last executing test programs: 24m27.997029071s ago: executing program 32 (id=66): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xfff5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000440)=0x80000001) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0x273}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000700)={{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, {0xa, 0x4e21, 0xf, @mcast1, 0x81}, 0x1, {[0x7d7d, 0xa9a, 0x3, 0x2c5ba107, 0x5, 0x1200, 0x2, 0xfff]}}, 0x5c) r6 = open$dir(0x0, 0x0, 0x0) execveat(r6, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80800) 24m15.893912704s ago: executing program 33 (id=80): socket$pppl2tp(0x18, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 24m10.776633402s ago: executing program 34 (id=87): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x8, 0x35, 0x3b575445, 0x8, 0x9, [{0x4, 0x1}, {0x400, 0xb}, {0x211, 0x5}, {0x8002, 0x2}, {0x1, 0xa2ff}, {0x40, 0xf86b}, {0x3ee, 0xfff}, {0x15f, 0xb}], 0x0, 0x4, 0x4, 0x2, 0x1}}) r1 = socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=no%e') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 24m1.206919605s ago: executing program 35 (id=99): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000002c0)={0x14, 0x28, 0x1, 0x70bd2d, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = memfd_secret(0x80000) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 23m13.346361702s ago: executing program 36 (id=152): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355420000000000000109022400010000000009040000010300050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x3, 0x12c00) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022070000004a8b498220b5bd"], 0x0}, 0x0) mmap(&(0x7f0000670000/0x3000)=nil, 0x3000, 0x3000002, 0x12012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000003000000040000000e00000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0a000000030000000100090000000000000000fdffffffffffffff00"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x8, 0x5, 0x21040, r1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) 23m11.278645385s ago: executing program 37 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 22m44.338031203s ago: executing program 38 (id=174): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 22m15.622257776s ago: executing program 39 (id=228): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x20000000) 21m43.559452011s ago: executing program 40 (id=255): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x2}]}}}]}, 0x3c}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc000000020201020000000000000000010000030800090000000004"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000c24000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) socket$nl_netfilter(0x10, 0x3, 0xc) 20m46.179246815s ago: executing program 41 (id=342): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x62fe5fbe6441e434, @remote, @local, {[], {{0x4e22, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) timer_create(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810) 20m37.036590639s ago: executing program 42 (id=356): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) getcwd(0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x4, 0xffff1000, 0x1, 0xffffffffffffffff, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x400000ffc000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r6, 0xe, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 20m0.083056081s ago: executing program 43 (id=411): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffbfffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000140)=0xc7, 0x12) writev(r3, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38, 0x4c00}, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e27, @local}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000002c00009f1d3e0fed829de100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) socket$kcm(0x10, 0x2, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 18m53.796779365s ago: executing program 44 (id=498): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xb4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 18m38.172572973s ago: executing program 45 (id=520): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) shutdown(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="2fe223062b20b43055a9dafe4340c47124ecd08f52a0c029f0a905035f10e9372aff2c7d2157544591840dd6c552a01e4ba3451745e9f6acf1ab492ec553c0a3a346a7aeb4ddec32ccc729701914fced53fda22078fda3fd9e1b0af51b28313480732979e4cd1840fc633c288bce242d33d7e3f261d3fe0b171ef6fda9219a2027ef44ddc97cc419e3383a31b1f5267e9a7381a10983c6e302a04311986e02c10795068e88c0f4c9fd102ac1c8555325f987f841b93ff8d248e9ac7340b7a8fa442bcba46626f609784da08ea2f72f31248b565a48990caecab054389a205965e86545fb133b4f1f7ea299132f4c545563cbcbf34f964218687b441a95ac50897e8985b939e5dae4facf50de8dc32d59d10a310afe7b8bf72d502a517af97dd21e60950510c291c4636adef9dffd5651fc004395e886a814edcbd672cfbfc1d50e7a16d3d5d83075ef1362e9e087defb7a107af5edc02ac5ecbb720affdbb2032bd2e4c046a949cdce18d90e8ac4d4af14723e8ff94ab24a89fb576081d6d3ebdd8943e796aa3c1eddba172161d57e214a0602b3c039c29f2f523046ea2d899540a20d81dfa3d326696c5a5876044dcc625f2ac8d023502428346fea4f5bb0d82c75ffb0c91940a232793467989f7d0503ca85c5b241e12af8e838799581cb678a4362d4b34569cc312c518cffd9946da804158046a38a520c84ee7792193cc03b0851164a18a75ba265f0e13d3f4941052b7ceb8cc344a1ad231784e8165ba13a192d23d3740aa479b74e2730fd07cafd06b6683cb1d52cc09575c536ca34b2174e17bf18a20b8982f74dbd137be413dffee5f2b9829412e8c585319f2c0b0edd9e16a615a1f0806fc6b9b54ac44cd6effc61376107d33a76d41c381f73fcffaf41ef60e64e8f43ce96d21cb321f41e8f23a189d08d562ec927e8dd7522792268f2b4b790ad6c8e6758c34a5ae61adc93e3c3867f83a0714173627581a739ce408cd90f96e8634d88645dfbb97389e3b010676083c82558c12977dd8933bfa5f448a74f42775ac4623319ea6ebb0066db0ce56b577a296b6c753de9fb019b9c02ae939e413a6c88633746b7cde63e3547344a0b5542ebf0454fd93098e53a8d6dd1d0e21283ccbdef4eb1b97b1847802c917475bde022d455cef0e9478963ef304302caa38bd053ce5aa8a5118b1f987ee24167565aba7304c612e36a6305629c64b71ed893678fe138a412f4cc85dc190ea81521a1991ed09a1833afc8966b37850271f9f3cb37a455cdfb3675c4f8fff2d7d8e68f637c0ea509a2dc75f60399a6f77661010245422b10c864541df432e2e7a278bb73584ad962c2250dea46af78a40930c9506f8a1b81ec3a55574e417f1bd35a4832ed48e0c5ded28c5e666df4f8fe0ac0e60212d94bd9b308540aabf7fb68890416891792790317f7514009e98dc40e2ba092d8c7cdb4ee48cefefc2d7763c1915f95bcd32295127dbf6baa46e4132596e51e6a79b671cf16eb3e58f3968224f3adc5a628c8473a477fd1c48e6627ba26ac5401a65aefc2dcf60bf446c3496d2ededdd8bdd23bbf4d4b5aa1cff98b7ffeb65dd9f5a84f22b3a50b8d194f44e21d3515b2f9bd8c28506ec0f646327c892c4613d61fc24931b6939472eeee3e22ce1f8bcc191a04c56b28dc4616b2ef7bf219e6745b631c1ec089d6027e99b1f9f613ea0bc75db0f56f62fb924989fd43693ce31f038fac8672e4da4210af05100403c643a654a05f3655078f31df0222e98b01841bfd7800c6aaee8a0e7ec88b60efb02afab6c1fb2d2abcfc60ae8b15f5937de2dbddd4ea31d4e423cc6f0d48af9de2053a3d4f5c28170e8ad53d0d4b25dee8f91acfdb089b60707c12a668dc4aeea747e15740a48fbbdf860042d9f97fb810f8bf1237033aae5adda9fabea1e49219c93f9055f05e79f9b987e40484dab641141e759f22fe83928febdb4fce6aeefbacb22540355d4112dc5dfb62c7aeda256364b238a470d19b516abbef5cac019be1c60809d394a5c3d875b891caf322eee675bf2b8fe503a6be877d094a36661dac863ecd7f2323253bb99c71456085f523afda527d7b4c7b0a3b5eab9fdd870c7d38373e741dde1b5f4481a8f9db3ba71c11a28a16242e54f9660ac69285669aa78dbdd9eef6ca43948285dfca8ea632dc3bc31b1519215c9fe4022647884edd56449e03e2d577835dc7d5a0d6981e27fd872677a4b477588da6a898567e1227c8bff8a1676702ce647411b129c34d008093bb0b48f99967d68268ccde0f09cfa372c3292f547bb7436b6e08e942766ae097f47f9ebf5c752731eaa596e46f721536b4871ce1692ed973ff00e5b38858756324f556209b9a0573df20557574814d2cabed8023419529b7927616090103423cb6cbe6c99f99099bbe26c0a8d0faacb8b07e79da40a476b813fd0701943f1254d66181242fb03f8bfd7f8e7b7537eee03c02a3eb3c42c13cb7e8d7e5f05d2c3f8168f408b251094d83a477196708c1361568f53e01756bac5685b8ab6bdbf50aa9db9977cdccc22e347ed6dd78b2f93aebb88b7714b3a628e1468f836c6de1e6f12575c6afba940ccde6a4d95f62ce512886adfabb06896da9ca81e1809642c537f96712568ddce33d9c12187477fb3654b63873b596c7850d7ec1728debab8047ae5b04399f84b378b6b886257ca51de651a8b6cde74a653e36ca75cc698ce411bd237d52e64180dcdc4bd45ad03acca3c98412ff229a474cd99f0d856c405f63ae282e7e1f3e2375335aa922ca42d392a6295fc35921eda0430076eae5192157d37cfd6dcf905107e168f5fc40f238950bbec2360b0e3bedc52d69a0d99ba119e07374878dad7c2c1394d981d224344954fd9acb8ac6c2df4d979a074d7d8062a54df9e5bffde9b5a1bc1ec9186234d729ffbc9d08865f9f7ade5bd39b62d38d6934d7f31fef05d380231790e9a51824654354e20ffe15b4c6c1e0817b7371dc3eabdb4eb56d93343c50e87b2723009e26f03256eb1061c3072ab84a50b3be516ad059d0557acaab5407104fe42f4a832983d38896675a544f4ed6ae2203cb958b061f0e5b8df3fd94b4dd9c942885857925264bb75a5231059f98d5da64f5d7ecc21e79d6a402132be9a8dd28df04899202a4e6c28bad2c5f75d01403623753316685d4eb8a0b93372770e9ff1bcda974b4e62b47438f52ed94f14e71a3162eeb2c5a5c3b7eee5b423ba2eaed05468f9904b509b1453ff3431d95dcc30fdaff2f1e9c33d42684e89ff66894b4052effdc808d9d5c7810e7bca2505edc6d3896584d2e6ddc9383de2df55492c17c9ed63055701ab45ba7edab661475bc292781196ef6a5eb5c82b92ce029e942b189d9d17dac51ba62c319ece7bbc37131cddc389dbdfe181944e099e4a36b448b9e77dde2e50d767d5b103bd8737e31ca206ff9f0328d1ca23540f928ae397c742b514285c22698c937be7f763473df59607fed8b7bb3289a97ee431e1310d011b9ac0f5f78b4415bb280d59d769389a926b2e4963c436a760463e4e59a4db9214988fbe7336c1f51c9425eacf3d975e42d8acdf207cd6dc71f6b9dc1efc1893e47e0b3fe2c7cf683cbc7fa4fc00e2b4d69f4b7c883d448d4bb724dec3f601e97a181288ee2f654c2c7c8e915e14daed55d017cd9ed5d2ead80f14fb29e9150150244551b843a7b1780490c97962d2e63957f49a5dcfec73188bb8284e7e699f0727b7eb339806bae3cd051c6e77666c3142e27ca626c4ea41865d60ab1d425a609f6dcf53ac58477b8bebef4b83fcd181808acb4d504fc7b51dc3452685c2449ee86b34dd2418c3157fc02daaa29aced516afd1ed478942cfd730e68f25c97e0f8866f1fe266c3895d9e19fc6964c38f63237d682fcd2e0b070788e5ed5ac3d32c5036b71fd3abc4ca53b2bb93bd5085b6d58f1bf68ffa134f5ef63b498702fb69a6aff33dbe27bff9250b3696ca267e1534a2d1780221f997f7b0a32de9ee2fd6fbf75cae4560f5011ae81e0143c356ead3e7ae63cd806056feef5afee0697b7fd2b6630535a0bd006d86400110356743ee70af78c0b96a72c384ae81843374f22f84feaf8d430624ccd81760abf674f0a2991be60ea7f096dbc6ba5b9c7c95c2f0aeb568bee45e8bd40727688d415e3d62440a6217590855e6b413877abb6bef485d1cce8960a369fd4348c824864bca07f4a9f2be9e0eeb84dc2bc3ecdb35c723e7a96f8fda5846e95bca2c648d64bc30242c1efa80086af683bd67aef0620740056276a54b8a1c43dffb631e24e443264168453b76e005c47c60f510327cd6f85b51428e5832d1ced42baf29e1627a56322ba76658bfae3c441f4667dbdf2b25931b85b95ed37a6d942736b69214e2bb9234a019bc6559e600836bba640cdfe6ba1b1b821e49a2b4aae23474c496064cc4bd3072fcbf299e2f76028a4e7c47f6ec9c2c6f4485316d1345bcadd19c69aaf707d3f762ff7972b817787f4297f619307b113bd16fb880f1a7080971d9973fc99c12966c6450db87a5b8b9a243a2927ec845de2eda52617e4b41b5dd51eb39ee3a1a95bbe95eeb822b2f6215f8c649ba2e2a5e6cdade3d4bc4a12aaff064efed4a15bd34f2bd1cf40c9e510a965b99265ff2a37239c729eb3cfc35c7086ab3f5db6772219d67509547588867136bf67314aad16dcedc089e268aa1fd83e7d41730c9d6bb55a5e036c6874609d9e9e97614916af0b65ec739ae830af63f03a88ec3e9b4c565da02538181fa89bf651873b1074bde86b90ba29341bc3f1be26e01b1aa15966ea799f0f46a36702e3db540027c5832f6e534d4c640280864b0eac8649f4d69db7ce210402fabdda8986006a64d34ed64196191ba5b3bd62c6bddc89449919c276da8daf0887185f1ac4ea2cfd1b2546dd2d71b89b6ed20e6311242f689fe49a19dd60f00cf7429cf806f389dc75e9ce0b53603e3d725d6069a6064a13cd24e03b6a5f7a6601ebf72e013a45609fa1cbfc7c4435d9ae0b048f99fa389764bacc81f7b3c72b6b8a1b751c8d0c364c7158a9baa985e6cded3321b60a066d249e05853b933611366d7c5a7cf7d86bfa42e013f01aa622b15abc60a0d16940f12735aade184a15c736cfd7f080a0469353ee1a8bafdb79fa6dfcce5a781b8ed7e2ce44a356c97a3733916143dc043400348673c7cc59f1d4c99eb856fe0e768d517e03329531b2e1c07348a44054d1efd21e348100947f6c1c0bf632b95a6c00999474a1ae5fc75c048b51226f9e31768db3fdb188b0e654d088b3d710cd342ce727e0b024d1e13056a67dc1eaf6f66cd837b0eb11cccada111927977760c95295d15526e4e7b6219bdcd1fcbdb75dd0d410684a74dffb0d2f757b1aaafb7ed765f6d9a4f6afc173c2452da7768e967a426fe299ec67d2793098cf03f02ea5920b174761dd6c8c081d7997bd68ecac43f23bf969e7dd58bc3573cb4941a9344f396eb1d340d49b435ac065f306c0838814b3a83981d81d6247cd7b174e472778ad2a6313e02563f07ba4ac359bb2c895a4c09ece95cf739a1f720ea2b6d8919fb58ed4773434de5262682d5fb847252598b75a76cd7d725245b0adc1807ef02e362fce69c918b42808125d8d6dd9cf29e905252edad26b9b5db2a2414d7a3f9add683d8cb0cf545d57b46417e73882b74c4", 0xfc0}], 0x2, 0x8, 0x1) write$vga_arbiter(r9, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0xfffffffd, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x5e22, [0x0, 0xffffffff, 0xfffffffe], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 18m1.965401108s ago: executing program 46 (id=584): syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x2, 0x9, 0x8, 0x596, 0xf, "83ce0837107462d4f100000000000000001000"}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) 16m57.119200765s ago: executing program 47 (id=759): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c93e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) 16m46.499006604s ago: executing program 48 (id=772): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e00003000000000000000000"], 0x38}}, 0x0) 16m46.200519415s ago: executing program 49 (id=756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 16m34.834274659s ago: executing program 50 (id=783): prlimit64(0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0xfd85) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 16m18.354273971s ago: executing program 51 (id=791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, 0x0) 16m7.767982819s ago: executing program 52 (id=798): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000000)='\x00', 0x1) unshare(0x28000600) copy_file_range(r1, 0x0, r2, 0x0, 0x2, 0x0) 15m56.648458198s ago: executing program 53 (id=805): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) io_setup(0x6, &(0x7f0000000540)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x8000000000000001, 0x0, 0xc3ad, 0x0, 0x3}, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x80, 0x0) 15m46.968290865s ago: executing program 54 (id=816): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, 0xee01, 0x0, 0x1000, '\x00', 0x1, 0x8, 0xb4e7, 0x320d3873, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0xaeb, 0x7}, {0xf, 0x8}, 0x701, 0xa, 0x8, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d7add05bb63ae661f053e1e79ceafeaa60a5ad1dc83dbe742eb40d907fd", "fd6ed24e", "c2e9e1c90d89691c"}, 0x38) 15m44.897635531s ago: executing program 5 (id=821): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socket$can_raw(0x1d, 0x3, 0x1) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 15m43.381312714s ago: executing program 5 (id=822): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92) 15m42.750167235s ago: executing program 5 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "a7", "bab435", 0x16}}}}}, 0x0) 15m40.589403s ago: executing program 55 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "a7", "bab435", 0x16}}}}}, 0x0) 15m32.30630133s ago: executing program 56 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x597, 0x41, 0x40, 0x1, 0x9]}, &(0x7f0000000080)=0x78) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0186dd608193460014060000000000000000000000000000000000fe8000000000000000000000000500aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="50020000907800"], 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='cpuhp_multi_enter\x00', r5, 0x0, 0x5}, 0x18) socket$kcm(0x29, 0x7, 0x0) 15m12.925198481s ago: executing program 57 (id=838): unshare(0x2c020400) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000200)={'\b\x00', 0x5, 0x5, 0x1, 0x207fe, 0x0, "0400b7e7a2aac9779bf500", "1a825a00", "0300", "e8cc1304", ["8bbb00fda8e45cfe00000900", "ab5286400300000000008516", '\x00', "000b000000000000001000"]}) 15m5.782918152s ago: executing program 58 (id=845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x20, 0x80, 0x81, 0xfffff038}, {0x20, 0x2, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 13m57.752928897s ago: executing program 59 (id=1030): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x40000000, @loopback, 0xa09c}, {0xa, 0x0, 0xfffffffe, @empty, 0xb}, 0xffffffffffffffff, 0x99d}}, 0x48) writev(r0, 0x0, 0x0) 13m52.445416874s ago: executing program 60 (id=1048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0), &(0x7f00000015c0)) io_uring_enter(r4, 0x2df0, 0x40000000, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 13m25.347641081s ago: executing program 5 (id=1049): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 13m24.386180587s ago: executing program 5 (id=1122): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x4400c800) 13m23.715026604s ago: executing program 5 (id=1125): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x5, [0x7, 0x3, 0x1, 0x5, 0x9]}, 0x12) 13m21.598759872s ago: executing program 61 (id=1125): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x5, [0x7, 0x3, 0x1, 0x5, 0x9]}, 0x12) 13m11.098422039s ago: executing program 4 (id=1161): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x46000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 13m9.713796699s ago: executing program 4 (id=1164): dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 13m8.026194925s ago: executing program 4 (id=1168): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) 12m57.120486202s ago: executing program 4 (id=1180): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 12m55.245329849s ago: executing program 4 (id=1187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x7c, 0x3, 0xd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x0, 0x8, 0xc, '\x00', 0x1, 0x2}) 12m52.966004126s ago: executing program 4 (id=1188): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 12m50.214362102s ago: executing program 62 (id=1188): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 9m49.910274451s ago: executing program 8 (id=1768): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000001c0)=[{0x3c, 0x801, 0x0, 0x0}, {0x3c, 0x6810, 0x0, 0x0}], 0x2}) 9m47.838325664s ago: executing program 8 (id=1772): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000000180)="eaf79e", 0x3, 0xe642}) 9m47.053418919s ago: executing program 8 (id=1774): r0 = syz_open_dev$media(&(0x7f0000000100), 0x7, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000380)={{0x80000000, 0x0, 0x2, [0x4, 0x1]}, {0x80000000, 0x0, 0x3, [0xa]}, 0x2, [0x2, 0x3ff]}) 9m46.300231213s ago: executing program 8 (id=1775): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r1 = dup(r0) read$FUSE(r1, &(0x7f00000014c0)={0x2020}, 0x2020) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$msr(r1, &(0x7f000001b000)=""/102391, 0x18ff7) 9m45.346261139s ago: executing program 8 (id=1778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 9m44.616410053s ago: executing program 8 (id=1780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e680)=[{{&(0x7f00000002c0)=@file={0xf0689636f960c7ed, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000700)="981979083613a385f83f047e9c515c3808dc3152b2d362e1f136ec6951e6097a05b08ef063c7fe288bfcf1683e7e2edfdf07f259764010e51f59dcc059aaed5bc65c5b5639023564e98730121a0c8fb5d17d83c1e4161a1fdeafa501a5187892f6a005ce659908ef4bff2a357d522e826dd82bb675e0f269e2ff5f3d0f5090ea9b53d1103788104ba47a878e27b02062028a63dae2db2bfd8bf69c9e84998053bbcbf35804ed54af71cacb96ffea13345a73b608f2ed99b715c010b617a7effd", 0xc0}], 0x1, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}], 0x40, 0x40004}}, {{&(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000640)="9adebd5b44418ed77b17cd38b80984a57b13c811dda241e725d0cde3ff78712667b14ac699bee381ef131a6cad7d0348be976138ad89e5f46f7ace82b2c1b01dc0c9f368f4eaba32a7957dfc76", 0x4d}, {&(0x7f0000001cc0)="b717580aed6787c5388516b32f4f882c22e6bfbbb5e485d2920c877d2030494092a1b0b275801d95e930be9a8067f45df835ec1dcce171d1eca623240c6d1ed8e504837fe45cf3dd038e8d0e4ef54cf55637436fb6e97d2b1e8c2361fc127f897f43277c83367394310d35ddfea973907591b8f418647072a1c47954fa39752929fc4c1db01991e625bb36ded26f0b3bc8e065f447151d65383d7da32c17dccb27de340e8018729b77ab7ca38150c803b64d914f563950860b65f663a8", 0xbd}, {&(0x7f0000001d80)="80324c26bb1ff1d6e9a11386f36e858b238243935f5a558836aa9c6fad56248e4961c2a1aa9f5de5f12f5ad3c49ffbf0d1737d2d5685a7958f9ebbf5e6620019be8fd148f4fbd98e1c7d1ba4aaac4aa42a03715c17d47126", 0x58}, {&(0x7f0000001e00)="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", 0xfe}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000200000000006e9c8a7f75ef065b21df19e840e634c80459ebe000a118082f126a62e70bd37c61e7a870f50d2044a15f2e8368e76d69e1b96d225d7fd8adea9fe34d44c90f9b29f5eecb328242f130374eb09756af9ece65d05a1d7864b7a067b2e02f99b750ba1bf4b540853747c6a7ff3e28f137df2", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0], 0xd8, 0x80}}, {{&(0x7f000000e440)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f000000e600)=[{&(0x7f000000e580)="0dfe4c48b9fc630f72dd9a3b4e965facd7187e9bd9faabcd7783345e02f6b45f894bef4ce4e0ddfbc024ca5552751c8bda655fa2252cf350247a6b8888cd4f9c015ef462dda0880639793f706f5724ae7e8088bb73e03f46d70a64652a0cdd54a788519c2543e70cdb55bab72991275e370fc31c43e684", 0x77}], 0x1, &(0x7f000000e640)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x24004081}}], 0x3, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/114, 0x72, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 9m29.049048113s ago: executing program 63 (id=1780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e680)=[{{&(0x7f00000002c0)=@file={0xf0689636f960c7ed, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000700)="981979083613a385f83f047e9c515c3808dc3152b2d362e1f136ec6951e6097a05b08ef063c7fe288bfcf1683e7e2edfdf07f259764010e51f59dcc059aaed5bc65c5b5639023564e98730121a0c8fb5d17d83c1e4161a1fdeafa501a5187892f6a005ce659908ef4bff2a357d522e826dd82bb675e0f269e2ff5f3d0f5090ea9b53d1103788104ba47a878e27b02062028a63dae2db2bfd8bf69c9e84998053bbcbf35804ed54af71cacb96ffea13345a73b608f2ed99b715c010b617a7effd", 0xc0}], 0x1, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}], 0x40, 0x40004}}, {{&(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000640)="9adebd5b44418ed77b17cd38b80984a57b13c811dda241e725d0cde3ff78712667b14ac699bee381ef131a6cad7d0348be976138ad89e5f46f7ace82b2c1b01dc0c9f368f4eaba32a7957dfc76", 0x4d}, {&(0x7f0000001cc0)="b717580aed6787c5388516b32f4f882c22e6bfbbb5e485d2920c877d2030494092a1b0b275801d95e930be9a8067f45df835ec1dcce171d1eca623240c6d1ed8e504837fe45cf3dd038e8d0e4ef54cf55637436fb6e97d2b1e8c2361fc127f897f43277c83367394310d35ddfea973907591b8f418647072a1c47954fa39752929fc4c1db01991e625bb36ded26f0b3bc8e065f447151d65383d7da32c17dccb27de340e8018729b77ab7ca38150c803b64d914f563950860b65f663a8", 0xbd}, {&(0x7f0000001d80)="80324c26bb1ff1d6e9a11386f36e858b238243935f5a558836aa9c6fad56248e4961c2a1aa9f5de5f12f5ad3c49ffbf0d1737d2d5685a7958f9ebbf5e6620019be8fd148f4fbd98e1c7d1ba4aaac4aa42a03715c17d47126", 0x58}, {&(0x7f0000001e00)="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", 0xfe}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000200000000006e9c8a7f75ef065b21df19e840e634c80459ebe000a118082f126a62e70bd37c61e7a870f50d2044a15f2e8368e76d69e1b96d225d7fd8adea9fe34d44c90f9b29f5eecb328242f130374eb09756af9ece65d05a1d7864b7a067b2e02f99b750ba1bf4b540853747c6a7ff3e28f137df2", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0], 0xd8, 0x80}}, {{&(0x7f000000e440)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f000000e600)=[{&(0x7f000000e580)="0dfe4c48b9fc630f72dd9a3b4e965facd7187e9bd9faabcd7783345e02f6b45f894bef4ce4e0ddfbc024ca5552751c8bda655fa2252cf350247a6b8888cd4f9c015ef462dda0880639793f706f5724ae7e8088bb73e03f46d70a64652a0cdd54a788519c2543e70cdb55bab72991275e370fc31c43e684", 0x77}], 0x1, &(0x7f000000e640)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x24004081}}], 0x3, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/114, 0x72, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4m49.478042608s ago: executing program 1 (id=2650): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x4}}, 0x20) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$binfmt_misc(r3, &(0x7f0000000640)="dfcb2d1bef421b67c6b530263cb62cbedca3fe41b8b33527fa1558f830fc91d3b3c4825b43543fb30e4ac0028ae8ac641b524435b91ba6af019eb5b5b74aa16f8ff168fb1afa39a8b52bd9ed9ff7a45bacdd988c7b27f74a1c14420bd90f422a53074b1d0f5a8fd188012ec89c1378516d53ca1a56b67cb8157ce5c51ac2a687f02f882171ad5f3c1e046d73a839037fd33533292ec48d6aa6103caec58dbad201fb68349e6c022b0d9fe395b3be27dcc5f60b48c7b509927527a6619eea7d79c9c0fe1936864d1dedd595f54e138b0b396a3375", 0xd4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000100000027bf00", @ANYRES32=r3, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000000000000000000000ae4676561a8e88cfc27fb71ec5e54bed1ddf04fcad00fa50dcca44a2c3f62de455bb4b36ddbdb477335cf44bc743a7f0df05c30227cb3d60d303e1adbf75ba9c6195406dd694ae72fa978dec8ef031550cc69f4083ce"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m48.792190739s ago: executing program 1 (id=2653): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x1c) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/252, 0xfc}], 0x1) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x800000}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x38) 4m48.458422341s ago: executing program 1 (id=2654): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x12c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x40, 0x2, [@TCA_ROUTE4_ACT={0x3c, 0x6, [@m_vlan={0x38, 0x6, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x94, 0x1, [@m_tunnel_key={0x90, 0x3, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x58, 0x6, "321451eca00be00a417e7cb0794989e0d81bd281b85772cf97eea50dadf6c0d49ca94765e6fb6c3275b64c588c4c798f0d3040f99188a616eea5117322d8da8320baad2b7e204dc92f470d305b396e6cb9414b5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m47.961447749s ago: executing program 1 (id=2656): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socket$can_raw(0x1d, 0x3, 0x1) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4m42.244797713s ago: executing program 1 (id=2664): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x1c) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/252, 0xfc}], 0x1) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x800000}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x38) 4m41.772008401s ago: executing program 1 (id=2666): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x12c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x40, 0x2, [@TCA_ROUTE4_ACT={0x3c, 0x6, [@m_vlan={0x38, 0x6, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x94, 0x1, [@m_tunnel_key={0x90, 0x3, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x58, 0x6, "321451eca00be00a417e7cb0794989e0d81bd281b85772cf97eea50dadf6c0d49ca94765e6fb6c3275b64c588c4c798f0d3040f99188a616eea5117322d8da8320baad2b7e204dc92f470d305b396e6cb9414b5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m39.67326153s ago: executing program 64 (id=2666): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x12c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x40, 0x2, [@TCA_ROUTE4_ACT={0x3c, 0x6, [@m_vlan={0x38, 0x6, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x94, 0x1, [@m_tunnel_key={0x90, 0x3, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x58, 0x6, "321451eca00be00a417e7cb0794989e0d81bd281b85772cf97eea50dadf6c0d49ca94765e6fb6c3275b64c588c4c798f0d3040f99188a616eea5117322d8da8320baad2b7e204dc92f470d305b396e6cb9414b5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m22.546029689s ago: executing program 0 (id=2700): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x4}}, 0x20) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$binfmt_misc(r3, &(0x7f0000000640)="dfcb2d1bef421b67c6b530263cb62cbedca3fe41b8b33527fa1558f830fc91d3b3c4825b43543fb30e4ac0028ae8ac641b524435b91ba6af019eb5b5b74aa16f8ff168fb1afa39a8b52bd9ed9ff7a45bacdd988c7b27f74a1c14420bd90f422a53074b1d0f5a8fd188012ec89c1378516d53ca1a56b67cb8157ce5c51ac2a687f02f882171ad5f3c1e046d73a839037fd33533292ec48d6aa6103caec58dbad201fb68349e6c022b0d9fe395b3be27dcc5f60b48c7b509927527a6619eea7d79c9c0fe1936864d1dedd595f54e138b0b396a3375", 0xd4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000100000027bf00", @ANYRES32=r3, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000000000000000000000000000000ae4676561a8e88cfc27fb71ec5e54bed1ddf04fcad00fa50dcca44a2c3f62de455bb4b36ddbdb477335cf44bc743a7f0df05c30227cb3d60d303e1adbf75ba9c6195406dd694ae72fa978dec8ef031550cc69f4083ce"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.003854368s ago: executing program 0 (id=2702): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f000000010902"], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 4m18.069166867s ago: executing program 0 (id=2709): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfe) 4m14.094041245s ago: executing program 0 (id=2714): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 4m2.890340107s ago: executing program 0 (id=2729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a40)={0x2e0, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x76d3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd9d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x44084}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) 4m1.560173209s ago: executing program 0 (id=2734): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000340), 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}}, 0x24}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mq_open(&(0x7f00000001c0)='\x00', 0x40, 0x0, &(0x7f0000000400)={0x8, 0x2c6, 0xe, 0x9}) socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3m45.739027339s ago: executing program 65 (id=2734): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000340), 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}}, 0x24}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mq_open(&(0x7f00000001c0)='\x00', 0x40, 0x0, &(0x7f0000000400)={0x8, 0x2c6, 0xe, 0x9}) socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1m21.170379044s ago: executing program 7 (id=3113): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000740)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket(0x2a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 1m19.984998079s ago: executing program 7 (id=3118): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000580)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x1180, 0x7ff, 0xfbc2, 0x2, 0x0, 0x0, 0x0, 0x100, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) creat(&(0x7f0000001380)='./file0\x00', 0x4) 1m17.411335546s ago: executing program 7 (id=3122): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) 1m10.130338767s ago: executing program 7 (id=3134): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f00000000c0)={[{@numtail}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x360, &(0x7f0000000900)="$eJzs3U9oHFUYAPBvO/lbaJODUBSE0ZugoX/woKeUkkJxLypL1YO42FQlGwtZXEwP3caLeBQ86smLeNCDh55FUMSbB69WkKp40N4KFp/s7mx2NrtJU2Fbg7/fYfnyvffNe28zyU4m2ZdXlmPtwnRcvHnzRszNVWJq+cxy3KrEYmTRdzVGzYzJAQAHw62U4s/Us8+SyoSnBABMWPf1/7Ujpcw7X+/VP3n1B4ADr/j5f36vPnO7NVyayJQAgAkbuf//6FDzzPCv+qdKfxUAABxUz7/40jOnqxHP5flcxPq7rVqrFk8P2k9fjDeiEatxPBbidkTvQqHzUOk+nj1XXTme53k7flmMWqeiVYtYb7dqvSuF01m3fjZOxEIsFvXF1UZKKTv7RXXlRN4VEVfb3fFjvdKqTcfhYvwfD8dqnIw8HhipjzhXXTmZFweorffr2xFbg/sWnfkvxUJ8/2pcikZcmD8fKfUva6orV07k+ZlUHapv1WbjwvazsOsdEAAAAAAAAAAAAAAAAAAAAAAA+FeW8m2L2/vfpMH+PUtLY9q7++P06ov9gbZ6+wOl2RQp/fH2E7X3shjaH2jn/jyt2lQcur9LBwAAAAAAAAAAAAAAAAAAgP+M5uZM1BuN1Y3m5uW1ctDeaG4eiohO5s1vP/tqPkb73CGYKsYoNeVF6vJaPWX9zikb6lMEWWfwfubTa9szLveZ3V7F2GnM7t7UaBx55OcPB5mHs/6R/x70yWL8ArMd0ygH60d7U7qbJ+ryqSI4eYfO11NKux3nysujVVGJmLr7T9zeQeoE39x4/cFTzWNPdjNfpp7HHl84f/2Dj39bqzc6I3c0PpnZaN5Oa/Xi4/En2+5BVjp/KtELKuUzYWqv8q3hTD374fcXHnr/u/2NnsqZt8b0yXrL+XyjuVkpvlK6TTO9oJPbUTXfOJdF7DjO9JiTfwLBsY+W69eu/PTrfqtK3yRs1AEAAAAAAAAAAAAAAAAAAPdE6b3iheLNvtN7VT317ORnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zuD//5eCrZHMfoK/2jHaNLu60Yw4er+XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9w/AQAA///ftWu9") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) 1m8.109075406s ago: executing program 7 (id=3142): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) gettid() writev(0xffffffffffffffff, &(0x7f0000001600), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.690417843s ago: executing program 7 (id=3150): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 49.434504708s ago: executing program 66 (id=3150): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.332726852s ago: executing program 2 (id=3243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002140)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b0e6812a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575559badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727ace1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a6435054e79c10edc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a71062772bba19fea512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147335530f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c3e70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b669f042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8e8df1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c230881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b0495619a60bf5d77e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f49c2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x90, 0x0, 0x0, {0x6, 0x0, 0x80000000, 0x20000000009, 0x8001, 0x7, {0xfffffffffffffffd, 0x0, 0x1, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8000, 0x0, r3, 0x0, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0x0) 12.222831613s ago: executing program 3 (id=3244): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b09, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0xff}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) 9.74346626s ago: executing program 3 (id=3245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500005695fe14f00000000000000001fcaa000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a31490000000900010073797a300000000008000540000000150c00098008000000000000000000000a"], 0x98}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x7fffffff, 0x1, 0x2, {0xa, @sdr={0x47524247, 0x6}}, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7134, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000400)={0x3, @sliced={0x81, [0xf620, 0xfffd, 0x8000, 0xd, 0x8001, 0xffc0, 0x3, 0x0, 0x6, 0x7, 0x8, 0x6, 0x7, 0x1, 0x9c, 0x4686, 0xd, 0x5945, 0x5, 0x8, 0x3, 0x9, 0xfff9, 0x9, 0xffff, 0x4, 0x3, 0x0, 0x0, 0xa9f, 0x1000, 0x1, 0x10, 0x0, 0xfff, 0x7, 0x3, 0x0, 0xff, 0x8388, 0x3, 0x9, 0x1, 0x7, 0x629, 0x9, 0x8001, 0x3], 0x7}}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="1400605711e904000016000b63d25a8004b40b21310838648c2594", 0x1b}], 0x1}, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0x1, 0x800, 0x107, 0xb4c, 0x0, 0x401a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x1, 0x0, 0xfffffff8]}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$netlink(0x10, 0x3, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000020000008500000086000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 9.574685502s ago: executing program 9 (id=3246): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) stat(&(0x7f0000000bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000c40)) 9.574445806s ago: executing program 6 (id=3247): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 9.189549556s ago: executing program 6 (id=3248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0xfffffffc, 0x56) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 8.704284219s ago: executing program 9 (id=3249): unshare(0x2040400) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 5.953871854s ago: executing program 6 (id=3250): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 5.616683393s ago: executing program 3 (id=3251): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5.478212714s ago: executing program 9 (id=3252): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getdents64(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022af372cd9670bfa10a95c"], 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08000640000000250900010073797a30"], 0xd8}}, 0x0) 5.369239217s ago: executing program 2 (id=3253): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x1ff, 0x10000, 0x3, 0x8800, 0x1, 0x17, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 4.721423103s ago: executing program 2 (id=3254): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)='M', 0x1}], 0x1, &(0x7f0000008f80)=ANY=[@ANYBLOB="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"], 0x478}}], 0x1, 0x40) 4.142233672s ago: executing program 3 (id=3255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={0x0, &(0x7f0000007d40)=[{}], 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r4}) 3.798442724s ago: executing program 2 (id=3256): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000240)={'\x00', 0x404000, 0x2, 0x85d1}) 2.201128819s ago: executing program 6 (id=3257): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2.094773534s ago: executing program 2 (id=3258): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 1.950561611s ago: executing program 9 (id=3259): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000001040)=""/4096, &(0x7f0000000000)=0x1000) 1.378908694s ago: executing program 6 (id=3260): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1.272145836s ago: executing program 3 (id=3261): unshare(0x2040400) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 742.073299ms ago: executing program 9 (id=3262): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000100)={0x28, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x1d, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x5f, &(0x7f0000000240)}) 692.233361ms ago: executing program 3 (id=3263): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) 52.931115ms ago: executing program 2 (id=3264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffb}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}}], {0x14}}, 0xe4}}, 0x0) 49.489451ms ago: executing program 9 (id=3265): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 0s ago: executing program 6 (id=3266): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040060}, 0x40840) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff5f) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82e7ff00000000000000f7ffffff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 71] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1511.315071][T17264] omfs: sysblock number (f784317bf884317b) is out of range [ 1512.298284][ T5871] usb 7-1: config 0 has no interfaces? [ 1512.356647][ T5871] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1512.366615][ T5871] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1512.375265][ T5871] usb 7-1: Manufacturer: syz [ 1512.502024][ T5871] usb 7-1: config 0 descriptor?? [ 1512.586454][ T5827] Bluetooth: hci3: command tx timeout [ 1513.686512][T14105] Bluetooth: Error in BCSP hdr checksum [ 1514.679508][ T8627] Bluetooth: hci3: command tx timeout [ 1515.000727][ T5872] usb 7-1: USB disconnect, device number 59 [ 1515.140644][ T8627] Bluetooth: hci4: command 0x1003 tx timeout [ 1515.146962][ T5827] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1515.174578][ T1744] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1515.294667][T17232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.302823][T17232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.310759][T17232] bridge_slave_0: entered allmulticast mode [ 1515.321258][T17232] bridge_slave_0: entered promiscuous mode [ 1515.349919][T17232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.357579][T17232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.365497][T17232] bridge_slave_1: entered allmulticast mode [ 1515.374687][T17232] bridge_slave_1: entered promiscuous mode [ 1515.440467][ T1744] usb 3-1: Using ep0 maxpacket: 16 [ 1515.501879][T17232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.506993][ T1744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1515.523120][T17232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.621800][ T1744] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1515.631324][ T1744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.639571][ T1744] usb 3-1: Product: syz [ 1515.644161][ T1744] usb 3-1: Manufacturer: syz [ 1515.648970][ T1744] usb 3-1: SerialNumber: syz [ 1515.762275][ T1744] usb 3-1: config 0 descriptor?? [ 1515.785893][ T1744] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1515.800918][ T1744] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1515.995815][T17232] team0: Port device team_slave_0 added [ 1516.069321][T17232] team0: Port device team_slave_1 added [ 1516.414774][ T1744] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1516.422057][ T30] audit: type=1326 audit(1753115016.987:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e62b8e9a9 code=0x0 [ 1516.477074][T17232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.484433][T17232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.518095][T17232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.597753][T17295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1516.607220][T17295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1516.642374][ T5872] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1516.686701][T17232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.694634][T17232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.728827][T17232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.753930][ T5827] Bluetooth: hci3: command tx timeout [ 1516.853672][ T5872] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1516.863163][ T5872] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1516.873943][ T5872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1516.883522][ T5872] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1516.901787][ T5871] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1516.929376][ T1744] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1516.937863][ T1744] em28xx 3-1:0.0: board has no eeprom [ 1516.944848][T17232] hsr_slave_0: entered promiscuous mode [ 1516.955440][T17232] hsr_slave_1: entered promiscuous mode [ 1516.999375][ T5872] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1517.009193][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1517.017750][ T5872] usb 8-1: Product: syz [ 1517.025213][ T5872] usb 8-1: Manufacturer: syz [ 1517.093382][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1517.105213][ T5871] usb 7-1: no configurations [ 1517.110129][ T5871] usb 7-1: can't read configurations, error -22 [ 1517.140322][ T5872] cdc_wdm 8-1:1.0: skipping garbage [ 1517.145947][ T5872] cdc_wdm 8-1:1.0: skipping garbage [ 1517.151703][ T5872] cdc_wdm 8-1:1.0: skipping garbage [ 1517.157298][ T5872] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1517.267690][ T1744] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1517.276133][ T1744] em28xx 3-1:0.0: dvb set to bulk mode. [ 1517.285315][ T5872] em28xx 3-1:0.0: Binding DVB extension [ 1517.290042][ T5871] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1517.300933][ T1744] usb 3-1: USB disconnect, device number 70 [ 1517.308635][ T1744] em28xx 3-1:0.0: Disconnecting em28xx [ 1517.404676][T14589] usb 8-1: USB disconnect, device number 81 [ 1517.470515][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1517.511890][ T5871] usb 7-1: no configurations [ 1517.516820][ T5871] usb 7-1: can't read configurations, error -22 [ 1517.564374][ T5871] usb usb7-port1: attempt power cycle [ 1517.613116][ T5872] em28xx 3-1:0.0: Registering input extension [ 1517.626587][ T1744] em28xx 3-1:0.0: Closing input extension [ 1517.682566][ T1744] em28xx 3-1:0.0: Freeing device [ 1517.955892][ T5871] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1518.002943][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1518.030201][ T5871] usb 7-1: no configurations [ 1518.035137][ T5871] usb 7-1: can't read configurations, error -22 [ 1518.200357][ T5871] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1518.272365][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1518.576207][ T1744] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1518.824529][ T1744] usb 8-1: config 0 has no interfaces? [ 1518.884304][ T5871] usb 7-1: no configurations [ 1518.889177][ T5871] usb 7-1: can't read configurations, error -22 [ 1518.897367][ T5871] usb usb7-port1: unable to enumerate USB device [ 1518.937688][ T1744] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1518.947828][ T1744] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1518.956843][ T1744] usb 8-1: Manufacturer: syz [ 1519.022427][ T1744] usb 8-1: config 0 descriptor?? [ 1519.540628][ T30] audit: type=1107 audit(1753115019.677:95): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1520.078413][T17317] loop2: detected capacity change from 0 to 512 [ 1520.146442][T17317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1520.950714][T17317] EXT4-fs (loop2): 1 truncate cleaned up [ 1520.954172][T17232] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1520.958552][T17317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1521.001881][T17232] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1521.094664][T17232] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1521.149885][T17232] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1521.191411][T17322] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 1521.702060][T17322] EXT4-fs (loop2): Remounting filesystem read-only [ 1521.948261][T11841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.596424][T17232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.721514][T17232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.781084][T14343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.788672][T14343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.907048][T14343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.914561][T14343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.224756][ T8627] Bluetooth: hci4: command 0x1003 tx timeout [ 1523.232358][ T5827] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1523.242913][ T5871] usb 8-1: USB disconnect, device number 82 [ 1523.626389][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2698'. [ 1523.636163][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2698'. [ 1523.659190][T17344] dummy0: entered promiscuous mode [ 1523.669623][T17344] team0: entered promiscuous mode [ 1523.675058][T17344] team_slave_0: entered promiscuous mode [ 1523.692193][T17344] team_slave_1: entered promiscuous mode [ 1523.703758][T17344] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1523.711692][T17344] Cannot create hsr debugfs directory [ 1524.060877][ T5872] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1524.282765][ T5872] usb 7-1: Using ep0 maxpacket: 16 [ 1524.332301][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1524.410411][ T5872] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1524.420080][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.428320][ T5872] usb 7-1: Product: syz [ 1524.433132][ T5872] usb 7-1: Manufacturer: syz [ 1524.437954][ T5872] usb 7-1: SerialNumber: syz [ 1524.492261][ T5872] usb 7-1: config 0 descriptor?? [ 1524.539451][ T5872] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1524.549439][ T5872] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1524.606399][ T8153] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1524.822113][ T8153] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1524.831273][ T8153] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1524.842038][ T8153] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1524.851457][ T8153] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.896270][ T8153] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1524.906137][ T8153] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1524.923532][ T8153] usb 8-1: Product: syz [ 1524.927931][ T8153] usb 8-1: Manufacturer: syz [ 1524.972722][ T8153] cdc_wdm 8-1:1.0: skipping garbage [ 1524.973958][T17232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.978162][ T8153] cdc_wdm 8-1:1.0: skipping garbage [ 1524.995416][ T8153] cdc_wdm 8-1:1.0: skipping garbage [ 1525.003136][ T8153] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1525.028566][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1525.152659][ T5872] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1525.188642][T14589] usb 8-1: USB disconnect, device number 83 [ 1525.210407][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1525.225689][ T9] usb 3-1: no configurations [ 1525.232153][ T9] usb 3-1: can't read configurations, error -22 [ 1525.438150][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1525.595278][ T5872] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1525.604612][ T5872] em28xx 7-1:0.0: board has no eeprom [ 1525.633430][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1525.659637][ T9] usb 3-1: no configurations [ 1525.664848][ T9] usb 3-1: can't read configurations, error -22 [ 1525.694501][ T9] usb usb3-port1: attempt power cycle [ 1525.950029][ T5872] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1525.958221][ T5872] em28xx 7-1:0.0: dvb set to bulk mode. [ 1525.967008][T14589] em28xx 7-1:0.0: Binding DVB extension [ 1526.011689][ T5872] usb 7-1: USB disconnect, device number 64 [ 1526.019285][ T5872] em28xx 7-1:0.0: Disconnecting em28xx [ 1526.120478][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1526.165210][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1526.195309][ T9] usb 3-1: no configurations [ 1526.200578][ T9] usb 3-1: can't read configurations, error -22 [ 1526.282949][T14589] em28xx 7-1:0.0: Registering input extension [ 1526.345088][ T5872] em28xx 7-1:0.0: Closing input extension [ 1526.380625][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1526.401927][ T5872] em28xx 7-1:0.0: Freeing device [ 1526.405421][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1526.441033][ T9] usb 3-1: no configurations [ 1526.451523][ T9] usb 3-1: can't read configurations, error -22 [ 1526.509457][ T9] usb usb3-port1: unable to enumerate USB device [ 1526.566286][T17382] loop7: detected capacity change from 0 to 512 [ 1526.618286][T17382] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1526.710066][T17382] EXT4-fs (loop7): 1 truncate cleaned up [ 1526.717815][T17382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1526.897032][T17232] veth0_vlan: entered promiscuous mode [ 1526.964093][T17232] veth1_vlan: entered promiscuous mode [ 1527.074831][T10106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.199932][T17232] veth0_macvtap: entered promiscuous mode [ 1527.291609][T17232] veth1_macvtap: entered promiscuous mode [ 1527.411808][T17232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.542360][T17232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.696233][T17232] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.706339][T17232] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.717702][T17232] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.727002][T17232] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.293007][T17394] loop7: detected capacity change from 0 to 40427 [ 1528.411479][T17394] F2FS-fs (loop7): invalid crc value [ 1528.591845][ T8153] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1528.738670][T17394] F2FS-fs (loop7): Start checkpoint disabled! [ 1528.758808][T17394] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1528.854653][T17403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2710'. [ 1528.864557][T17403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2710'. [ 1528.885978][ T8153] usb 7-1: config 0 has no interfaces? [ 1528.887200][T17403] dummy0: entered promiscuous mode [ 1528.907200][T17403] team0: entered promiscuous mode [ 1528.912575][T17403] team_slave_0: entered promiscuous mode [ 1528.919259][T17403] team_slave_1: entered promiscuous mode [ 1528.922544][ T8153] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1528.931011][T17403] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1528.934743][ T8153] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1528.941854][T17403] Cannot create hsr debugfs directory [ 1528.955770][ T8153] usb 7-1: Manufacturer: syz [ 1529.422881][T17407] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1529.688329][ T8153] usb 7-1: config 0 descriptor?? [ 1530.762504][ T4960] kworker/u8:27: attempt to access beyond end of device [ 1530.762504][ T4960] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1530.859538][ T4960] kworker/u8:27: attempt to access beyond end of device [ 1530.859538][ T4960] loop7: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 1530.874273][ T4960] CPU: 1 UID: 0 PID: 4960 Comm: kworker/u8:27 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(none) [ 1530.874405][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1530.874525][ T4960] Workqueue: writeback wb_workfn (flush-7:7) [ 1530.874813][ T4960] Call Trace: [ 1530.874869][ T4960] [ 1530.874918][ T4960] __dump_stack+0x26/0x30 [ 1530.875085][ T4960] dump_stack_lvl+0x1df/0x270 [ 1530.875253][ T4960] dump_stack+0x1e/0x25 [ 1530.875404][ T4960] f2fs_handle_critical_error+0xa6f/0xc20 [ 1530.875623][ T4960] f2fs_stop_checkpoint+0x65/0x80 [ 1530.875805][ T4960] f2fs_write_end_io+0xb4b/0x1920 [ 1530.876000][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1530.876206][ T4960] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1530.876363][ T4960] bio_endio+0xe27/0xf80 [ 1530.876609][ T4960] submit_bio_noacct+0x214/0x2710 [ 1530.876817][ T4960] submit_bio+0x5a9/0x5d0 [ 1530.876960][ T4960] f2fs_submit_write_bio+0x92/0x250 [ 1530.877129][ T4960] __submit_merged_bio+0x16f/0x6a0 [ 1530.877275][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1530.877432][ T4960] __submit_merged_write_cond+0x458/0x9a0 [ 1530.877601][ T4960] f2fs_write_data_pages+0x4bb2/0x5480 [ 1530.877871][ T4960] ? blk_add_trace_split+0x320/0x4b0 [ 1530.878046][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.878198][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1530.878345][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.878491][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.878636][ T4960] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1530.878851][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.878994][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1530.879153][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.879295][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1530.879448][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.879590][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1530.879741][ T4960] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1530.879893][ T4960] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1530.880046][ T4960] do_writepages+0x3ef/0x860 [ 1530.880277][ T4960] ? stack_depot_save_flags+0x35/0x7b0 [ 1530.880497][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.880642][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.880802][ T4960] __writeback_single_inode+0x101/0x1190 [ 1530.880984][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.881121][ T4960] writeback_sb_inodes+0xaa9/0x1c90 [ 1530.881417][ T4960] wb_writeback+0x4ce/0xc00 [ 1530.881602][ T4960] ? queue_io+0x481/0x790 [ 1530.881784][ T4960] wb_workfn+0x397/0x1910 [ 1530.881945][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1530.882117][ T4960] ? __pfx_wb_workfn+0x10/0x10 [ 1530.882274][ T4960] process_scheduled_works+0xb91/0x1d80 [ 1530.882562][ T4960] worker_thread+0xedf/0x1590 [ 1530.882770][ T4960] kthread+0xd59/0xf00 [ 1530.882923][ T4960] ? __pfx_worker_thread+0x10/0x10 [ 1530.883125][ T4960] ? __pfx_kthread+0x10/0x10 [ 1530.883266][ T4960] ret_from_fork+0x1e0/0x310 [ 1530.883446][ T4960] ? __pfx_kthread+0x10/0x10 [ 1530.883587][ T4960] ret_from_fork_asm+0x1a/0x30 [ 1530.883789][ T4960] [ 1531.181595][ T4960] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1531.188757][ T4960] CPU: 1 UID: 0 PID: 4960 Comm: kworker/u8:27 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(none) [ 1531.188893][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1531.189013][ T4960] Workqueue: writeback wb_workfn (flush-7:7) [ 1531.189213][ T4960] Call Trace: [ 1531.189262][ T4960] [ 1531.189315][ T4960] __dump_stack+0x26/0x30 [ 1531.189476][ T4960] dump_stack_lvl+0x1df/0x270 [ 1531.189647][ T4960] dump_stack+0x1e/0x25 [ 1531.189797][ T4960] f2fs_handle_critical_error+0xa6f/0xc20 [ 1531.189987][ T4960] f2fs_stop_checkpoint+0x65/0x80 [ 1531.190152][ T4960] f2fs_write_end_io+0xb4b/0x1920 [ 1531.190343][ T4960] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1531.190502][ T4960] bio_endio+0xe27/0xf80 [ 1531.190689][ T4960] submit_bio_noacct+0x214/0x2710 [ 1531.190869][ T4960] submit_bio+0x5a9/0x5d0 [ 1531.191007][ T4960] f2fs_submit_write_bio+0x92/0x250 [ 1531.191159][ T4960] __submit_merged_bio+0x16f/0x6a0 [ 1531.191300][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1531.191463][ T4960] __submit_merged_write_cond+0x458/0x9a0 [ 1531.191634][ T4960] f2fs_write_data_pages+0x4bb2/0x5480 [ 1531.191911][ T4960] ? blk_add_trace_split+0x320/0x4b0 [ 1531.192070][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.192215][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1531.192363][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.192506][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.192648][ T4960] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1531.192835][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.192975][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1531.193154][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.193299][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1531.193452][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.193597][ T4960] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1531.193748][ T4960] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1531.193917][ T4960] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1531.194069][ T4960] do_writepages+0x3ef/0x860 [ 1531.194248][ T4960] ? stack_depot_save_flags+0x35/0x7b0 [ 1531.194426][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.194573][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.194738][ T4960] __writeback_single_inode+0x101/0x1190 [ 1531.194930][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.195093][ T4960] writeback_sb_inodes+0xaa9/0x1c90 [ 1531.195396][ T4960] wb_writeback+0x4ce/0xc00 [ 1531.195584][ T4960] ? queue_io+0x481/0x790 [ 1531.195764][ T4960] wb_workfn+0x397/0x1910 [ 1531.195926][ T4960] ? kmsan_get_metadata+0xfb/0x160 [ 1531.196101][ T4960] ? __pfx_wb_workfn+0x10/0x10 [ 1531.196252][ T4960] process_scheduled_works+0xb91/0x1d80 [ 1531.196489][ T4960] worker_thread+0xedf/0x1590 [ 1531.196703][ T4960] kthread+0xd59/0xf00 [ 1531.196834][ T4960] ? __pfx_worker_thread+0x10/0x10 [ 1531.197051][ T4960] ? __pfx_kthread+0x10/0x10 [ 1531.197187][ T4960] ret_from_fork+0x1e0/0x310 [ 1531.197327][ T4960] ? __pfx_kthread+0x10/0x10 [ 1531.197466][ T4960] ret_from_fork_asm+0x1a/0x30 [ 1531.197666][ T4960] [ 1531.489039][ T4960] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1531.497806][ T5827] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1532.640458][ T5872] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1532.830107][ T5872] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1532.839050][ T5872] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1532.849634][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1532.858966][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1532.870828][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 12336, setting to 64 [ 1533.240309][ T5871] usb 7-1: USB disconnect, device number 65 [ 1533.344387][ T5872] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1533.353986][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1533.362502][ T5872] usb 3-1: Product: syz [ 1533.366883][ T5872] usb 3-1: Manufacturer: syz [ 1533.459637][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 1533.465269][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 1533.471052][ T5872] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1533.677132][ T5872] usb 3-1: USB disconnect, device number 75 [ 1538.431077][ T5872] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1538.510050][T14589] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1538.568540][T17465] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2720'. [ 1538.578126][T17465] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2720'. [ 1538.650135][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 1538.669202][ T5872] usb 3-1: config 0 has no interfaces? [ 1538.675220][ T5872] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1538.684850][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.727603][T14589] usb 7-1: Using ep0 maxpacket: 32 [ 1538.770877][T14589] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 1538.779331][T14589] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.790033][T14589] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1538.799211][T14589] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=19.40 [ 1538.808581][T14589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.830775][ T5872] usb 3-1: config 0 descriptor?? [ 1538.849585][T14589] usb 7-1: config 0 descriptor?? [ 1539.056422][T14589] usb 3-1: USB disconnect, device number 76 [ 1540.211351][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.219600][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.418290][T15684] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1540.436165][T15684] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1540.483102][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1540.498663][ T24] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1540.529017][ T8585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.537380][ T8585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.649053][T15684] usb 1-1: USB disconnect, device number 74 [ 1541.322068][ T5871] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1541.341019][T15684] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1541.382928][ T24] usb 2-1: USB disconnect, device number 60 [ 1541.509234][ T5871] usb 10-1: Using ep0 maxpacket: 16 [ 1541.581077][ T5871] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1541.589399][ T5871] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.596004][T15684] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1541.606811][ T5871] usb 10-1: config 0 has no interface number 0 [ 1541.612453][T15684] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.635650][ T5871] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1541.709161][ T8153] usb 7-1: USB disconnect, device number 66 [ 1541.760285][ T5871] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1541.769982][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1541.778396][ T5871] usb 10-1: Product: syz [ 1541.783025][ T5871] usb 10-1: SerialNumber: syz [ 1541.798757][T15684] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1541.811212][T15684] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1541.819460][T15684] usb 8-1: Manufacturer: syz [ 1541.836900][ T5871] usb 10-1: config 0 descriptor?? [ 1541.925116][T15684] usb 8-1: config 0 descriptor?? [ 1541.959533][T15684] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1542.102301][ T5871] usbhid 10-1:0.8: couldn't find an input interrupt endpoint [ 1542.150721][ T5871] usb 10-1: USB disconnect, device number 9 [ 1542.421392][ T5827] Bluetooth: hci4: command 0x1003 tx timeout [ 1542.427992][ T8627] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1542.950578][T15684] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1543.171543][T15684] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1543.180606][T15684] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1543.191344][T15684] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1543.200634][T15684] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1543.212584][T15684] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 12336, setting to 64 [ 1543.421519][T15684] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1543.431353][T15684] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1543.439591][T15684] usb 7-1: Product: syz [ 1543.446985][T15684] usb 7-1: Manufacturer: syz [ 1543.582757][T15684] cdc_wdm 7-1:1.0: skipping garbage [ 1543.588164][T15684] cdc_wdm 7-1:1.0: skipping garbage [ 1543.594627][T15684] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1543.764680][ T30] audit: type=1326 audit(1753115044.357:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.2.2730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6576f8e9a9 code=0x0 [ 1543.823977][T15684] usb 7-1: USB disconnect, device number 67 [ 1543.883406][T17513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2730'. [ 1543.893847][T17513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2730'. [ 1543.915497][T17513] bond0: entered promiscuous mode [ 1543.921320][T17513] bond_slave_0: entered promiscuous mode [ 1543.928251][T17513] bond_slave_1: entered promiscuous mode [ 1544.037936][T17513] bond0: left promiscuous mode [ 1544.043316][T17513] bond_slave_0: left promiscuous mode [ 1544.049644][T17513] bond_slave_1: left promiscuous mode [ 1544.078764][ T24] usb 8-1: USB disconnect, device number 84 [ 1545.012995][T17526] random: crng reseeded on system resumption [ 1547.553677][ T3858] Bluetooth: Error in BCSP hdr checksum [ 1547.786595][ T8586] Bluetooth: Error in BCSP hdr checksum [ 1547.857552][ T5827] Bluetooth: hci4: command 0x1003 tx timeout [ 1547.864160][ T8627] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1548.479974][ T5871] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1549.141143][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 1549.860772][ T5871] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1549.869182][ T5871] usb 7-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1549.879941][ T5871] usb 7-1: config 0 has no interface number 0 [ 1549.886311][ T5871] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1551.621432][ T5871] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1551.631686][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1551.762133][ T5871] usb 7-1: config 0 descriptor?? [ 1551.803164][ T5871] usb 7-1: can't set config #0, error -71 [ 1551.831053][ T5871] usb 7-1: USB disconnect, device number 68 [ 1551.910421][ T8153] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1551.953581][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1552.094221][ T8153] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1552.103642][ T8153] usb 10-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1552.114363][ T8153] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1552.123754][ T8153] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1552.135867][ T8153] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 12336, setting to 64 [ 1552.203837][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1552.214044][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.240209][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1552.256610][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1552.267456][ T9] usb 3-1: Manufacturer: syz [ 1552.297204][ T8153] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1552.307170][ T8153] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1552.315669][ T8153] usb 10-1: Product: syz [ 1552.320806][ T8153] usb 10-1: Manufacturer: syz [ 1552.381932][ T9] usb 3-1: config 0 descriptor?? [ 1552.405494][ T30] audit: type=1326 audit(1753115052.967:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17565 comm="syz.7.2745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4881b8e9a9 code=0x0 [ 1552.445522][ T9] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1552.491673][ T8153] cdc_wdm 10-1:1.0: skipping garbage [ 1552.497158][ T8153] cdc_wdm 10-1:1.0: skipping garbage [ 1552.505947][ T8153] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1552.576167][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2745'. [ 1552.585724][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2745'. [ 1552.701555][ T8153] usb 10-1: USB disconnect, device number 10 [ 1555.290995][T17579] syz.6.2746 (17579) used greatest stack depth: 2432 bytes left [ 1556.607351][ T8153] usb 3-1: USB disconnect, device number 77 [ 1559.710155][ T24] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1559.935619][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1559.972218][ T24] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1559.980752][ T24] usb 8-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1559.991273][ T24] usb 8-1: config 0 has no interface number 0 [ 1559.997476][ T24] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.098372][ T30] audit: type=1326 audit(1753115060.677:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17614 comm="syz.2.2757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6576f8e9a9 code=0x0 [ 1560.130139][ T24] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1560.142153][ T24] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1560.151154][ T24] usb 8-1: Product: syz [ 1560.155487][ T24] usb 8-1: SerialNumber: syz [ 1560.198858][ T24] usb 8-1: config 0 descriptor?? [ 1560.218079][ T24] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 1560.261218][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2757'. [ 1560.270610][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2757'. [ 1560.293071][T17618] bond0: entered promiscuous mode [ 1560.298339][T17618] bond_slave_0: entered promiscuous mode [ 1560.305244][T17618] bond_slave_1: entered promiscuous mode [ 1560.400680][T17618] bond0: left promiscuous mode [ 1560.405811][T17618] bond_slave_0: left promiscuous mode [ 1560.412412][T17618] bond_slave_1: left promiscuous mode [ 1560.471184][ T24] usb 8-1: USB disconnect, device number 85 [ 1561.653023][ T24] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1561.881365][ T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1561.890685][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.934083][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1561.954785][ T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1561.964460][ T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1561.973112][ T24] usb 7-1: Manufacturer: syz [ 1562.020611][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1562.031959][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1562.044856][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1562.064740][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1562.100203][ T24] usb 7-1: config 0 descriptor?? [ 1562.116550][ T24] igorplugusb 7-1:0.0: incorrect number of endpoints [ 1564.084753][T17633] chnl_net:caif_netlink_parms(): no params data found [ 1564.101717][ T8627] Bluetooth: hci4: command tx timeout [ 1564.395370][ T24] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1564.489180][T15684] usb 7-1: USB disconnect, device number 69 [ 1564.608465][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1564.628263][ T24] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1564.637405][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.652150][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1564.763782][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1564.773564][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.781990][ T24] usb 8-1: Product: syz [ 1564.786370][ T24] usb 8-1: Manufacturer: syz [ 1564.791275][ T24] usb 8-1: SerialNumber: syz [ 1564.825110][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1564.880304][ T30] audit: type=1326 audit(1753115065.447:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.6.2770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd0db8e9a9 code=0x0 [ 1564.969593][T17675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2770'. [ 1564.980391][T17675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2770'. [ 1564.999334][T17675] team0: entered promiscuous mode [ 1565.004724][T17675] team_slave_0: entered promiscuous mode [ 1565.011238][T17675] team_slave_1: entered promiscuous mode [ 1565.024144][T17675] bond0: entered promiscuous mode [ 1565.029394][T17675] bond_slave_0: entered promiscuous mode [ 1565.036054][T17675] bond_slave_1: entered promiscuous mode [ 1565.044238][T17675] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1565.057784][T17675] Cannot create hsr debugfs directory [ 1565.066732][T17675] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1565.608384][ T24] usb 8-1: 0:2 : does not exist [ 1565.685018][ T24] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1565.937306][ T24] usb 8-1: USB disconnect, device number 86 [ 1566.010940][T17681] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1566.160897][T15684] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1566.182725][ T8627] Bluetooth: hci4: command tx timeout [ 1566.412485][T15684] usb 3-1: Using ep0 maxpacket: 16 [ 1566.543899][T15684] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1566.553120][T15684] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1566.564746][T15684] usb 3-1: config 0 has no interface number 0 [ 1566.571492][T15684] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1566.648745][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.656519][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.664472][T17633] bridge_slave_0: entered allmulticast mode [ 1566.674031][T17633] bridge_slave_0: entered promiscuous mode [ 1566.805101][T15684] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1566.814801][T15684] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1566.824310][T15684] usb 3-1: Product: syz [ 1566.828698][T15684] usb 3-1: SerialNumber: syz [ 1566.883743][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.897549][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.905575][T17633] bridge_slave_1: entered allmulticast mode [ 1566.914005][T17633] bridge_slave_1: entered promiscuous mode [ 1566.941052][T15684] usb 3-1: config 0 descriptor?? [ 1566.957062][T15684] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1567.170326][T15684] usb 3-1: USB disconnect, device number 78 [ 1567.324264][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.417822][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.993203][T17633] team0: Port device team_slave_0 added [ 1568.057475][T17700] loop7: detected capacity change from 0 to 1024 [ 1568.081065][T17633] team0: Port device team_slave_1 added [ 1568.248693][T17700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.261789][T17700] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1568.270769][ T8627] Bluetooth: hci4: command tx timeout [ 1568.443305][T15684] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1568.470359][ T24] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1568.601873][T13188] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.673276][ T24] usb 7-1: device descriptor read/64, error -71 [ 1568.694359][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.708272][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.741775][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.868822][T15684] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1568.877700][T15684] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.888885][T15684] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1569.179378][ T24] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1569.235812][T15684] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1569.245751][T15684] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1569.256976][T15684] usb 10-1: Manufacturer: syz [ 1569.298331][T13188] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.357342][ T24] usb 7-1: device descriptor read/64, error -71 [ 1569.444480][T15684] usb 10-1: config 0 descriptor?? [ 1569.492833][ T24] usb usb7-port1: attempt power cycle [ 1569.512361][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.520380][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.547923][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.559524][T15684] igorplugusb 10-1:0.0: incorrect number of endpoints [ 1569.608938][T13188] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.911025][ T24] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1569.942314][ T24] usb 7-1: device descriptor read/8, error -71 [ 1570.023457][T13188] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.220599][ T24] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1570.292408][ T24] usb 7-1: device descriptor read/8, error -71 [ 1570.341057][ T8627] Bluetooth: hci4: command tx timeout [ 1570.420712][ T24] usb usb7-port1: unable to enumerate USB device [ 1571.166306][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1572.411163][T10106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.636813][T17633] hsr_slave_0: entered promiscuous mode [ 1572.646766][T17633] hsr_slave_1: entered promiscuous mode [ 1572.655597][T17633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1572.663543][T17633] Cannot create hsr debugfs directory [ 1572.687639][T13188] bridge_slave_1: left allmulticast mode [ 1572.697659][T13188] bridge_slave_1: left promiscuous mode [ 1572.704352][T13188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.781979][ T24] usb 10-1: USB disconnect, device number 11 [ 1572.885719][T13188] bridge_slave_0: left allmulticast mode [ 1572.891911][T13188] bridge_slave_0: left promiscuous mode [ 1572.898428][T13188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.912627][ T30] audit: type=1326 audit(1753115073.507:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.2782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4881b8e9a9 code=0x0 [ 1573.068949][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2782'. [ 1573.078509][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2782'. [ 1573.118581][T15684] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1573.268915][T13188] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1573.278219][T13188] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ee:67:19:8d:d7:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1573.424409][T15684] usb 3-1: Using ep0 maxpacket: 16 [ 1573.616719][T15684] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1573.626528][T15684] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.637123][T15684] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1573.709649][T13188] bond0 (unregistering): left promiscuous mode [ 1573.716538][T13188] bond_slave_0: left promiscuous mode [ 1573.736673][T15684] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1573.746258][T15684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.757559][T15684] usb 3-1: Product: syz [ 1573.762928][T15684] usb 3-1: Manufacturer: syz [ 1573.767748][T15684] usb 3-1: SerialNumber: syz [ 1573.783992][T13188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.822199][T13188] bond0 (unregistering): Released all slaves [ 1573.932055][T13188] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1573.962754][T13188] bond1 (unregistering): Released all slaves [ 1574.031423][T13188] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1574.130959][T13188] bond2 (unregistering): Released all slaves [ 1574.151960][T13188] bond3 (unregistering): Released all slaves [ 1574.176614][T13188] bond4 (unregistering): Released all slaves [ 1574.450682][T15684] usb 3-1: 0:2 : does not exist [ 1574.485978][T15684] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1574.631328][T15684] usb 3-1: USB disconnect, device number 79 [ 1574.941887][ T24] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1575.138232][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1575.416351][ T24] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1575.424842][ T24] usb 7-1: config 0 has no interface number 0 [ 1575.431296][ T24] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1575.483328][T17762] loop7: detected capacity change from 0 to 512 [ 1575.672034][ T24] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1575.681601][ T24] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1575.690661][ T24] usb 7-1: Product: syz [ 1575.691891][T17762] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1575.694954][ T24] usb 7-1: SerialNumber: syz [ 1575.740853][T13188] team0: left promiscuous mode [ 1575.745935][T13188] team_slave_0: left promiscuous mode [ 1575.752871][T13188] team_slave_1: left promiscuous mode [ 1575.857583][T17762] EXT4-fs (loop7): 1 truncate cleaned up [ 1575.866090][T17762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.924460][T13188] hsr_slave_0: left promiscuous mode [ 1575.936016][T13188] hsr_slave_1: left promiscuous mode [ 1575.946238][T13188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.955207][T13188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.982870][ T24] usb 7-1: config 0 descriptor?? [ 1575.983437][T13188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.997674][T13188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.088152][ T24] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1576.264169][T13188] veth1_macvtap: left promiscuous mode [ 1576.270233][T13188] veth0_macvtap: left promiscuous mode [ 1576.276265][T13188] veth1_vlan: left promiscuous mode [ 1576.282359][T13188] veth0_vlan: left promiscuous mode [ 1576.337830][ T24] usb 7-1: USB disconnect, device number 74 [ 1576.679910][T10106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.973775][ T8153] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1578.218756][ T8153] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1578.227850][ T8153] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.238823][ T8153] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1578.499395][ T8153] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1578.509204][ T8153] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1578.518007][ T8153] usb 8-1: Manufacturer: syz [ 1578.648841][ T24] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1578.795679][ T8153] usb 8-1: config 0 descriptor?? [ 1578.880519][ T24] usb 7-1: device descriptor read/64, error -71 [ 1578.985807][ T8153] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1579.230034][ T24] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1579.378646][T13188] team0 (unregistering): Port device team_slave_1 removed [ 1579.409983][ T24] usb 7-1: device descriptor read/64, error -71 [ 1579.450835][T13188] team0 (unregistering): Port device team_slave_0 removed [ 1579.579565][ T24] usb usb7-port1: attempt power cycle [ 1580.080518][ T24] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1580.394294][ T24] usb 7-1: device descriptor read/8, error -71 [ 1580.772309][ T24] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1581.119551][ T24] usb 7-1: device descriptor read/8, error -71 [ 1581.236111][ T24] usb usb7-port1: unable to enumerate USB device [ 1581.265728][T13188] IPVS: stop unused estimator thread 0... [ 1581.324308][T15684] usb 8-1: USB disconnect, device number 87 [ 1581.732945][ T30] audit: type=1326 audit(1753115082.317:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.7.2800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4881b8e9a9 code=0x0 [ 1581.876406][T17807] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2800'. [ 1581.886018][T17807] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2800'. [ 1581.930264][T15684] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1582.100815][T15684] usb 10-1: Using ep0 maxpacket: 16 [ 1582.114189][T15684] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1582.124505][T15684] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.135195][T15684] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1582.202580][ T24] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1582.218781][T15684] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1582.228517][T15684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.236946][T15684] usb 10-1: Product: syz [ 1582.241552][T15684] usb 10-1: Manufacturer: syz [ 1582.246456][T15684] usb 10-1: SerialNumber: syz [ 1582.330254][T14589] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1582.523337][T17633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1582.532665][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1582.550569][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1582.580883][T14589] usb 3-1: Using ep0 maxpacket: 16 [ 1582.602568][T14589] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1582.611232][T14589] usb 3-1: config 0 has no interface number 0 [ 1582.617769][T14589] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1582.662740][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1582.672351][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.680928][ T24] usb 7-1: Product: syz [ 1582.685298][ T24] usb 7-1: Manufacturer: syz [ 1582.690285][ T24] usb 7-1: SerialNumber: syz [ 1582.712498][T17633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1582.761770][T14589] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1582.772677][T14589] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1582.781706][T14589] usb 3-1: Product: syz [ 1582.786255][T14589] usb 3-1: SerialNumber: syz [ 1582.797880][T17633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1582.813893][ T24] usb 7-1: config 0 descriptor?? [ 1582.836522][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1582.846244][ T24] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1582.878339][T17633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1582.900726][T14589] usb 3-1: config 0 descriptor?? [ 1582.938225][T14589] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1582.964621][T15684] usb 10-1: 0:2 : does not exist [ 1583.012744][T15684] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1583.133062][T15684] usb 10-1: USB disconnect, device number 12 [ 1583.194800][ T5877] usb 3-1: USB disconnect, device number 80 [ 1583.472152][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1583.899616][T17633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.024745][T17633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.102159][T17728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.109889][T17728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.150855][ T24] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1584.161851][ T24] em28xx 7-1:0.0: board has no eeprom [ 1584.234582][T17728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.242228][T17728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.283430][ T24] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1584.291799][ T24] em28xx 7-1:0.0: dvb set to bulk mode. [ 1584.304228][ T1744] em28xx 7-1:0.0: Binding DVB extension [ 1584.428941][ T24] usb 7-1: USB disconnect, device number 79 [ 1584.436667][ T24] em28xx 7-1:0.0: Disconnecting em28xx [ 1584.691882][ T1744] em28xx 7-1:0.0: Registering input extension [ 1584.731353][ T24] em28xx 7-1:0.0: Closing input extension [ 1584.809574][ T24] em28xx 7-1:0.0: Freeing device [ 1584.910224][T17833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1585.863885][T17844] loop2: detected capacity change from 0 to 512 [ 1585.912714][ T5877] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1586.093598][T17844] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1586.102457][T17844] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1586.790450][ T5877] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1586.799140][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.810078][ T5877] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1586.838639][T17844] System zones: 0-1, 15-15, 18-18, 34-34 [ 1586.899398][T17844] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1586.907635][T17844] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1586.919975][T17844] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1586.935022][T17844] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1586.995884][T17844] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.2810: bad orphan inode 16 [ 1587.105727][ T5877] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1587.115612][T17844] ext4_test_bit(bit=15, block=18) = 1 [ 1587.115655][ T5877] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1587.121701][T17844] is_bad_inode(inode)=0 [ 1587.129584][ T5877] usb 7-1: Manufacturer: syz [ 1587.138892][T17844] NEXT_ORPHAN(inode)=0 [ 1587.143249][T17844] max_ino=32 [ 1587.146625][T17844] i_nlink=2 [ 1587.151987][T17844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1587.358573][ T5877] usb 7-1: config 0 descriptor?? [ 1587.424838][ T5877] igorplugusb 7-1:0.0: incorrect number of endpoints [ 1587.443493][T17844] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 1587.684656][T11841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.762140][T17633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1588.230281][T14589] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1588.251350][T17633] veth0_vlan: entered promiscuous mode [ 1588.335398][T17633] veth1_vlan: entered promiscuous mode [ 1588.760016][T14589] usb 10-1: Using ep0 maxpacket: 16 [ 1588.778445][T14589] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1588.787566][T14589] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.797935][T14589] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1590.503243][T14589] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1590.513257][T14589] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.521965][T14589] usb 10-1: Product: syz [ 1590.526428][T14589] usb 10-1: Manufacturer: syz [ 1590.531399][T14589] usb 10-1: SerialNumber: syz [ 1590.718516][T17871] loop7: detected capacity change from 0 to 1024 [ 1590.786625][T17633] veth0_macvtap: entered promiscuous mode [ 1590.909147][T17633] veth1_macvtap: entered promiscuous mode [ 1590.948387][ T5877] usb 7-1: USB disconnect, device number 80 [ 1591.220980][T17633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.228508][T14589] usb 10-1: 0:2 : does not exist [ 1591.339029][T14589] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1591.343947][T17633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1591.439591][T17633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.449937][T17633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.458950][T17633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.478191][T17633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.576046][T14589] usb 10-1: USB disconnect, device number 13 [ 1592.396368][T14589] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1592.624829][T17888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1592.640485][T14589] usb 8-1: Using ep0 maxpacket: 16 [ 1592.710519][T14589] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1592.769006][T14589] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1592.778662][T14589] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.787105][T14589] usb 8-1: Product: syz [ 1592.791615][T14589] usb 8-1: Manufacturer: syz [ 1592.796444][T14589] usb 8-1: SerialNumber: syz [ 1592.874127][T14589] usb 8-1: config 0 descriptor?? [ 1592.892480][T14589] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1592.907805][T14589] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1593.480296][ T1744] usb 7-1: new low-speed USB device number 81 using dummy_hcd [ 1593.525016][T14589] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1593.674251][ T1744] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1593.683446][ T1744] usb 7-1: config 0 has no interface number 0 [ 1593.690427][ T1744] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1593.701737][ T1744] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1593.714034][ T1744] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1593.727801][ T1744] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1593.740269][ T1744] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1593.750696][ T1744] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1593.764246][ T1744] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1593.773993][ T1744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.935496][ T1744] usb 7-1: config 0 descriptor?? [ 1593.945469][T17893] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1594.091307][ T1744] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1594.224956][T14589] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1594.238742][T14589] em28xx 8-1:0.0: board has no eeprom [ 1594.255551][ T8153] usb 7-1: USB disconnect, device number 81 [ 1594.312762][ T8153] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1594.350343][T14589] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1594.358663][T14589] em28xx 8-1:0.0: dvb set to bulk mode. [ 1594.368912][ T1744] em28xx 8-1:0.0: Binding DVB extension [ 1594.462837][T14589] usb 8-1: USB disconnect, device number 88 [ 1594.496263][T14589] em28xx 8-1:0.0: Disconnecting em28xx [ 1594.747946][ T1744] em28xx 8-1:0.0: Registering input extension [ 1594.820152][T14589] em28xx 8-1:0.0: Closing input extension [ 1594.882470][T14589] em28xx 8-1:0.0: Freeing device [ 1595.572732][ T8153] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1595.730337][ T5877] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1595.805012][ T8153] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1595.814061][ T8153] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1595.896544][ T8153] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1595.906490][ T8153] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1595.914991][ T8153] usb 8-1: Manufacturer: syz [ 1595.969989][ T8153] usb 8-1: config 0 descriptor?? [ 1596.003785][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 1596.024098][ T5877] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1596.033346][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.043962][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1596.092292][ T8153] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1596.149859][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1596.159381][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.167993][ T5877] usb 3-1: Product: syz [ 1596.172896][ T5877] usb 3-1: Manufacturer: syz [ 1596.185088][ T5877] usb 3-1: SerialNumber: syz [ 1596.737040][ T5877] usb 3-1: 0:2 : does not exist [ 1596.850682][ T5877] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1597.007389][ T5877] usb 3-1: USB disconnect, device number 81 [ 1598.401629][T14589] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1598.419311][ T6698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.428247][ T6698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.550056][T17936] loop2: detected capacity change from 0 to 4096 [ 1598.609942][ T1744] usb 8-1: USB disconnect, device number 89 [ 1598.661135][T14589] usb 10-1: Using ep0 maxpacket: 32 [ 1598.700972][T14589] usb 10-1: config index 0 descriptor too short (expected 19, got 18) [ 1598.709495][T14589] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=19.40 [ 1598.724205][T14589] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.766982][T13188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.775295][T13188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.853839][T14589] usb 10-1: config 0 descriptor?? [ 1599.136725][T14589] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1599.152443][T14589] usb 10-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1599.162958][T14589] usb 10-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1599.652847][ T1744] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1599.866840][ T1744] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1599.876594][ T1744] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1599.887319][ T1744] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1599.896760][ T1744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1599.908233][ T1744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1600.042477][T17965] loop7: detected capacity change from 0 to 256 [ 1600.167446][ T1744] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1600.179250][ T1744] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1600.188453][ T1744] usb 4-1: Product: syz [ 1600.192979][ T1744] usb 4-1: Manufacturer: syz [ 1600.293908][ T1744] cdc_wdm 4-1:1.0: skipping garbage [ 1600.299403][ T1744] cdc_wdm 4-1:1.0: skipping garbage [ 1600.358787][ T1744] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1600.365249][ T1744] cdc_wdm 4-1:1.0: Unknown control protocol [ 1600.522985][ T1744] usb 4-1: USB disconnect, device number 34 [ 1600.974371][ T5877] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1601.118694][T17981] overlayfs: missing 'lowerdir' [ 1601.171668][ T5877] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1601.180536][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1601.233765][ T5877] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1601.243472][ T5877] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1601.251999][ T5877] usb 3-1: Manufacturer: syz [ 1601.278267][ T5877] usb 3-1: config 0 descriptor?? [ 1601.293419][ T5877] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1608.753087][T18015] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.830638][ T1744] usb 3-1: USB disconnect, device number 82 [ 1608.980481][T18015] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.173396][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'. [ 1609.539288][T18015] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.136022][T18031] overlayfs: missing 'lowerdir' [ 1610.156297][T18015] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.614727][T18015] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.646451][T18015] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.674655][T18015] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.702388][T18015] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.404756][T18040] loop7: detected capacity change from 0 to 1024 [ 1611.499518][T18040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1611.516965][T18040] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1611.993297][T10106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1612.395788][T18056] loop7: detected capacity change from 0 to 512 [ 1612.450674][T18056] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1612.534088][T18056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1612.617761][T18056] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1612.624948][T18056] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.2867: bad orphan inode 267 [ 1612.690991][T18056] EXT4-fs (loop7): Remounting filesystem read-only [ 1612.700551][T18056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1612.811277][T18056] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2867: dx entry: limit 0 != root limit 125 [ 1612.823818][T18056] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2867: Corrupt directory, running e2fsck is recommended [ 1613.109820][T10106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1613.494168][ T5877] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1613.580003][ T8153] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1613.676728][ T5877] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1613.685708][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1613.752396][ T5877] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1613.761951][ T5877] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1613.770332][ T5877] usb 4-1: Manufacturer: syz [ 1613.803526][ T8153] usb 8-1: Using ep0 maxpacket: 32 [ 1613.815260][ T8153] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 1613.823821][ T8153] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=19.40 [ 1613.833252][ T8153] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.846562][ T5877] usb 4-1: config 0 descriptor?? [ 1613.867637][ T5877] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1613.943477][ T8153] usb 8-1: config 0 descriptor?? [ 1614.176500][ T8153] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1614.427249][T18049] loop6: detected capacity change from 0 to 32768 [ 1614.655945][T18049] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1614.708153][T18049] XFS (loop6): AIL initialisation failed: error -12 [ 1614.735827][T18049] XFS (loop6): log mount failed [ 1615.301828][T18091] overlayfs: missing 'lowerdir' [ 1616.311131][ T1744] usb 4-1: USB disconnect, device number 35 [ 1618.879998][ T5877] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1619.150320][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 1619.243865][ T5877] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1619.252827][ T5877] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=19.40 [ 1619.262479][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.560442][ T5877] usb 3-1: config 0 descriptor?? [ 1619.940113][ T8627] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1619.948856][ T8627] Bluetooth: hci3: Injecting HCI hardware error event [ 1619.957484][ T8627] Bluetooth: hci3: hardware error 0x00 [ 1620.001747][ T5877] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1621.961920][T18149] overlayfs: missing 'lowerdir' [ 1622.020600][ T8627] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1626.434313][ T30] audit: type=1326 audit(1753115127.007:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1626.457715][ T30] audit: type=1326 audit(1753115127.007:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1626.480832][ T30] audit: type=1326 audit(1753115127.017:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1626.510862][ T30] audit: type=1326 audit(1753115127.017:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1627.098770][ T30] audit: type=1326 audit(1753115127.127:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1627.131886][ T30] audit: type=1326 audit(1753115127.127:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1627.158563][ T30] audit: type=1326 audit(1753115127.137:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e9558d310 code=0x7ffc0000 [ 1627.181444][ T30] audit: type=1326 audit(1753115127.167:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1e955901d7 code=0x7ffc0000 [ 1627.211614][ T30] audit: type=1326 audit(1753115127.167:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1627.236656][ T30] audit: type=1326 audit(1753115127.167:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.9.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1e955901d7 code=0x7ffc0000 [ 1627.812202][ T9] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1628.039132][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1628.086378][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1628.096093][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.107791][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1628.217068][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1628.228270][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.248542][ T9] usb 7-1: Product: syz [ 1628.256784][ T9] usb 7-1: Manufacturer: syz [ 1628.261932][ T9] usb 7-1: SerialNumber: syz [ 1628.565017][T18189] overlayfs: missing 'lowerdir' [ 1628.927247][ T9] usb 7-1: 0:2 : does not exist [ 1628.958135][ T9] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1629.112193][ T9] usb 7-1: USB disconnect, device number 82 [ 1630.030259][ T9] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1630.262854][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1630.272411][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1630.437474][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1630.448066][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1630.456777][ T9] usb 7-1: Manufacturer: syz [ 1630.555344][ T9] usb 7-1: config 0 descriptor?? [ 1630.570631][ T9] igorplugusb 7-1:0.0: incorrect number of endpoints [ 1630.612943][T18217] loop7: detected capacity change from 0 to 64 [ 1630.830214][T18223] warning: `syz.9.2910' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1631.482955][T18230] netlink: 'syz.3.2911': attribute type 1 has an invalid length. [ 1631.589515][T18233] overlayfs: missing 'lowerdir' [ 1631.752466][T18236] veth3: entered promiscuous mode [ 1632.515352][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1632.730370][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1632.884048][ T1744] usb 7-1: USB disconnect, device number 83 [ 1632.953993][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1632.992308][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1633.001646][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.012405][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1633.084484][T18257] loop6: detected capacity change from 0 to 512 [ 1633.099583][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1633.109124][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.117564][ T9] usb 4-1: Product: syz [ 1633.122095][ T9] usb 4-1: Manufacturer: syz [ 1633.127023][ T9] usb 4-1: SerialNumber: syz [ 1633.179835][T18257] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1633.231771][T18257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1633.288093][T18257] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1633.295125][T18257] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.2921: bad orphan inode 267 [ 1633.370684][T18257] EXT4-fs (loop6): Remounting filesystem read-only [ 1633.381673][T18257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1633.549056][T18257] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2921: dx entry: limit 0 != root limit 125 [ 1633.564355][T18257] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2921: Corrupt directory, running e2fsck is recommended [ 1634.093439][ T9] usb 4-1: 0:2 : does not exist [ 1634.117476][ T9] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1634.313026][T14095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1634.465694][ T9] usb 4-1: USB disconnect, device number 36 [ 1635.420562][T18278] netlink: 'syz.7.2927': attribute type 1 has an invalid length. [ 1635.514805][T18280] overlayfs: missing 'workdir' [ 1635.891036][ T9] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1636.071603][T18288] veth5: entered promiscuous mode [ 1636.112363][T18288] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1636.186372][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1636.195544][ T9] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1636.206257][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1636.222437][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1636.236000][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1636.364801][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1636.374797][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1636.383234][ T9] usb 7-1: Product: syz [ 1636.387616][ T9] usb 7-1: Manufacturer: syz [ 1636.465574][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1636.471403][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1636.505188][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1636.511487][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 1636.675447][ T9] usb 7-1: USB disconnect, device number 84 [ 1638.551072][ T1744] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1638.740063][ T1744] usb 4-1: Using ep0 maxpacket: 16 [ 1638.786902][ T1744] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1638.796175][ T1744] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.806824][ T1744] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1638.899609][ T1744] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1638.911341][ T1744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.919591][ T1744] usb 4-1: Product: syz [ 1638.924173][ T1744] usb 4-1: Manufacturer: syz [ 1638.928990][ T1744] usb 4-1: SerialNumber: syz [ 1639.490312][ T1744] usb 4-1: 0:2 : does not exist [ 1639.560211][ T1744] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1639.680649][ T1744] usb 4-1: USB disconnect, device number 37 [ 1640.367477][T18340] netlink: 'syz.6.2942': attribute type 1 has an invalid length. [ 1640.446469][T18313] loop2: detected capacity change from 0 to 32768 [ 1640.566050][T18313] [ 1640.566050][T18313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1640.566050][T18313] [ 1640.578064][T18313] read_mapping_page failed! [ 1640.583617][T18313] diRead: diIAGRead returned -5 [ 1640.761565][T18340] veth3: entered promiscuous mode [ 1640.778307][T18340] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1641.740603][ T9] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1642.014360][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1642.023384][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.091826][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1642.101541][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1642.110155][ T9] usb 7-1: Manufacturer: syz [ 1642.180869][ T9] usb 7-1: config 0 descriptor?? [ 1644.460240][ T9] rc_core: IR keymap rc-hauppauge not found [ 1644.466478][ T9] Registered IR keymap rc-empty [ 1644.472438][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1644.484912][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input63 [ 1644.506581][T18383] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1644.506581][T18383] program syz.3.2954 not setting count and/or reply_len properly [ 1644.767226][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 1644.779052][T18374] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1644.827045][ T9] usb 7-1: USB disconnect, device number 85 [ 1646.493430][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2960'. [ 1646.668957][T18405] veth5: entered promiscuous mode [ 1648.712574][T18424] loop3: detected capacity change from 0 to 4096 [ 1648.867711][T18431] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1648.867711][T18431] program syz.6.2966 not setting count and/or reply_len properly [ 1650.412191][T18446] loop6: detected capacity change from 0 to 64 [ 1654.430314][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'. [ 1654.716676][T18458] veth5: entered promiscuous mode [ 1655.046539][T18469] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1655.046539][T18469] program syz.7.2978 not setting count and/or reply_len properly [ 1661.051156][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1661.221106][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1661.241851][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1661.295977][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1661.312083][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.322717][ T9] usb 4-1: Product: syz [ 1661.327111][ T9] usb 4-1: Manufacturer: syz [ 1661.332152][ T9] usb 4-1: SerialNumber: syz [ 1661.442539][ T9] usb 4-1: config 0 descriptor?? [ 1661.455066][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1661.476486][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1661.486250][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1661.635973][T18505] veth11: entered promiscuous mode [ 1661.852364][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1661.895277][T18510] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1661.895277][T18510] program syz.9.2991 not setting count and/or reply_len properly [ 1661.941849][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1661.950368][ T9] em28xx 4-1:0.0: board has no eeprom [ 1662.070189][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1662.078571][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 1662.087143][ T5871] em28xx 4-1:0.0: Binding DVB extension [ 1662.157576][ T9] usb 4-1: USB disconnect, device number 38 [ 1662.166493][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 1662.443338][ T5871] em28xx 4-1:0.0: Registering input extension [ 1662.482304][ T9] em28xx 4-1:0.0: Closing input extension [ 1662.549004][ T9] em28xx 4-1:0.0: Freeing device [ 1663.189394][T18534] loop2: detected capacity change from 0 to 1024 [ 1663.233333][T14589] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1663.233834][ T8153] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1663.252437][T14589] dvb_usb_az6027 10-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1663.286904][ T8153] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1663.300410][ T5877] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1663.318026][ T5877] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1663.354587][T14589] usb 10-1: USB disconnect, device number 14 [ 1663.404093][ T5877] usb 3-1: USB disconnect, device number 83 [ 1663.492686][T18534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.494813][ T8153] usb 8-1: USB disconnect, device number 90 [ 1663.586120][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1663.586194][ T30] audit: type=1800 audit(1753115164.177:115): pid=18534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2998" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1663.862884][ T8153] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1663.922253][T11841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.351246][T18556] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1664.351246][T18556] program syz.6.3005 not setting count and/or reply_len properly [ 1664.642834][T18558] veth11: entered promiscuous mode [ 1664.921067][T18565] syz.9.3008: attempt to access beyond end of device [ 1664.921067][T18565] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1666.288215][ T8153] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1666.565570][ T8153] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1666.574701][ T8153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.745813][ T8153] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1666.756424][ T8153] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1666.764927][ T8153] usb 3-1: Manufacturer: syz [ 1666.904367][ T8153] usb 3-1: config 0 descriptor?? [ 1667.781584][ T8153] rc_core: IR keymap rc-hauppauge not found [ 1667.787783][ T8153] Registered IR keymap rc-empty [ 1667.794862][ T8153] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1667.807280][ T8153] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input65 [ 1669.698483][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1669.710598][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1669.761212][T14589] usb 3-1: USB disconnect, device number 84 [ 1670.042599][T18605] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1670.042599][T18605] program syz.2.3019 not setting count and/or reply_len properly [ 1670.713713][T18617] syz.3.3022: attempt to access beyond end of device [ 1670.713713][T18617] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1670.752212][T18612] veth5: entered promiscuous mode [ 1670.973096][ T30] audit: type=1326 audit(1753115171.507:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18615 comm="syz.7.3024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4881b8e9a9 code=0x0 [ 1671.326008][T18622] overlayfs: missing 'lowerdir' [ 1672.009092][T18625] loop2: detected capacity change from 0 to 512 [ 1672.217728][T18625] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1672.370786][T18625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3026: bg 0: block 248: padding at end of block bitmap is not set [ 1672.460558][T18625] Quota error (device loop2): write_blk: dquota write failed [ 1672.471677][T18625] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1672.483109][T18625] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3026: Failed to acquire dquot type 1 [ 1672.574445][T14589] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1672.644810][T18627] loop3: detected capacity change from 0 to 32768 [ 1672.678561][T18625] EXT4-fs (loop2): 1 truncate cleaned up [ 1672.713983][T18625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1672.792983][T14589] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1672.802024][T14589] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.808867][T18627] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1672.835224][T18627] allowing incompatible features above 0.0: (unknown version) [ 1672.843244][T18627] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1672.851084][T14589] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1672.857830][T18627] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 1672.867994][T14589] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1672.882583][T18627] bcachefs (loop3): initializing new filesystem [ 1672.886769][T14589] usb 8-1: Manufacturer: syz [ 1672.905433][T18627] bcachefs (loop3): going read-write [ 1672.949349][T18625] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1672.983478][T18627] bcachefs (loop3): marking superblocks [ 1673.037701][T18627] bcachefs (loop3): initializing freespace [ 1673.063574][T18627] bcachefs (loop3): done initializing freespace [ 1673.093236][T18627] bcachefs (loop3): reading snapshots table [ 1673.099614][T18627] bcachefs (loop3): reading snapshots done [ 1673.103305][T18625] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1673.130742][T14589] usb 8-1: config 0 descriptor?? [ 1673.177455][T18627] bcachefs (loop3): done starting filesystem [ 1673.636265][T18656] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3031'. [ 1673.646253][T18656] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3031'. [ 1673.668988][T18656] team0: entered promiscuous mode [ 1673.674404][T18656] team_slave_0: entered promiscuous mode [ 1673.681297][T18656] team_slave_1: entered promiscuous mode [ 1673.699841][T18656] bond0: entered promiscuous mode [ 1673.705134][T18656] bond_slave_0: entered promiscuous mode [ 1673.712079][T18656] bond_slave_1: entered promiscuous mode [ 1673.725944][T18656] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1673.942559][T14589] rc_core: IR keymap rc-hauppauge not found [ 1673.948708][T14589] Registered IR keymap rc-empty [ 1673.955696][T14589] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1673.968957][T14589] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input66 [ 1674.122355][T18627] syz.3.3027 (18627) used greatest stack depth: 1216 bytes left [ 1675.343074][T17633] bcachefs (loop3): shutting down [ 1675.348595][T17633] bcachefs (loop3): going read-only [ 1675.354419][T17633] bcachefs (loop3): finished waiting for writes to stop [ 1675.460749][T17633] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 1675.690932][T17633] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 1675.718389][T11841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.740119][T14589] usb 8-1: USB disconnect, device number 92 [ 1675.796654][T17633] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 1675.861389][T17633] bcachefs (loop3): marking filesystem clean [ 1676.034518][T17633] bcachefs (loop3): shutdown complete [ 1676.897574][T18682] syz.6.3037: attempt to access beyond end of device [ 1676.897574][T18682] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1676.917783][T14589] usb 8-1: new full-speed USB device number 93 using dummy_hcd [ 1676.943518][T18680] veth3: entered promiscuous mode [ 1677.323287][T14589] usb 8-1: config 0 has an invalid interface number: 113 but max is 0 [ 1677.332163][T14589] usb 8-1: config 0 has no interface number 0 [ 1677.338486][T14589] usb 8-1: config 0 interface 113 has no altsetting 0 [ 1677.499856][T14589] usb 8-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1677.509379][T14589] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.517992][T14589] usb 8-1: Product: syz [ 1677.522501][T14589] usb 8-1: Manufacturer: syz [ 1677.527418][T14589] usb 8-1: SerialNumber: syz [ 1677.752994][T14589] usb 8-1: config 0 descriptor?? [ 1678.014894][ C1] usb 8-1: NFC: Urb failure (status -71) [ 1678.054987][ C1] usb 8-1: NFC: Urb failure (status -71) [ 1678.062444][T14589] usb 8-1: NFC: Unable to get FW version [ 1678.068859][T14589] pn533_usb 8-1:0.113: probe with driver pn533_usb failed with error -71 [ 1678.221717][T14589] usb 8-1: USB disconnect, device number 93 [ 1678.331089][T18689] overlayfs: missing 'lowerdir' [ 1678.358832][T18690] loop2: detected capacity change from 0 to 8 [ 1678.471838][T18690] cramfs: Error -3 while decompressing! [ 1678.477874][T18690] cramfs: ffffffff95540108(26)->ffff888070460000(4096) [ 1678.486274][T18690] cramfs: Error -3 while decompressing! [ 1678.492275][T18690] cramfs: ffffffff95540122(2074)->ffff8880203dd000(4096) [ 1678.499554][T18690] cramfs: bad data blocksize 4294965264 [ 1678.505737][T18690] cramfs: Error -3 while decompressing! [ 1678.513907][T18690] cramfs: ffffffff95540108(26)->ffff888070460000(4096) [ 1679.252820][T18699] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3044'. [ 1679.262410][T18699] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3044'. [ 1680.800142][T14589] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1681.088404][T14589] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1681.098333][T14589] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.293121][T14589] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1681.302973][T14589] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1681.311553][T14589] usb 10-1: Manufacturer: syz [ 1681.509959][T14589] usb 10-1: config 0 descriptor?? [ 1681.995289][T14589] rc_core: IR keymap rc-hauppauge not found [ 1682.001585][T14589] Registered IR keymap rc-empty [ 1682.008044][T14589] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1682.021141][T14589] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input67 [ 1682.161599][ C1] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1682.329142][ T8153] usb 10-1: USB disconnect, device number 15 [ 1682.427586][T18723] veth5: entered promiscuous mode [ 1682.984548][T18735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1682.994802][T18735] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1683.418552][T18742] loop2: detected capacity change from 0 to 8 [ 1683.594540][T18742] cramfs: Error -3 while decompressing! [ 1683.600636][T18742] cramfs: ffffffff95544108(26)->ffff88802261b000(4096) [ 1683.607980][T18742] cramfs: Error -3 while decompressing! [ 1683.614075][T18742] cramfs: ffffffff95544122(2074)->ffff88802261a000(4096) [ 1683.621584][T18742] cramfs: bad data blocksize 4294965264 [ 1683.635594][T18742] cramfs: Error -3 while decompressing! [ 1683.643697][T18742] cramfs: ffffffff95544108(26)->ffff88802261b000(4096) [ 1684.026496][T18747] syz.6.3053: attempt to access beyond end of device [ 1684.026496][T18747] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1684.653898][T18751] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1684.653898][T18751] program syz.3.3033 not setting count and/or reply_len properly [ 1684.733418][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3057'. [ 1684.742900][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3057'. [ 1685.888818][ T8627] Bluetooth: hci4: command 0x0406 tx timeout [ 1686.275016][T18765] veth7: entered promiscuous mode [ 1686.449990][T14589] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1686.501151][T18776] loop2: detected capacity change from 0 to 164 [ 1686.548317][T18776] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1686.608145][T18776] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1686.658097][T14589] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1686.667554][T14589] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.729109][T14589] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1686.738803][T14589] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1686.747575][T14589] usb 7-1: Manufacturer: syz [ 1686.755900][T18776] rock: directory entry would overflow storage [ 1686.763406][T18776] rock: sig=0x4f50, size=4, remaining=3 [ 1686.770114][T18776] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1686.891560][T14589] usb 7-1: config 0 descriptor?? [ 1686.982919][T18780] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1686.993371][T18780] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1687.293408][T18788] loop3: detected capacity change from 0 to 8 [ 1687.323701][T14589] rc_core: IR keymap rc-hauppauge not found [ 1687.330243][T14589] Registered IR keymap rc-empty [ 1687.336652][T14589] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1687.349233][T14589] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input68 [ 1687.442153][T18788] cramfs: Error -3 while decompressing! [ 1687.447957][T18788] cramfs: ffffffff95540108(26)->ffff888025669000(4096) [ 1687.455672][T18788] cramfs: Error -3 while decompressing! [ 1687.461592][T18788] cramfs: ffffffff95540122(2074)->ffff88806ef8f000(4096) [ 1687.462999][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 1687.468794][T18788] cramfs: bad data blocksize 4294965264 [ 1687.481614][T18788] cramfs: Error -3 while decompressing! [ 1687.487358][T18788] cramfs: ffffffff95540108(26)->ffff888025669000(4096) [ 1687.743596][ T8153] usb 7-1: USB disconnect, device number 86 [ 1687.893335][T18799] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1687.893335][T18799] program syz.7.3071 not setting count and/or reply_len properly [ 1688.087477][T18801] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3072'. [ 1688.097115][T18801] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3072'. [ 1688.776106][T18809] syz.2.3074: attempt to access beyond end of device [ 1688.776106][T18809] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1690.789606][T18815] veth5: entered promiscuous mode [ 1690.865999][T18826] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1690.875942][T18826] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1691.574223][T18837] loop6: detected capacity change from 0 to 8 [ 1692.108187][T18840] netlink: 312 bytes leftover after parsing attributes in process `syz.7.3082'. [ 1692.117716][T18840] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3082'. [ 1693.631425][T18837] cramfs: Error -3 while decompressing! [ 1693.637315][T18837] cramfs: ffffffff95544108(26)->ffff88806b213000(4096) [ 1693.644957][T18837] cramfs: Error -3 while decompressing! [ 1693.651626][T18837] cramfs: ffffffff95544122(2074)->ffff888078852000(4096) [ 1693.658894][T18837] cramfs: bad data blocksize 4294965264 [ 1693.667975][T18837] cramfs: Error -3 while decompressing! [ 1693.681043][T18837] cramfs: ffffffff95544108(26)->ffff88806b213000(4096) [ 1693.977060][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1694.065524][T18849] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1694.065524][T18849] program syz.2.3085 not setting count and/or reply_len properly [ 1694.812823][T18858] syz.9.3086: attempt to access beyond end of device [ 1694.812823][T18858] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1694.840006][T14589] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1695.066650][T14589] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1695.075798][T14589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.227333][T14589] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1695.237252][T14589] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1695.245726][T14589] usb 4-1: Manufacturer: syz [ 1695.985401][T18862] loop2: detected capacity change from 0 to 32768 [ 1696.011955][T14589] usb 4-1: config 0 descriptor?? [ 1696.267843][T18862] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1696.267993][T18862] allowing incompatible features above 0.0: (unknown version) [ 1696.268069][T18862] features: [ 1696.302781][T18862] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 1696.311316][T18862] bcachefs (loop2): initializing new filesystem [ 1696.331609][T18862] bcachefs (loop2): going read-write [ 1696.347619][T18862] bcachefs (loop2): marking superblocks [ 1696.394833][T18862] bcachefs (loop2): initializing freespace [ 1696.420292][T18862] bcachefs (loop2): done initializing freespace [ 1696.441783][T18862] bcachefs (loop2): reading snapshots table [ 1696.448111][T18862] bcachefs (loop2): reading snapshots done [ 1696.780815][T18862] bcachefs (loop2): done starting filesystem [ 1697.661842][T14589] rc_core: IR keymap rc-hauppauge not found [ 1697.668120][T14589] Registered IR keymap rc-empty [ 1697.674154][T14589] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1697.686059][T14589] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 1697.732434][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1698.053818][T11841] bcachefs (loop2): shutting down [ 1698.059316][T11841] bcachefs (loop2): going read-only [ 1698.073171][T11841] bcachefs (loop2): finished waiting for writes to stop [ 1698.137559][T18883] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3093'. [ 1698.158877][T11841] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 1698.434021][T14589] usb 4-1: USB disconnect, device number 39 [ 1698.511971][T18888] veth3: entered promiscuous mode [ 1698.557408][T11841] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5 [ 1698.637506][T11841] bcachefs (loop2): clean shutdown complete, journal seq 6 [ 1698.658017][T11841] bcachefs (loop2): marking filesystem clean [ 1698.837018][T11841] bcachefs (loop2): shutdown complete [ 1699.394096][T18900] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3098'. [ 1699.827747][T18907] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1699.827747][T18907] program syz.9.3100 not setting count and/or reply_len properly [ 1700.553659][ T8153] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1700.787873][ T8153] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1700.797399][ T8153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.806359][ T8153] usb 4-1: Product: syz [ 1700.811083][ T8153] usb 4-1: Manufacturer: syz [ 1700.815915][ T8153] usb 4-1: SerialNumber: syz [ 1700.872013][ T8153] usb 4-1: config 0 descriptor?? [ 1701.130530][ T8153] usb 4-1: USB disconnect, device number 40 [ 1701.172957][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3107'. [ 1701.333836][T18930] veth5: entered promiscuous mode [ 1701.580351][T14589] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1701.783804][T14589] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1701.792719][T14589] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.871956][T14589] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1701.881671][T14589] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1701.890057][T14589] usb 8-1: Manufacturer: syz [ 1701.948144][T14589] usb 8-1: config 0 descriptor?? [ 1702.294629][T14589] rc_core: IR keymap rc-hauppauge not found [ 1702.301124][T14589] Registered IR keymap rc-empty [ 1702.307464][T14589] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1702.320260][ T8153] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1702.320462][T14589] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input70 [ 1702.436453][ C1] igorplugusb 8-1:0.0: Error: urb status = -32 [ 1702.840070][ T8153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.851408][ T8153] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1702.860842][ T8153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.909100][ T8153] usb 7-1: config 0 descriptor?? [ 1704.000266][ T8153] usbhid 7-1:0.0: can't add hid device: -71 [ 1704.016174][ T8153] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1704.370690][ T8153] usb 7-1: USB disconnect, device number 87 [ 1704.821298][ T8153] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1704.980710][ T5877] usb 8-1: USB disconnect, device number 94 [ 1705.016265][ T8153] usb 7-1: Using ep0 maxpacket: 32 [ 1705.483063][ T8153] usb 7-1: device descriptor read/all, error -71 [ 1705.599091][T18961] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1705.599091][T18961] program syz.9.3115 not setting count and/or reply_len properly [ 1708.028673][T18975] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3119'. [ 1708.732958][T18976] veth3: entered promiscuous mode [ 1709.222260][T18982] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1709.231682][T18982] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1709.239167][T18982] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1709.246343][T18982] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1709.253932][T18982] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1709.260892][T18982] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1709.267854][T18982] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1709.275304][T18982] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1709.282245][T18982] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1709.288974][T18982] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1711.911585][ T8153] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1712.157020][ T8153] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1712.166591][ T8153] usb 10-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1712.177366][ T8153] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1712.187581][ T8153] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1712.210625][ T8153] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1712.601730][ T8153] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1712.618258][ T8153] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1712.629034][ T8153] usb 10-1: Product: syz [ 1712.633693][ T8153] usb 10-1: Manufacturer: syz [ 1712.791893][ T8153] cdc_wdm 10-1:1.0: skipping garbage [ 1712.797463][ T8153] cdc_wdm 10-1:1.0: skipping garbage [ 1712.879979][ T8153] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1712.886496][ T8153] cdc_wdm 10-1:1.0: Unknown control protocol [ 1713.100864][ T8153] usb 10-1: USB disconnect, device number 16 [ 1716.283143][T19021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3133'. [ 1716.481849][T19024] loop7: detected capacity change from 0 to 256 [ 1716.531173][T19021] veth11: entered promiscuous mode [ 1716.671620][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1716.682173][T19028] netlink: 'syz.6.3135': attribute type 5 has an invalid length. [ 1716.691322][T19028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1716.724216][T19028] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1716.732785][T19028] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1716.741354][T19028] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1716.749893][T19028] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1716.758360][T19028] geneve2: entered promiscuous mode [ 1716.763936][T19028] geneve2: entered allmulticast mode [ 1717.405325][T19024] FAT-fs (loop7): Directory bread(block 64) failed [ 1717.412505][T19024] FAT-fs (loop7): Directory bread(block 65) failed [ 1717.422029][T19024] FAT-fs (loop7): Directory bread(block 66) failed [ 1717.429596][T19024] FAT-fs (loop7): Directory bread(block 67) failed [ 1717.436634][T19024] FAT-fs (loop7): Directory bread(block 68) failed [ 1717.443787][T19024] FAT-fs (loop7): Directory bread(block 69) failed [ 1717.450795][T19024] FAT-fs (loop7): Directory bread(block 70) failed [ 1717.459277][T19024] FAT-fs (loop7): Directory bread(block 71) failed [ 1717.466357][T19024] FAT-fs (loop7): Directory bread(block 72) failed [ 1717.473513][T19024] FAT-fs (loop7): Directory bread(block 73) failed [ 1717.590416][ T5877] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1718.030986][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 1718.085627][ T5877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1718.096082][ T5877] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1718.106374][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1718.251004][ T5877] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 1718.261282][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.269529][ T5877] usb 4-1: Product: syz [ 1718.274255][ T5877] usb 4-1: Manufacturer: syz [ 1718.279071][ T5877] usb 4-1: SerialNumber: syz [ 1718.423580][ T5877] usb 4-1: config 0 descriptor?? [ 1718.973702][T19050] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1718.973702][T19050] program syz.6.3143 not setting count and/or reply_len properly [ 1719.018062][ T5877] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1720.015400][ T5877] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1720.197032][ T5877] usb 4-1: USB disconnect, device number 41 [ 1720.420200][ T8153] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1721.802641][T19072] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3149'. [ 1721.977308][T19072] veth5: entered promiscuous mode [ 1722.931665][T19084] loop3: detected capacity change from 0 to 1024 [ 1723.247902][T19090] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1723.247902][T19090] program syz.6.3155 not setting count and/or reply_len properly [ 1723.611676][ T3747] hfsplus: b-tree write err: -5, ino 4 [ 1724.654799][T19101] loop6: detected capacity change from 0 to 1024 [ 1724.674432][T19102] loop3: detected capacity change from 0 to 1024 [ 1724.772384][T19102] EXT4-fs: inline encryption not supported [ 1724.779034][T19102] EXT4-fs: Ignoring removed bh option [ 1725.030377][T19102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1725.633846][ T1116] hfsplus: b-tree write err: -5, ino 4 [ 1725.870685][ T8153] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1726.096494][ T8153] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1726.105535][ T8153] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1726.116164][ T8153] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1726.130440][ T8153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1726.144401][ T8153] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1728.473947][ T8153] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1728.488084][ T8153] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1728.497905][ T8153] usb 3-1: Product: syz [ 1728.502356][ T8153] usb 3-1: Manufacturer: syz [ 1728.766601][T17633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.090215][ T8153] usb 3-1: can't set config #1, error -71 [ 1729.134060][ T8153] usb 3-1: USB disconnect, device number 85 [ 1729.472209][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3165'. [ 1729.757225][T19124] veth11: entered promiscuous mode [ 1730.434839][T19133] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1730.434839][T19133] program syz.9.3168 not setting count and/or reply_len properly [ 1731.802304][T19142] loop2: detected capacity change from 0 to 4096 [ 1731.848737][T19142] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1731.876617][T19148] input: syz1 as /devices/virtual/input/input71 [ 1734.139335][T19142] ntfs3(loop2): Failed to read $AttrDef (-4). [ 1737.876153][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3181'. [ 1738.073504][T19178] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in; [ 1738.073504][T19178] program syz.3.3182 not setting count and/or reply_len properly [ 1738.951336][ T8627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1738.962390][ T8627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1738.974203][ T8627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1738.986709][ T8627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1739.001654][T19180] veth3: entered promiscuous mode [ 1739.023980][ T8627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1739.488601][T19191] loop3: detected capacity change from 0 to 64 [ 1742.039323][ T5827] Bluetooth: hci1: command tx timeout [ 1743.000375][T19185] chnl_net:caif_netlink_parms(): no params data found [ 1743.176703][T19212] autofs: Unknown parameter 'fd0x0000000000000000' [ 1744.170778][ T8627] Bluetooth: hci1: command tx timeout [ 1744.739052][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3195'. [ 1745.210553][T19228] veth5: entered promiscuous mode [ 1746.180604][ T8627] Bluetooth: hci1: command tx timeout [ 1746.703211][T19185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.718038][T19185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.725912][T19185] bridge_slave_0: entered allmulticast mode [ 1746.734401][T19185] bridge_slave_0: entered promiscuous mode [ 1747.265478][T19247] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.3200'. [ 1747.275216][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3200'. [ 1747.285181][T19247] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3200'. [ 1747.484939][T19185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.492950][T19185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.501623][T19185] bridge_slave_1: entered allmulticast mode [ 1747.511062][T19185] bridge_slave_1: entered promiscuous mode [ 1749.261307][ T8627] Bluetooth: hci1: command tx timeout [ 1749.977767][T19185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.178627][T19185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1750.593066][T19256] autofs: Unknown parameter 'fd0x0000000000000000' [ 1750.626046][T19185] team0: Port device team_slave_0 added [ 1750.686672][T19185] team0: Port device team_slave_1 added [ 1751.076785][T19185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.084679][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.117106][T19185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.363908][T19185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.372092][T19185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.399438][T19185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.704788][T19185] hsr_slave_0: entered promiscuous mode [ 1753.720426][T19185] hsr_slave_1: entered promiscuous mode [ 1753.728094][T19185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1753.735961][T19185] Cannot create hsr debugfs directory [ 1753.858530][T19274] loop3: detected capacity change from 0 to 1024 [ 1753.927761][T19277] loop2: detected capacity change from 0 to 65 [ 1754.010978][T19277] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1754.730740][ T3858] hfsplus: b-tree write err: -5, ino 4 [ 1755.405946][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1757.535002][T19296] 9pnet_fd: Insufficient options for proto=fd [ 1758.224119][T19185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1758.341582][T19185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1758.427499][T19185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1759.852342][T19185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1762.282373][T19332] 9pnet_fd: Insufficient options for proto=fd [ 1765.282825][T19185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.780608][T19185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.863385][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.871012][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.980011][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.987546][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.769852][T19185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1766.810694][T19185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1768.924142][ T8585] Bluetooth: hci6: Frame reassembly failed (-84) [ 1771.470860][ T8627] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1774.084252][T19185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1775.795787][T19390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3244'. [ 1776.975368][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3245'. [ 1780.789113][ T1116] Bluetooth: hci6: Frame reassembly failed (-84) [ 1781.164031][ T30] audit: type=1326 audit(1753115281.747:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1781.187295][ T30] audit: type=1326 audit(1753115281.757:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1781.212721][ T30] audit: type=1326 audit(1753115281.757:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1781.239071][ T30] audit: type=1326 audit(1753115281.757:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1781.264421][ T30] audit: type=1326 audit(1753115281.767:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1781.287233][ T30] audit: type=1326 audit(1753115281.777:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1781.310379][ T30] audit: type=1326 audit(1753115281.777:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9558e9a9 code=0x7ffc0000 [ 1781.335190][ T30] audit: type=1326 audit(1753115281.787:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e9558d310 code=0x7ffc0000 [ 1781.358871][ T30] audit: type=1326 audit(1753115281.797:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e9558e5ab code=0x7ffc0000 [ 1781.381786][ T30] audit: type=1326 audit(1753115281.797:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.9.3252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e9558e5ab code=0x7ffc0000 [ 1781.516603][ T8153] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1781.760847][ T8153] usb 10-1: Using ep0 maxpacket: 16 [ 1781.790714][T19185] veth0_vlan: entered promiscuous mode [ 1781.824644][ T8153] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.841846][ T8153] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.854191][ T8153] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1781.863692][ T8153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.899565][ T8153] usb 10-1: config 0 descriptor?? [ 1781.971761][T19185] veth1_vlan: entered promiscuous mode [ 1782.440734][T19185] veth0_macvtap: entered promiscuous mode [ 1782.579502][T19185] veth1_macvtap: entered promiscuous mode [ 1782.608263][ T8153] usbhid 10-1:0.0: can't add hid device: -71 [ 1782.615946][ T8153] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1783.073958][ T8627] Bluetooth: hci6: command 0x1003 tx timeout [ 1783.074711][ T8153] usb 10-1: USB disconnect, device number 17 [ 1783.081484][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1783.692766][T19185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1783.938982][T19185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1784.172161][T19185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.182197][T19185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.200778][T19185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.212611][T19185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.020212][T19445] loop2: detected capacity change from 0 to 256 [ 1785.192637][T19445] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1786.053500][T19461] loop3: detected capacity change from 0 to 64 [ 1786.170629][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1786.170679][ T30] audit: type=1800 audit(1753115286.767:163): pid=19461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3263" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1786.269429][T19461] ===================================================== [ 1786.276766][T19461] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 [ 1786.284808][T19461] hfs_find_set_zero_bits+0x74d/0xb60 [ 1786.290457][T19461] hfs_vbm_search_free+0x13c/0x5b0 [ 1786.295680][T19461] hfs_extend_file+0x6a5/0x1b00 [ 1786.300805][T19461] hfs_get_block+0x435/0x1150 [ 1786.305568][T19461] __blockdev_direct_IO+0x2911/0x65a0 [ 1786.311231][T19461] hfs_direct_IO+0x12b/0x3f0 [ 1786.315912][T19461] generic_file_direct_write+0x2bc/0x720 [ 1786.321905][T19461] __generic_file_write_iter+0x25b/0x460 [ 1786.327652][T19461] generic_file_write_iter+0x131/0x980 [ 1786.333994][T19461] do_iter_readv_writev+0x947/0xba0 [ 1786.339477][T19461] vfs_writev+0x52a/0x1500 [ 1786.346111][T19461] do_writev+0x1b5/0x580 [ 1786.351643][T19461] __x64_sys_writev+0x99/0xf0 [ 1786.356476][T19461] x64_sys_call+0x269a/0x3db0 [ 1786.361397][T19461] do_syscall_64+0xd9/0x210 [ 1786.365991][T19461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.372072][T19461] [ 1786.374438][T19461] Uninit was created at: [ 1786.378873][T19461] __kmalloc_cache_noprof+0x7f7/0xed0 [ 1786.385716][T19461] hfs_mdb_get+0x1cc8/0x2a90 [ 1786.390588][T19461] hfs_fill_super+0x3d0/0xb80 [ 1786.395365][T19461] get_tree_bdev_flags+0x6e6/0x920 [ 1786.400743][T19461] get_tree_bdev+0x38/0x50 [ 1786.405245][T19461] hfs_get_tree+0x35/0x40 [ 1786.409851][T19461] vfs_get_tree+0xb3/0x5c0 [ 1786.414356][T19461] do_new_mount+0x738/0x1610 [ 1786.419086][T19461] path_mount+0x6db/0x1e90 [ 1786.424240][T19461] __se_sys_mount+0x6eb/0x7d0 [ 1786.429087][T19461] __x64_sys_mount+0xe4/0x150 [ 1786.434089][T19461] x64_sys_call+0xfa7/0x3db0 [ 1786.441510][T19461] do_syscall_64+0xd9/0x210 [ 1786.446170][T19461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.452820][T19461] [ 1786.455218][T19461] CPU: 1 UID: 0 PID: 19461 Comm: syz.3.3263 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(none) [ 1786.465742][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1786.476327][T19461] ===================================================== [ 1786.483434][T19461] Disabling lock debugging due to kernel taint [ 1786.489910][T19461] Kernel panic - not syncing: kmsan.panic set ... [ 1786.496431][T19461] CPU: 1 UID: 0 PID: 19461 Comm: syz.3.3263 Tainted: G B 6.16.0-rc7-syzkaller #0 PREEMPT(none) [ 1786.508441][T19461] Tainted: [B]=BAD_PAGE [ 1786.512646][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1786.522775][T19461] Call Trace: [ 1786.526109][T19461] [ 1786.529100][T19461] __dump_stack+0x26/0x30 [ 1786.533544][T19461] dump_stack_lvl+0x53/0x270 [ 1786.538269][T19461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1786.544271][T19461] dump_stack+0x1e/0x25 [ 1786.548596][T19461] panic+0x4bd/0xd50 [ 1786.552683][T19461] kmsan_report+0x31c/0x320 [ 1786.557370][T19461] ? __msan_warning+0x1b/0x30 [ 1786.562218][T19461] ? hfs_find_set_zero_bits+0x74d/0xb60 [ 1786.567999][T19461] ? hfs_vbm_search_free+0x13c/0x5b0 [ 1786.573483][T19461] ? hfs_extend_file+0x6a5/0x1b00 [ 1786.578615][T19461] ? hfs_get_block+0x435/0x1150 [ 1786.583559][T19461] ? __blockdev_direct_IO+0x2911/0x65a0 [ 1786.589226][T19461] ? hfs_direct_IO+0x12b/0x3f0 [ 1786.594088][T19461] ? generic_file_direct_write+0x2bc/0x720 [ 1786.600056][T19461] ? __generic_file_write_iter+0x25b/0x460 [ 1786.606049][T19461] ? generic_file_write_iter+0x131/0x980 [ 1786.611801][T19461] ? do_iter_readv_writev+0x947/0xba0 [ 1786.617281][T19461] ? vfs_writev+0x52a/0x1500 [ 1786.621985][T19461] ? do_writev+0x1b5/0x580 [ 1786.626553][T19461] ? __x64_sys_writev+0x99/0xf0 [ 1786.631545][T19461] ? x64_sys_call+0x269a/0x3db0 [ 1786.636521][T19461] ? do_syscall_64+0xd9/0x210 [ 1786.641327][T19461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.647596][T19461] ? hfs_find_exit+0x4e/0xb0 [ 1786.652375][T19461] ? hfs_extend_file+0x46d/0x1b00 [ 1786.657500][T19461] ? hfs_get_block+0x435/0x1150 [ 1786.662443][T19461] ? __blockdev_direct_IO+0x2911/0x65a0 [ 1786.668108][T19461] ? hfs_direct_IO+0x12b/0x3f0 [ 1786.672965][T19461] ? generic_file_direct_write+0x2bc/0x720 [ 1786.678895][T19461] ? __generic_file_write_iter+0x25b/0x460 [ 1786.684843][T19461] ? generic_file_write_iter+0x131/0x980 [ 1786.690680][T19461] ? do_iter_readv_writev+0x947/0xba0 [ 1786.696152][T19461] ? vfs_writev+0x52a/0x1500 [ 1786.700852][T19461] ? do_writev+0x1b5/0x580 [ 1786.705373][T19461] ? __x64_sys_writev+0x99/0xf0 [ 1786.710316][T19461] ? x64_sys_call+0x269a/0x3db0 [ 1786.715272][T19461] ? do_syscall_64+0xd9/0x210 [ 1786.720068][T19461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.726234][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.731441][T19461] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1786.737899][T19461] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1786.744136][T19461] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1786.750167][T19461] ? stack_depot_save_flags+0x60f/0x7b0 [ 1786.755909][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.761144][T19461] __msan_warning+0x1b/0x30 [ 1786.765737][T19461] hfs_find_set_zero_bits+0x74d/0xb60 [ 1786.771243][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.776449][T19461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1786.782364][T19461] hfs_vbm_search_free+0x13c/0x5b0 [ 1786.787599][T19461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1786.793508][T19461] hfs_extend_file+0x6a5/0x1b00 [ 1786.798462][T19461] ? __mark_inode_dirty+0x371/0x1090 [ 1786.803881][T19461] hfs_get_block+0x435/0x1150 [ 1786.808674][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.813887][T19461] ? __pfx_hfs_get_block+0x10/0x10 [ 1786.819114][T19461] __blockdev_direct_IO+0x2911/0x65a0 [ 1786.824673][T19461] ? __pfx_hfs_get_block+0x10/0x10 [ 1786.830064][T19461] hfs_direct_IO+0x12b/0x3f0 [ 1786.834789][T19461] ? __pfx_hfs_direct_IO+0x10/0x10 [ 1786.840031][T19461] generic_file_direct_write+0x2bc/0x720 [ 1786.845847][T19461] __generic_file_write_iter+0x25b/0x460 [ 1786.851707][T19461] generic_file_write_iter+0x131/0x980 [ 1786.857363][T19461] ? __rcu_read_unlock+0x6d/0xd0 [ 1786.862513][T19461] ? aa_file_perm+0x24c/0x18d0 [ 1786.867488][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.872704][T19461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1786.878612][T19461] ? vfs_iter_read+0x6d1/0x770 [ 1786.883470][T19461] ? filter_irq_stacks+0x49/0x190 [ 1786.888642][T19461] ? stack_depot_save_flags+0x35/0x7b0 [ 1786.894221][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.899425][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.904640][T19461] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1786.911111][T19461] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1786.917223][T19461] do_iter_readv_writev+0x947/0xba0 [ 1786.922535][T19461] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1786.928636][T19461] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1786.934736][T19461] vfs_writev+0x52a/0x1500 [ 1786.939277][T19461] ? stack_depot_save_flags+0x35/0x7b0 [ 1786.944867][T19461] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1786.951365][T19461] ? kmsan_get_metadata+0xfb/0x160 [ 1786.956646][T19461] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1786.962567][T19461] do_writev+0x1b5/0x580 [ 1786.966939][T19461] __x64_sys_writev+0x99/0xf0 [ 1786.971726][T19461] x64_sys_call+0x269a/0x3db0 [ 1786.976519][T19461] do_syscall_64+0xd9/0x210 [ 1786.981120][T19461] ? irqentry_exit+0x16/0x60 [ 1786.985799][T19461] ? clear_bhb_loop+0x40/0x90 [ 1786.990574][T19461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.996573][T19461] RIP: 0033:0x7f960cd8e9a9 [ 1787.001071][T19461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.020794][T19461] RSP: 002b:00007f960dcd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1787.029310][T19461] RAX: ffffffffffffffda RBX: 00007f960cfb5fa0 RCX: 00007f960cd8e9a9 [ 1787.037370][T19461] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000a [ 1787.045419][T19461] RBP: 00007f960ce10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1787.053496][T19461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1787.061587][T19461] R13: 0000000000000000 R14: 00007f960cfb5fa0 R15: 00007fff4ca89708 [ 1787.069681][T19461] [ 1787.073061][T19461] Kernel Offset: disabled [ 1787.077458][T19461] Rebooting in 86400 seconds..