875] usb 4-1: SerialNumber: syz [ 1149.473611][T11723] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1149.664256][ T5875] usb 4-1: config 0 descriptor?? [ 1150.776750][T11723] usb 8-1: config 129 has no interface number 0 [ 1150.785455][ T5875] gspca_main: se401-2.14.0 probing 047d:5003 [ 1150.796522][T11723] usb 8-1: config 129 has no interface number 1 [ 1150.802844][T11723] usb 8-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1151.326304][T11723] usb 8-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1151.375255][T11723] usb 8-1: config 129 interface 138 has no altsetting 0 [ 1151.396958][T11723] usb 8-1: config 129 interface 2 has no altsetting 0 [ 1151.553549][T11723] usb 8-1: string descriptor 0 read error: -71 [ 1151.559923][T11723] usb 8-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1151.760469][T11723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.487439][T11723] usb 8-1: can't set config #129, error -71 [ 1152.497834][T11723] usb 8-1: USB disconnect, device number 25 [ 1154.362777][ T5875] gspca_se401: read req failed req 0x06 error -19 [ 1154.396732][ T5875] usb 4-1: USB disconnect, device number 45 [ 1155.034406][T16153] Process accounting resumed [ 1156.174794][T16167] lo speed is unknown, defaulting to 1000 [ 1156.185764][T16167] syzkaller0 speed is unknown, defaulting to 1000 [ 1156.909770][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2268'. [ 1157.889406][T16177] Process accounting resumed [ 1157.934278][T16184] overlayfs: missing 'lowerdir' [ 1159.446856][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 1160.875541][T10864] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1161.138547][T10864] usb 3-1: Using ep0 maxpacket: 8 [ 1161.201140][T10864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1161.273524][T16213] lo speed is unknown, defaulting to 1000 [ 1161.321892][T10864] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1161.338421][T10864] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1161.348427][T10864] usb 3-1: Product: syz [ 1161.352592][T10864] usb 3-1: Manufacturer: syz [ 1161.383919][T10864] usb 3-1: SerialNumber: syz [ 1161.410035][T16213] syzkaller0 speed is unknown, defaulting to 1000 [ 1161.711269][T16222] 9pnet_fd: Insufficient options for proto=fd [ 1162.259134][T10864] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1162.268150][T10864] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1162.808269][T16230] overlayfs: missing 'lowerdir' [ 1165.270521][T16259] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1165.279930][T16259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1165.290097][T16259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1166.152823][T16272] overlayfs: missing 'lowerdir' [ 1167.066327][T16251] lo speed is unknown, defaulting to 1000 [ 1167.088904][T11723] usb 3-1: USB disconnect, device number 47 [ 1167.123439][T16251] syzkaller0 speed is unknown, defaulting to 1000 [ 1167.625580][T16271] lo speed is unknown, defaulting to 1000 [ 1167.633237][T16271] syzkaller0 speed is unknown, defaulting to 1000 [ 1168.426546][T11723] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1168.551427][T16319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2293'. [ 1169.017364][T11723] usb 4-1: Using ep0 maxpacket: 8 [ 1169.109075][T11723] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1169.133294][T11723] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1169.267751][T11723] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1169.278248][T11723] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1169.289190][T11723] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.302611][T11723] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1169.311911][T11723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.067726][T11723] usb 4-1: GET_CAPABILITIES returned 0 [ 1170.485750][T11723] usbtmc 4-1:16.0: can't read capabilities [ 1170.520673][T11723] usb 4-1: USB disconnect, device number 46 [ 1173.311661][T16381] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1175.456016][T16417] 9pnet_fd: Insufficient options for proto=fd [ 1176.848328][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.855185][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.670029][T16438] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1181.102094][T16471] lo speed is unknown, defaulting to 1000 [ 1181.155330][T16471] syzkaller0 speed is unknown, defaulting to 1000 [ 1182.575509][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2327'. [ 1183.212457][T16491] 9pnet_fd: Insufficient options for proto=fd [ 1184.626457][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2328'. [ 1186.124196][T16518] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1186.240962][T16521] program syz.3.2338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1186.578810][ T5875] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1187.576645][ T1208] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1188.610771][T16529] lo speed is unknown, defaulting to 1000 [ 1188.623402][T16529] syzkaller0 speed is unknown, defaulting to 1000 [ 1189.296558][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 1189.316516][ T1208] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1189.330982][ T1208] usb 4-1: can't read configurations, error -71 [ 1189.525467][ T5875] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1189.533182][ T5875] usb 3-1: can't read configurations, error -71 [ 1189.556782][ T5904] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1190.106497][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 1190.120918][ T5904] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1190.137846][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.158432][ T5904] usb 6-1: Product: syz [ 1190.169922][ T5904] usb 6-1: Manufacturer: syz [ 1190.183379][ T5904] usb 6-1: SerialNumber: syz [ 1190.210880][ T5904] usb 6-1: config 0 descriptor?? [ 1190.225789][ T5904] gspca_main: se401-2.14.0 probing 047d:5003 [ 1190.716996][ T5904] gspca_se401: Wrong descriptor type [ 1191.060616][T16553] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1192.107973][T16560] lo speed is unknown, defaulting to 1000 [ 1192.142105][T16560] syzkaller0 speed is unknown, defaulting to 1000 [ 1193.684146][T10864] usb 6-1: USB disconnect, device number 30 [ 1194.707758][T16572] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1194.719467][T16572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1194.729307][T16572] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1195.186597][ T5967] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1195.526598][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 1195.545534][ T5967] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1195.607058][ T5967] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1195.625980][ T5967] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1195.649614][ T5967] usb 3-1: Product: syz [ 1195.664914][ T5967] usb 3-1: Manufacturer: syz [ 1195.689359][ T5967] usb 3-1: SerialNumber: syz [ 1195.836847][T16587] lo speed is unknown, defaulting to 1000 [ 1195.850619][T16587] syzkaller0 speed is unknown, defaulting to 1000 [ 1197.686829][ T5967] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1198.246005][ T5967] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1198.284968][T16595] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1198.294500][T16595] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1198.304214][T16595] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1199.024506][ T5904] usb 3-1: USB disconnect, device number 50 [ 1199.087972][T16602] lo speed is unknown, defaulting to 1000 [ 1199.231909][T16602] syzkaller0 speed is unknown, defaulting to 1000 [ 1199.326378][T16611] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1199.337634][T16611] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1200.947384][T11723] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1201.141143][T16630] program syz.2.2365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1201.176481][T11723] usb 7-1: Using ep0 maxpacket: 8 [ 1202.947826][T10864] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1202.977823][T11723] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1203.712665][T11723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.725713][T11723] usb 7-1: Product: syz [ 1203.732877][T11723] usb 7-1: Manufacturer: syz [ 1203.737893][T11723] usb 7-1: SerialNumber: syz [ 1203.752603][T11723] usb 7-1: config 0 descriptor?? [ 1203.806638][T11723] usb 7-1: can't set config #0, error -71 [ 1205.025498][T16643] program syz.6.2369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1205.997419][T11723] usb 7-1: USB disconnect, device number 27 [ 1206.026596][T10864] usb 3-1: device descriptor read/all, error -71 [ 1207.176552][T11723] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1208.566491][T10864] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1209.396496][T10864] usb 3-1: Using ep0 maxpacket: 8 [ 1209.522898][T10864] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1209.549544][T10864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.582206][T10864] usb 3-1: Product: syz [ 1209.606597][T10864] usb 3-1: Manufacturer: syz [ 1209.634297][T10864] usb 3-1: SerialNumber: syz [ 1209.669543][T10864] usb 3-1: config 0 descriptor?? [ 1209.687139][T10864] gspca_main: se401-2.14.0 probing 047d:5003 [ 1210.172767][T10864] gspca_se401: Wrong descriptor type [ 1211.604887][T16727] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1212.260588][ T5967] usb 3-1: USB disconnect, device number 53 [ 1213.099545][T16740] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1214.366084][T16766] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 1215.399462][T16772] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1217.857412][T16801] overlayfs: overlapping lowerdir path [ 1217.945048][T16803] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1218.366664][ T5967] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1218.556803][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 1218.590452][ T5967] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1218.635249][ T5967] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1219.630042][ T5967] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1219.900076][ T5967] usb 3-1: Product: syz [ 1219.904378][ T5967] usb 3-1: Manufacturer: syz [ 1219.909100][ T5967] usb 3-1: SerialNumber: syz [ 1220.433965][ T5967] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1220.489493][T16820] lo speed is unknown, defaulting to 1000 [ 1220.508255][T16820] syzkaller0 speed is unknown, defaulting to 1000 [ 1220.533023][ T5967] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1221.026554][ T5967] usb 3-1: USB disconnect, device number 54 [ 1222.831412][T16850] Process accounting resumed [ 1224.250242][T10864] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1224.896661][T10864] usb 6-1: Using ep0 maxpacket: 8 [ 1224.906942][T10864] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1224.926897][T10864] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1224.948027][T10864] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1224.956280][T10864] usb 6-1: Product: syz [ 1225.024622][T10864] usb 6-1: Manufacturer: syz [ 1225.035206][T10864] usb 6-1: SerialNumber: syz [ 1225.336060][T16882] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2428'. [ 1226.288263][T10864] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1226.321006][T10864] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1226.361688][T16893] veth0_vlan: entered allmulticast mode [ 1227.169526][T16900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1227.672584][T16904] veth0_vlan: left promiscuous mode [ 1227.680328][T16904] veth0_vlan: entered promiscuous mode [ 1229.060549][ T5904] usb 6-1: USB disconnect, device number 31 [ 1229.864578][T16931] program syz.5.2439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.065334][ T5904] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1232.548359][ T5904] usb 6-1: config 129 has an invalid interface number: 138 but max is 3 [ 1232.562852][ T5904] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.082770][ T5904] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1233.093398][ T5904] usb 6-1: config 129 has no interface number 0 [ 1233.114600][ T5904] usb 6-1: config 129 has no interface number 1 [ 1233.163061][T16930] No control pipe specified [ 1233.188413][ T5904] usb 6-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1233.211694][ T5904] usb 6-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1233.236584][ T5904] usb 6-1: config 129 interface 138 has no altsetting 0 [ 1233.245065][ T5904] usb 6-1: config 129 interface 2 has no altsetting 0 [ 1233.476850][ T5904] usb 6-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1233.782537][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2443'. [ 1233.992002][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.008501][ T5904] usb 6-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1234.040788][ T5904] usb 6-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1234.276193][ T5904] usb 6-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1235.509486][ T5904] usb 6-1: can't set config #129, error -71 [ 1235.534411][ T5904] usb 6-1: USB disconnect, device number 32 [ 1235.936516][T16970] lo speed is unknown, defaulting to 1000 [ 1235.943292][T16970] syzkaller0 speed is unknown, defaulting to 1000 [ 1237.598491][T17010] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1237.606176][T17010] UDF-fs: Scanning with blocksize 512 failed [ 1237.614444][T17010] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1237.622092][T17010] UDF-fs: Scanning with blocksize 1024 failed [ 1237.629885][T17010] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1237.637560][T17010] UDF-fs: Scanning with blocksize 2048 failed [ 1237.653223][T17010] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1237.661076][T17010] UDF-fs: Scanning with blocksize 4096 failed [ 1238.453137][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.459565][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.776530][ T5882] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1238.979700][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 1239.009468][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1239.068669][ T5882] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1239.106686][ T5882] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1239.116805][ T5882] usb 3-1: Product: syz [ 1239.121732][ T5882] usb 3-1: Manufacturer: syz [ 1239.126340][ T5882] usb 3-1: SerialNumber: syz [ 1239.835977][ T5882] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1239.862730][ T5882] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1240.757299][T16997] Process accounting resumed [ 1242.486666][T11723] usb 3-1: USB disconnect, device number 55 [ 1242.716548][ T5967] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1242.737548][T17061] program syz.3.2465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1242.836672][ T5882] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1242.876151][T17072] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1242.883769][T17072] UDF-fs: Scanning with blocksize 512 failed [ 1242.894905][T17072] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1242.902634][T17072] UDF-fs: Scanning with blocksize 1024 failed [ 1242.920665][T17072] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1242.928531][T17072] UDF-fs: Scanning with blocksize 2048 failed [ 1242.935781][T17072] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1242.943334][T17072] UDF-fs: Scanning with blocksize 4096 failed [ 1242.960081][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 1243.656718][ T5967] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1243.678024][ T5967] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1243.691228][ T5967] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1243.705453][ T5967] usb 6-1: Product: syz [ 1243.710427][ T5967] usb 6-1: Manufacturer: syz [ 1243.715038][ T5967] usb 6-1: SerialNumber: syz [ 1243.776513][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 1243.795360][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1243.809670][ T5882] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1243.825243][ T5882] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1244.043130][ T5967] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1244.162333][ T5882] usb 7-1: Product: syz [ 1244.753545][T17083] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1244.811620][ T5967] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1244.814883][ T5882] usb 7-1: Manufacturer: syz [ 1244.840318][ T5882] usb 7-1: SerialNumber: syz [ 1245.199252][T17097] siw: device registration error -23 [ 1245.720325][ T5882] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1245.764792][ T5882] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1245.827727][T17089] veth0_vlan: left promiscuous mode [ 1245.839484][T17089] veth0_vlan: entered promiscuous mode [ 1246.323320][T17104] program syz.3.2473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1246.728207][T17108] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2472'. [ 1246.780565][T17065] siw: device registration error -23 [ 1247.276953][ T5967] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1247.285237][ T1208] usb 6-1: USB disconnect, device number 33 [ 1247.486180][ T5967] usb 4-1: config 129 has an invalid interface number: 138 but max is 2 [ 1247.502615][ T5882] usb 7-1: USB disconnect, device number 29 [ 1248.089631][ T5967] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.101661][ T5967] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1248.113966][ T5967] usb 4-1: config 129 has no interface number 0 [ 1248.121626][ T5967] usb 4-1: config 129 has no interface number 1 [ 1248.128559][ T5967] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1248.143191][ T5967] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1248.179159][ T5967] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1248.186161][ T5967] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1248.251680][T17117] Process accounting resumed [ 1248.258683][ T5967] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1248.279032][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.313836][T17125] veth0_vlan: left promiscuous mode [ 1248.332103][T17125] veth0_vlan: entered promiscuous mode [ 1248.469839][ T5967] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1248.696829][ T5967] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1248.708496][ T5967] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1249.378339][T17136] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1249.386123][T17136] UDF-fs: Scanning with blocksize 512 failed [ 1249.394927][T17136] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1249.402752][T17136] UDF-fs: Scanning with blocksize 1024 failed [ 1249.410969][T17136] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1249.418681][T17136] UDF-fs: Scanning with blocksize 2048 failed [ 1249.440075][T17136] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1249.448295][T17136] UDF-fs: Scanning with blocksize 4096 failed [ 1249.774196][T17104] No control pipe specified [ 1249.813124][ T5967] usb 4-1: USB disconnect, device number 49 [ 1250.859009][T17146] overlayfs: missing 'lowerdir' [ 1251.245351][T17149] veth0_vlan: left promiscuous mode [ 1251.265234][T17149] veth0_vlan: entered promiscuous mode [ 1252.706491][T11723] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1253.006496][T11723] usb 7-1: Using ep0 maxpacket: 8 [ 1253.052518][T11723] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1253.738041][T11723] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1253.762532][T11723] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1253.771722][T11723] usb 7-1: Product: syz [ 1253.776253][T11723] usb 7-1: Manufacturer: syz [ 1253.879659][T17173] fuse: Bad value for 'group_id' [ 1253.884669][T17173] fuse: Bad value for 'group_id' [ 1254.012309][T17174] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1254.021841][T17174] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1254.662204][T11723] usb 7-1: SerialNumber: syz [ 1254.681591][T11723] usb 7-1: can't set config #1, error -71 [ 1254.807892][T11723] usb 7-1: USB disconnect, device number 30 [ 1255.404770][T17188] overlayfs: missing 'lowerdir' [ 1255.738976][T17191] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1256.262434][T17192] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1256.270269][T17192] UDF-fs: Scanning with blocksize 512 failed [ 1256.284826][T17192] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1256.292649][T17192] UDF-fs: Scanning with blocksize 1024 failed [ 1256.301105][T17192] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1256.308642][T17192] UDF-fs: Scanning with blocksize 2048 failed [ 1256.326340][T17192] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1256.333969][T17192] UDF-fs: Scanning with blocksize 4096 failed [ 1258.626495][T10864] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1258.813849][T10864] usb 4-1: Using ep0 maxpacket: 8 [ 1258.929168][T10864] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1259.051587][T10864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.133189][T10864] usb 4-1: Product: syz [ 1259.137500][T10864] usb 4-1: Manufacturer: syz [ 1259.142117][T10864] usb 4-1: SerialNumber: syz [ 1259.246478][T10864] usb 4-1: config 0 descriptor?? [ 1259.261447][T10864] gspca_main: se401-2.14.0 probing 047d:5003 [ 1259.764287][T10864] gspca_se401: Bayer format not supported! [ 1260.013314][T17230] lo speed is unknown, defaulting to 1000 [ 1260.024129][T17230] syzkaller0 speed is unknown, defaulting to 1000 [ 1261.287248][T10864] usb 4-1: USB disconnect, device number 50 [ 1263.334496][T10864] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1263.449249][T17257] program syz.7.2511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1263.776534][T10864] usb 4-1: Using ep0 maxpacket: 8 [ 1266.169885][T10864] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1266.320817][T10864] usb 4-1: can't read configurations, error -71 [ 1268.684032][T17277] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1269.062190][T17264] lo speed is unknown, defaulting to 1000 [ 1269.068635][T17264] syzkaller0 speed is unknown, defaulting to 1000 [ 1269.922680][T17286] program syz.5.2517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1270.846543][ T5967] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1271.287327][ T5967] usb 6-1: config 129 has an invalid interface number: 138 but max is 3 [ 1271.418434][ T5967] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.554917][ T5967] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1271.614106][ T5967] usb 6-1: config 129 has no interface number 0 [ 1271.625624][ T5967] usb 6-1: config 129 has no interface number 1 [ 1271.634284][ T5967] usb 6-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1271.650975][ T5967] usb 6-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1271.721096][ T5967] usb 6-1: config 129 interface 138 has no altsetting 0 [ 1271.746495][ T5967] usb 6-1: config 129 interface 2 has no altsetting 0 [ 1272.830796][ T5967] usb 6-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1272.844159][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.887681][ T5967] usb 6-1: can't set config #129, error -71 [ 1272.916820][ T5967] usb 6-1: USB disconnect, device number 34 [ 1273.438703][T17312] lo speed is unknown, defaulting to 1000 [ 1273.621874][T17312] syzkaller0 speed is unknown, defaulting to 1000 [ 1276.237522][T17343] lo speed is unknown, defaulting to 1000 [ 1276.252027][T17343] syzkaller0 speed is unknown, defaulting to 1000 [ 1279.096482][ T5904] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1279.318021][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 1279.337282][ T5904] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1279.362602][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.475740][ T5904] usb 7-1: Product: syz [ 1279.483865][ T5904] usb 7-1: Manufacturer: syz [ 1279.489289][ T5904] usb 7-1: SerialNumber: syz [ 1279.497004][ T5904] usb 7-1: config 0 descriptor?? [ 1279.520513][ T5904] gspca_main: se401-2.14.0 probing 047d:5003 [ 1280.272636][ T5904] gspca_se401: Bayer format not supported! [ 1280.538513][ T5941] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1281.600315][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 1281.689744][ T5941] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1281.731312][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.830703][ T5941] usb 3-1: Product: syz [ 1281.902204][ T5941] usb 3-1: Manufacturer: syz [ 1281.953493][ T5941] usb 3-1: SerialNumber: syz [ 1282.010933][ T5941] usb 3-1: config 0 descriptor?? [ 1282.050004][ T5941] gspca_main: se401-2.14.0 probing 047d:5003 [ 1282.392766][T17398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1283.200597][ T24] usb 7-1: USB disconnect, device number 31 [ 1283.441028][ T5941] gspca_se401: Bayer format not supported! [ 1283.813340][T17409] Process accounting resumed [ 1284.252336][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1285.346335][ T5967] usb 3-1: USB disconnect, device number 56 [ 1285.417080][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1285.442225][ T24] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1285.737869][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.745914][ T24] usb 7-1: Product: syz [ 1285.750258][ T24] usb 7-1: Manufacturer: syz [ 1285.755311][ T24] usb 7-1: SerialNumber: syz [ 1285.765568][ T24] usb 7-1: config 0 descriptor?? [ 1285.777288][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 1286.701864][T17432] lo speed is unknown, defaulting to 1000 [ 1286.715092][T17432] syzkaller0 speed is unknown, defaulting to 1000 [ 1288.925956][T17449] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1288.933762][T17449] UDF-fs: Scanning with blocksize 512 failed [ 1288.941633][T17449] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1288.949413][T17449] UDF-fs: Scanning with blocksize 1024 failed [ 1288.957531][T17449] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1288.965029][T17449] UDF-fs: Scanning with blocksize 2048 failed [ 1288.972672][T17449] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1288.981678][T17449] UDF-fs: Scanning with blocksize 4096 failed [ 1289.061747][ T24] gspca_se401: read req failed req 0x06 error -19 [ 1289.278830][ T24] usb 7-1: USB disconnect, device number 32 [ 1289.319533][T17446] lo speed is unknown, defaulting to 1000 [ 1289.325933][T17446] syzkaller0 speed is unknown, defaulting to 1000 [ 1292.909528][T17481] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2562'. [ 1297.704872][T17514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17514 comm=syz.3.2572 [ 1298.031976][T17517] misc userio: Invalid payload size [ 1298.725093][T17524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1298.733052][T17524] UDF-fs: Scanning with blocksize 512 failed [ 1298.741378][T17524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1298.749177][T17524] UDF-fs: Scanning with blocksize 1024 failed [ 1298.756828][T17524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1298.764305][T17524] UDF-fs: Scanning with blocksize 2048 failed [ 1298.786363][T17524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1298.794187][T17524] UDF-fs: Scanning with blocksize 4096 failed [ 1299.406644][T17529] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1299.432935][T17529] UDF-fs: Scanning with blocksize 512 failed [ 1299.445024][T17529] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1299.452705][T17529] UDF-fs: Scanning with blocksize 1024 failed [ 1299.461612][T17529] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1299.469240][T17529] UDF-fs: Scanning with blocksize 2048 failed [ 1299.479434][T17529] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1299.495996][T17529] UDF-fs: Scanning with blocksize 4096 failed [ 1299.720884][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.782535][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.731059][T17567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17567 comm=syz.6.2585 [ 1305.042360][T17569] lo speed is unknown, defaulting to 1000 [ 1305.050435][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2588'. [ 1305.078475][T17569] syzkaller0 speed is unknown, defaulting to 1000 [ 1305.345648][T17590] 9pnet_fd: Insufficient options for proto=fd [ 1305.787782][T17585] misc userio: Invalid payload size [ 1308.157100][T17612] kvm: kvm [17610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5e7d [ 1308.303523][T17612] kvm: kvm [17610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa3b1 [ 1308.315907][T17612] kvm: kvm [17610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x9681 [ 1308.791021][T17612] kvm_intel: kvm [17610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1308.811943][T17612] kvm_intel: kvm [17610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbe81 [ 1308.866283][T17612] kvm_intel: kvm [17610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1308.938829][T17625] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1308.946615][T17625] UDF-fs: Scanning with blocksize 512 failed [ 1308.955544][T17625] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1308.963281][T17625] UDF-fs: Scanning with blocksize 1024 failed [ 1308.971171][T17625] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1308.978823][T17625] UDF-fs: Scanning with blocksize 2048 failed [ 1309.002680][T17625] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1309.010780][T17625] UDF-fs: Scanning with blocksize 4096 failed [ 1310.145146][T17637] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1310.152883][T17637] UDF-fs: Scanning with blocksize 512 failed [ 1310.161679][T17637] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1310.169689][T17637] UDF-fs: Scanning with blocksize 1024 failed [ 1310.202145][T17637] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1310.209914][T17637] UDF-fs: Scanning with blocksize 2048 failed [ 1310.218215][T17637] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1310.225859][T17637] UDF-fs: Scanning with blocksize 4096 failed [ 1311.023819][T17643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1311.031545][T17643] UDF-fs: Scanning with blocksize 512 failed [ 1311.040282][T17643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1311.047793][T17643] UDF-fs: Scanning with blocksize 1024 failed [ 1311.055152][T17643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1311.062655][T17643] UDF-fs: Scanning with blocksize 2048 failed [ 1311.070070][T17643] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1311.089430][T17643] UDF-fs: Scanning with blocksize 4096 failed [ 1312.066344][T17648] overlayfs: missing 'lowerdir' [ 1313.299739][T17660] veth0_vlan: left promiscuous mode [ 1313.307092][T17660] veth0_vlan: entered promiscuous mode [ 1313.965573][T17665] lo speed is unknown, defaulting to 1000 [ 1314.108108][T17665] syzkaller0 speed is unknown, defaulting to 1000 [ 1317.784811][T17702] Process accounting resumed [ 1319.528890][T17714] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2620'. [ 1320.286865][T17723] fuse: Bad value for 'fd' [ 1320.433277][T17730] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1320.441215][T17730] UDF-fs: Scanning with blocksize 512 failed [ 1320.449473][T17730] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1320.457242][T17730] UDF-fs: Scanning with blocksize 1024 failed [ 1320.465452][T17730] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1320.473298][T17730] UDF-fs: Scanning with blocksize 2048 failed [ 1320.482341][T17730] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1320.490253][T17730] UDF-fs: Scanning with blocksize 4096 failed [ 1321.502758][T17737] program syz.2.2625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1321.525426][T17739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1321.652798][T17739] UDF-fs: Scanning with blocksize 512 failed [ 1321.691823][T17739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1321.699911][T17739] UDF-fs: Scanning with blocksize 1024 failed [ 1321.708068][T17739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1321.715846][T17739] UDF-fs: Scanning with blocksize 2048 failed [ 1322.157544][T17739] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1322.170840][T17739] UDF-fs: Scanning with blocksize 4096 failed [ 1322.216644][T13068] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1322.501429][T13068] usb 3-1: config 129 has an invalid interface number: 138 but max is 2 [ 1322.528107][T13068] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.262444][T13068] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1323.321709][T13068] usb 3-1: config 129 has no interface number 0 [ 1323.402940][T13068] usb 3-1: config 129 has no interface number 1 [ 1324.506473][T13068] usb 3-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1324.566497][T13068] usb 3-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1324.579835][T13068] usb 3-1: config 129 interface 138 has no altsetting 0 [ 1324.586914][T13068] usb 3-1: config 129 interface 2 has no altsetting 0 [ 1324.603185][T13068] usb 3-1: string descriptor 0 read error: -71 [ 1324.612370][T13068] usb 3-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1324.628673][T13068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.644457][T13068] usb 3-1: can't set config #129, error -71 [ 1324.686630][T13068] usb 3-1: USB disconnect, device number 57 [ 1327.364800][T17788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1327.372431][T17788] UDF-fs: Scanning with blocksize 512 failed [ 1327.380436][T17788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1327.388198][T17788] UDF-fs: Scanning with blocksize 1024 failed [ 1327.395938][T17788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1327.403627][T17788] UDF-fs: Scanning with blocksize 2048 failed [ 1327.556058][T17788] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1327.563685][T17788] UDF-fs: Scanning with blocksize 4096 failed [ 1329.093949][T17800] openvswitch: : Dropping previously announced user features [ 1329.663322][T17803] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1329.670962][T17803] UDF-fs: Scanning with blocksize 512 failed [ 1329.678832][T17803] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1329.686344][T17803] UDF-fs: Scanning with blocksize 1024 failed [ 1329.694108][T17803] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1329.701681][T17803] UDF-fs: Scanning with blocksize 2048 failed [ 1329.709102][T17803] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1329.716620][T17803] UDF-fs: Scanning with blocksize 4096 failed [ 1333.093811][T17810] kvm: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5e7d [ 1333.243845][T17810] kvm: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa3b1 [ 1333.261899][T17810] kvm: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x9681 [ 1333.283483][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1333.299179][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbe81 [ 1333.338984][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1333.356325][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbe81 [ 1333.396513][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1333.411613][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbe81 [ 1333.433757][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1333.473450][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbe81 [ 1334.382600][T17810] kvm_intel: kvm [17806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xbb6a [ 1335.786532][T17869] openvswitch: : Dropping previously announced user features [ 1336.975727][T17884] veth0_vlan: left promiscuous mode [ 1337.511571][T17884] veth0_vlan: entered promiscuous mode [ 1338.390720][T17902] overlayfs: missing 'lowerdir' [ 1339.517265][T17910] /dev/nullb0: Can't open blockdev [ 1340.320334][T17911] overlayfs: missing 'lowerdir' [ 1341.199125][T17925] openvswitch: : Dropping previously announced user features [ 1342.018709][T17931] veth0_vlan: entered allmulticast mode [ 1342.371051][T17931] veth0_vlan: left promiscuous mode [ 1342.381388][T17931] veth0_vlan: entered promiscuous mode [ 1342.947390][T17940] /dev/nullb0: Can't open blockdev [ 1343.782973][T17947] ALSA: mixer_oss: invalid OSS volume '' [ 1344.973694][T17956] /dev/nullb0: Can't open blockdev [ 1346.538585][T13068] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1346.768641][T17976] openvswitch: : Dropping previously announced user features [ 1347.128134][T13068] usb 4-1: Using ep0 maxpacket: 8 [ 1347.222798][T13068] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1347.368854][T13068] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1347.392313][T13068] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1347.426850][T13068] usb 4-1: Product: syz [ 1347.431073][T13068] usb 4-1: Manufacturer: syz [ 1347.435831][T13068] usb 4-1: SerialNumber: syz [ 1347.766556][T13068] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1348.446093][T13068] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1348.541184][T17982] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.556647][T17982] UDF-fs: Scanning with blocksize 512 failed [ 1348.563374][T17982] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.573839][T17982] UDF-fs: Scanning with blocksize 1024 failed [ 1348.580410][T17982] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.588428][T17982] UDF-fs: Scanning with blocksize 2048 failed [ 1348.594759][T17982] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1348.602540][T17982] UDF-fs: Scanning with blocksize 4096 failed [ 1348.837137][T17987] siw: device registration error -23 [ 1350.506314][ T24] usb 4-1: USB disconnect, device number 53 [ 1351.720212][T18012] ALSA: mixer_oss: invalid OSS volume '' [ 1352.476462][T11723] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1352.496089][T18024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18024 comm=syz.3.2698 [ 1353.628406][T18033] openvswitch: : Dropping previously announced user features [ 1353.666842][T11723] usb 6-1: Using ep0 maxpacket: 8 [ 1353.752924][T11723] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1353.790466][T11723] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.839395][T11723] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1353.862575][T11723] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1353.872501][T11723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.951757][T11723] usbtmc 6-1:16.0: bulk endpoints not found [ 1356.529289][ T5875] usb 6-1: USB disconnect, device number 35 [ 1358.829533][T18078] ALSA: mixer_oss: invalid OSS volume '' [ 1359.528890][T18097] openvswitch: : Dropping previously announced user features [ 1361.150513][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.156906][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.228182][T18128] openvswitch: : Dropping previously announced user features [ 1367.117145][T18156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18156 comm=syz.3.2724 [ 1370.521977][T18184] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1370.816844][T18184] UDF-fs: Scanning with blocksize 512 failed [ 1370.986473][T18189] openvswitch: : Dropping previously announced user features [ 1371.345332][T18184] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1371.419430][T18184] UDF-fs: Scanning with blocksize 1024 failed [ 1371.546048][T18184] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1371.555362][T18184] UDF-fs: Scanning with blocksize 2048 failed [ 1371.564545][T18184] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1371.575060][T18184] UDF-fs: Scanning with blocksize 4096 failed [ 1377.290194][T18234] program syz.3.2743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1377.936727][T11723] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1378.291375][T11723] usb 4-1: config 129 has an invalid interface number: 138 but max is 2 [ 1378.333022][T11723] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.355770][T11723] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1378.373666][T11723] usb 4-1: config 129 has no interface number 0 [ 1378.381955][T11723] usb 4-1: config 129 has no interface number 1 [ 1378.388601][T11723] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1378.402220][T11723] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1378.415639][T11723] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1378.475195][T11723] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1378.490153][T11723] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1378.499767][T11723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.516549][T11723] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1378.725333][T11723] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1378.747188][T11723] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1379.577829][T18234] No control pipe specified [ 1380.294146][T11723] usb 4-1: USB disconnect, device number 54 [ 1381.313330][T18280] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1381.321252][T18280] UDF-fs: Scanning with blocksize 512 failed [ 1381.329144][T18280] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1381.336852][T18280] UDF-fs: Scanning with blocksize 1024 failed [ 1381.344458][T18280] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1381.352887][T18280] UDF-fs: Scanning with blocksize 2048 failed [ 1381.368130][T18280] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1381.375778][T18280] UDF-fs: Scanning with blocksize 4096 failed [ 1383.330806][T18289] openvswitch: : Dropping previously announced user features [ 1386.407589][T18323] openvswitch: : Dropping previously announced user features [ 1387.712732][T18333] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1387.720348][T18333] UDF-fs: Scanning with blocksize 512 failed [ 1387.728133][T18333] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1387.735604][T18333] UDF-fs: Scanning with blocksize 1024 failed [ 1387.743127][T18333] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1387.750822][T18333] UDF-fs: Scanning with blocksize 2048 failed [ 1387.758175][T18333] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1387.822050][T18333] UDF-fs: Scanning with blocksize 4096 failed [ 1388.742295][T18344] 9pnet_fd: Insufficient options for proto=fd [ 1389.557065][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1389.754390][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1389.762662][ T24] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.773038][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1389.784615][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1389.797739][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1389.903738][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1390.120830][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.321338][ T24] usbtmc 3-1:16.0: bulk endpoints not found [ 1390.635011][T18372] program syz.3.2777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1390.954337][ T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1391.223360][ T24] usb 4-1: config 129 has an invalid interface number: 138 but max is 3 [ 1391.320279][ T24] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.510735][ T24] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1391.648366][ T24] usb 4-1: config 129 has no interface number 0 [ 1391.761915][ T24] usb 4-1: config 129 has no interface number 1 [ 1391.858100][ T24] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1392.041397][ T24] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1392.200737][ T24] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1392.722577][ T24] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1392.746067][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1392.755550][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.763652][ T24] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1392.782212][ T5941] usb 3-1: USB disconnect, device number 58 [ 1393.740477][ T24] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1393.777282][T18371] No control pipe specified [ 1393.782499][ T24] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1393.930708][T18388] openvswitch: : Dropping previously announced user features [ 1394.212255][ T24] usb 4-1: USB disconnect, device number 55 [ 1399.847143][T18446] 9pnet_fd: Insufficient options for proto=fd [ 1402.696760][T13068] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1402.867424][T13068] usb 4-1: Using ep0 maxpacket: 32 [ 1403.058389][T13068] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.186896][T13068] usb 4-1: config 0 has no interfaces? [ 1403.429626][T18492] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1404.067943][T13068] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1404.129364][T13068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.146718][T13068] usb 4-1: Product: syz [ 1404.155652][T13068] usb 4-1: Manufacturer: syz [ 1404.165572][T13068] usb 4-1: SerialNumber: syz [ 1404.411021][T13068] usb 4-1: config 0 descriptor?? [ 1404.796964][T10864] usb 4-1: USB disconnect, device number 56 [ 1404.864139][T18504] openvswitch: : Dropping previously announced user features [ 1405.033347][T18505] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1405.041246][T18505] UDF-fs: Scanning with blocksize 512 failed [ 1405.065122][T18505] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1405.073080][T18505] UDF-fs: Scanning with blocksize 1024 failed [ 1405.082635][T18505] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1405.090537][T18505] UDF-fs: Scanning with blocksize 2048 failed [ 1405.098302][T18505] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1405.112073][T18505] UDF-fs: Scanning with blocksize 4096 failed [ 1405.707166][T18511] program syz.7.2810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.366491][ T30] audit: type=1800 audit(1749924704.613:338): pid=18523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2815" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1410.601398][T18543] program syz.5.2819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.606499][T18450] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1412.154533][T18557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2824'. [ 1413.798274][T18539] No control pipe specified [ 1413.916547][T18450] usb 6-1: config 129 has an invalid interface number: 138 but max is 3 [ 1413.928800][T18450] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.939547][T18450] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1414.054500][T18450] usb 6-1: config 129 has no interface number 0 [ 1414.061329][T18450] usb 6-1: config 129 has no interface number 1 [ 1414.067791][T18450] usb 6-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1414.081333][T18450] usb 6-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1414.094578][T18450] usb 6-1: config 129 interface 138 has no altsetting 0 [ 1414.101601][T18450] usb 6-1: config 129 interface 2 has no altsetting 0 [ 1414.586389][T18567] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1414.593918][T18567] UDF-fs: Scanning with blocksize 512 failed [ 1414.601626][T18567] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1414.609163][T18567] UDF-fs: Scanning with blocksize 1024 failed [ 1414.616453][T18567] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1414.623964][T18567] UDF-fs: Scanning with blocksize 2048 failed [ 1414.631943][T18567] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1414.639989][T18567] UDF-fs: Scanning with blocksize 4096 failed [ 1414.973843][T18450] usb 6-1: string descriptor 0 read error: -71 [ 1414.983351][T18450] usb 6-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1415.099249][T18450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.161932][T18450] usb 6-1: can't set config #129, error -71 [ 1415.216564][ T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1415.260214][T18450] usb 6-1: USB disconnect, device number 36 [ 1415.446490][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1415.546048][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.788165][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1415.803632][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1415.816396][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.836421][ T24] usb 7-1: Product: syz [ 1415.840743][ T24] usb 7-1: Manufacturer: syz [ 1415.864584][ T24] usb 7-1: SerialNumber: syz [ 1415.877139][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1415.892487][ T24] imon 7-1:155.0: unable to initialize intf0, err -19 [ 1416.006412][ T24] imon:imon_probe: failed to initialize context! [ 1416.012994][ T24] imon 7-1:155.0: unable to register, err -19 [ 1416.085404][T18591] openvswitch: : Dropping previously announced user features [ 1416.177441][ T5941] usb 7-1: USB disconnect, device number 33 [ 1416.238912][T18594] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1417.231028][T18603] openvswitch: : Dropping previously announced user features [ 1418.386750][ T5941] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1418.616638][ T5941] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1418.635624][ T5941] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1418.716397][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1418.735955][ T5941] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1419.227119][ T5941] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1419.239944][ T5941] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1419.266227][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1419.306490][ T5941] usb 7-1: Product: syz [ 1419.313379][ T5941] usb 7-1: Manufacturer: syz [ 1419.341915][ T5941] cdc_wdm 7-1:1.0: skipping garbage [ 1419.427843][ T5941] cdc_wdm 7-1:1.0: skipping garbage [ 1419.457058][ T5941] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1419.468671][ T5941] cdc_wdm 7-1:1.0: Unknown control protocol [ 1419.503386][ T30] audit: type=1800 audit(1749924714.753:339): pid=18620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2840" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1419.665506][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1419.680338][T18623] program syz.3.2841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1420.211529][T18450] usb 7-1: USB disconnect, device number 34 [ 1420.264695][ T30] audit: type=1400 audit(1749924714.863:340): avc: denied { read write } for pid=18604 comm="syz.6.2837" name="cdc-wdm0" dev="devtmpfs" ino=3416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1420.516687][ T5904] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1420.755134][ T30] audit: type=1400 audit(1749924714.863:341): avc: denied { open } for pid=18604 comm="syz.6.2837" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1420.893609][ T5904] usb 4-1: config 129 has an invalid interface number: 138 but max is 3 [ 1420.991461][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.055523][ T5904] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.254609][ T5904] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1421.452137][ T5904] usb 4-1: config 129 has no interface number 0 [ 1421.574603][ T5904] usb 4-1: config 129 has no interface number 1 [ 1421.629573][ T5904] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1421.679458][ T5904] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1421.767793][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1421.776979][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1421.786285][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1421.803169][ T5904] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1421.810928][ T5904] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1421.811002][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1421.982213][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1422.059500][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.264835][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1422.327888][T18634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1422.335447][T18634] UDF-fs: Scanning with blocksize 512 failed [ 1422.343405][T18634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1422.351313][T18634] UDF-fs: Scanning with blocksize 1024 failed [ 1422.396642][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.404855][ T5904] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1422.467321][T18634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1422.475223][T18634] UDF-fs: Scanning with blocksize 2048 failed [ 1422.482813][T18634] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1422.490574][T18634] UDF-fs: Scanning with blocksize 4096 failed [ 1422.589550][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.645005][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.942556][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.967578][ T5904] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1423.018413][ T5904] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1423.221299][T18630] lo speed is unknown, defaulting to 1000 [ 1423.233016][T18630] syzkaller0 speed is unknown, defaulting to 1000 [ 1423.253400][ T5904] usb 4-1: can't set config #129, error -71 [ 1423.372177][ T5904] usb 4-1: USB disconnect, device number 57 [ 1424.207980][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.675551][ T5824] Bluetooth: hci0: command tx timeout [ 1425.145424][T18651] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1425.156479][T18651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1425.166041][T18651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1425.918755][T18659] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1425.983052][ T36] bridge_slave_1: left allmulticast mode [ 1425.989162][ T36] bridge_slave_1: left promiscuous mode [ 1425.994953][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.009091][ T36] bridge_slave_0: left allmulticast mode [ 1426.014879][ T36] bridge_slave_0: left promiscuous mode [ 1426.044342][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.812325][ T5824] Bluetooth: hci0: command tx timeout [ 1429.126627][ T5824] Bluetooth: hci0: command tx timeout [ 1429.202562][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.242165][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.268064][ T36] bond0 (unregistering): Released all slaves [ 1429.385000][T18667] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1429.394889][T18667] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1429.404583][T18667] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1429.950301][T18686] openvswitch: : Dropping previously announced user features [ 1429.987003][ T36] : left promiscuous mode [ 1431.147312][ T5824] Bluetooth: hci0: command tx timeout [ 1431.972704][T18717] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1431.983728][T18717] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1431.996535][T18717] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1433.183495][T18630] chnl_net:caif_netlink_parms(): no params data found [ 1433.975649][ T36] hsr_slave_0: left promiscuous mode [ 1433.987017][ T36] hsr_slave_1: left promiscuous mode [ 1434.080771][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.091477][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.103252][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.119427][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.173101][ T36] veth1_macvtap: left promiscuous mode [ 1434.197153][ T36] veth0_macvtap: left promiscuous mode [ 1434.220684][ T36] veth1_vlan: left promiscuous mode [ 1434.245337][ T36] veth0_vlan: left promiscuous mode [ 1434.465646][ T5941] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1435.026412][ T5941] usb 7-1: Using ep0 maxpacket: 8 [ 1435.035323][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1435.050144][ T5941] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1435.059513][ T5941] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1435.074034][ T5941] usb 7-1: Product: syz [ 1435.086256][ T5941] usb 7-1: Manufacturer: syz [ 1435.096834][ T5941] usb 7-1: SerialNumber: syz [ 1435.601321][T18744] siw: device registration error -23 [ 1435.616763][ T5941] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1435.647896][ T5941] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1435.864219][T18756] program syz.7.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.260309][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1437.339359][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1438.356250][T18750] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1438.366443][T18750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1438.376523][T18750] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1438.489196][T11723] lo speed is unknown, defaulting to 1000 [ 1438.495548][T11723] infiniband sz0: ib_query_port failed (-19) [ 1438.578798][T18779] program syz.3.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1438.996552][T11723] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1439.251111][T11723] usb 4-1: config 129 has an invalid interface number: 138 but max is 2 [ 1439.490668][T11723] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.730210][T11723] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1440.739442][T11723] usb 4-1: config 129 has no interface number 0 [ 1440.748481][T11723] usb 4-1: config 129 has no interface number 1 [ 1440.754753][T11723] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1440.775553][T11723] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1440.792531][T11723] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1440.804482][T11723] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1440.896856][T18630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.904568][T18630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.906149][T11723] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1440.912165][T18630] bridge_slave_0: entered allmulticast mode [ 1440.928998][T18630] bridge_slave_0: entered promiscuous mode [ 1440.935774][T11723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.044614][ T24] usb 7-1: USB disconnect, device number 35 [ 1441.192688][T11723] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1441.317361][T18630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.324503][T18630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.332082][T18630] bridge_slave_1: entered allmulticast mode [ 1441.339629][T18630] bridge_slave_1: entered promiscuous mode [ 1441.411152][T11723] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1441.420114][T11723] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1442.719508][T18792] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1442.728904][T18792] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1442.738494][T18792] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1443.460425][T11723] usb 4-1: can't set config #129, error -71 [ 1443.471434][T18630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.489954][T18794] openvswitch: : Dropping previously announced user features [ 1443.492213][T18630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.500435][T11723] usb 4-1: USB disconnect, device number 58 [ 1444.408425][T18630] team0: Port device team_slave_0 added [ 1444.450710][T18630] team0: Port device team_slave_1 added [ 1445.462320][T18818] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1445.462663][T18630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.473838][T18818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1445.480301][T18630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.488652][T18818] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1445.514971][T18630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.578010][T18630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.584991][T18630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.700888][T18630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.893689][T18630] hsr_slave_0: entered promiscuous mode [ 1446.420928][T18630] hsr_slave_1: entered promiscuous mode [ 1446.435208][T18630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1446.443021][T18630] Cannot create hsr debugfs directory [ 1446.488891][T18826] openvswitch: : Dropping previously announced user features [ 1446.670451][T18834] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1446.685463][T18834] UDF-fs: Scanning with blocksize 512 failed [ 1446.693936][T18834] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1446.714525][T18834] UDF-fs: Scanning with blocksize 1024 failed [ 1446.857435][T18834] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1446.876476][T18834] UDF-fs: Scanning with blocksize 2048 failed [ 1446.894630][T18834] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1446.903694][T18834] UDF-fs: Scanning with blocksize 4096 failed [ 1450.328992][T18630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1450.391273][T18630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1451.395093][T18630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1452.021764][T18630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1452.304564][T18884] openvswitch: : Dropping previously announced user features [ 1453.697006][T18630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.801650][T18913] program syz.7.2896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1454.725741][T18630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.812383][T18630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1454.824417][T18630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1454.839507][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.846700][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.871450][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.878608][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.151472][T18450] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1455.275440][T18630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.390058][T18450] usb 7-1: Using ep0 maxpacket: 8 [ 1455.409177][T18630] veth0_vlan: entered promiscuous mode [ 1455.422545][T18450] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1455.430988][T18450] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1455.447049][T18450] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1455.472216][T18450] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1455.486427][T18450] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1455.508619][T18450] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1455.513733][T18630] veth1_vlan: entered promiscuous mode [ 1455.523549][T18450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.639672][T18630] veth0_macvtap: entered promiscuous mode [ 1455.679477][T18630] veth1_macvtap: entered promiscuous mode [ 1455.743738][T18630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.761610][T18450] usb 7-1: GET_CAPABILITIES returned 0 [ 1455.833768][T18630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.841889][T18450] usbtmc 7-1:16.0: can't read capabilities [ 1455.880540][T18630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.906446][T18630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.915355][T18630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.944420][T18630] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.104258][T18916] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 1456.111215][T18450] usb 7-1: USB disconnect, device number 36 [ 1456.121665][T18938] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1456.148933][ T6984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.176625][ T6984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.254783][ T5046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.277966][ T5046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.298498][T18962] openvswitch: : Dropping previously announced user features [ 1457.366505][T18963] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1457.374089][T18963] UDF-fs: Scanning with blocksize 512 failed [ 1457.383200][T18963] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1457.390901][T18963] UDF-fs: Scanning with blocksize 1024 failed [ 1457.398484][T18963] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1457.405998][T18963] UDF-fs: Scanning with blocksize 2048 failed [ 1457.413337][T18963] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1457.438206][T18963] UDF-fs: Scanning with blocksize 4096 failed [ 1457.475249][T18954] openvswitch: : Dropping previously announced user features [ 1458.295311][T18971] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1459.401981][T18982] program syz.7.2903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1460.772541][T18994] lo speed is unknown, defaulting to 1000 [ 1460.778580][T18994] lo speed is unknown, defaulting to 1000 [ 1460.784643][T18994] lo speed is unknown, defaulting to 1000 [ 1460.800866][T18994] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1460.828223][T18994] lo speed is unknown, defaulting to 1000 [ 1460.835376][T18994] lo speed is unknown, defaulting to 1000 [ 1460.843415][T18994] lo speed is unknown, defaulting to 1000 [ 1460.850557][T18994] lo speed is unknown, defaulting to 1000 [ 1460.857738][T18994] lo speed is unknown, defaulting to 1000 [ 1460.864852][T18994] lo speed is unknown, defaulting to 1000 [ 1465.224393][T19044] openvswitch: : Dropping previously announced user features [ 1467.850409][T19081] program syz.5.2921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1469.046603][ T5904] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1469.099358][T19086] openvswitch: : Dropping previously announced user features [ 1470.085751][ T5904] usb 6-1: config 129 has an invalid interface number: 138 but max is 3 [ 1470.406629][ T5904] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.432385][ T5904] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1470.442955][ T5904] usb 6-1: config 129 has no interface number 0 [ 1470.449497][ T5904] usb 6-1: config 129 has no interface number 1 [ 1470.455856][ T5904] usb 6-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1470.643920][T19095] ALSA: mixer_oss: invalid OSS volume 'MON' [ 1470.814666][ T5904] usb 6-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1470.942539][T19097] openvswitch: : Dropping previously announced user features [ 1471.416525][ T5904] usb 6-1: config 129 interface 138 has no altsetting 0 [ 1471.423530][ T5904] usb 6-1: config 129 interface 2 has no altsetting 0 [ 1471.881424][ T5904] usb 6-1: string descriptor 0 read error: -71 [ 1472.114012][ T5904] usb 6-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1472.133477][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.209230][ T5904] usb 6-1: can't set config #129, error -71 [ 1472.266566][ T5904] usb 6-1: USB disconnect, device number 37 [ 1474.026888][ T1208] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1474.255384][ T1208] usb 6-1: Using ep0 maxpacket: 8 [ 1474.300965][T19136] syzkaller0 speed is unknown, defaulting to 1000 [ 1474.361983][ T1208] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1474.407855][ T1208] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1475.060428][ T1208] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1475.070775][ T1208] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1475.080980][ T1208] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.094225][ T1208] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1475.103919][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.592046][ T1208] usb 6-1: GET_CAPABILITIES returned 0 [ 1475.600678][ T1208] usbtmc 6-1:16.0: can't read capabilities [ 1476.186317][ T1208] usb 6-1: USB disconnect, device number 38 [ 1476.374395][T19136] lo speed is unknown, defaulting to 1000 [ 1479.208209][T19188] syzkaller0 speed is unknown, defaulting to 1000 [ 1479.560711][T19197] openvswitch: : Dropping previously announced user features [ 1481.850197][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2948'. [ 1481.850514][T19205] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1481.868784][T19205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1481.878390][T19205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1483.821574][T19215] syzkaller0 speed is unknown, defaulting to 1000 [ 1483.828891][T19188] lo speed is unknown, defaulting to 1000 [ 1484.024055][ T1208] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1484.790058][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.796659][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.829698][T19215] lo speed is unknown, defaulting to 1000 [ 1484.874896][T19227] syzkaller0 speed is unknown, defaulting to 1000 [ 1484.916542][ T1208] usb 6-1: Using ep0 maxpacket: 8 [ 1484.922868][ T1208] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1484.943085][ T1208] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1484.957136][ T1208] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1484.968575][ T1208] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1484.980235][ T1208] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1484.999291][ T1208] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1485.015738][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.682442][ T1208] usb 6-1: GET_CAPABILITIES returned 0 [ 1485.695423][ T1208] usbtmc 6-1:16.0: can't read capabilities [ 1485.748917][T19227] lo speed is unknown, defaulting to 1000 [ 1486.100955][T19222] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 1486.102107][ T1208] usb 6-1: USB disconnect, device number 39 [ 1486.937989][T19241] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1486.945537][T19241] UDF-fs: Scanning with blocksize 512 failed [ 1486.953318][T19241] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1486.960884][T19241] UDF-fs: Scanning with blocksize 1024 failed [ 1486.968137][T19241] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1486.975670][T19241] UDF-fs: Scanning with blocksize 2048 failed [ 1486.982870][T19241] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1486.998941][T19241] UDF-fs: Scanning with blocksize 4096 failed [ 1488.147347][T19249] openvswitch: : Dropping previously announced user features [ 1489.613791][T19257] syzkaller0 speed is unknown, defaulting to 1000 [ 1491.861371][T19260] syzkaller0 speed is unknown, defaulting to 1000 [ 1491.870941][T19257] lo speed is unknown, defaulting to 1000 [ 1493.135542][T19260] lo speed is unknown, defaulting to 1000 [ 1494.334235][T19296] program syz.6.2970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.920682][T19304] syzkaller0 speed is unknown, defaulting to 1000 [ 1494.937858][T19301] : entered promiscuous mode [ 1495.097566][T11723] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1495.293051][T11723] usb 7-1: config 129 has an invalid interface number: 138 but max is 2 [ 1495.310258][T11723] usb 7-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.330844][T11723] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1495.342233][T11723] usb 7-1: config 129 has no interface number 0 [ 1495.350453][T11723] usb 7-1: config 129 has no interface number 1 [ 1495.357762][T11723] usb 7-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1495.379422][T11723] usb 7-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1495.822455][T11723] usb 7-1: config 129 interface 138 has no altsetting 0 [ 1495.844171][T11723] usb 7-1: config 129 interface 2 has no altsetting 0 [ 1495.869586][T11723] usb 7-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1495.884274][T11723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.894550][T11723] usb 7-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1495.923558][T11723] usb 7-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1495.933645][T11723] usb 7-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1495.976701][T19304] lo speed is unknown, defaulting to 1000 [ 1496.193148][T19296] No control pipe specified [ 1496.294555][T11723] usb 7-1: USB disconnect, device number 37 [ 1504.503618][T19391] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1504.511709][T19391] UDF-fs: Scanning with blocksize 512 failed [ 1504.519576][T19391] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1504.527304][T19391] UDF-fs: Scanning with blocksize 1024 failed [ 1504.534559][T19391] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1504.542512][T19391] UDF-fs: Scanning with blocksize 2048 failed [ 1504.551305][T19391] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1504.558901][T19391] UDF-fs: Scanning with blocksize 4096 failed [ 1506.512993][T10864] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1506.917804][T10864] usb 4-1: Using ep0 maxpacket: 8 [ 1506.928774][T10864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1507.342137][T10864] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1507.356635][T10864] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1507.364816][T10864] usb 4-1: Product: syz [ 1507.369181][T10864] usb 4-1: Manufacturer: syz [ 1507.373826][T10864] usb 4-1: SerialNumber: syz [ 1508.124266][T10864] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1508.173750][T10864] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1510.854158][T11723] usb 4-1: USB disconnect, device number 59 [ 1511.190577][T19457] program syz.2.3008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1511.776291][ T5941] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1512.420539][ T5941] usb 3-1: config 129 has an invalid interface number: 138 but max is 2 [ 1512.459905][ T5941] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.545369][ T5941] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1512.573968][ T5941] usb 3-1: config 129 has no interface number 0 [ 1512.581453][ T5941] usb 3-1: config 129 has no interface number 1 [ 1512.600878][ T5941] usb 3-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1512.905316][ T5941] usb 3-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1512.930250][ T5941] usb 3-1: config 129 interface 138 has no altsetting 0 [ 1512.939854][ T5941] usb 3-1: config 129 interface 2 has no altsetting 0 [ 1512.988051][ T5941] usb 3-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1513.004141][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.020093][ T5941] usb 3-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1513.106423][ T5941] usb 3-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1513.161970][ T5941] usb 3-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1514.626441][ T5941] usb 3-1: USB disconnect, device number 59 [ 1516.048450][T19510] program syz.3.3016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1516.406551][ T5941] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1517.055199][ T5941] usb 4-1: config 129 has an invalid interface number: 138 but max is 2 [ 1517.083969][ T5941] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.117463][ T5941] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1517.178614][ T5941] usb 4-1: config 129 has no interface number 0 [ 1517.205147][ T5941] usb 4-1: config 129 has no interface number 1 [ 1517.877880][ T5941] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1517.891545][ T5941] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1517.916451][ T5941] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1517.923435][ T5941] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1517.974444][ T5941] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1518.151965][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.189029][ T5941] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1518.215035][ T5941] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1518.224160][ T5941] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1518.891932][ T5941] usb 4-1: USB disconnect, device number 60 [ 1519.720381][T19548] openvswitch: : Dropping previously announced user features [ 1522.638682][T19566] syzkaller0 speed is unknown, defaulting to 1000 [ 1523.163446][T19566] lo speed is unknown, defaulting to 1000 [ 1524.233811][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1524.244425][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1524.318529][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1524.327819][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1524.335161][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1525.992473][T19577] syzkaller0 speed is unknown, defaulting to 1000 [ 1526.105336][T19582] syzkaller0 speed is unknown, defaulting to 1000 [ 1526.125428][T19577] lo speed is unknown, defaulting to 1000 [ 1526.350918][T19582] lo speed is unknown, defaulting to 1000 [ 1526.426598][ T5824] Bluetooth: hci1: command tx timeout [ 1526.438871][T19577] chnl_net:caif_netlink_parms(): no params data found [ 1526.588196][T19577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.626051][T19577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.660398][T19577] bridge_slave_0: entered allmulticast mode [ 1526.720249][T19577] bridge_slave_0: entered promiscuous mode [ 1526.728566][T19577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.736831][T19577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.743999][T19577] bridge_slave_1: entered allmulticast mode [ 1526.751265][T19577] bridge_slave_1: entered promiscuous mode [ 1526.833404][T19577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.898555][T19577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.950131][T19577] team0: Port device team_slave_0 added [ 1526.958184][T19577] team0: Port device team_slave_1 added [ 1526.984760][T19577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.006587][T19577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.048310][T19577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.077442][T19577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.084594][T19577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.115753][T19577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.309050][T19577] hsr_slave_0: entered promiscuous mode [ 1527.319672][T19577] hsr_slave_1: entered promiscuous mode [ 1527.331465][T19577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1527.340245][T19577] Cannot create hsr debugfs directory [ 1527.928105][T19577] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.228127][T19604] openvswitch: : Dropping previously announced user features [ 1528.507201][ T5825] Bluetooth: hci1: command tx timeout [ 1528.640831][T19577] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.782089][T19608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3040'. [ 1528.884076][T19577] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.455713][T19577] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.486429][ T5904] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1529.646647][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1530.610628][ T5825] Bluetooth: hci1: command tx timeout [ 1530.627581][ T5904] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1530.649244][T19577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1530.662327][T19577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1530.847282][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1530.902530][T19577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1530.961425][ T5904] usb usb3-port1: attempt power cycle [ 1531.117387][T19577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1531.883742][ T5904] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1532.213886][T19637] openvswitch: : Dropping previously announced user features [ 1532.300091][ T5904] usb 3-1: device descriptor read/8, error -71 [ 1532.314845][T19577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.355373][T19577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.372714][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.379884][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.419737][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.426899][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.020537][ T5825] Bluetooth: hci1: command tx timeout [ 1533.129104][T19650] siw: device registration error -23 [ 1533.653792][T19577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1534.740524][T19577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.895384][T19577] veth0_vlan: entered promiscuous mode [ 1535.073834][T19577] veth1_vlan: entered promiscuous mode [ 1535.107799][T19577] veth0_macvtap: entered promiscuous mode [ 1535.167992][T19577] veth1_macvtap: entered promiscuous mode [ 1535.511466][T19577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.898258][ T5046] bridge_slave_1: left allmulticast mode [ 1535.932220][ T5046] bridge_slave_1: left promiscuous mode [ 1535.951230][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.990529][ T5046] bridge_slave_0: left allmulticast mode [ 1535.996234][ T5046] bridge_slave_0: left promiscuous mode [ 1536.018536][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.257711][ T1208] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1538.281249][ T5046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.291194][ T5046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.302036][ T5046] bond0 (unregistering): Released all slaves [ 1538.319191][T19577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.339096][T19693] openvswitch: : Dropping previously announced user features [ 1538.371056][ T5967] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1538.418888][ T1208] usb 6-1: Using ep0 maxpacket: 8 [ 1538.464968][T19577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.479578][ T1208] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1538.503832][T19577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.514321][T19577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.524396][ T1208] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1538.545185][T19577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.563090][ T1208] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1538.576553][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 1538.594499][ T5967] usb 3-1: no configurations [ 1538.602047][ T5046] : left promiscuous mode [ 1538.611215][ T1208] usb 6-1: Product: syz [ 1538.615411][ T1208] usb 6-1: Manufacturer: syz [ 1538.624745][ T5967] usb 3-1: can't read configurations, error -22 [ 1538.640652][ T1208] usb 6-1: SerialNumber: syz [ 1539.125333][ T5967] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1539.599734][T19720] syzkaller0 speed is unknown, defaulting to 1000 [ 1539.786448][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 1539.797172][ T5967] usb 3-1: no configurations [ 1539.806425][ T5967] usb 3-1: can't read configurations, error -22 [ 1539.818647][ T5967] usb usb3-port1: attempt power cycle [ 1539.967828][ T1208] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1540.464863][ T1208] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1540.519326][ T5967] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1540.612749][T19429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.629936][T19429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.658174][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 1540.668268][ T5967] usb 3-1: no configurations [ 1540.680167][ T5967] usb 3-1: can't read configurations, error -22 [ 1540.813403][T10687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.849568][T10687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.926452][ T5967] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1540.946582][T19720] lo speed is unknown, defaulting to 1000 [ 1540.956186][T19735] siw: device registration error -23 [ 1541.006904][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 1541.033279][ T5967] usb 3-1: no configurations [ 1541.067701][ T5967] usb 3-1: can't read configurations, error -22 [ 1541.101278][ T5967] usb usb3-port1: unable to enumerate USB device [ 1542.078757][T19757] siw: device registration error -23 [ 1542.911547][T19765] program syz.3.3063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1543.953851][T18450] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1544.146578][ T5882] usb 6-1: USB disconnect, device number 40 [ 1544.230964][ T5046] hsr_slave_0: left promiscuous mode [ 1544.338842][T18450] usb 4-1: config 129 has an invalid interface number: 138 but max is 3 [ 1544.449642][ T5046] hsr_slave_1: left promiscuous mode [ 1544.509352][T18450] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.580368][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1544.711660][T18450] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1544.734619][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.837888][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1544.845425][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.860472][T18450] usb 4-1: config 129 has no interface number 0 [ 1545.029671][T18450] usb 4-1: config 129 has no interface number 1 [ 1545.050512][T18450] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1545.130555][T18450] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1545.239330][T18450] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1545.316506][T18450] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1545.401744][T18450] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1545.488901][T18450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.562847][T18450] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1545.642017][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.648643][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.900861][ T5046] veth1_macvtap: left promiscuous mode [ 1546.193574][T18450] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1546.254409][T18450] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1546.261564][ T5046] veth0_macvtap: left promiscuous mode [ 1546.287038][ T5046] veth1_vlan: left promiscuous mode [ 1546.292372][ T5046] veth0_vlan: left promiscuous mode [ 1546.462864][T19784] program syz.2.3066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1547.765568][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 1548.326553][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1548.562910][ T24] usb 3-1: config 129 has an invalid interface number: 138 but max is 3 [ 1548.646111][ T24] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.785970][ T24] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1548.899785][ T24] usb 3-1: config 129 has no interface number 0 [ 1549.086494][ T24] usb 3-1: config 129 has no interface number 1 [ 1549.092857][ T24] usb 3-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1549.110597][ T24] usb 3-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1549.123879][ T24] usb 3-1: config 129 interface 138 has no altsetting 0 [ 1549.136256][ T24] usb 3-1: config 129 interface 2 has no altsetting 0 [ 1549.156294][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1549.165683][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.173775][ T24] usb 3-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1549.201060][ T24] usb 3-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1549.210034][ T24] usb 3-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1549.730565][ T5046] team0 (unregistering): Port device team_slave_1 removed [ 1549.769537][ T5046] team0 (unregistering): Port device team_slave_0 removed [ 1550.136555][ T5967] lo speed is unknown, defaulting to 1000 [ 1550.145121][T19794] openvswitch: : Dropping previously announced user features [ 1550.153658][ T5967] sz0: Port: 1 Link DOWN [ 1550.228238][T18450] usb 4-1: can't set config #129, error -71 [ 1550.249537][T18450] usb 4-1: USB disconnect, device number 61 [ 1550.308791][T19774] syzkaller0 speed is unknown, defaulting to 1000 [ 1550.386846][ T24] usb 3-1: can't set config #129, error -71 [ 1550.435859][ T24] usb 3-1: USB disconnect, device number 68 [ 1551.251305][T19812] program syz.3.3070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1553.966385][T18450] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1554.567456][T19803] No control pipe specified [ 1554.688656][T18450] usb 4-1: config 129 has an invalid interface number: 138 but max is 2 [ 1554.720902][T18450] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.279202][T18450] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 1555.343139][T18450] usb 4-1: config 129 has no interface number 0 [ 1555.381124][T18450] usb 4-1: config 129 has no interface number 1 [ 1555.470950][T18450] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1555.551046][T18450] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1555.626408][T18450] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1555.660721][T18450] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1555.761290][T18450] usb 4-1: string descriptor 0 read error: -71 [ 1555.843690][T18450] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1555.968148][T18450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.075639][T18450] usb 4-1: can't set config #129, error -71 [ 1556.102095][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1556.111095][T18450] usb 4-1: USB disconnect, device number 62 [ 1556.111954][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1556.126764][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1556.136497][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1556.144852][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1556.201485][T19816] lo speed is unknown, defaulting to 1000 [ 1556.207623][T19816] lo speed is unknown, defaulting to 1000 [ 1556.214001][T19816] lo speed is unknown, defaulting to 1000 [ 1556.228849][T19816] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1556.252312][T19816] lo speed is unknown, defaulting to 1000 [ 1556.259470][T19816] lo speed is unknown, defaulting to 1000 [ 1556.268232][T19816] lo speed is unknown, defaulting to 1000 [ 1556.275357][T19816] lo speed is unknown, defaulting to 1000 [ 1556.282516][T19816] lo speed is unknown, defaulting to 1000 [ 1556.289708][T19816] lo speed is unknown, defaulting to 1000 [ 1556.296132][T19816] lo speed is unknown, defaulting to 1000 [ 1556.582981][T19830] syzkaller0 speed is unknown, defaulting to 1000 [ 1557.314745][ T6984] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.515891][ T6984] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.641674][T19835] syzkaller0 speed is unknown, defaulting to 1000 [ 1557.648295][T19830] lo speed is unknown, defaulting to 1000 [ 1557.715580][ T6984] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.994917][ T6984] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.186472][ T5824] Bluetooth: hci3: command tx timeout [ 1558.576405][ T6984] bridge_slave_1: left allmulticast mode [ 1558.582074][ T6984] bridge_slave_1: left promiscuous mode [ 1558.616510][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.098742][ T6984] bridge_slave_0: left allmulticast mode [ 1559.129665][ T6984] bridge_slave_0: left promiscuous mode [ 1559.144470][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.017931][T19861] program syz.3.3081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1560.276474][ T5824] Bluetooth: hci3: command tx timeout [ 1562.346460][ T5824] Bluetooth: hci3: command tx timeout [ 1562.581441][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1562.590686][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1562.644542][ T5882] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1562.685148][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1562.695426][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1562.700970][T19866] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1562.708966][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1562.810402][ T6984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.820764][ T6984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.830462][ T6984] bond0 (unregistering): Released all slaves [ 1562.843516][T19835] lo speed is unknown, defaulting to 1000 [ 1562.859342][T19866] tc_dump_action: action bad kind [ 1562.861413][ T5882] usb 4-1: config 129 has an invalid interface number: 138 but max is 3 [ 1562.873147][ T5882] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.888218][ T5882] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 1562.897738][ T5882] usb 4-1: config 129 has no interface number 0 [ 1562.904067][ T5882] usb 4-1: config 129 has no interface number 1 [ 1562.912332][ T5882] usb 4-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1562.925730][ T5882] usb 4-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1562.955240][ T5882] usb 4-1: config 129 interface 138 has no altsetting 0 [ 1562.962953][ T5882] usb 4-1: config 129 interface 2 has no altsetting 0 [ 1562.990080][ T5882] usb 4-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 1562.999379][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.001502][ T6984] : left promiscuous mode [ 1563.068181][T19871] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1563.075755][T19871] UDF-fs: Scanning with blocksize 512 failed [ 1563.083448][T19871] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1563.091132][T19871] UDF-fs: Scanning with blocksize 1024 failed [ 1563.098597][T19871] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1563.106150][T19871] UDF-fs: Scanning with blocksize 2048 failed [ 1563.114379][T19871] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1563.122052][T19871] UDF-fs: Scanning with blocksize 4096 failed [ 1563.926583][ T5882] usb 4-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ー鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆ [ 1563.954021][ T5882] usb 4-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ [ 1563.963153][ T5882] usb 4-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌 [ 1564.039969][ T5882] usb 4-1: can't set config #129, error -71 [ 1564.075790][ T5882] usb 4-1: USB disconnect, device number 63 [ 1564.127772][T19863] syzkaller0 speed is unknown, defaulting to 1000 [ 1564.438898][ T5824] Bluetooth: hci3: command tx timeout [ 1564.762694][ T5824] Bluetooth: hci4: command tx timeout [ 1566.586133][ T30] audit: type=1400 audit(1749924861.833:342): avc: denied { write } for pid=19903 comm="syz.3.3089" name="mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1566.786803][T19863] lo speed is unknown, defaulting to 1000 [ 1566.827618][ T5825] Bluetooth: hci4: command tx timeout [ 1566.997440][T19912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=19912 comm=syz.2.3090 [ 1567.256527][ T30] audit: type=1400 audit(1749924862.113:343): avc: denied { read write } for pid=19907 comm="syz.2.3090" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1567.281488][ T30] audit: type=1400 audit(1749924862.113:344): avc: denied { open } for pid=19907 comm="syz.2.3090" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1567.461035][ C1] [ 1567.463407][ C1] ============================= [ 1567.468249][ C1] [ BUG: Invalid wait context ] [ 1567.473089][ C1] 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 Not tainted [ 1567.480196][ C1] ----------------------------- [ 1567.485041][ C1] syz.2.3090/19907 is trying to lock: [ 1567.490414][ C1] ffffc90003f9a410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 1567.499924][ C1] other info that might help us debug this: [ 1567.505817][ C1] context-{2:2} [ 1567.509274][ C1] 1 lock held by syz.2.3090/19907: [ 1567.514367][ C1] #0: ffffc90003f9a960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 1567.524274][ C1] stack backtrace: [ 1567.527972][ C1] CPU: 1 UID: 0 PID: 19907 Comm: syz.2.3090 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1567.527989][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1567.527998][ C1] Call Trace: [ 1567.528002][ C1] [ 1567.528008][ C1] dump_stack_lvl+0x116/0x1f0 [ 1567.528029][ C1] __lock_acquire+0xa12/0x1c90 [ 1567.528048][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1567.528068][ C1] lock_acquire+0x179/0x350 [ 1567.528086][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 1567.528104][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 1567.528122][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 1567.528138][ C1] kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 1567.528158][ C1] ? kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 1567.528175][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 1567.528192][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1567.528206][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1567.528222][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1567.528244][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 1567.528260][ C1] xen_timer_callback+0x1db/0x2a0 [ 1567.528276][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 1567.528292][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1567.528306][ C1] __hrtimer_run_queues+0x5ea/0xad0 [ 1567.528323][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1567.528337][ C1] ? read_tsc+0x9/0x20 [ 1567.528352][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1567.528370][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 1567.528391][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1567.528409][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1567.528423][ C1] RIP: 0033:0x7f62d2e6ea3a [ 1567.528434][ C1] Code: c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 4c 89 54 24 08 e8 66 ef fd ff <4c> 8b 54 24 08 4c 8b 44 24 10 84 c0 0f 85 60 ff ff ff 80 7c 24 1f [ 1567.528447][ C1] RSP: 002b:00007ffd4415e6c0 EFLAGS: 00000246 [ 1567.528457][ C1] RAX: 0000000000000001 RBX: 00007f62d3ce5720 RCX: ffffffff8b7b19aa [ 1567.528466][ C1] RDX: 00000000000019aa RSI: ffffffff8b7b19aa RDI: 0000000000000008 [ 1567.528474][ C1] RBP: ffffffff8b7b19aa R08: 00007f62d31a0000 R09: 00007f62d31a2000 [ 1567.528483][ C1] R10: 000000008b7b19ae R11: 0000000000000008 R12: 0000000000000008 [ 1567.528491][ C1] R13: 0000000000000000 R14: ffffffff8b7b1689 R15: 000000000007877b [ 1567.528500][ C1] ? plist_del+0x29/0x480 [ 1567.528514][ C1] ? plist_del+0x34a/0x480 [ 1567.528528][ C1] ? plist_del+0x34a/0x480 [ 1567.528541][ C1] ? plist_del+0x34a/0x480 [ 1567.528555][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1568.635481][ T6984] hsr_slave_0: left promiscuous mode [ 1568.655660][ T6984] hsr_slave_1: left promiscuous mode [ 1568.661546][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.669196][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.678152][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.686163][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.699777][T19907] caif:caif_disconnect_client(): nothing to disconnect [ 1568.707144][ T6984] veth1_macvtap: left promiscuous mode [ 1568.712641][ T6984] veth0_macvtap: left promiscuous mode [ 1568.718774][ T6984] veth1_vlan: left promiscuous mode [ 1568.724019][ T6984] veth0_vlan: left promiscuous mode [ 1568.891104][ T6984] team0 (unregistering): Port device team_slave_1 removed [ 1568.909775][ T5825] Bluetooth: hci4: command tx timeout [ 1568.916017][ T6984] team0 (unregistering): Port device team_slave_0 removed [ 1569.009643][T19892] openvswitch: : Dropping previously announced user features [ 1569.154631][T19917] syzkaller0 speed is unknown, defaulting to 1000 [ 1569.212163][T19917] lo speed is unknown, defaulting to 1000 [ 1569.755164][ T6984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.822047][ T6984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.901171][ T6984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.948306][ T6984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.044936][ T6984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.092776][ T6984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.130972][ T6984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.180411][ T6984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.305901][ T6984] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.348653][ T6984] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.392721][ T6984] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.442172][ T6984] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.543632][ T6984] bridge_slave_1: left allmulticast mode [ 1570.549440][ T6984] bridge_slave_1: left promiscuous mode [ 1570.555051][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.563961][ T6984] bridge_slave_0: left allmulticast mode [ 1570.569692][ T6984] bridge_slave_0: left promiscuous mode [ 1570.575300][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.584053][ T6984] bridge_slave_1: left allmulticast mode [ 1570.590324][ T6984] bridge_slave_1: left promiscuous mode [ 1570.595927][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.604768][ T6984] bridge_slave_0: left allmulticast mode [ 1570.610529][ T6984] bridge_slave_0: left promiscuous mode [ 1570.616119][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.624807][ T6984] bridge_slave_1: left allmulticast mode [ 1570.630603][ T6984] bridge_slave_1: left promiscuous mode [ 1570.636205][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.644017][ T6984] bridge_slave_0: left allmulticast mode [ 1570.649713][ T6984] bridge_slave_0: left promiscuous mode [ 1570.655322][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.761572][ T6984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.771122][ T6984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.781525][ T6984] bond0 (unregistering): Released all slaves [ 1570.843442][ T6984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.853282][ T6984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.862446][ T6984] bond0 (unregistering): Released all slaves [ 1570.929094][ T6984] bond0 (unregistering): Released all slaves [ 1571.010633][ T6984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.020036][ T6984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.030515][ T6984] bond0 (unregistering): Released all slaves [ 1571.122357][ T6984] : left promiscuous mode [ 1571.157360][ T6984] : left promiscuous mode [ 1571.782811][ T6984] hsr_slave_0: left promiscuous mode [ 1571.788422][ T6984] hsr_slave_1: left promiscuous mode [ 1571.793880][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.801492][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.809532][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.817917][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.827110][ T6984] hsr_slave_0: left promiscuous mode [ 1571.832608][ T6984] hsr_slave_1: left promiscuous mode [ 1571.838707][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.846081][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.853610][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.861047][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.870041][ T6984] hsr_slave_0: left promiscuous mode [ 1571.875571][ T6984] hsr_slave_1: left promiscuous mode [ 1571.881412][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.888863][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.897308][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.904690][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.916672][ T6984] veth1_macvtap: left promiscuous mode [ 1571.922141][ T6984] veth0_macvtap: left promiscuous mode [ 1571.927679][ T6984] veth1_vlan: left promiscuous mode [ 1571.932896][ T6984] veth0_vlan: left promiscuous mode [ 1571.938641][ T6984] veth1_macvtap: left promiscuous mode [ 1571.944096][ T6984] veth0_macvtap: left promiscuous mode [ 1571.950023][ T6984] veth1_vlan: left promiscuous mode [ 1571.955271][ T6984] veth0_vlan: left promiscuous mode [ 1571.961053][ T6984] veth1_macvtap: left promiscuous mode [ 1571.966554][ T6984] veth0_macvtap: left promiscuous mode [ 1571.972038][ T6984] veth1_vlan: left promiscuous mode [ 1571.977324][ T6984] veth0_vlan: left promiscuous mode [ 1572.102014][ T6984] team0 (unregistering): Port device team_slave_1 removed [ 1572.113136][ T6984] team0 (unregistering): Port device team_slave_0 removed [ 1572.212206][ T6984] team0 (unregistering): Port device team_slave_1 removed [ 1572.231579][ T6984] team0 (unregistering): Port device team_slave_0 removed [ 1572.363307][ T6984] team0 (unregistering): Port device team_slave_1 removed [ 1572.373182][ T6984] team0 (unregistering): Port device team_slave_0 removed [ 1572.434163][ T24] lo speed is unknown, defaulting to 1000 [ 1572.440798][ T24] infiniband sz0: ib_query_port failed (-19)