last executing test programs: 25m47.709560192s ago: executing program 32 (id=560): r0 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xc0240) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 24m40.494150231s ago: executing program 33 (id=1127): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 24m13.217200599s ago: executing program 34 (id=1261): r0 = syz_io_uring_setup(0x3, &(0x7f0000000640)={0x0, 0xec28, 0x800, 0x1, 0x444}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xa, 0x2007, @fd, 0x61a, 0x0, 0x0, 0xd, 0x0, {0x2, r3}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 23m54.646262359s ago: executing program 35 (id=1289): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 23m24.940391868s ago: executing program 36 (id=1527): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 22m54.897947798s ago: executing program 5 (id=1669): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x35155000) mlock(&(0x7f00003d1000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000480), 0x14, 0x180) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000880)=[{&(0x7f0000001d00)=""/4106, 0x100a}], 0x1) 22m54.310835797s ago: executing program 5 (id=1671): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x9c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 22m54.214394732s ago: executing program 5 (id=1672): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0xc, 0x7) write(r2, 0x0, 0x0) 22m53.298415997s ago: executing program 5 (id=1679): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r3, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 22m53.033511246s ago: executing program 5 (id=1682): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4f", 0x0, 0x15}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m52.596103542s ago: executing program 5 (id=1685): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdd, 0x1ff, 0xffff}) close_range(r0, 0xffffffffffffffff, 0x0) 22m37.28802699s ago: executing program 37 (id=1685): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdd, 0x1ff, 0xffff}) close_range(r0, 0xffffffffffffffff, 0x0) 19m58.161850442s ago: executing program 3 (id=2176): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r2, 0x1e67e000) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000977000/0x1000)=nil) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) 19m57.916888472s ago: executing program 3 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 19m53.256257736s ago: executing program 3 (id=2183): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013b0000000000950000000000000065e97efbc5a9c865dd3e6ed4ed16687107d1b897c81af658be83fb9f1908a7eefe3e19d3b5e5b90145f05686203609913808016f74c5d619011dacfa224b1212e34c09b2a5b7b966d390acb34a5194b9546716aa716713f0ef247ccf7e610b4f7086be3ceeb1d626a7ba763b142eb3f84febe7a9f3f02e0567cc058294f1372b1ef1707bbe6da8ce00d35e0714df2c8dab4c56302045dfad25217d0c523b2f54f9757d7532539e7e52c0dd999f68dd8a02e4ad01f1e55a1596adb9ae669691f888"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendmsg$nl_generic(r0, 0x0, 0x0) 19m51.935999147s ago: executing program 3 (id=2184): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000340), 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000680)=""/175, &(0x7f0000000200)=0xaf) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 19m51.339490013s ago: executing program 3 (id=2187): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0x1010, r0, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) finit_module(r2, 0x0, 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x48) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) syslog(0x4, &(0x7f0000000000)=""/123, 0x7b) 19m46.748712695s ago: executing program 3 (id=2195): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x840, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 19m30.574323923s ago: executing program 38 (id=2195): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x840, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 15m12.055144667s ago: executing program 1 (id=2506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000780), 0x3ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15m10.749267635s ago: executing program 1 (id=2507): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x0, 0x2aa366b2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x7, 0x6, 0x4}, 0x10, 0x0, r0, 0x7, &(0x7f0000000440)=[r0, r0, r0, r0], &(0x7f0000000480)=[{0x3, 0x5, 0xf, 0xb}, {0x5, 0x1, 0x10, 0xd}, {0x0, 0x1, 0x8, 0x1}, {0x5, 0x3, 0x6, 0xa}, {0x2, 0x1, 0xa, 0x4}, {0x0, 0x2, 0xc, 0x3}, {0x1, 0x5, 0x6, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676ae"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0xffffffff, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15m2.697461289s ago: executing program 1 (id=2515): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x1682, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 14m57.273386524s ago: executing program 1 (id=2522): socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$l2tp(0x2, 0x2, 0x73) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x4c) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 14m53.509577898s ago: executing program 1 (id=2526): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14m47.289559221s ago: executing program 1 (id=2533): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x62, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3a01330080000000ffffffffffff080211000000505050505050"], 0x158}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x11c}}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103000200000705687a674faa2acf2c9ec99222a6a8e51be7f7024f3045b5f1963f2af7022d63805d96867d16caaa535c4afbceab05b86bdee25013030fd048d3da7d0571dd1ab23dfa64829066722d18d35133c9e633e922f1f0c74c08a6c1b28b2e81d0105ce40d3df89a59d399cedaf83aea36237c3b3450e68867b18a02a63288228a3346dfd8c5a8b47cfcc78564eccfb681a56b0069a6ca6411bac9a3be41ddcf"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, 0x0, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r7, 0x0, 0x2006f858) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0xc, &(0x7f0000000200)="6e425a1316a1f0e015769b83") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/202, 0xca, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x0) 14m30.15175676s ago: executing program 39 (id=2533): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x62, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3a01330080000000ffffffffffff080211000000505050505050"], 0x158}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x11c}}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103000200000705687a674faa2acf2c9ec99222a6a8e51be7f7024f3045b5f1963f2af7022d63805d96867d16caaa535c4afbceab05b86bdee25013030fd048d3da7d0571dd1ab23dfa64829066722d18d35133c9e633e922f1f0c74c08a6c1b28b2e81d0105ce40d3df89a59d399cedaf83aea36237c3b3450e68867b18a02a63288228a3346dfd8c5a8b47cfcc78564eccfb681a56b0069a6ca6411bac9a3be41ddcf"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, 0x0, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r7, 0x0, 0x2006f858) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0xc, &(0x7f0000000200)="6e425a1316a1f0e015769b83") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/202, 0xca, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x0) 13m43.597301293s ago: executing program 9 (id=2609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$phonet(0x23, 0x2, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0xa5) sendto(r4, &(0x7f0000000140), 0x0, 0x40008c1, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 13m42.564612463s ago: executing program 9 (id=2610): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13m42.16823564s ago: executing program 9 (id=2612): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r6, 0x3ff}, 0x8) 13m39.034427333s ago: executing program 9 (id=2613): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xffffffffffffff20, &(0x7f0000000080)="0666", 0x0, 0x2, 0x0, 0x80000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x101, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) capset(0x0, 0x0) 13m36.989283305s ago: executing program 9 (id=2616): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() io_getevents(0x0, 0x99, 0x0, &(0x7f0000000200), &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r5 = eventfd(0x10000) r6 = accept$unix(r2, &(0x7f0000000480), &(0x7f0000000500)=0x6e) r7 = eventfd2(0x5, 0x180000) io_submit(0x0, 0x3, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f0000000400)="a9815958f30eed3960c097ef9ce9d03e22291b89f5eaa43bccbe54d42d08650707b4d71cc9c39769e12791be0292bcf4f97740f53d5c100e8a6e908be281d35e0ab34755ce535e90ef014df58ae28ca845030ef0224a22e3ce2d129d69047031c5ab96832811790479", 0x69, 0x0, 0x0, 0x1, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f0000000580)="da5d99990626ef214b702b42ca699ac041d5819492511436c40c1f34fa4e21acd480b03738d041c73c527b726625ba305dedcdfc7f8d8c5dcd36694fe72296e39a8d9346e02cca2b2ed5e2d1d10fee5222149e6d327df07656117ec0a47659c7d70496db5eac6cd855b2baeaa5a1296f1f01fcf7d5d7d403514967b62a04616947cba94a35b507851d", 0x89, 0x3, 0x0, 0x7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x5b, r1, &(0x7f0000000780)="e8dc90ad51dec9ca9ddaa73112e5852dd1660af43ea0132b46b62da032ff08b6b93fa92dcf87db9bf45066d0a635b73d46816bf5ea9180bcd1ad8d90ff6aab97dbfee59ea55202313bda1f03c73423ab725b2daf52b488fb70075944e3941745ca3fa6dd5fa98dcf57f51e2f0958fa7760a813d6c744ae2c608850eb2ddc2f383dd05cc6", 0x84, 0xf, 0x0, 0x0, r7}]) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r10}, 0x18) 13m35.087088434s ago: executing program 9 (id=2618): r0 = socket(0x2, 0xa, 0xfb) connect$inet6(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095", @ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) creat(&(0x7f0000001380)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c9c053004f00010004072500f000470002020700070270f30102ff7f0501000610f7020800fdffffff050000000600000002050400080012000d995e1c64f838c8be8c2b5807020006000da20800970e2b0003000600508c890ffd90047b7efccf8b8e2f5b376c6d3373172ca2d7a1a867ef43aa46c804df0c64b3b80968bc2b72c99a4de2ced8ac33fd261d9887c2c16035ae6a3979e163f07aa3ed91deb52148719ecab499960f7ffb75e83ca6d1a242a27c1488fc56844c92758a4d9b3204f5b449452464bd65cc229e576e880cf509e3d815"], 0x58) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 13m20.162945497s ago: executing program 40 (id=2618): r0 = socket(0x2, 0xa, 0xfb) connect$inet6(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095", @ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) creat(&(0x7f0000001380)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c9c053004f00010004072500f000470002020700070270f30102ff7f0501000610f7020800fdffffff050000000600000002050400080012000d995e1c64f838c8be8c2b5807020006000da20800970e2b0003000600508c890ffd90047b7efccf8b8e2f5b376c6d3373172ca2d7a1a867ef43aa46c804df0c64b3b80968bc2b72c99a4de2ced8ac33fd261d9887c2c16035ae6a3979e163f07aa3ed91deb52148719ecab499960f7ffb75e83ca6d1a242a27c1488fc56844c92758a4d9b3204f5b449452464bd65cc229e576e880cf509e3d815"], 0x58) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 41.298177395s ago: executing program 7 (id=6457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) close(0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 41.085156667s ago: executing program 7 (id=6459): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 40.986084362s ago: executing program 7 (id=6460): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff", @ANYRESHEX=r0], 0xc8) dup3(r1, r0, 0x0) 40.865381624s ago: executing program 7 (id=6461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/249) bpf$PROG_LOAD(0x5, 0x0, 0x0) 39.50155626s ago: executing program 7 (id=6468): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 39.287332761s ago: executing program 7 (id=6473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@private=0xa010100, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) 24.183880994s ago: executing program 41 (id=6473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@private=0xa010100, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) 5.216550958s ago: executing program 0 (id=6721): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r3, 0x9, 0x1, 0x5, 0x7, 0x3, 0x5, 0x9, {r3, @in6={{0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0xc9dfc363, 0x2, 0x1, 0x4, 0x5}}, &(0x7f0000000300)=0xb0) 4.986625121s ago: executing program 0 (id=6724): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80080) close(0x3) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x10003}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) 3.947895971s ago: executing program 0 (id=6736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.113829207s ago: executing program 6 (id=6737): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r1, &(0x7f0000000000)='./file0\x00', 0x2) 2.954081413s ago: executing program 6 (id=6740): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000440)="48e52b83fc5742b7468c3a5eb5c8", 0xe}], 0x1) 2.901584133s ago: executing program 2 (id=6741): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/100, 0x64}, {0x0}], 0x2}, 0x8}], 0x2, 0x40010002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0xfffffe67, &(0x7f0000000200)={&(0x7f0000000240)=@can={{}, 0x0, 0x0, 0x0, 0x0, "f201001600000003"}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x20000880) 2.782896937s ago: executing program 6 (id=6742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x207, 0x7f, 0x20000006, 0x4d, 0x4, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x80001, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x3, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x3, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x1d, 0x6, 0x80000000, 0x0, 0x4, 0x400, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x7, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0xef, 0x2, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xfffffffe, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x9ab]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030008ac0f0011000100cabee339084eeef109002471f4000000080007000000000005"], 0x60}}, 0x0) 2.658074493s ago: executing program 6 (id=6745): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000009c0), 0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={'crct10dif-pclmul\x00'}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.325005809s ago: executing program 4 (id=6746): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d697400"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 2.113880635s ago: executing program 0 (id=6748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) preadv(r1, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/21, 0x15}], 0x1, 0x40001001, 0x3) 1.979731302s ago: executing program 4 (id=6749): recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/17, 0x11}, 0x1}], 0x1, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 1.865907926s ago: executing program 2 (id=6751): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r2, &(0x7f0000000100)='.\x00', 0x515401, 0x408) 1.81885432s ago: executing program 8 (id=6752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), &(0x7f0000000140)) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, 0x0, 0x0, 0x3}]) 1.665350465s ago: executing program 4 (id=6753): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000f00)="9e"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1.615757272s ago: executing program 8 (id=6754): r0 = syz_io_uring_setup(0xd4, &(0x7f00000005c0)={0x0, 0xc058, 0x400, 0xffffffff, 0x12d}, &(0x7f0000000e00)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d33, 0x0, @fd, 0x0, 0x0, 0x1, 0xb}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.545960445s ago: executing program 6 (id=6755): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000340)={0x18, 0x0, {0x88, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'bond0\x00'}}, 0x1e) 1.509725741s ago: executing program 2 (id=6756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390cf7e95554ddaebbbb4cc982245fcb7a6", 0xa4}, {&(0x7f0000000380)="d0caa3048c636c7718087116905af3ffd7497f76f5d5db4f19211c2746267086798ca4020600000000000000f4488034265bba24191cda79b018a1bf35aba7e0b9eebbcfd8ccbb4b5f5bacfbab25b921a523f840c8b22aed66672e1fb4a67424a82dcb5ea032ee5407001d0d1663c49cf4562881ef665ade93a5ab3d", 0x7c}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x800) recvmmsg(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f0000000940)=""/178, 0xb2}], 0x2}, 0x2}], 0x1, 0x2003, 0x0) 1.402200004s ago: executing program 8 (id=6757): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x8, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000680)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="03a22d23cc46b5d35d9d123fa21ae52d727400e9fe390a159493e24bcdbe7515008e2e453169c348b08b788685d6839b7ea717b5473954cd4ed051b346d03fd2b7d2bf018e4d7d250daef7b38bb042761188419b919e883a0a3dd3b538c9c2b60f1609ec8c196830ed0936ee4973a9c8bdee59e022eaa430ef99b19f96784a131a5ef27409e4f282a82f9f1fcaf84a736cde74b6549517fa9c8a4269e9dd80f1e024361ed57295f7f7884bd5cd0afc025852cee7742e7770c6c1a6622782c37ae8e86733b32fd32357f7b52664bb057b731e66773a02b9f8f281fdb023e07886c2497cefadf8d54399a4e13c717556380bf27c55b8b53590ca7408b4c2a41f4c385cc2c0e14ad42fc84bdd6ef63b74ffa418dbe33f28328953da921a9ea410218dcc6444f16844679f76ec327115bf72ee5d7a294b52dbe6a95f9b366a3882e4f81268f7186766a2c388eb92e1d52c0dc929601529ef4d9fc6a8f455a7981c1db4c1456f81661cd015ab6c5847a8a68d9b545292a5059f1e7608bf34d2cd76ed89b8689ceabeae5332977ef6f6aafa8f27ce7c8da0a181e8f1ae6f116e3c92524ffa2733270cb6161604112220fdedc56e07689e0a042a278a0c0656172691c5055ad95ec962f1907537cdb5608b67ef296f4994a3fd2eb3a83c84b4c6552448ebd7eb5d717baf5914f42f96bb4626ffe47e549ea5f822d846c363dbcd09767f1e37c3265ef7c377d03b3803909ff9600e02191d2ff69ef3a88509a4890198a130dda64a689f26e090121505f0efcb5659469deec157f9901d883478aeaff424ab57c18c60d1907d9b86c391ffd01e73b2eddff8c4b5d8875e18a10c7c13db2fb0f64d2c5cdfc2ab3dd9e796708dc58e92b4aa44a88c7cb164f8f63a16bdbea71cca9983fb694d50a9ef8f440a5669f595a06eb0d53f8cfd24844bc5c7357cb261e6d00ada1dc68e97e862fac1b0b2a4db9096b8d1b046c053eaba49ece3b3fcdc77f3f5b773341730c0fa4fc9c0ee4fb35e3bfc486d92e12927d7642daa9e824e1ce35379967fd6e3475b4fad10c891265f8e40f288754ce3565e19743b3806241a9c29113bf01961929931e6c90cced2ed1f3855d5688a39779d5f85531ae1487536cc4d021af5eb5dac6e5f8e7c0cbf9754e14d219719628dc338e568768da0d6354be7969a9335fec4a5ed05e7ff1728ad7a4295625af1a33a85351e1d56cf74adc04399e5a0d23c869848f01280488bd98d558e691686cff3863a80ae535af6f99cadedf41b28502a674fd630ac0597f3e4d6d650f7af4426f97c8d3a6107fe9887173be14f850f162d9bf34346dcc2fcf9fa27bd8d378b3e0a92ddce67652000181fed815b6bbf4202f293704f502e0999fa5691ab1ff0f5cd1d40ad77071cfa26baf7c1c578a81dcd0e2839c650cbaa84f4fa7f71855259c98b3f63178b4d92b64ca89f8c50f5797e166100a60d8db9a62d3b637b2667e8b057778f1129ac4be99b4665ddc2062cfdebed434451920ad9ca7bb6c2326f1272c384d668e3abf4c65cfd7bac0d92247e7f0c685a0bf574da44096fe15798da92af64850637da4f0b71060d339529a7ca252f7f2b59e892ddb6e18c8d26dce01099e091435deed6422c7c6ff9289bd5e37605d60899f8e5bbf3a67e11a45cc8d91744fadc04c72354b66653eb7d73d525ca9b00ec4ee6f65d3cf0c34068261b92407623f33c2aef59d9bdd3fa661f22ae97586c601b1065a8a59b9fe55462fa59bfb03a8d19eab2050247a63b9aaf3400238636431876cdd06546f4e549c36de4038bdb9bad20d684a1bb89165ae84d1a7a3de43ea7220664679269f2770b3f6561ca5edc1e0182701a6252933c21b7b27045c6437065a894572d278f04996b5aa78a6f926135e684704a5299098ebfbf828b15fcc872ebe74ed2495e026cab99bab7138c75a71e86163523d073f0c9c05cbb3358f35613a4e1d99047aa33892c1e4011c7a08fb5dfe0d0d777ebd24b409e15ec51dab1d02363c495d187ecd4bb4cec9277decf44cc518e39b3106801b6deff431104b24165ea19c1458fb8f90b43e7f2d061fca639f62191967ceebe638352f66b7f16b745e743d359ca5aa55c2f45acc75715ad129599b7c7367eca492fef5d3f240dcf88dc523f5680c0a9b18d5de73d41b1fde40b47957af45ff009d846d1b75da91ad0ac5f49c0a299f2dff848a44a5fa83a2552e8eed4b2ba0d31f9d21aaf0b279a7cc7ab0d728332eed4f31ebdce606b8b628b18f3a03821667982e150bf5d0bb9da7eefbcd8ec62574affe6a3a14a5a293790ee5e99547bebc2fbbb5d21192e4e4cc179b049375ca02038ebcd5c043f40aeeb47b7534dd63174196184625aab69805b969209e7fe440ec4757ed0fccf772d21de70a364ac6a53c7b4479e6c53aa89d6c070914bebfbb11b64057bec54beb36cf74c576e36831f3ac2124bb8f3d95d1a83aeb7725dff58441496545a5558e4c1573dfcf59f3e1c62054d46c03cd0a1b813ab5b23ff57e18d29cc6206486186ef303dbdca56e5734d8e4a3624370f39d5cf87fda110f23180fb3a0ee14d02f48e7f59afdfc4478a3865a8c05bc450e0c0f1ce4236ad13cce233603399bd2d9dc46ee7a721b832115b2961d5442d3bf1a980fe3c64a60569055e7cfde0338f5b96080616c0397dd288e4244bc350bf90caf9e1d6a493e14d8c59987b229c9f68af140ded6aef0e1165fe2e3dc2add397dc12d7bbecb831d8fe88f3e697402fd9caad2f9c97a6bdc79ada714643e7b6c6ff6a3d73100f45250adb40bd458bd9c0bef991e48115ab576c4ebcf9d2fff89f8cfc3ef78af763a15f4b8ab3da6ed3ba2ef1fa9a89be9d9d6e316671062b79bca85729c4e8c95a8a09f57d2b1504092230f2c7bcc425b636e0d13bd11447ae4b9fb075cd76c361295a3f5eac32cb70065a666504ec5f7475837667ba259992ea3762d9230a852076cfe42dffd608d6e67978b804c101f642bc40738440694509ef04c56768cb6ac06f4367a287421247383ffbf39c55afddb0d615daa7fa033cbadfc8a8afb319761a2d2e83f3fe751179b9cd9490b2c5da1fa609a3a3bd186614bc86911f58c4023023cd8ea94d105fb0cfb30fdc5232b4ba4f4850f1501aaec986851cffeff1bdad3e7bbca16c1f46b45e0391eefbd140e068fc5aeb93d89a3a6f42c9402235e3423aabc03812ade3e7444f8ccebb6c7c03e3ade45f44ef2e50c0fbe298cecc6112ec0162407e589a9b19fa8d70531c223e5093e97ec08ee0e3a08312a7bfd6d19be54c2825d2fa1a43ec07e303fae29cec6d8a179f0c288b89091dd861ebb8b88a1acbc2107d7d5341755fcec348a1837c1d2bed3ca6aa8ffa25d3dc0419e2846c88a279cda1ef35392dc18fbd4e3eb74eba798bda967be716c03d9c048e862fd9ebe5f728a9ef92bc148fa86df73d51dbc3ee894744de360248fb0441a37ea80e7fdaa260d05addd4fb64a849516a1f2b91f912bce53eb9e0ae0c17b5e2bc3712374c288381abb1b6d09d46557dc179a1d2893f0c60fde93f9634a825cf485e9a78e41ef68bfc87af475cadb84f349be271776d6d0ca989f6beff3c45ff946b05f6ca45248e1eb9dc805d92885695673b84324449f6445704d98c0a9cb67927fd7f0dd97458804cd9748505275316431f57df1f271e72871781e492db669c41e87621658673c6567d84a3a696fe8926e9f08bd1ed8a3a26ab6a3a47971ed2ab78f94940f246c9da82c1e19802ba50c255a85ab7c17bed8ee5aefa38521f7799f7ad66ac564a9dd64d7bc52afc78040aa641a50a91ba9427f49538992d8e6e0d3608c3c4921e2a58aebb4dbd0537e53be881041a0ba6da4ae19a62cc74b412da6292348054ce2c77f8dba2a86c64c06d0e2811f32387bd66917f794cf96ef3dba7d0557c3d817177a20d2ac45aeaaa6705a31b87dc0ff2104436d87b057c5264beaf0021bb7d6c5959a9cddc8f78b34eba4e47bb953f3de840629c5c81791343a6b740d3b1683df9b6086a7a066ef7598ff9d9f96d4df3bbbc1c3dc6275d37597dcb181832d50259cb670eb24d48e39f25955b80a975a1171778663b74635f9c12eb52cb4f4524d63fa5f7ab9bb44010fb0ce3c8008027ac7b05d48957d98beba8a2d07f8abc95307bed92fd3235bb630782c405b97fd626e06a532616b4318e247103b6880f0ed59c5363fbe2cf11ea2a62f6ff6b3cad257d829751d6e8bb52c48bfad1bcfbdb1377a329201bb26c6094dc1e0e17d0b543383577a637f2949a59f3203a9d1319797a2028e64436c0cf9f955a9dc01bb874bf9e116b68d992b8e7e0467c5836edc60ba8de22cd709c7df6b7c1bc06fa374d0865c182be4cafc6850777cb3d41f1f4b8dea8f1d943f3b5152ff64c34ae527c8feab18f4a4ecd91d27418d08569d4a20218c9f6165bf919cbf5398625db5ff817cba353b2e2b3e996efdb7f0ec82f7e97740bef920aca9b2045309cc2949d29afccb0946114dc3e8f09e5582081cd0021000afbdc6e1cab4387c2f79dfc43acb25f7f6d64ce77a3da28e74a7980d654aa8311e9259fda1b7faf42f140c235b93fd69bfb19b47a89e473a3e84634172fe65f1a9a0b26aa11fa1e42bc4caa8ac1c172db7c3f924c630dfa897459b4a602bffd60731f3bfc3adbfffdb1f4313a0e0fb2ba5574b244f7d8625aecbbeb74672f0c5b17a24d157b39ebfb52233281ce616e7552d7df4aff102a38168a33713029ab0e2de77fb9beee97fb9b52fba78273312ba260cd1f9a866aac33cea526f58ab9af0c7af5b6d335edfbf4e0777919d8db94cf7368bfb8c9cb17f4049235b8a2e5a732cb66316e38deab71bf4bb070e034d18d68a64d70526119e105ff8e53321947b602586e6c38690352a5133d891d5ec7325913c89a775ba0f4cd9f560f13c012cdb6486e9d3935a891bf1a97edcd11bf864c853bed06d17b92376598755f378137b05ac57696c83ca4696de09235bae87273971253b3ca9ecd78e2da05ae53700eb2fbf653e5d20042f430db866d1323762850ca20abdfb586c00306d66173ae9d25869c6e59ce62c5296911f1e9c75e32ff5ea0da0734bdb74eff45f9728a8e90054340dedb2e3950e63f76aa65a15245207b1913b20ed298ae6c7522a39b186fd9219cbe30e0076d4f8719e5949c2517e60dad9db37c6a532bcd3e85c1b7fe61400fe5b56f8b871dee3bdf3e1d6367667e7b2cb675afa9e8b2b03f684e8826abd05c5c62a048ae4d90577c1e3ee4a99204d0ea40e0503a89bc7ab540a1e755dd8e522d9390b0e2c5d02c986ddbb613c5af6a31048d14b5b659ee982f62d800519117205c33366e3d26d58e48410fcbe34b8c9955807b205c25366e019340b6c5e1904355db75c23cc9bc8e8c652ec1d4dc299fd07bcd1c79c2ca84850a7ffc4915036b49d0eed0f549f6bd46adfd6fc851a01081e2fcb7a8f94098f85104616a59aa6f9af94af00962d8c1076b4e07ce2351a64ed864a392048d4235a7c51571811cb5f512b0c0c6cae87b84d45df18d211d1875208acdc359c3ee49f2efb4c765fc89e789aecf8e86ac9c9ff3370ad5418a0ef6e0a8a11151606b08e92b914fe6383a1a4e714afce45a32b39a792b8678eff7e2cd4c7c7df3b64d07d8edf12487bba3202edb441a0036938e1b36b6c8454e0af65ea7a4e65706e43b5383e9df2be0d869e2388574020a5e7963346669f7de8873bd4c18733db528c16188c6ce3bbaf9d1be84cec67063bf8c605a7210d8aa2abab17b6a8fdb1fcca24c78fb781c4bc6d805235fdc945ab85197ca0549ce51f0721b4b80085ae16c1c7e2e341f221716a6491ea02016dad3ceb23a77d4026bfd2365971769ec3cde6f5bdb5cb9ca19a58c20d9a797c2df14b048cb3c3dc14b3d61d4c73681cad0beddf883fb1713be8c7243824ff62c6ab5d8105022b32505d6901c47661d8ecca50e2982c70f198169ea2419f88851c70ad1aa3c71b1caff4bec292009f969597cd54fb3e904a715ae27c2d5b9cb040d9ce1a3fd05d7313559579d992f70e73ebb55451a98f7d72b047a82e6c592223644029ebbe9675b57974e198c2138244273ad0189df36c5534128bb6b9aa9cbbad367a60b1acb9f26fad921f80d8a4026a36173b5380062063ebb6b93403abc748da759603daae24e4f53edbbdab8ca2d8a1a2a971b9661eead24a98989a7dde92aae2c4a1180acbc6c9721697bc65685dc670e69ff596445c1d89928d3e0257bc9439d1db039e269e921593d526a6147651e2f451451402d950e4fa5bd7f7787176cda674b4db723406e6efb2b4937c46207dd71bb7b5e95a0cfdb0c51c8f54fd3115c3151ea61c0cf424fc7acfd1594fdb197bfadf2ce80f45d9ce9e7d3e1e4de513341400b21bf8aceb29098128ff3568ed157c56ad3bb1ce3056c27b61c83deaf8c4ff0d981e621e42223f816f38d3f2e2e300acfa09572e6bf6388059357f60e272c105826bc360e7538e98e6018c1ab559730a286424728b566130dc0d4b4bf972a7e7e4e6cfc9d620f7a9840a1afe02a4340698bbab7328c732fddc329a6ee4f90001375ea626b70c1fcc75c06aa8c36f2184d3aa68d2b1bef30ec2916113cc28079d8048f00725403b8af00f11d16bc9895cc84a942ef45b819e6c41999fce9348fe2a2319fb059d0ad1761e4a4969a0e876e64cec9898d0f1b41230b9215415546bde65bb80667f2763d05d3be2fecb9ea1b04074cf01bf65e6fdc2944467dd3fc6f3e0be2c925d26ab2a4a0c1d6d42e5854caad32ce510186c47c45cc67dff30bea70aa4b382a6b89b582c2920732545f095bebd146fe1bab4adefd5fe96aa0e1d5cfeb819b07c95cf25f0f2c46c11031b76ed5e4f9e32e04ed9bfcfa64a95a6e62d7df9ae4c1e5d6fb4c7c2af9d92f2155a952e77f8328a29cce85a34e9b14aa9bc02209d0beadac542036d6a8772fc7c667b6131dd70b6bc781306d509751bdb874347fae24287a7112cc7784f2fa81dcde424a6b06943d74238e997777fa43771bd4fd30aa1f71e4144f34c39404cbf1d15055483ae3778b008b92d0e0ac8f332ad165ebf309d672c70072a17f40afaa02a834512e3ad39cb8cf175c4c9cf2cc85ee28a62d6d60c0b64248738c92253c9cd319326fe252e239bc0c9c3d207b10770a1ca0c97c4bbe89df4ca9d89a6f6980117926457b347f0456d3ee38843fc0c92b2d200daa18c1dedcaff7a81892af56c4491e84ee9c3ed63d616087021b5277f9a396897b4193e1f28bcbbc6ec4421df4c29f50e99bf37f2a2cb648c909a33ccb370aa27c3f95290eb3d27ea6e34b303208c93447b33fab1744fdd58888ee829ec48856c099cbe043dbc2e8c8f444fbbb5d351538363b45c68b0fae7078d049dbe0ad7b802c7d15d36ec3bab763ce32d30689a3dafd340dba3d8454941840db33bbc50a36aad491ab17c8c3f9fac9d9b7fd80da23f50088d83c3421f818b43a031a8855e6ead48ed6e5d4f5e2697776c7dd6d5e465425d94f3f31a81b75c86d3c8473021cfab3c6dd52a7aac48ee0de4193aab0e5be6fc91cf48dff1e5756c53817e019bcb83952c385c0a723a043c7161b48166c19f5eb23222ccaa587d1bb388e6ff1efa041df9813368fe056e500a9c8f4971040bed9ad596abfc75935ec692dec0bda9e1eb611325f0ba7d3648e0d1235254ec61d9389f81e72607bb336b2ce0f929139124fd85d060e063ff6c46697a8b75aae34c7daa7851c562acb23959f1e1beb3382b76fbf653ed0c62223305a64d61d1cfb02b9210ad7655224f13ca3c537502e1e6be463b5b31c5b80f7ee5192d175fe2c04fffcaf1a80b16efe596621a9559407cdff5c2e2ea3d5f6f7856f201d925b0d62274d5cce3959854b73f8888dd02a68740e13d336730c4618c384be577aa8fb3f58ae32533af8b8b1432c87b48657856f3cbd73cdafc95afef98a461bec5871086a20d15d9af02532f0bc48b5772cd0373496afbfefe224a4d56afd5243d1dafdeb3450560bf1ceef1d4a9171e3cec99d255732052e30d946669072683f59a3748a006be34b689d8fbb2e1fe03d10a5f94280a136050fd27880d152fe2fd01050b038e5082959b7f067fc2024f8ee8f2752a564f3e19947c0e634f008b7dfb2ade426082f487302ed5a3afde015b3460ab68b9fb1bbb08357f905d80deb8fd935afe2383d3b0bdd1ebb76a8526a40de6fe0c1e4770fc4ac2a5b8f7b59df90dace580e0b9fa7731ed1d732eaa04a1070e0d1eb071432078c5852fd9b628a053823b29268684fb4e87ad4888ff5014f39a75621712c4d03d270aec407aaa986df5dac70df6ce663035e1882df2d05c0e647ee3e15b4c71166ed0f5d1b8f0a9d062077653fca34b8506029496c1a4cf797b85093df14e4ebcf0f83c8fa772f5398e691b356505c84f6125e47a92f2179ab67f94aa88e838f30b3ab03448cfa32fbc81c6f4a47bed6cb0a06efc2419f70afa863e6c8c55e0f5a61b85c943064b7c73c80bd652c4c1685b1edd240caa6d595c3df4332af03ad011000905f4ca73246cf03d5feff2d6fe7362509976a47fedeb192b6f03f7d32cf44b5642e02009f08b81765de3ba2dae842ca7aaa678c62474a8ebe4ddb65c9974e2c3b0907bd45132902dcc26d6656f9c8fc1834ec91a8701c86674685c3cfabd6cc665a04f32d5338a3063cf1ddbc012bd6d06d5c3fb153dfbadb9f8341dd5a88cd399f728813230d954b0d4e0d4c5dd9e598eaebb9721215344a9cb2d77ad013e5e8a0e7c24736ef6683e6190d9d9d133b0a7c81ceb4c2d4a30581051ab783ef9ca462968792821687cba8427ea9c12070f3b9bcb9ca6a2f5fcb2e3a29e27ba17403420613796e9bdcb33cd3b72dff77ab4acd78ff2e54ed94b2c2945d265dec41603b7f234a4a20c34b267d18a03cbc3e20709d5c4c2c884fa50b040fffe767077707c63a574e8fea77be1a9934223741d68827f190c65b5e7b59bfd4ea9ace76ba8261473f102b7196ed964e68b7f189291c1eba0350c9b5a18d7e1deaadf2cdd425207b6ade20febfa48191a1ee674d74b9c445d29d34fa887d4bb68ae65dbb522a4dec1980aceec57a46f75faf31bbb7dae982f8f4f4f89c5f3f569aa4b0d681fb75f1f196c4a89cb3eb67c0f5a49c74dda236fcee8d11d7af341cdf0d4cd742b52608ae116e45837167681d169c717cd267576dd970559c7f6f54e497d17e8b82c359bfebe1959e9662f27943a5ebe11d8efdaa31bf2ebbc821bf863c833fa6c1fccb9714e6a0eb031f185338bb33eb8f5cf8cfb1436a6bd9aa0d4854e7bf83ac6bd0581548f89aecc9dbdb09ee57c9b9a737e900b175b33d1d29f395da93d506ecdeb8cd4719c4a7a6d65a9b87a1b6842937dd02ef6fa346f1434f79b782e975c35100d2539eb4a1baee0420d3fc653e6c1e5a1c70d7eeff21b360e5a3cb7b77ba644e8bb49ad8c31f259fccb0d765bab7af34640e6b3ca1e0108eaedb6dc4bf982f9622f6d0bb09c6964f62a0c80b6d8c1e620e1d2bee2277bb1296c20bf679d1d08a3592934dc98df01e0ae41d449ef4d85c8ecc4ae406b245c3a6e3d511ef5a7b7a7b6ebb62eb8dbcb2be7d6a68773c366bd41f2c31516eddc38c288d8cc9e0d6349a984214d5d5be5d9a778ebc2890b18e6cb8eb21f01dd79b42d560958216ee7be5380f13ae5854ce69c4db783f65353b88741327d515ac577c7ef199cfcc20a684dc65b286f44a296b4124614e061b33a661f9db5804cc3446dce8dc36a87381fdc63b95215e91800cb7d7f386d10f7d8922f8aab8b1b9d56c284b042c79c36de907e895089856d598277954a2684a2baaea2ff3989809c06d436a5ac701f6bf60d5a459d2ef48c780370489e27a9b7f5fd8985d3a27b043423075ed2ce9f7fc830dddd06fb318a979e436c4bbbfa36dbe2f1a11987f17d77cc63747918b0e58097c91c42bfe11f4f4619bb0fb71536f6f730b1aa14228616295ff65de682ecc2f7dbcdf1db82ed368289d6a2fffdcc5c2ab6ff249f2b4cbaa71ba43e2313ec2fcb13c5c89593bed37b45232fdd984c8eb3ad58f83033deba0e74f5e3c9925201d1d13aa89c88eeffc68600f28cd775266b3982ed3467b86acaae8e55e199e2f19464cfdfb705805ef7ac877382f7725c5683115402fa7e568cb3b845e572a25c682bde474938cc3c3c4f104ab6363c31e5fba25b3328becaf2bfd804181211872c3aed79a6ff3a5480ffaef83fedff8afcf78eb4a153fc27e02207a4c347b6ed3fe8c3918282cd1163e95b4594a43146d5afcdcf22314fe4c455fae7f1f0e2f225908de31be1ee488532bf1ff41bf726674b933a53b8cbfcf62265a482a0876653f2f15e137928a022aa16df2fccb3cea5b6bde56d8cbc595731e173cff8a115756f9387f3a10bfafc8b65938bb8dcc8e4795420fce1ce1d10dc6418d7854ff37a69dc11d3fb5fc690a50c69a7205fa3f494f6518678c1a1889f429effe0211eaa8c86d0492a415fe3a6711750fa70ae805683d1ad30c9ada500f4a8d27aa5d5ed57be06d94fd10a943447be99493b29ad9a993fa21eb0941b55ec1d1cc0ae8a08411411afe5cf62ed48d4b865cb4c7796b9f06dc67a33a8230eb3097f77fdcbeeb659a49db954b7a56f5a74c5cb10591cca945ebd1fe98fa6242c12d1db72c1b55f0057448f9ac25c6990216ca4ab819524da1773b7f8c27f2adf2f3f5011f480bcd8b23ed020cf7d4eb09d4e4aa674efe9d6a3d927bd4ba7717cd56e9f94e4ac72bdb916f8144a9cc37d9d7df6d4841726891b897118c85e61048e447139649200bc04020c211436cbec1b3e1e8c47343c13f0345a11792686f2e2fc93f3477fc296c1e463af443b5f42329ccc3c4bd5a9b115fb95d4e87b97e4942b4d1a4bb2461f29755c0444f2d830d2412f095983364fee3ab809ef8f8a280140eb4b0cfad84335b8810e771a1c5868f481e709b39b2e587958508a117b9eb64258cce0ec6689a77346c93b44aa824600f1c4444f000a5c9f1c1fd17b5da54ff768177874eb11ed97795c25dec66ed2590e1d68bd57ba3370034a9d82247da8338e2bc7bc829e7116be0c79b21e231f1d2eeb1eec0f618a162b0810f174e383d50527e66db38b592696392134f2b71189afe67a846a31dfea56dce89087ab7f9e50f90a249519950d67b99e0b1d80f8aa4ba7a0a0253b1fccde0927369c606ebbb584d03a259a37795d0a34233d6622bfa062990e2da8045e90bd06761cd3023b3dd1b1bb6921a4c70790d173e12b705cf8160eb516770c0b4379152156e11867811273c35f4823e99a7e9a849bf3cf31908f4fa1e139c9ae7a3287066cbb585915a091963a7b7772cab834309282ffa0c2f74d37703836d84cf47e3c494364c0a6c7a19bfd16e3ac7026a415c31c4e892281c5130e1ab3fc481d778bbad38b92f78825a9d1795a194f7637d656dce3638005c281bce064eb5a562f886527a2871afac9c535b40f337ae2ad805bf9a95ee55e34a1020238791025ef45611598fcfc719bc984b1866f7529395230b9181439d29e2", 0x2000, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x60, 0xfffffffffffffffe, 0x40, {{0x7, 0x8, 0x0, 0x45e, 0x6, 0x2, 0x1000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.368282304s ago: executing program 6 (id=6758): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707c, 0x8, 0xffffffff, 0x3b4}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x2d06, 0xf264, 0x4c, 0x0, 0x0) 1.366821379s ago: executing program 2 (id=6759): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.277050029s ago: executing program 0 (id=6760): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000012c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001380)={0x0, 0x3938700}, 0x1, 0x1, 0x1}) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) 1.19439166s ago: executing program 8 (id=6761): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) 896.94735ms ago: executing program 8 (id=6762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 880.333818ms ago: executing program 0 (id=6763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 688.138246ms ago: executing program 8 (id=6764): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003700)=[{&(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000b40)='S', 0x1}], 0x1, 0x0, 0x0, 0xd1}], 0x1, 0x5) 415.613933ms ago: executing program 2 (id=6765): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000200)='wchan\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0x401, 0x9) 358.795194ms ago: executing program 4 (id=6766): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)=""/4, &(0x7f00000001c0)=0x4) 182.175537ms ago: executing program 4 (id=6767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 429.109µs ago: executing program 4 (id=6768): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x3}, 0x8) 0s ago: executing program 2 (id=6769): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000845000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000507000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1632, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xc, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ndor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1259.631948][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1259.631972][ T5870] usb 3-1: Product: syz [ 1259.631988][ T5870] usb 3-1: SerialNumber: syz [ 1259.651051][ T5870] usb 3-1: config 0 descriptor?? [ 1259.697137][ T5870] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1259.718827][ T5870] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 1259.887837][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1260.109003][T11087] usb 3-1: USB disconnect, device number 9 [ 1260.319934][T11087] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1267.887883][T16080] nfs: Deprecated parameter 'nointr' [ 1270.242552][T16097] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3343'. [ 1270.584607][ T805] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1270.754716][ T805] usb 1-1: Using ep0 maxpacket: 16 [ 1270.760231][ T805] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 1270.760264][ T805] usb 1-1: config 254 has no interface number 0 [ 1270.760314][ T805] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1270.760345][ T805] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1270.760376][ T805] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1270.760525][ T805] usb 1-1: config 254 interface 235 has no altsetting 0 [ 1271.749680][ T805] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1271.749716][ T805] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1271.749740][ T805] usb 1-1: Product: syz [ 1271.749756][ T805] usb 1-1: Manufacturer: syz [ 1271.749773][ T805] usb 1-1: SerialNumber: syz [ 1271.811913][T16101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1272.121929][ T805] usbtest 1-1:254.235: couldn't get endpoints, -71 [ 1272.122028][ T805] usbtest 1-1:254.235: probe with driver usbtest failed with error -71 [ 1272.155041][ T805] usb 1-1: USB disconnect, device number 17 [ 1273.249330][T16123] netlink: 'syz.8.3353': attribute type 1 has an invalid length. [ 1273.428408][T16128] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3355'. [ 1276.356138][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3368'. [ 1276.356182][T16168] openvswitch: netlink: Invalid VLAN frame [ 1276.361307][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 1276.361350][T16169] lo: entered promiscuous mode [ 1276.361372][T16169] lo: entered allmulticast mode [ 1276.423577][T16169] tunl0: entered promiscuous mode [ 1276.423608][T16169] tunl0: entered allmulticast mode [ 1276.445710][T16169] gre0: entered promiscuous mode [ 1276.445742][T16169] gre0: entered allmulticast mode [ 1276.446719][T16169] gretap0: entered promiscuous mode [ 1276.446742][T16169] gretap0: entered allmulticast mode [ 1276.447814][T16169] erspan0: entered promiscuous mode [ 1276.447837][T16169] erspan0: entered allmulticast mode [ 1276.448872][T16169] ip_vti0: entered promiscuous mode [ 1276.448893][T16169] ip_vti0: entered allmulticast mode [ 1276.499537][T16169] ip6_vti0: entered promiscuous mode [ 1276.499565][T16169] ip6_vti0: entered allmulticast mode [ 1276.502181][T16169] sit0: entered promiscuous mode [ 1276.502207][T16169] sit0: entered allmulticast mode [ 1276.504313][T16169] ip6tnl0: entered promiscuous mode [ 1276.504336][T16169] ip6tnl0: entered allmulticast mode [ 1276.539121][T16169] ip6gre0: entered promiscuous mode [ 1276.539150][T16169] ip6gre0: entered allmulticast mode [ 1276.555819][T16169] syz_tun: entered promiscuous mode [ 1276.555846][T16169] syz_tun: entered allmulticast mode [ 1276.610464][T16169] ip6gretap0: entered promiscuous mode [ 1276.610500][T16169] ip6gretap0: entered allmulticast mode [ 1276.611985][T16169] bridge0: entered promiscuous mode [ 1276.612012][T16169] bridge0: entered allmulticast mode [ 1276.659517][T16169] vcan0: entered promiscuous mode [ 1276.659548][T16169] vcan0: entered allmulticast mode [ 1276.679545][T16169] bond0: entered promiscuous mode [ 1276.679573][T16169] bond_slave_0: entered promiscuous mode [ 1276.679820][T16169] bond_slave_1: entered promiscuous mode [ 1276.680060][T16169] bond0: entered allmulticast mode [ 1276.680077][T16169] bond_slave_0: entered allmulticast mode [ 1276.680097][T16169] bond_slave_1: entered allmulticast mode [ 1276.681780][T16169] team0: entered promiscuous mode [ 1276.681802][T16169] team_slave_0: entered promiscuous mode [ 1276.682026][T16169] team_slave_1: entered promiscuous mode [ 1276.682247][T16169] team0: entered allmulticast mode [ 1276.682261][T16169] team_slave_0: entered allmulticast mode [ 1276.682280][T16169] team_slave_1: entered allmulticast mode [ 1276.683886][T16169] dummy0: entered promiscuous mode [ 1276.683909][T16169] dummy0: entered allmulticast mode [ 1276.793918][T16169] nlmon0: entered promiscuous mode [ 1276.793946][T16169] nlmon0: entered allmulticast mode [ 1276.826527][T16169] caif0: entered promiscuous mode [ 1276.826549][T16169] caif0: entered allmulticast mode [ 1276.826569][T16169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1277.204562][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1277.354563][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 1277.364545][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.364704][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1277.364851][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1277.688466][ T5884] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1277.688500][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.688522][ T5884] usb 1-1: Product: syz [ 1277.688539][ T5884] usb 1-1: Manufacturer: syz [ 1277.688654][ T5884] usb 1-1: SerialNumber: syz [ 1277.737748][ T5884] usb 1-1: config 0 descriptor?? [ 1277.773136][ T5884] usb 1-1: no audio or video endpoints found [ 1278.017324][T13350] usb 1-1: USB disconnect, device number 18 [ 1279.260394][T16216] netlink: 'syz.8.3391': attribute type 1 has an invalid length. [ 1279.780252][ T38] audit: type=1326 audit(1279.361:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16231 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1279.780314][ T38] audit: type=1326 audit(1279.361:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16231 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1279.805487][ T38] audit: type=1326 audit(1279.391:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16231 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1279.806425][ T38] audit: type=1326 audit(1279.391:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16231 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1279.812339][ T38] audit: type=1326 audit(1279.391:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16231 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1280.163927][T16240] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3403'. [ 1280.520658][T16250] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1281.711859][T16270] Invalid source name [ 1281.711882][T16270] UBIFS error (pid: 16270): cannot open "./file0", error -22 [ 1286.414001][T16337] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3443'. [ 1287.101272][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'. [ 1288.439840][T16376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3457'. [ 1288.984637][T12587] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1289.150766][T12587] usb 3-1: Using ep0 maxpacket: 8 [ 1289.153526][T12587] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1289.153564][T12587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1289.153590][T12587] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1289.153616][T12587] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x48, changing to 0x8 [ 1289.153800][T12587] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 893 [ 1289.215414][T12587] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 1289.215447][T12587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.215470][T12587] usb 3-1: Product: syz [ 1289.215485][T12587] usb 3-1: Manufacturer: syz [ 1289.215502][T12587] usb 3-1: SerialNumber: syz [ 1289.260806][T12587] usb 3-1: config 0 descriptor?? [ 1289.279945][T16385] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1289.300998][T12587] kvaser_usb 3-1:0.0: error -EPROTO: Cannot get software info [ 1289.301417][T12587] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -71 [ 1289.535911][T11087] usb 3-1: USB disconnect, device number 10 [ 1289.660998][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'. [ 1291.548490][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1291.695328][T16423] bond1: option ad_actor_sys_prio: invalid value (0) [ 1291.695353][T16423] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1291.750430][T16423] bond1 (unregistering): Released all slaves [ 1293.347728][T16455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3492'. [ 1293.546188][T16462] netlink: 'syz.4.3493': attribute type 3 has an invalid length. [ 1293.713114][T16467] bridge1: entered promiscuous mode [ 1294.273541][T16483] geneve2: entered promiscuous mode [ 1296.395406][T16510] bond1: entered promiscuous mode [ 1296.395441][T16510] bond1: entered allmulticast mode [ 1296.396083][T16510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1297.002268][T16526] overlayfs: overlapping lowerdir path [ 1297.228122][T16524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1297.234685][T16527] : renamed from vlan0 (while UP) [ 1305.053904][T16607] overlayfs: overlapping lowerdir path [ 1305.220134][T16613] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3555'. [ 1306.185617][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.185694][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.679128][T16672] mmap: syz.7.3580 (16672): VmData 37466112 exceed data ulimit 44948. Update limits or use boot option ignore_rlimit_data. [ 1313.796669][T16729] netlink: 'syz.0.3599': attribute type 79 has an invalid length. [ 1313.863382][T16731] netlink: 'syz.7.3600': attribute type 5 has an invalid length. [ 1313.863408][T16731] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3600'. [ 1313.963805][T16735] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3602'. [ 1313.963837][T16735] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3602'. [ 1317.961303][T16759] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1318.344022][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 1319.302885][T16792] openvswitch: netlink: Duplicate key (type 21). [ 1321.235793][T16807] overlayfs: overlapping lowerdir path [ 1322.188007][T16823] netlink: 'syz.4.3637': attribute type 1 has an invalid length. [ 1322.188034][T16823] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1322.188052][T16823] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1322.188081][T16823] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1322.234249][T16822] netlink: 'syz.8.3636': attribute type 1 has an invalid length. [ 1322.413298][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3640'. [ 1323.979124][T16851] netlink: 'syz.2.3648': attribute type 23 has an invalid length. [ 1323.979154][T16851] IPv6: NLM_F_CREATE should be specified when creating new route [ 1326.012551][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3658'. [ 1326.108305][T16880] batadv0: entered promiscuous mode [ 1326.110359][T16880] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1328.340766][T16902] Unsupported ieee802154 address type: 0 [ 1328.892247][T16915] overlayfs: failed to clone lowerpath [ 1329.442439][T16934] /dev/nullb0: Can't open blockdev [ 1329.642557][T16945] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1329.642591][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1329.642609][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1329.730176][T16949] comedi comedi1: adq12b: I/O port conflict (0x4,16) [ 1331.396366][T16969] overlayfs: failed to clone lowerpath [ 1334.458062][T17001] netlink: 'syz.7.3705': attribute type 4 has an invalid length. [ 1334.458090][T17001] netlink: 'syz.7.3705': attribute type 17 has an invalid length. [ 1337.194580][ T5936] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1337.248359][T17030] netlink: 'syz.7.3718': attribute type 11 has an invalid length. [ 1337.248388][T17030] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.3718'. [ 1337.354675][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 1337.357855][ T5936] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 1337.357887][ T5936] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.357909][ T5936] usb 1-1: config 135 has no interface number 0 [ 1337.357969][ T5936] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.362675][ T5936] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1337.362707][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.362730][ T5936] usb 1-1: Product: syz [ 1337.362747][ T5936] usb 1-1: Manufacturer: syz [ 1337.362763][ T5936] usb 1-1: SerialNumber: syz [ 1337.448292][ T5936] uvcvideo 1-1:135.230: Found Unit with invalid ID 0 [ 1337.660562][ T5936] uvcvideo 1-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 1337.660611][ T5936] uvcvideo 1-1:135.230: No valid video chain found. [ 1337.681325][ T5936] usb 1-1: USB disconnect, device number 19 [ 1339.936128][T17067] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3733'. [ 1340.145280][T17074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3736'. [ 1340.165426][T17075] netlink: 'syz.0.3735': attribute type 49 has an invalid length. [ 1342.487119][T17106] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1342.718561][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3749'. [ 1342.718602][T17111] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3749'. [ 1344.705394][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.987745][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.216724][T17168] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3772'. [ 1346.218729][T17168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1347.392205][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.392738][T17181] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1350.572020][T17219] netlink: 'syz.8.3795': attribute type 6 has an invalid length. [ 1354.135708][ T38] audit: type=1326 audit(1353.721:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.139509][ T38] audit: type=1326 audit(1353.721:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.139566][ T38] audit: type=1326 audit(1353.721:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.139615][ T38] audit: type=1326 audit(1353.721:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.139663][ T38] audit: type=1326 audit(1353.721:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.139978][ T38] audit: type=1326 audit(1353.721:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.140266][ T38] audit: type=1326 audit(1353.721:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.140924][ T38] audit: type=1326 audit(1353.721:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.141211][ T38] audit: type=1326 audit(1353.721:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.4.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5cf21af749 code=0x7ffc0000 [ 1354.717039][T17289] netlink: 'syz.7.3819': attribute type 13 has an invalid length. [ 1356.284279][T17309] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1356.284491][T17309] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 1356.285250][T17309] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1356.285275][T17309] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 1356.734736][T17315] overlayfs: overlapping lowerdir path [ 1358.978016][T17359] kAFS: unable to lookup cell '' [ 1359.471058][T17367] overlayfs: failed to clone lowerpath [ 1363.508297][T17462] overlayfs: failed to clone lowerpath [ 1364.323629][ T38] audit: type=1326 audit(1363.901:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17467 comm="syz.7.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1364.324774][ T38] audit: type=1326 audit(1363.911:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17467 comm="syz.7.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1364.331278][ T38] audit: type=1326 audit(1363.911:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17467 comm="syz.7.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1364.332000][ T38] audit: type=1326 audit(1363.911:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17467 comm="syz.7.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1364.332286][ T38] audit: type=1326 audit(1363.911:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17467 comm="syz.7.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1364.752194][T17476] lo speed is unknown, defaulting to 1000 [ 1364.779780][T17476] lo speed is unknown, defaulting to 1000 [ 1364.781708][T17476] lo speed is unknown, defaulting to 1000 [ 1365.114624][T16859] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1365.245168][T17486] overlayfs: overlapping lowerdir path [ 1366.104495][T16859] usb 1-1: Using ep0 maxpacket: 32 [ 1366.227594][T16859] usb 1-1: config 80 has an invalid interface number: 56 but max is 0 [ 1366.227627][T16859] usb 1-1: config 80 has no interface number 0 [ 1366.227664][T16859] usb 1-1: config 80 interface 56 has no altsetting 0 [ 1366.529429][T16859] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 4.8c [ 1366.529466][T16859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.529489][T16859] usb 1-1: Product: syz [ 1366.529506][T16859] usb 1-1: Manufacturer: syz [ 1366.529523][T16859] usb 1-1: SerialNumber: syz [ 1367.065898][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.065976][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.751372][T16859] pegasus 1-1:80.56: probe with driver pegasus failed with error -71 [ 1367.767555][T16859] usb 1-1: USB disconnect, device number 20 [ 1367.830552][T17476] infiniband syz1: set active [ 1367.831961][T12207] lo speed is unknown, defaulting to 1000 [ 1367.832176][T17476] infiniband syz1: added lo [ 1369.177806][T17476] RDS/IB: syz1: added [ 1369.188671][T17476] smc: adding ib device syz1 with port count 1 [ 1369.189358][T17476] smc: ib device syz1 port 1 has no pnetid [ 1369.199212][ T5936] lo speed is unknown, defaulting to 1000 [ 1369.266100][T17476] lo speed is unknown, defaulting to 1000 [ 1370.564641][T17550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3926'. [ 1370.893479][T17565] vivid-000: disconnect [ 1370.894228][T17563] vivid-000: reconnect [ 1370.983628][T17476] lo speed is unknown, defaulting to 1000 [ 1372.052704][T17476] lo speed is unknown, defaulting to 1000 [ 1372.349356][T17588] netlink: 'syz.2.3941': attribute type 21 has an invalid length. [ 1372.349383][T17588] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1372.349529][T17588] netlink: 'syz.2.3941': attribute type 6 has an invalid length. [ 1372.349545][T17588] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1372.698366][T17600] sctp: [Deprecated]: syz.7.3948 (pid 17600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1372.698366][T17600] Use struct sctp_sack_info instead [ 1372.843929][T17476] lo speed is unknown, defaulting to 1000 [ 1374.099391][T17476] lo speed is unknown, defaulting to 1000 [ 1374.238705][ T38] audit: type=1326 audit(1373.811:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.238766][ T38] audit: type=1326 audit(1373.811:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.238813][ T38] audit: type=1326 audit(1373.821:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.238860][ T38] audit: type=1326 audit(1373.821:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.238906][ T38] audit: type=1326 audit(1373.821:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.238961][ T38] audit: type=1326 audit(1373.821:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.239008][ T38] audit: type=1326 audit(1373.821:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.255415][ T38] audit: type=1326 audit(1373.821:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.256804][ T38] audit: type=1326 audit(1373.841:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.8.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1374.798188][T17476] lo speed is unknown, defaulting to 1000 [ 1376.167177][ T38] audit: type=1326 audit(1375.751:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17636 comm="syz.7.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1376.340502][T17642] netlink: 'syz.2.3964': attribute type 1 has an invalid length. [ 1376.340546][T17642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1379.503436][T17691] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1379.503906][T17691] Error validating options; rc = [-22] [ 1379.751590][T17700] netlink: 'syz.4.3987': attribute type 5 has an invalid length. [ 1379.754076][T17701] netlink: 'syz.2.3988': attribute type 10 has an invalid length. [ 1379.754102][T17701] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3988'. [ 1379.782216][T17701] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1382.218835][T17734] IPVS: length: 235 != 24 [ 1382.351362][T17738] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4005'. [ 1382.691372][T13953] Bluetooth: hci2: unexpected cc 0x1005 length: 9 > 8 [ 1382.691411][T13953] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1384.027775][T17791] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1386.230058][T17835] netlink: 'syz.0.4047': attribute type 1 has an invalid length. [ 1386.904576][T17850] overlayfs: overlapping lowerdir path [ 1387.769213][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4059'. [ 1387.968445][T17872] netlink: 'syz.8.4062': attribute type 30 has an invalid length. [ 1389.600538][T17896] tipc: Trying to set illegal importance in message [ 1391.804166][T17943] trusted_key: encrypted_key: insufficient parameters specified [ 1391.895197][T17946] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1391.895236][T17946] openvswitch: netlink: Message has 16 unknown bytes. [ 1391.991378][T13953] Bluetooth: hci0: unknown advertising packet type: 0xcb [ 1393.786572][T17987] overlayfs: overlapping lowerdir path [ 1394.633671][T17993] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4115'. [ 1394.894149][T17996] netlink: 'syz.4.4117': attribute type 10 has an invalid length. [ 1395.842241][T17996] macvlan0: entered promiscuous mode [ 1395.842277][T17996] macvlan0: entered allmulticast mode [ 1395.875024][T17996] veth1_vlan: entered allmulticast mode [ 1395.901399][T17996] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1395.985218][T18013] netlink: 'syz.0.4123': attribute type 13 has an invalid length. [ 1396.410944][T18035] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4134'. [ 1396.570521][T18037] openvswitch: netlink: IP tunnel dst address not specified [ 1397.914660][T18048] netlink: 'syz.7.4140': attribute type 4 has an invalid length. [ 1398.267465][T18067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1400.067530][T18093] openvswitch: netlink: IP tunnel dst address not specified [ 1400.379244][T18108] overlayfs: failed to clone lowerpath [ 1400.636085][T18120] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4170'. [ 1401.145680][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4178'. [ 1403.960951][T18168] overlayfs: overlapping lowerdir path [ 1404.271486][T13953] Bluetooth: hci2: adv larger than maximum supported [ 1404.464590][T18179] ieee802154 phy0 wpan0: encryption failed: -22 [ 1406.461611][T18215] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1406.549158][T13953] Bluetooth: hci0: unexpected subevent 0x10 length: 244 > 2 [ 1406.761553][T18222] overlayfs: overlapping lowerdir path [ 1407.470116][T18221] overlayfs: overlapping lowerdir path [ 1409.154788][T17235] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1409.307422][T17235] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 1409.307475][T17235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.359663][T17235] pwc: Logitech ViewPort AV 100 webcam detected. [ 1409.947767][T17235] pwc: send_video_command error -71 [ 1409.947789][T17235] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1409.947916][T17235] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 1409.952690][T17235] usb 1-1: USB disconnect, device number 21 [ 1410.053362][T18286] $H: renamed from bond0 (while UP) [ 1410.113199][T18286] $H: entered promiscuous mode [ 1410.113228][T18286] bond_slave_0: entered promiscuous mode [ 1410.113521][T18286] bond_slave_1: entered promiscuous mode [ 1410.266835][T18288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4240'. [ 1410.266872][T18288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4240'. [ 1411.975470][T18307] geneve2: entered promiscuous mode [ 1412.398403][T18323] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4257'. [ 1413.932048][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4271'. [ 1416.692494][T18427] overlayfs: overlapping lowerdir path [ 1417.389453][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 1417.392363][ T38] audit: type=1326 audit(1416.971:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18455 comm="syz.8.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1417.392448][ T38] audit: type=1326 audit(1416.971:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18455 comm="syz.8.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1417.392501][ T38] audit: type=1326 audit(1416.971:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18455 comm="syz.8.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1417.392736][ T38] audit: type=1326 audit(1416.971:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18455 comm="syz.8.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1417.392910][ T38] audit: type=1326 audit(1416.971:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18455 comm="syz.8.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1417.557584][T18461] kernel profiling enabled (shift: 63) [ 1417.557609][T18461] profiling shift: 63 too large [ 1418.893715][T18479] lo speed is unknown, defaulting to 1000 [ 1418.893814][T18479] lo speed is unknown, defaulting to 1000 [ 1418.907110][T18479] lo speed is unknown, defaulting to 1000 [ 1418.951708][T18479] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1419.028680][T18479] lo speed is unknown, defaulting to 1000 [ 1419.031687][T18479] lo speed is unknown, defaulting to 1000 [ 1419.047248][T18479] lo speed is unknown, defaulting to 1000 [ 1419.051867][T18479] lo speed is unknown, defaulting to 1000 [ 1419.066737][T18479] lo speed is unknown, defaulting to 1000 [ 1419.069860][T18479] lo speed is unknown, defaulting to 1000 [ 1419.340711][T18490] overlayfs: overlapping lowerdir path [ 1419.524566][T16283] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1419.674426][T16283] usb 3-1: Using ep0 maxpacket: 32 [ 1419.677065][T16283] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1419.677093][T16283] usb 3-1: config 0 has no interface number 0 [ 1419.769456][T16283] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1419.769492][T16283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.769515][T16283] usb 3-1: Product: syz [ 1419.769530][T16283] usb 3-1: Manufacturer: syz [ 1419.769547][T16283] usb 3-1: SerialNumber: syz [ 1419.808161][T16283] usb 3-1: config 0 descriptor?? [ 1419.822210][T16283] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1419.822250][T16283] usb 3-1: selecting invalid altsetting 1 [ 1419.822270][T16283] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1420.042987][T16283] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1420.055344][T16283] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1420.055415][T16283] usb 3-1: media controller created [ 1420.159637][T16283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1420.280832][T16283] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1420.281733][T16283] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1420.358866][T16283] DVB: Unable to find symbol mxl5005s_attach() [ 1420.482377][T16283] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1420.576513][T16283] usb 3-1: USB disconnect, device number 11 [ 1421.085678][T18531] netlink: 'syz.0.4345': attribute type 1 has an invalid length. [ 1421.205390][T18532] overlayfs: overlapping lowerdir path [ 1421.382624][T18539] kAFS: unable to lookup cell '.,' [ 1421.900162][T18550] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4352'. [ 1421.905205][T18551] veth1: mtu greater than device maximum [ 1423.167490][T16283] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1423.340650][T16283] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1423.340685][T16283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.369442][T16283] usb 3-1: config 0 descriptor?? [ 1423.379984][T16283] cp210x 3-1:0.0: cp210x converter detected [ 1423.882674][T16283] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1423.950129][T16283] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1423.950160][T16283] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1423.967137][T16283] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1423.976251][T16283] usb 3-1: USB disconnect, device number 12 [ 1423.991086][T16283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1423.991578][T16283] cp210x 3-1:0.0: device disconnected [ 1424.301278][T18588] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4369'. [ 1425.966429][ T8242] tipc: Subscription rejected, illegal request [ 1427.657207][T16283] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1427.806586][T16283] usb 3-1: Using ep0 maxpacket: 32 [ 1427.811038][T16283] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1427.811088][T16283] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1427.811124][T16283] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1427.811149][T16283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.830015][T16283] usb 3-1: config 0 descriptor?? [ 1428.485236][T16283] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 1428.485277][T16283] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 1428.485306][T16283] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 1428.485333][T16283] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 1428.485361][T16283] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 1428.491761][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.491838][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.493807][T16283] corsair-cpro 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1428.613494][T16283] corsair-cpro 0003:1B1C:0C10.0012: probe with driver corsair-cpro failed with error -38 [ 1428.635290][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4408'. [ 1428.665790][ T44] usb 3-1: USB disconnect, device number 13 [ 1429.936480][T18707] overlayfs: failed to clone lowerpath [ 1430.863046][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4427'. [ 1431.385746][T18729] overlayfs: overlapping lowerdir path [ 1432.534606][T18734] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1432.535013][T18734] macvlan2: entered promiscuous mode [ 1432.536638][T18734] macvlan2: entered allmulticast mode [ 1432.536665][T18734] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1432.844696][T18748] bridge_slave_0: default FDB implementation only supports local addresses [ 1433.893209][T18759] overlayfs: overlapping lowerdir path [ 1434.731708][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4443'. [ 1436.205613][T18777] IPv6: Can't replace route, no match found [ 1437.193548][T18801] overlayfs: overlapping lowerdir path [ 1438.718366][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4459'. [ 1440.261289][T18834] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4469'. [ 1440.261318][T18834] netlink: 35 bytes leftover after parsing attributes in process `syz.8.4469'. [ 1440.261337][T18834] netlink: 'syz.8.4469': attribute type 5 has an invalid length. [ 1440.261353][T18834] netlink: 'syz.8.4469': attribute type 6 has an invalid length. [ 1440.261368][T18834] netlink: 35 bytes leftover after parsing attributes in process `syz.8.4469'. [ 1441.024422][T16283] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1441.175326][T16283] usb 1-1: Using ep0 maxpacket: 8 [ 1441.328427][T16283] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1441.344104][T16283] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 1441.344136][T16283] usb 1-1: config 4 has no interface number 0 [ 1441.344174][T16283] usb 1-1: config 4 interface 30 has no altsetting 0 [ 1441.388520][T16283] usb 1-1: string descriptor 0 read error: -22 [ 1441.388682][T16283] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1441.388710][T16283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.433238][T16283] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1441.433298][T16283] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1441.458160][T16283] dvb-usb: bulk message failed: -22 (2/0) [ 1441.512025][T16283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1441.513224][T16283] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1441.513285][T16283] usb 1-1: media controller created [ 1441.513319][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4488'. [ 1441.515865][T16283] dvb-usb: bulk message failed: -22 (6/0) [ 1441.515887][T16283] dw2102: i2c transfer failed. [ 1441.515910][T16283] dvb-usb: bulk message failed: -22 (6/0) [ 1441.515926][T16283] dw2102: i2c transfer failed. [ 1441.515944][T16283] dvb-usb: bulk message failed: -22 (6/0) [ 1441.515959][T16283] dw2102: i2c transfer failed. [ 1441.515976][T16283] dvb-usb: bulk message failed: -22 (6/0) [ 1441.515992][T16283] dw2102: i2c transfer failed. [ 1441.516009][T16283] dvb-usb: bulk message failed: -22 (6/0) [ 1441.516025][T16283] dw2102: i2c transfer failed. [ 1441.516041][T16283] dvb-usb: bulk message failed: -22 (6/0) [ 1441.516056][T16283] dw2102: i2c transfer failed. [ 1441.516073][T16283] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1441.650962][T18851] dvb-usb: bulk message failed: -22 (3/0) [ 1441.650987][T18851] dw2102: i2c transfer failed. [ 1441.650996][T18851] dvb-usb: bulk message failed: -22 (3/0) [ 1441.651012][T18851] dw2102: i2c transfer failed. [ 1441.711877][T16283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1441.765912][T16283] dvb-usb: bulk message failed: -22 (3/0) [ 1441.765939][T16283] dw2102: command 0x0e transfer failed. [ 1441.765950][T16283] dvb-usb: bulk message failed: -22 (3/0) [ 1441.765964][T16283] dw2102: command 0x0e transfer failed. [ 1442.080102][T16283] dvb-usb: bulk message failed: -22 (3/0) [ 1442.080128][T16283] dw2102: command 0x0e transfer failed. [ 1442.080140][T16283] dvb-usb: bulk message failed: -22 (3/0) [ 1442.080155][T16283] dw2102: command 0x0e transfer failed. [ 1442.080166][T16283] dvb-usb: bulk message failed: -22 (1/0) [ 1442.080181][T16283] dw2102: command 0x51 transfer failed. [ 1442.080192][T16283] dvb-usb: bulk message failed: -22 (5/0) [ 1442.080208][T16283] dw2102: i2c probe for address 0x68 failed. [ 1442.080220][T16283] dvb-usb: bulk message failed: -22 (5/0) [ 1442.080235][T16283] dw2102: i2c probe for address 0x69 failed. [ 1442.080248][T16283] dvb-usb: bulk message failed: -22 (5/0) [ 1442.080263][T16283] dw2102: i2c probe for address 0x6a failed. [ 1442.080275][T16283] dw2102: probing for demodulator failed. Is the external power switched on? [ 1442.080287][T16283] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1442.314445][T16283] rc_core: IR keymap rc-tt-1500 not found [ 1442.314465][T16283] Registered IR keymap rc-empty [ 1442.358476][T16283] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1442.377644][T16283] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input18 [ 1442.381993][T16283] dvb-usb: schedule remote query interval to 250 msecs. [ 1442.382020][T16283] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1442.382035][T16283] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1442.422916][T16283] usb 1-1: USB disconnect, device number 22 [ 1443.022055][T16283] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1445.416538][T18909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.416968][T18909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.707759][ T805] kernel read not supported for file /794/cmdline (pid: 805 comm: kworker/1:2) [ 1448.374034][T18909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.408496][T18909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1448.520349][T18909] veth1_vlan: left allmulticast mode [ 1449.638226][T18909] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1449.698010][ T44] lo speed is unknown, defaulting to 1000 [ 1449.698057][ T44] syz1: Port: 1 Link DOWN [ 1449.804775][T13193] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.810032][ T44] lo speed is unknown, defaulting to 1000 [ 1449.810113][T13193] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.810162][T13193] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.810202][T13193] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.977174][T18969] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1450.091114][T18976] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4529'. [ 1451.019466][T19012] usb usb1: usbfs: process 19012 (syz.4.4547) did not claim interface 8 before use [ 1451.564659][ T5936] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1451.716647][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 1451.718919][ T5936] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.718955][ T5936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1451.718990][ T5936] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1451.719008][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.722725][ T5936] usb 5-1: config 0 descriptor?? [ 1452.297669][ T5936] lg-g15 0003:046D:C225.0013: hidraw0: USB HID vb.27 Device [HID 046d:c225] on usb-dummy_hcd.4-1/input0 [ 1452.495671][ T5936] usb 5-1: USB disconnect, device number 21 [ 1452.702209][T19059] bond1: option lacp_rate: invalid value (64) [ 1452.738207][T19059] bond1 (unregistering): Released all slaves [ 1453.891364][T19079] trusted_key: encrypted_key: key trusted:s)yz not found [ 1454.581948][T19099] xt_l2tp: invalid flags combination: 0 [ 1455.322833][T19105] overlayfs: overlapping lowerdir path [ 1456.285372][T19125] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4596'. [ 1457.554608][T19160] netlink: 'syz.8.4611': attribute type 13 has an invalid length. [ 1457.627693][T19162] Invalid ELF header magic: != ELF [ 1459.565452][T11795] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1459.636714][T19200] overlayfs: overlapping lowerdir path [ 1459.735635][T11795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.735692][T11795] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1459.735719][T11795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.787054][T11795] usb 1-1: config 0 descriptor?? [ 1460.256098][T11795] elecom 0003:056E:00E6.0014: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 1460.422932][T19215] trusted_key: encrypted_key: hex blob is missing [ 1460.446688][T16283] usb 1-1: USB disconnect, device number 23 [ 1461.916025][T13953] Bluetooth: hci2: command 0x2016 tx timeout [ 1462.074461][ T5936] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1462.224763][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 1462.241152][ T5936] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1462.241183][ T5936] usb 1-1: config 0 has no interface number 0 [ 1462.241232][ T5936] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1462.241257][ T5936] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1462.241285][ T5936] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1462.241303][ T5936] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1462.241323][ T5936] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1462.241339][ T5936] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.259336][ T5936] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1462.259360][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.259378][ T5936] usb 1-1: Product: syz [ 1462.259388][ T5936] usb 1-1: Manufacturer: syz [ 1462.259399][ T5936] usb 1-1: SerialNumber: syz [ 1462.363302][ T5936] usb 1-1: config 0 descriptor?? [ 1462.390718][T19236] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4640'. [ 1464.001975][T13069] Bluetooth: hci2: command 0x2016 tx timeout [ 1464.541802][ T5936] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1465.763875][T19259] vlan0: entered promiscuous mode [ 1465.775687][T11087] usb 1-1: USB disconnect, device number 24 [ 1465.911791][T19259] team0: Port device vlan0 added [ 1465.911827][T19259] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1467.250025][T19275] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1467.250074][T19275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1469.422127][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4666'. [ 1469.934918][T19308] overlayfs: overlapping lowerdir path [ 1470.151015][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'. [ 1471.334507][T19349] netlink: 'syz.8.4684': attribute type 11 has an invalid length. [ 1472.164593][T19371] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1473.148680][T19404] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4709'. [ 1473.697214][T19422] [U] v [ 1474.212672][T19436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4725'. [ 1474.494454][T11795] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1474.534430][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1474.644628][T11795] usb 5-1: Using ep0 maxpacket: 16 [ 1474.647642][T11795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.647679][T11795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.647721][T11795] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1474.647748][T11795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.652992][T11795] usb 5-1: config 0 descriptor?? [ 1474.809713][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1474.809739][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1474.809798][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1475.607533][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607575][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607604][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607634][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607662][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607691][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607719][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607748][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607776][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.607804][T11795] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 1475.696398][T11795] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf3 found [ 1475.696426][T11795] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf4 found [ 1475.881577][ T5883] usb 5-1: USB disconnect, device number 22 [ 1475.884690][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1475.886832][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.886865][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.937928][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1475.937962][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1475.937985][ T10] usb 3-1: Product: syz [ 1475.938001][ T10] usb 3-1: Manufacturer: syz [ 1476.000151][ T10] hub 3-1:4.0: USB hub found [ 1476.322779][ T10] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1476.809421][ T10] usb 3-1: USB disconnect, device number 14 [ 1477.215290][T19488] sp0: Synchronizing with TNC [ 1477.231022][T19487] [U] [ 1477.356239][T19490] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4747'. [ 1478.273433][T19491] pim6reg: entered allmulticast mode [ 1478.547967][T19512] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1478.903210][T19523] overlayfs: failed to clone lowerpath [ 1478.972454][ T5883] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1479.125467][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1479.149584][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.149615][ T5883] usb 1-1: config 0 has no interfaces? [ 1479.175476][ T5883] usb 1-1: language id specifier not provided by device, defaulting to English [ 1479.181290][ T5883] usb 1-1: New USB device found, idVendor=19d2, idProduct=1132, bcdDevice=2c.c2 [ 1479.181325][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.181349][ T5883] usb 1-1: Product: syz [ 1479.181365][ T5883] usb 1-1: Manufacturer: syz [ 1479.181382][ T5883] usb 1-1: SerialNumber: syz [ 1479.239645][ T5883] usb 1-1: config 0 descriptor?? [ 1479.251608][T19521] usb usb1: usbfs: process 19521 (syz.4.4758) did not claim interface 0 before use [ 1479.573465][ T805] usb 1-1: USB disconnect, device number 25 [ 1483.113613][T19613] program syz.0.4797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1483.184748][T19614] program syz.0.4797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1486.818477][T19665] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4814'. [ 1487.724353][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1487.894396][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1487.903550][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1487.903584][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.903607][ T10] usb 5-1: Product: syz [ 1487.903624][ T10] usb 5-1: Manufacturer: syz [ 1487.903641][ T10] usb 5-1: SerialNumber: syz [ 1487.952654][ T10] usb 5-1: config 0 descriptor?? [ 1487.969060][ T10] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1489.255953][ T10] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 1489.289357][ T10] usb 5-1: USB disconnect, device number 23 [ 1489.929325][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.929406][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.427735][T19747] overlayfs: failed to clone lowerpath [ 1491.274625][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1491.742353][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.742407][ T44] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1491.742433][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.749513][T19756] overlayfs: failed to clone lowerpath [ 1491.768404][ T44] usb 1-1: config 0 descriptor?? [ 1492.311634][ T44] cherry 0003:046A:0023.0016: bogus close delimiter [ 1492.311661][ T44] cherry 0003:046A:0023.0016: item 0 1 2 10 parsing failed [ 1492.321563][ T44] cherry 0003:046A:0023.0016: probe with driver cherry failed with error -22 [ 1492.520099][ T44] usb 1-1: USB disconnect, device number 26 [ 1492.836586][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4860'. [ 1492.836634][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4860'. [ 1492.942443][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1494.296657][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4871'. [ 1494.296686][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4871'. [ 1496.154615][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1496.557813][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1496.557847][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1496.557870][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.557893][ T10] usb 5-1: config 220 has no interface number 2 [ 1496.557973][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1496.558006][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1496.558027][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1496.558049][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1496.561098][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1496.561131][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.561215][ T10] usb 5-1: Product: syz [ 1496.561233][ T10] usb 5-1: Manufacturer: syz [ 1496.561250][ T10] usb 5-1: SerialNumber: syz [ 1497.835895][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1497.835935][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 1497.836001][ T10] usb 5-1: selecting invalid altsetting 0 [ 1497.915998][ T10] usb 5-1: selecting invalid altsetting 0 [ 1497.916039][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1497.926277][ T10] usb 5-1: USB disconnect, device number 24 [ 1497.937650][T19875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1497.937679][T19875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1499.746305][T19907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1501.410923][T19937] random: crng reseeded on system resumption [ 1501.661292][T19945] tipc: Started in network mode [ 1501.661331][T19945] tipc: Node identity daca2f3ca848, cluster identity 4711 [ 1501.697392][T19945] tipc: Enabled bearer , priority 10 [ 1502.286948][ T5883] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1502.774516][ T805] tipc: Node number set to 1921134396 [ 1502.867633][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 1502.882334][ T5883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.882374][ T5883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.882402][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1502.882441][ T5883] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 1502.882468][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.951637][ T5883] usb 5-1: config 0 descriptor?? [ 1503.140378][T19969] kernel profiling enabled (shift: 7) [ 1503.327967][T19974] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4941'. [ 1503.437427][ T5883] wacom 0003:056A:00DE.0017: unbalanced collection at end of report description [ 1503.438279][ T5883] wacom 0003:056A:00DE.0017: parse failed [ 1503.438401][ T5883] wacom 0003:056A:00DE.0017: probe with driver wacom failed with error -22 [ 1503.625574][ T5883] usb 5-1: USB disconnect, device number 25 [ 1503.963031][T19993] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4951'. [ 1503.963184][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4951'. [ 1504.595247][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4958'. [ 1504.603036][T20011] IPVS: Error connecting to the multicast addr [ 1504.754465][T16283] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1504.915554][T16283] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1504.915590][T16283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.966237][T16283] usb 5-1: config 0 descriptor?? [ 1504.970011][T16283] cp210x 5-1:0.0: cp210x converter detected [ 1505.084663][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1505.237669][ T5884] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.237792][ T5884] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1505.237820][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.336356][ T5884] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1505.405165][T16283] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1505.591180][T11087] usb 5-1: USB disconnect, device number 26 [ 1505.615172][T11087] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1505.740407][T11087] cp210x 5-1:0.0: device disconnected [ 1506.395317][ T5884] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1506.597078][ T5884] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1506.597107][ T5884] stv0680 1-1:4.0: last error: 86, command = 0x0 [ 1506.616319][ T5884] usb 1-1: USB disconnect, device number 27 [ 1508.841516][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1508.841577][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1508.841618][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1508.841657][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1509.855176][T20107] overlay: ./file0 is not a directory [ 1512.632055][T20147] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1512.632055][T20147] The task syz.8.5014 (20147) triggered the difference, watch for misbehavior. [ 1513.597836][T20160] pim6reg9: entered allmulticast mode [ 1513.703636][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5023'. [ 1513.703678][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5023'. [ 1513.745261][T20162] gretap0: entered promiscuous mode [ 1513.805260][T20162] gretap0: left promiscuous mode [ 1515.711948][T20177] autofs: Unknown parameter '00000000000000000000' [ 1517.094642][T11087] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1518.271314][T11087] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.271346][T11087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1518.273914][T11087] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1518.273944][T11087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1518.273967][T11087] usb 5-1: SerialNumber: syz [ 1518.698569][T11087] usb 5-1: 0:2 : does not exist [ 1518.749314][T11087] usb 5-1: USB disconnect, device number 27 [ 1519.654547][T12207] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1519.804528][T12207] usb 1-1: Using ep0 maxpacket: 32 [ 1519.809177][T12207] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1519.809210][T12207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.830923][T12207] usb 1-1: config 0 descriptor?? [ 1520.078150][T20275] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1520.078338][T20275] syzkaller0: linktype set to 768 [ 1520.079481][T12207] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1520.132808][T12207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1520.135555][T12207] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1520.150869][T12207] usb 1-1: media controller created [ 1520.243537][T12207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1520.290778][T20250] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 1520.400835][T12207] az6027: usb out operation failed. (-71) [ 1520.421171][T12207] az6027: usb out operation failed. (-71) [ 1520.421195][T12207] stb0899_attach: Driver disabled by Kconfig [ 1520.421207][T12207] az6027: no front-end attached [ 1520.421207][T12207] [ 1520.444734][T12207] az6027: usb out operation failed. (-71) [ 1520.444755][T12207] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1520.448922][T12207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 1520.486917][T12207] dvb-usb: schedule remote query interval to 400 msecs. [ 1520.486942][T12207] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1520.490202][T12207] usb 1-1: USB disconnect, device number 28 [ 1520.621946][T12207] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1520.724668][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5078'. [ 1521.485086][T20316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5087'. [ 1522.031774][T20332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5094'. [ 1522.033117][T20332] netlink: 'syz.7.5094': attribute type 15 has an invalid length. [ 1523.067828][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5109'. [ 1523.067867][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5109'. [ 1524.586794][T20388] loop8: detected capacity change from 0 to 7 [ 1524.589683][T20388] Dev loop8: unable to read RDB block 7 [ 1524.589746][T20388] loop8: unable to read partition table [ 1524.589984][T20388] loop8: partition table beyond EOD, truncated [ 1524.590005][T20388] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1526.303096][T20407] autofs: Unknown parameter '00000000000000000000' [ 1527.497396][T20429] overlayfs: failed to clone lowerpath [ 1529.683851][T20453] autofs: Unknown parameter 'fd00000000000000000000' [ 1532.169665][T20499] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 1532.169696][T20499] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1532.478914][T20512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1534.213369][T20541] autofs: Unknown parameter 'fd00000000000000000000' [ 1536.359512][T20546] team_slave_0: entered promiscuous mode [ 1536.359629][T20546] team_slave_1: entered promiscuous mode [ 1536.362843][T20546] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1536.990269][T20546] team0: Device macvtap1 is already an upper device of the team interface [ 1537.316016][T20546] team_slave_0: left promiscuous mode [ 1537.316077][T20546] team_slave_1: left promiscuous mode [ 1537.321517][T20559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5186'. [ 1537.972634][T20549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.480076][T20549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.126235][T20600] No control pipe specified [ 1539.943860][T20549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.730008][T20549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.968376][T20633] team0: Caught tx_queue_len zero misconfig [ 1541.968426][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1542.373265][T20638] No control pipe specified [ 1543.352026][ T4728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.451796][T12122] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.524797][T14511] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.524852][T14511] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.687240][T20663] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1543.844329][T11761] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1543.994363][T11761] usb 1-1: Using ep0 maxpacket: 16 [ 1543.997419][T11761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1543.999982][T11761] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1544.000016][T11761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.000039][T11761] usb 1-1: Product: syz [ 1544.000055][T11761] usb 1-1: Manufacturer: syz [ 1544.000071][T11761] usb 1-1: SerialNumber: syz [ 1544.063629][T11761] usb 1-1: config 0 descriptor?? [ 1544.073969][T11761] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1544.074000][T11761] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1544.639302][T20685] autofs: Bad value for 'fd' [ 1545.414458][T11761] em28xx 1-1:0.0: chip ID is em2750 [ 1546.954615][T11761] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1546.954667][T11761] em28xx 1-1:0.0: board has no eeprom [ 1547.017847][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5247'. [ 1547.036050][T11761] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1547.036082][T11761] em28xx 1-1:0.0: dvb set to bulk mode. [ 1547.040614][ T5870] em28xx 1-1:0.0: Binding DVB extension [ 1547.101811][T11761] usb 1-1: USB disconnect, device number 29 [ 1547.104172][T11761] em28xx 1-1:0.0: Disconnecting em28xx [ 1547.247153][ T5870] em28xx 1-1:0.0: Registering input extension [ 1547.295471][T11761] em28xx 1-1:0.0: Closing input extension [ 1547.478016][T20730] gfs2: path_lookup on  returned error -2 [ 1548.646469][T11761] em28xx 1-1:0.0: Freeing device [ 1549.138960][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5262'. [ 1549.139000][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5262'. [ 1551.604967][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.605045][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.184957][T20815] autofs: Unknown parameter '00000000000000000000' [ 1555.055331][T20823] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5281'. [ 1555.990028][T20835] autofs: Unknown parameter '00000000000000000000' [ 1557.862526][ T38] audit: type=1800 audit(2000000097.940:464): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5301" name="bus" dev="tmpfs" ino=2487 res=0 errno=0 [ 1558.124062][ T38] audit: type=1326 audit(2000000098.200:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1558.124125][ T38] audit: type=1326 audit(2000000098.200:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1558.174647][ T38] audit: type=1326 audit(2000000098.210:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1558.174716][ T38] audit: type=1326 audit(2000000098.210:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1558.174765][ T38] audit: type=1326 audit(2000000098.210:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1558.174813][ T38] audit: type=1326 audit(2000000098.210:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1558.174861][ T38] audit: type=1326 audit(2000000098.210:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1558.174910][ T38] audit: type=1326 audit(2000000098.210:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1558.174969][ T38] audit: type=1326 audit(2000000098.230:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20875 comm="syz.7.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1559.489034][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5311'. [ 1559.536164][T20889] bond_slave_0: entered promiscuous mode [ 1559.536230][T20889] bond_slave_1: entered promiscuous mode [ 1559.538150][T20889] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1559.573390][T20889] bond_slave_0: left promiscuous mode [ 1559.589361][T20889] bond_slave_1: left promiscuous mode [ 1560.209443][ T5870] kernel write not supported for file /snd/seq (pid: 5870 comm: kworker/0:5) [ 1560.306226][T20911] netem: incorrect gi model size [ 1560.306247][T20911] netem: change failed [ 1564.091175][T20971] overlayfs: failed to clone lowerpath [ 1564.400349][T20985] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5349'. [ 1565.939855][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5356'. [ 1566.236526][T21023] 9p: Bad value for 'rfdno' [ 1566.365865][T21029] netlink: 'syz.4.5365': attribute type 11 has an invalid length. [ 1568.093780][ T38] kauditd_printk_skb: 215 callbacks suppressed [ 1568.093801][ T38] audit: type=1326 audit(2000000364.175:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.093947][ T38] audit: type=1326 audit(2000000364.175:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.155571][ T38] audit: type=1326 audit(2000000364.235:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.155628][ T38] audit: type=1326 audit(2000000364.245:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.155676][ T38] audit: type=1326 audit(2000000364.245:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.159390][ T38] audit: type=1326 audit(2000000364.245:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.161498][ T38] audit: type=1326 audit(2000000364.245:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.162041][ T38] audit: type=1326 audit(2000000364.245:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863a52f749 code=0x7ffc0000 [ 1568.173013][ T38] audit: type=1326 audit(2000000364.255:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f863a4cb829 code=0x7ffc0000 [ 1568.176012][ T38] audit: type=1326 audit(2000000364.255:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21063 comm="syz.8.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f863a4cb829 code=0x7ffc0000 [ 1569.769991][T21080] netlink: 'syz.7.5385': attribute type 1 has an invalid length. [ 1569.770043][T21080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1569.861632][T21083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5386'. [ 1569.866132][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5386'. [ 1569.866244][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5386'. [ 1570.303155][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5394'. [ 1572.587479][T21128] netlink: 'syz.8.5406': attribute type 21 has an invalid length. [ 1572.587505][T21128] netlink: 'syz.8.5406': attribute type 4 has an invalid length. [ 1572.587519][T21128] netlink: 14413 bytes leftover after parsing attributes in process `syz.8.5406'. [ 1572.967871][T21141] overlayfs: workdir and upperdir must reside under the same mount [ 1573.039332][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5414'. [ 1573.294361][T21147] overlay: Unknown parameter '/' [ 1574.610052][T21171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'. [ 1579.182540][T21256] overlayfs: failed to clone upperpath [ 1580.652103][T21280] program syz.7.5466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1581.101508][T21296] netlink: 'syz.0.5474': attribute type 3 has an invalid length. [ 1581.101533][T21296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5474'. [ 1585.094374][T16283] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1585.254390][T16283] usb 5-1: Using ep0 maxpacket: 16 [ 1585.256350][T16283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1585.256387][T16283] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1585.256415][T16283] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1585.257652][T16283] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1585.257683][T16283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1585.257706][T16283] usb 5-1: SerialNumber: syz [ 1585.330853][T21376] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1585.332314][T21401] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5520'. [ 1585.549496][T16283] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1585.566568][T16283] usb 5-1: USB disconnect, device number 28 [ 1589.280152][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5547'. [ 1589.348972][T21470] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1590.617104][ T44] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1590.779700][ T44] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1590.779736][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.779759][ T44] usb 5-1: Product: syz [ 1590.779775][ T44] usb 5-1: Manufacturer: syz [ 1590.779792][ T44] usb 5-1: SerialNumber: syz [ 1590.867925][ T44] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1591.151711][ T5936] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1592.042665][T21515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5569'. [ 1592.124579][T12207] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1592.274400][T12207] usb 1-1: Using ep0 maxpacket: 16 [ 1592.280619][T12207] usb 1-1: config 252 has an invalid interface number: 213 but max is 0 [ 1592.280650][T12207] usb 1-1: config 252 has no interface number 0 [ 1592.280685][T12207] usb 1-1: config 252 interface 213 has no altsetting 0 [ 1592.289007][T12207] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 1592.289041][T12207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.289064][T12207] usb 1-1: Product: syz [ 1592.289080][T12207] usb 1-1: Manufacturer: syz [ 1592.289096][T12207] usb 1-1: SerialNumber: syz [ 1592.367105][T12207] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1592.596116][T12207] gspca_sn9c2028: read1 error -32 [ 1592.597256][T12207] gspca_sn9c2028: read1 error -32 [ 1592.762150][ T5936] usb 5-1: Service connection timeout for: 256 [ 1592.762182][ T5936] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1592.796740][T17235] usb 5-1: USB disconnect, device number 29 [ 1592.810392][T12207] usb 1-1: USB disconnect, device number 30 [ 1592.860237][ T5936] ath9k_htc: Failed to initialize the device [ 1592.874564][T17235] usb 5-1: ath9k_htc: USB layer deinitialized [ 1594.359597][T21548] macvlan1: entered promiscuous mode [ 1594.365838][T21548] batadv0: entered promiscuous mode [ 1596.562768][T21588] 9p: Bad value for 'wfdno' [ 1597.340246][ T38] kauditd_printk_skb: 258 callbacks suppressed [ 1597.340267][ T38] audit: type=1326 audit(2000000393.425:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.340688][ T38] audit: type=1326 audit(2000000393.425:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.341008][ T38] audit: type=1326 audit(2000000393.425:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.341449][ T38] audit: type=1326 audit(2000000393.425:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.342986][ T38] audit: type=1326 audit(2000000393.425:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.343039][ T38] audit: type=1326 audit(2000000393.425:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.343422][ T38] audit: type=1326 audit(2000000393.425:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.343919][ T38] audit: type=1326 audit(2000000393.425:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1597.360955][ T38] audit: type=1326 audit(2000000393.425:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.0.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1599.643525][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5635'. [ 1600.486569][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5639'. [ 1600.700426][ T153] bond0: (slave bond_slave_0): interface is now down [ 1600.700461][ T153] bond0: (slave bond_slave_1): interface is now down [ 1600.700476][ T153] bond0: (slave batadv0): interface is now down [ 1600.725551][ T153] bond0: (slave bond_slave_0): interface is now down [ 1600.725573][ T153] bond0: (slave bond_slave_1): interface is now down [ 1600.725586][ T153] bond0: (slave batadv0): interface is now down [ 1600.752605][ T8244] bond0: (slave bond_slave_0): interface is now down [ 1600.752631][ T8244] bond0: (slave bond_slave_1): interface is now down [ 1600.752647][ T8244] bond0: (slave batadv0): interface is now down [ 1600.805460][ T8244] bond0: now running without any active interface! [ 1600.844082][T21673] input: syz1 as /devices/virtual/input/input21 [ 1601.158914][ T38] audit: type=1326 audit(2000000397.245:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21689 comm="syz.4.5648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf21af749 code=0x0 [ 1604.286418][T21743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5668'. [ 1607.168003][T21799] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1608.093854][T21843] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5708'. [ 1611.294456][T11761] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1611.301400][T21916] netlink: 'syz.2.5742': attribute type 14 has an invalid length. [ 1611.444320][T11761] usb 5-1: Using ep0 maxpacket: 16 [ 1611.495482][T11761] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.495512][T11761] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1611.501206][T11761] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1611.501240][T11761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.501263][T11761] usb 5-1: Product: syz [ 1611.501279][T11761] usb 5-1: Manufacturer: syz [ 1611.501296][T11761] usb 5-1: SerialNumber: syz [ 1611.763428][T11761] usb 5-1: 0:2 : does not exist [ 1611.777262][T11761] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1611.888395][T11761] usb 5-1: USB disconnect, device number 30 [ 1612.076737][T21935] program syz.0.5751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1612.809582][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.809678][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.746590][T22001] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5778'. [ 1615.746625][T22001] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5778'. [ 1619.914400][T12207] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1620.075423][T12207] usb 5-1: Using ep0 maxpacket: 8 [ 1620.082015][T12207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.082078][T12207] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1620.082105][T12207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.119751][T12207] usb 5-1: config 0 descriptor?? [ 1620.123758][T12207] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1620.394389][ T5870] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1620.567552][ T5870] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1620.567587][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.567608][ T5870] usb 1-1: config 0 has no interface number 0 [ 1620.567841][ T5870] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid maxpacket 13600, setting to 64 [ 1620.567870][ T5870] usb 1-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 77 [ 1620.567888][ T5870] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1620.567920][ T5870] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1620.568130][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.663567][ T5870] usb 1-1: config 0 descriptor?? [ 1620.670133][T22109] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1620.714844][ T5870] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1620.963150][T12207] gspca_vc032x: reg_w err -71 [ 1620.963253][T12207] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1620.981904][T12207] usb 5-1: USB disconnect, device number 31 [ 1620.995170][ T58] usb 1-1: Failed to submit usb control message: -71 [ 1620.995210][ T58] usb 1-1: unable to send the bmi data to the device: -71 [ 1620.995230][ T58] usb 1-1: unable to get target info from device [ 1620.995246][ T58] usb 1-1: could not get target info (-71) [ 1620.995572][ T58] usb 1-1: could not probe fw (-71) [ 1620.996453][ T44] usb 1-1: USB disconnect, device number 31 [ 1621.720156][T22135] input: syz0 as /devices/virtual/input/input22 [ 1622.286377][T22158] Bluetooth: MGMT ver 1.23 [ 1622.475447][T22168] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5855'. [ 1622.548391][ T5936] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1622.650771][T22176] 9p: Bad value for 'rfdno' [ 1622.715363][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 1622.717477][ T5936] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.717515][ T5936] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.717531][ T5936] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1622.717552][ T5936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1622.717577][ T5936] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1622.717594][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.731578][ T5936] usb 5-1: config 0 descriptor?? [ 1622.977023][T22160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.978653][T22160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.187222][ T5936] hid (null): global environment stack underflow [ 1623.187278][ T5936] hid (null): global environment stack underflow [ 1623.187304][ T5936] hid (null): global environment stack underflow [ 1623.187360][ T5936] hid (null): global environment stack underflow [ 1623.187407][ T5936] hid (null): invalid report_size 268764425 [ 1623.191309][ T5936] hid (null): bogus close delimiter [ 1623.251814][T22192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5868'. [ 1623.391226][ T5936] usb 5-1: USB disconnect, device number 32 [ 1623.443234][T22200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1623.443254][T22200] IPv6: NLM_F_CREATE should be set when creating new route [ 1623.443313][T22200] IPv6: NLM_F_CREATE should be set when creating new route [ 1623.443345][T22200] IPv6: NLM_F_CREATE should be set when creating new route [ 1623.606668][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5875'. [ 1625.733573][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5902'. [ 1627.759077][T22320] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5926'. [ 1627.923927][T22322] loop5: detected capacity change from 0 to 7 [ 1628.000642][T22322] Dev loop5: unable to read RDB block 7 [ 1628.000685][T22322] loop5: unable to read partition table [ 1628.000846][T22322] loop5: partition table beyond EOD, truncated [ 1628.000861][T22322] loop_reread_partitions: partition scan of loop5 (gCj̖P@) failed (rc=-5) [ 1628.670502][T22345] lo speed is unknown, defaulting to 1000 [ 1629.247565][T22345] lo speed is unknown, defaulting to 1000 [ 1629.270966][T22369] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1630.546779][T22400] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1631.229705][ T38] audit: type=1326 audit(2000000427.315:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.233062][ T38] audit: type=1326 audit(2000000427.315:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.233368][ T38] audit: type=1326 audit(2000000427.315:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.233656][ T38] audit: type=1326 audit(2000000427.315:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.326402][ T38] audit: type=1326 audit(2000000427.415:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.326465][ T38] audit: type=1326 audit(2000000427.415:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.355088][ T38] audit: type=1326 audit(2000000427.445:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.357302][ T38] audit: type=1326 audit(2000000427.445:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1631.359366][ T38] audit: type=1326 audit(2000000427.445:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22420 comm="syz.7.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0198e0f749 code=0x7ffc0000 [ 1632.292269][ T38] audit: type=1326 audit(2000000428.375:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22455 comm="syz.7.5987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0198dab829 code=0x7ffc0000 [ 1632.854740][T22478] netlink: zone id is out of range [ 1632.854759][T22478] netlink: zone id is out of range [ 1632.856067][T22478] netlink: zone id is out of range [ 1632.856078][T22478] netlink: zone id is out of range [ 1632.856084][T22478] netlink: zone id is out of range [ 1632.856090][T22478] netlink: zone id is out of range [ 1632.856096][T22478] netlink: zone id is out of range [ 1632.856101][T22478] netlink: zone id is out of range [ 1632.856107][T22478] netlink: zone id is out of range [ 1632.856113][T22478] netlink: zone id is out of range [ 1633.556322][T22504] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6010'. [ 1634.844561][ T44] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1635.008928][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.008965][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.008982][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1635.009015][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1635.009032][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.010688][T22552] program syz.7.6031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1635.077313][ T44] usb 5-1: config 0 descriptor?? [ 1635.212724][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1635.453520][ T31] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 1635.453601][ T31] usb 1-1: config 0 has no interface number 0 [ 1635.453642][ T31] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1635.482995][ T31] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1635.483091][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.483114][ T31] usb 1-1: Product: syz [ 1635.483131][ T31] usb 1-1: Manufacturer: syz [ 1635.483147][ T31] usb 1-1: SerialNumber: syz [ 1635.526875][ T44] hid_parser_main: 1 callbacks suppressed [ 1635.526895][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.526917][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.526961][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.526990][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.527019][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.527048][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.527077][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.527096][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.527115][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.527135][ T44] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1635.533786][ T31] usb 1-1: config 0 descriptor?? [ 1635.609245][T22550] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1635.667653][ T44] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1635.768313][T11761] usb 5-1: USB disconnect, device number 33 [ 1635.834767][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1635.834830][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 1635.919751][ T31] usb 1-1: USB disconnect, device number 32 [ 1636.744534][ T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1636.904383][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1636.911695][ T31] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1636.911726][ T31] usb 5-1: config 0 has no interface number 0 [ 1636.911775][ T31] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1636.911799][ T31] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1636.911828][ T31] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 1636.911857][ T31] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 1636.911887][ T31] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1636.927470][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1636.927559][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.927616][ T31] usb 5-1: Product: syz [ 1636.927660][ T31] usb 5-1: Manufacturer: syz [ 1636.927703][ T31] usb 5-1: SerialNumber: syz [ 1637.008993][ T31] usb 5-1: config 0 descriptor?? [ 1637.083029][ T31] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input23 [ 1637.328246][ T31] usb 5-1: USB disconnect, device number 34 [ 1638.565156][T22644] 9pnet: p9_errstr2errno: server reported unknown error  [ 1639.798249][T17235] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1639.955651][T17235] usb 1-1: Using ep0 maxpacket: 32 [ 1639.962982][T17235] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1639.963021][T17235] usb 1-1: config 0 has no interface number 0 [ 1639.963073][T17235] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1639.963105][T17235] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1640.006363][T17235] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1640.006399][T17235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.006422][T17235] usb 1-1: Product: syz [ 1640.006438][T17235] usb 1-1: Manufacturer: syz [ 1640.006454][T17235] usb 1-1: SerialNumber: syz [ 1640.067541][T17235] usb 1-1: config 0 descriptor?? [ 1640.491683][T22693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.512323][T22693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.714096][T17235] appletouch 1-1:0.85: Geyser mode initialized. [ 1640.759383][T17235] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input24 [ 1640.860172][T22728] overlayfs: overlapping lowerdir path [ 1641.811381][T13350] usb 1-1: USB disconnect, device number 33 [ 1641.811454][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1641.918307][T13350] appletouch 1-1:0.85: input: appletouch disconnected [ 1642.018738][T22743] input: syz1 as /devices/virtual/input/input25 [ 1642.758854][T22764] overlayfs: overlapping lowerdir path [ 1644.209329][T22787] overlay: Unknown parameter '/' [ 1645.609844][T22818] net_ratelimit: 6 callbacks suppressed [ 1645.609860][T22818] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1645.907346][T22829] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 1646.045827][T22834] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 1646.168571][T22837] netlink: 'syz.2.6150': attribute type 4 has an invalid length. [ 1646.266468][T22827] lo speed is unknown, defaulting to 1000 [ 1647.299763][T22827] lo speed is unknown, defaulting to 1000 [ 1649.304438][T12207] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1649.463362][T12207] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1649.463398][T12207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.463421][T12207] usb 5-1: Product: syz [ 1649.463437][T12207] usb 5-1: Manufacturer: syz [ 1649.463453][T12207] usb 5-1: SerialNumber: syz [ 1649.718288][T12207] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1649.718354][T12207] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1649.718378][T12207] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1649.770206][T22908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1649.770226][T22908] IPv6: NLM_F_CREATE should be set when creating new route [ 1649.770292][T22908] IPv6: NLM_F_CREATE should be set when creating new route [ 1649.770322][T22908] IPv6: NLM_F_CREATE should be set when creating new route [ 1649.806322][T12207] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1649.851163][T12207] usb 5-1: USB disconnect, device number 35 [ 1650.113534][T13953] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 1650.654508][ T44] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1650.804265][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 1650.806718][ T44] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 1650.806749][ T44] usb 1-1: config 0 has no interface number 0 [ 1650.811527][ T44] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1650.811674][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.811699][ T44] usb 1-1: Product: syz [ 1650.811716][ T44] usb 1-1: Manufacturer: syz [ 1650.811733][ T44] usb 1-1: SerialNumber: syz [ 1650.873411][ T44] usb 1-1: config 0 descriptor?? [ 1651.521414][ T44] mos7840 1-1:0.225: required endpoints missing [ 1651.543436][ T44] usb 1-1: USB disconnect, device number 34 [ 1651.729018][T22948] block device autoloading is deprecated and will be removed. [ 1651.786918][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6202'. [ 1653.280194][T22994] sctp: [Deprecated]: syz.4.6221 (pid 22994) Use of int in max_burst socket option deprecated. [ 1653.280194][T22994] Use struct sctp_assoc_value instead [ 1653.761064][ T5911] kworker/1:5 (5911) used greatest stack depth: 14272 bytes left [ 1655.292068][ T38] kauditd_printk_skb: 93 callbacks suppressed [ 1655.292460][ T38] audit: type=1326 audit(2000000451.375:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.292590][ T38] audit: type=1326 audit(2000000451.375:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.345995][ T38] audit: type=1326 audit(2000000451.435:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.346488][ T38] audit: type=1326 audit(2000000451.435:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.347021][ T38] audit: type=1326 audit(2000000451.435:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.347557][ T38] audit: type=1326 audit(2000000451.435:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.347811][ T38] audit: type=1326 audit(2000000451.435:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.348144][ T38] audit: type=1326 audit(2000000451.435:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.348519][ T38] audit: type=1326 audit(2000000451.435:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.348804][ T38] audit: type=1326 audit(2000000451.435:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23045 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ed59f749 code=0x7ffc0000 [ 1655.619581][T23050] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.6245'. [ 1656.179073][T23075] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1656.179116][T23075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1656.201465][T23075] vhci_hcd vhci_hcd.0: Device attached [ 1656.202705][T23076] vhci_hcd: connection closed [ 1656.251389][T12122] vhci_hcd vhci_hcd.4: stop threads [ 1656.251421][T12122] vhci_hcd vhci_hcd.4: release socket [ 1656.251463][T12122] vhci_hcd vhci_hcd.4: disconnect device [ 1656.403161][T23086] tmpfs: Too small a size for current use [ 1656.942778][T17235] kernel read not supported for file /media6 (pid: 17235 comm: kworker/1:9) [ 1658.560761][T23159] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6292'. [ 1658.676774][T23165] 9p: Bad value for 'rfdno' [ 1658.873397][T23169] overlayfs: conflicting lowerdir path [ 1659.396540][T23189] input: syz1 as /devices/virtual/input/input27 [ 1660.074432][T13953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1660.227827][T23208] overlay: Unknown parameter '/' [ 1661.430338][T23219] loop2: detected capacity change from 0 to 7 [ 1661.444999][T23219] Dev loop2: unable to read RDB block 7 [ 1661.445056][T23219] loop2: AHDI p1 p2 p3 [ 1661.445088][T23219] loop2: partition table partially beyond EOD, truncated [ 1661.445207][T23219] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1661.445228][T23219] loop2: p3 start 335544320 is beyond EOD, truncated [ 1662.106299][T23240] overlay: Unknown parameter '/' [ 1663.232790][T23247] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6329'. [ 1663.733621][T23270] batadv_slave_1: entered promiscuous mode [ 1663.746183][T23269] batadv_slave_1: left promiscuous mode [ 1664.533841][T23294] KVM: debugfs: duplicate directory 23294-4 [ 1664.588394][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6349'. [ 1665.306715][T23318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6359'. [ 1665.684055][T23328] o2cb: This node has not been configured. [ 1665.684073][T23328] o2cb: Cluster check failed. Fix errors before retrying. [ 1665.684132][T23328] (syz.7.6364,23328,1):user_dlm_register:674 ERROR: status = -22 [ 1665.689031][T23328] (syz.7.6364,23328,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1666.584483][ T7187] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1666.777925][ T7187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.777963][ T7187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.777987][ T7187] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1666.778032][ T7187] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1666.778055][ T7187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.797510][ T7187] usb 5-1: config 0 descriptor?? [ 1667.366826][ T7187] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1667.632017][ T7187] usb 5-1: USB disconnect, device number 36 [ 1669.501546][T23438] tipc: Started in network mode [ 1669.501577][T23438] tipc: Node identity d22cd832c10b, cluster identity 4711 [ 1669.535193][T23438] tipc: Enabled bearer , priority 10 [ 1669.543126][T23438] tipc: Cannot configure node identity twice [ 1669.543144][T23438] tipc: Cannot configure node identity twice [ 1669.660009][T23444] netlink: 'syz.8.6419': attribute type 12 has an invalid length. [ 1669.660031][T23444] netlink: 'syz.8.6419': attribute type 29 has an invalid length. [ 1669.660048][T23444] netlink: 148 bytes leftover after parsing attributes in process `syz.8.6419'. [ 1669.660088][T23444] netlink: 'syz.8.6419': attribute type 1 has an invalid length. [ 1669.875568][T23452] loop2: detected capacity change from 0 to 7 [ 1669.890714][T23452] Dev loop2: unable to read RDB block 7 [ 1669.890771][T23452] loop2: unable to read partition table [ 1669.891017][T23452] loop2: partition table beyond EOD, truncated [ 1669.891037][T23452] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1670.111882][T17235] hid_parser_main: 5 callbacks suppressed [ 1670.111905][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.111942][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.111969][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.111996][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.112022][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.112050][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.112076][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.112101][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.112129][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.112156][T17235] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1670.210151][T17235] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 1670.633904][T12207] tipc: Node number set to 321378354 [ 1670.952231][T23481] syzkaller1: entered promiscuous mode [ 1670.952259][T23481] syzkaller1: entered allmulticast mode [ 1671.404351][T12207] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1671.557710][T12207] usb 1-1: config 0 has an invalid interface number: 73 but max is 0 [ 1671.557740][T12207] usb 1-1: config 0 has no interface number 0 [ 1671.596667][T12207] usb 1-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 1671.596703][T12207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.596725][T12207] usb 1-1: Product: syz [ 1671.596739][T12207] usb 1-1: Manufacturer: syz [ 1671.596755][T12207] usb 1-1: SerialNumber: syz [ 1671.637106][T12207] usb 1-1: config 0 descriptor?? [ 1671.656812][T12207] uvcvideo 1-1:0.73: Found Unit with invalid ID 0 [ 1672.241044][ T5870] kernel read not supported for file /nvram (pid: 5870 comm: kworker/0:5) [ 1672.546214][T13953] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 1672.771361][T12587] kernel write not supported for file bpf-prog (pid: 12587 comm: kworker/1:14) [ 1674.089099][T12207] uvcvideo 1-1:0.73: probe with driver uvcvideo failed with error -22 [ 1674.114539][T12207] usb 1-1: USB disconnect, device number 35 [ 1674.184729][T17235] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1674.213653][T23555] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6467'. [ 1674.249279][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.249332][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.339448][T17235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.339488][T17235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.339514][T17235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1674.339561][T17235] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1674.339587][T17235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.349662][T17235] usb 5-1: config 0 descriptor?? [ 1674.658569][T23570] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6471'. [ 1674.848188][T17235] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1675.162478][T12207] usb 5-1: USB disconnect, device number 37 [ 1675.300290][T23578] overlay: Unknown parameter '/' [ 1676.554496][T13953] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1676.561817][T13953] Bluetooth: hci3: Injecting HCI hardware error event [ 1676.575148][T13069] Bluetooth: hci3: hardware error 0x00 [ 1676.995262][T23609] sctp: [Deprecated]: syz.0.6491 (pid 23609) Use of int in max_burst socket option deprecated. [ 1676.995262][T23609] Use struct sctp_assoc_value instead [ 1677.489756][T23617] overlay: Unknown parameter '/' [ 1678.324377][T12207] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1678.487537][T12207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1678.487579][T12207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.487621][T12207] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1678.487647][T12207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.541363][T12207] usb 1-1: config 0 descriptor?? [ 1678.714480][T13069] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1678.769458][T23628] syz_tun: entered allmulticast mode [ 1678.771098][T23627] syz_tun: left allmulticast mode [ 1678.973093][T12207] isku 0003:1E7D:319C.001D: item fetching failed at offset 5/7 [ 1678.973941][T12207] isku 0003:1E7D:319C.001D: parse failed [ 1678.974022][T12207] isku 0003:1E7D:319C.001D: probe with driver isku failed with error -22 [ 1679.205828][ T7187] usb 1-1: USB disconnect, device number 36 [ 1679.456735][T23638] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1680.356410][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6513'. [ 1681.729856][T23691] overlay: Unknown parameter '/' [ 1683.291217][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1684.071467][T23730] overlay: Unknown parameter '/' [ 1685.544376][ T7187] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1685.694316][ T7187] usb 5-1: Using ep0 maxpacket: 32 [ 1685.702385][ T7187] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1685.702435][ T7187] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1685.702462][ T7187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.617829][ T7187] usb 5-1: USB disconnect, device number 38 [ 1687.263553][T23768] overlay: Unknown parameter '/' [ 1688.570214][T23783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6559'. [ 1688.625388][T23787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6559'. [ 1690.031540][ T7187] hid_parser_main: 34 callbacks suppressed [ 1690.031566][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031597][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031623][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031651][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031678][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031705][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031732][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031759][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031786][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.031814][ T7187] hid-generic 0003:0004:0000.001E: unknown main item tag 0x0 [ 1690.318519][T13953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1690.350702][T13953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1690.353749][T13953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1690.378869][T13953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1690.379759][T13953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1690.422539][ T7187] hid-generic 0003:0004:0000.001E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1690.523119][T23827] lo speed is unknown, defaulting to 1000 [ 1690.936513][T23845] Invalid argument reading file caps for ./file0 [ 1691.242528][T23827] lo speed is unknown, defaulting to 1000 [ 1692.474327][T13069] Bluetooth: hci4: command tx timeout [ 1693.094546][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6608'. [ 1693.754282][T13069] Bluetooth: hci6: command 0x0406 tx timeout [ 1693.763264][T23852] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1694.333643][T23852] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1694.396313][T23852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1694.397055][T23852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1694.399525][T23852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1694.399633][T23852] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1694.460167][T23852] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1695.102446][T23827] chnl_net:caif_netlink_parms(): no params data found [ 1695.775327][T23827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.775553][T23827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.775848][T23827] bridge_slave_0: entered allmulticast mode [ 1695.807254][T23827] bridge_slave_0: entered promiscuous mode [ 1695.827272][T23827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.830124][T23827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.830426][T23827] bridge_slave_1: entered allmulticast mode [ 1695.834471][T13069] Bluetooth: hci6: command 0x0406 tx timeout [ 1695.866618][T23827] bridge_slave_1: entered promiscuous mode [ 1696.184730][T23827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.207366][T23827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.474788][T13953] Bluetooth: hci2: command 0x2016 tx timeout [ 1696.474860][T13069] Bluetooth: hci4: command 0x040f tx timeout [ 1696.491213][T23827] team0: Port device team_slave_0 added [ 1696.530858][T23827] team0: Port device team_slave_1 added [ 1696.863805][T23827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.863826][T23827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.865100][T23827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.005225][T23827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.005246][T23827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1697.005279][T23827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.039107][T23827] hsr_slave_0: entered promiscuous mode [ 1698.056724][T23827] hsr_slave_1: entered promiscuous mode [ 1698.064782][T23827] debugfs: 'hsr0' already exists in 'hsr' [ 1698.064859][T23827] Cannot create hsr debugfs directory [ 1698.554793][T13069] Bluetooth: hci4: command 0x040f tx timeout [ 1699.585617][T24009] netlink: 'syz.8.6656': attribute type 1 has an invalid length. [ 1699.801302][T24014] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1699.801332][T24014] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1699.928297][ T44] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1699.951861][T24014] bond1: (slave wireguard0): making interface the new active one [ 1699.963947][T24014] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1700.134362][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 1700.136866][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1700.136912][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1700.136942][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1700.136970][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1700.137018][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1700.137044][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.420685][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 1700.420742][ T44] usbtmc 5-1:16.0: can't read capabilities [ 1700.635171][ T5870] usb 5-1: USB disconnect, device number 39 [ 1700.644709][T13069] Bluetooth: hci4: command 0x040f tx timeout [ 1700.900111][T23827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1700.966445][T23827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1701.005318][T23827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1701.092769][T23827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1701.411702][T23827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.479217][T23827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.510158][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.510400][T14511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.553951][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.561872][T14511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.646354][T24063] IPVS: Error connecting to the multicast addr [ 1702.622815][T23827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.714618][T13069] Bluetooth: hci4: command 0x040f tx timeout [ 1702.755478][T24087] loop7: detected capacity change from 0 to 7 [ 1702.787328][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1702.787370][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1702.796364][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1702.796467][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1702.798616][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1702.798651][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1702.935877][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1702.935918][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1702.940798][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1702.940841][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1702.984454][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1702.984498][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.028257][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1703.028301][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.028353][T24087] ldm_validate_partition_table(): Disk read failed. [ 1703.062026][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1703.062070][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.081899][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1703.081942][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.082315][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1703.082350][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.082677][T24087] Dev loop7: unable to read RDB block 0 [ 1703.083471][T24087] loop7: unable to read partition table [ 1703.083675][T24087] loop7: partition table beyond EOD, truncated [ 1703.083692][T24087] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1703.826380][ T5870] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1703.959445][T23827] veth0_vlan: entered promiscuous mode [ 1703.983000][T23827] veth1_vlan: entered promiscuous mode [ 1704.048796][ T5870] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1704.048839][ T5870] usb 1-1: can't read configurations, error -71 [ 1704.124050][T23827] veth0_macvtap: entered promiscuous mode [ 1704.142976][T23827] veth1_macvtap: entered promiscuous mode [ 1704.181502][T23827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.208992][T23827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.246084][T11514] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.246476][T11514] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.249030][T11514] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.255462][T11514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.757450][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.757476][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.794450][T13953] Bluetooth: hci4: command 0x040f tx timeout [ 1704.933826][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6702'. [ 1705.137943][T14574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.137968][T14574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.227580][T24157] overlayfs: overlapping lowerdir path [ 1706.941883][T13069] Bluetooth: hci4: command 0x040f tx timeout [ 1709.640842][ T7187] kernel write not supported for file /video8 (pid: 7187 comm: kworker/1:8) [ 1711.066166][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6742'. [ 1711.223799][T24245] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1711.273231][T24245] bond2: (slave lo): Enslaving as a backup interface with an up link [ 1711.273675][T24245] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1711.308273][ T31] lo speed is unknown, defaulting to 1000 [ 1711.308304][ T31] syz1: Port: 1 Link ACTIVE [ 1711.308866][ T31] lo speed is unknown, defaulting to 1000 [ 1711.622351][T24249] could not allocate digest TFM handle crct10dif-pclmul [ 1713.944057][T14574] ------------[ cut here ]------------ [ 1713.944073][T14574] kernel BUG at net/ipv6/route.c:1473! [ 1713.950833][T14574] Oops: inv[ 1713.950833][T14574] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1713.950933][T14574] CPU: 0 UID: 0 PID: 14574 Comm: kworker/u8:30 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1713.951004][T14574] Tainted: [L]=SOFTLOCKUP [ 1713.951026][T14574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1713.951069][T14574] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1713.951291][T14574] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1713.951443][T14574] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 7e 6e 9d f8 e9 f6 fa ff ff e8 44 37 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1713.951497][T14574] RSP: 0018:ffffc90004ac72e0 EFLAGS: 00010293 [ 1713.951552][T14574] RAX: ffffffff898472dc RBX: ffff888126cef000 RCX: ffff88803186bc80 [ 1713.951596][T14574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1713.951615][T14574] RBP: ffffc90004ac73f0 R08: ffffe8ffffc45c77 R09: 1ffffd1ffff88b8e [ 1713.951660][T14574] R10: dffffc0000000000 R11: fffff91ffff88b8f R12: ffff888091103780 [ 1713.951703][T14574] R13: ffffffff898462c2 R14: dffffc0000000000 R15: 0000607ed8f56c70 [ 1713.951757][T14574] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1713.951809][T14574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1713.951852][T14574] CR2: 0000001b2f41fff8 CR3: 0000000072c70000 CR4: 00000000003526f0 [ 1713.951893][T14574] Call Trace: [ 1713.951925][T14574] [ 1713.951948][T14574] ? ip6_pol_route+0x162/0x1180 [ 1713.952038][T14574] ? __pfx_ip6_pol_route+0x10/0x10 [ 1713.952105][T14574] ? __lock_acquire+0x6b6/0x2cf0 [ 1713.952220][T14574] fib6_rule_lookup+0x348/0x6f0 [ 1713.952358][T14574] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1713.952436][T14574] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1713.952550][T14574] ? ip6_route_output_flags+0x2e/0x5d0 [ 1713.952649][T14574] ? ip6_route_output_flags+0x2e/0x5d0 [ 1713.952739][T14574] ip6_route_output_flags+0x364/0x5d0 [ 1713.952821][T14574] ? ip6_route_output_flags+0x2e/0x5d0 [ 1713.952906][T14574] ip6_dst_lookup_tail+0x1ae/0x1510 [ 1713.953012][T14574] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1713.953107][T14574] ? lockdep_hardirqs_on+0x7b/0x110 [ 1713.953171][T14574] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1713.953227][T14574] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1713.953316][T14574] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1713.953401][T14574] ? rt_spin_unlock+0x150/0x200 [ 1713.953485][T14574] ? rt_spin_unlock+0x161/0x200 [ 1713.953568][T14574] ip6_dst_lookup_flow+0x47/0xe0 [ 1713.953656][T14574] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1713.953742][T14574] send6+0x4ce/0x8d0 [ 1713.953815][T14574] ? rt_read_lock+0x203/0x490 [ 1713.953911][T14574] ? send6+0x220/0x8d0 [ 1713.953992][T14574] ? __pfx_send6+0x10/0x10 [ 1713.954047][T14574] ? rcu_is_watching+0x15/0xb0 [ 1713.954113][T14574] ? __local_bh_disable_ip+0x3c/0x420 [ 1713.954153][T14574] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1713.954177][T14574] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1713.954199][T14574] wg_socket_send_skb_to_peer+0x128/0x200 [ 1713.954224][T14574] wg_packet_handshake_send_worker+0x1db/0x320 [ 1713.954249][T14574] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1713.954304][T14574] ? preempt_schedule_thunk+0x16/0x30 [ 1713.954421][T14574] ? process_scheduled_works+0x9ef/0x1770 [ 1713.954497][T14574] ? process_scheduled_works+0x9ef/0x1770 [ 1713.954567][T14574] process_scheduled_works+0xad1/0x1770 [ 1713.954666][T14574] ? __pfx_process_scheduled_works+0x10/0x10 [ 1713.954729][T14574] ? do_raw_spin_lock+0x121/0x290 [ 1713.954819][T14574] worker_thread+0x8a0/0xda0 [ 1713.954903][T14574] ? __kthread_parkme+0x7b/0x200 [ 1713.954988][T14574] kthread+0x711/0x8a0 [ 1713.955067][T14574] ? __pfx_worker_thread+0x10/0x10 [ 1713.955109][T14574] ? __pfx_kthread+0x10/0x10 [ 1713.955185][T14574] ? rt_spin_unlock+0x150/0x200 [ 1713.955296][T14574] ? rt_spin_unlock+0x161/0x200 [ 1713.955370][T14574] ? __pfx_kthread+0x10/0x10 [ 1713.955455][T14574] ret_from_fork+0x510/0xa50 [ 1713.955522][T14574] ? __pfx_ret_from_fork+0x10/0x10 [ 1713.955564][T14574] ? __switch_to+0xc9e/0x1480 [ 1713.955660][T14574] ? __pfx_kthread+0x10/0x10 [ 1713.955738][T14574] ret_from_fork_asm+0x1a/0x30 [ 1713.955858][T14574] [ 1713.955880][T14574] Modules linked in: [ 1713.956017][T14574] ---[ end trace 0000000000000000 ]--- [ 1713.962059][T14574] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1713.962176][T14574] Code: 9d f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 7e 6e 9d f8 e9 f6 fa ff ff e8 44 37 3b f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1713.962251][T14574] RSP: 0018:ffffc90004ac72e0 EFLAGS: 00010293 [ 1713.962320][T14574] RAX: ffffffff898472dc RBX: ffff888126cef000 RCX: ffff88803186bc80 [ 1713.962372][T14574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1713.962407][T14574] RBP: ffffc90004ac73f0 R08: ffffe8ffffc45c77 R09: 1ffffd1ffff88b8e [ 1713.962459][T14574] R10: dffffc0000000000 R11: fffff91ffff88b8f R12: ffff888091103780 [ 1713.962502][T14574] R13: ffffffff898462c2 R14: dffffc0000000000 R15: 0000607ed8f56c70 [ 1713.962546][T14574] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1713.962597][T14574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1713.962627][T14574] CR2: 0000001b2f41fff8 CR3: 0000000072c70000 CR4: 00000000003526f0 [ 1713.962703][T14574] Kernel panic - not syncing: Fatal exception in interrupt [ 1713.963333][T14574] Kernel Offset: disabled