last executing test programs: 12m35.732462348s ago: executing program 4 (id=844): fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) 12m35.423323203s ago: executing program 4 (id=845): r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004020000040000000a0000", @ANYRES32=0x1, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX, @ANYBLOB="320acf74b40d5d95c7e5718e2a12e5bce013544c238cbe99938ae5d854a74ecb1b069aa94ec8107717111e7b1e21ed8b1bcb3d89100dd8dd29e2801d8be22841ddd6422b215566d1b7299d61e03bf6ccd8ade90eb68b41123ae4d8dfcb2823815830e9adcc7dce0afb74034778a17c507b00f2d05a8855cf2f867c4df5128ad9457cc61924f09332f35c06a11da0184e1f9a0766f6d0ffb347062c78eecbe1c328c203ec000debc29e1f", @ANYRESHEX=r0, @ANYRES64=r0], 0x48) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r2, 0x80000) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xfff7ffdf, 0x127}, &(0x7f00000007c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0xc001}}) io_uring_enter(r6, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000714030000000000000000070000040c00064000000000000000070900010073797a31000000000800054000003f24"], 0x34}}, 0x4000000) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000540)=""/94, &(0x7f00000005c0)=""/253, &(0x7f0000000200)=""/17, 0x9000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = socket$isdn_base(0x22, 0x3, 0x0) r12 = io_uring_setup(0x905, &(0x7f00000006c0)={0x0, 0x15fb, 0x1, 0x0, 0x12}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r12, 0xb, &(0x7f0000000740)=[@ioring_restriction_sqe_op={0x1, 0xb}], 0x1) bind$isdn_base(r11, &(0x7f0000000000)={0x22, 0x40, 0x6, 0xd0, 0x6}, 0x6) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000340)={[0xc45, 0x5, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x573, 0x80000080, 0x89, 0x0, 0x8, 0x7], 0x100000, 0x80804}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 12m32.259445454s ago: executing program 4 (id=852): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x39ed, &(0x7f0000000140)={0x0, 0xa43c, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000300), 0x1003) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0xfffff8a8, 0x5]}) 12m30.648105455s ago: executing program 4 (id=855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x50, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x100000000000000, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) 12m29.24449457s ago: executing program 4 (id=857): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090300c9fa8c126acded0090f9758d577cbacfd29539b99151794e9719b14fe9d18b641425437aae51b52e2751708f9216ae7451c0e1b5d1de1fa51a7b008507e37e5d744f8ac04be7a920ec70efa3dedfe2cbc42b67b3485f213832"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04330a00000000000000000100f9b714dd"], 0xd) sched_setaffinity(r1, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a000400000008000280040001808a99878ee85b6fd0572139c1578090f97458aa913c1d9d8867343ea9"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12m28.954527769s ago: executing program 4 (id=858): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x5, 0x3}, 0x14) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000080)={0x3, {0x4, 0x2, 0x2, 0x7}}) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x0, {0x9, 0xa, 0x2, 0x6}}) socket$kcm(0x10, 0x2, 0x4) getpid() 12m12.796249272s ago: executing program 32 (id=858): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x5, 0x3}, 0x14) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000080)={0x3, {0x4, 0x2, 0x2, 0x7}}) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x0, {0x9, 0xa, 0x2, 0x6}}) socket$kcm(0x10, 0x2, 0x4) getpid() 9m49.765662076s ago: executing program 5 (id=1292): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) 9m49.615622516s ago: executing program 5 (id=1293): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="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", 0x162}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4044800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9m48.599500353s ago: executing program 5 (id=1297): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) 9m47.069958323s ago: executing program 5 (id=1299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) lseek(r1, 0x2, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000001080)="0bbb268dd6ffa80800000000002a16000000210d0000aaa8fa0172429a9380d41000000000000000290000003b000000", 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) chdir(&(0x7f0000000080)='./file0\x00') r5 = creat(&(0x7f0000000040)='./bus\x00', 0x20) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x6, r5, &(0x7f0000000240)='&', 0x1, 0x6, 0x0, 0x0, r5}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/llc/core\x00') 9m44.418783889s ago: executing program 5 (id=1308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x20, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x20}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 9m41.517751112s ago: executing program 5 (id=1318): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001adb1348f7b971f78d0104a299c7f836b4fa7d3609467ff52339f44405bf7d2c7ffeb4ea61db4ab6e77505c"], 0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x20, 0xd, 0x1e, {0x1e, 0x22, "3b739adab636be48b0420e727db9e15f5d4d6b1fcb5984207017f677"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000dc0)={0x34, &(0x7f0000000b80)={0x0, 0x16, 0x53, "af4bab98ce0b8115d254bf92fa14dc63098198f9e0d18e57d7bd0d7ed9b392bf06405ead15986803d6a5e147e5dcc1be1c6104d560f742948386e14ca1ef90d01a05aed8cf38c8026d20704a14d99ff72317fa"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x29}, &(0x7f0000000c40)={0x20, 0x0, 0xd7, {0xd5, "9373f6ba4095c9f993cb0372b6c2c51d6dcd9d701f1e917736ba94ece4707a3ebbff9d9a75933af135aa9f4b449f615c10bb9e594a5c575358ecb5498fcf0a8135549ce489a6d6496c7cd3be81c82ba2faed3e91df9d69fa4da796e17a6b26ecb0d3680bec232accee3a293e2115bcaeef5e4528e5cc5427d66615da16b3d363ac71d13a7fbc1a0c68f33a1aa961b5d2f48609390703e0e89c64094538bd3c6b5c05052251e777b3eb166bf8c941249ecaab171234aed57b5b9712af8b57b3e42f994b44fb466c4c9d1687d37ae3506c4e67cc9bf2"}}, &(0x7f0000000d40)={0x20, 0x1, 0x1, 0xf9}, &(0x7f0000000d80)={0x20, 0x0, 0x1, 0x4}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaabaaaaaaaaaaaaaaaaaa08004500001c00ec0d"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x6b, 0x5a, {0x5a, 0xf, "aa66adbd9678ff775c869d114d044fca2066745aec781cf70391e1e03571561c5fbaa121087192b2d9c0d23acb3bf6e30b9e094df42f7d4927d3898bb0d8e8d74e09bbcad5e253d949ab172c308c84a1827eabddd7342bd6"}}, &(0x7f0000000140)={0x0, 0x3, 0x25, @string={0x25, 0x3, "4c4618781923a2227109d98ed77b64b5bf2bcc7bf01e8d278c0fb319eab564e0ba7d4a"}}, &(0x7f00000002c0)={0x0, 0xf, 0xfffffd80, {0x5, 0xf, 0xae, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "1530af016e3fcc5de059f88ec437c32d"}, @generic={0x8b, 0x10, 0xa, "aa79d78036546b409b2bd5af155b9082d6505ad2fb17448a0d51a49ada54da607b5210ae6974129ad70f35feb61a4cc1e8007bc31b4664164b8f7f53d3d149fa33c39f6d3b7ef68b2be764913f62e857ad644e6efbbe6cd9fc4b4d0b8e4575f5927781fd1dcba2690425bba0ddbf3ce5454ae728b68ff871118c5a53f21f3ac19c182fcef3444e5e"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x9, 0xd54c}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x3, 0x5, 0xa, "8015be8a", "fd1d342b"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x2, 0x5, 0xf1, 0x4, 0x2}}}, &(0x7f0000000900)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x7}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x9, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "aea8"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "9ea3"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x46}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x40}}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000100c0)={&(0x7f0000010100)=[{0x18, 0x4800, 0x1, &(0x7f00000001c0)='\x00'}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x700000c, 0x11, r6, 0x180000000) socket$nl_xfrm(0x10, 0x3, 0x6) 9m41.285990582s ago: executing program 33 (id=1318): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001adb1348f7b971f78d0104a299c7f836b4fa7d3609467ff52339f44405bf7d2c7ffeb4ea61db4ab6e77505c"], 0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x20, 0xd, 0x1e, {0x1e, 0x22, "3b739adab636be48b0420e727db9e15f5d4d6b1fcb5984207017f677"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000dc0)={0x34, &(0x7f0000000b80)={0x0, 0x16, 0x53, "af4bab98ce0b8115d254bf92fa14dc63098198f9e0d18e57d7bd0d7ed9b392bf06405ead15986803d6a5e147e5dcc1be1c6104d560f742948386e14ca1ef90d01a05aed8cf38c8026d20704a14d99ff72317fa"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x29}, &(0x7f0000000c40)={0x20, 0x0, 0xd7, {0xd5, "9373f6ba4095c9f993cb0372b6c2c51d6dcd9d701f1e917736ba94ece4707a3ebbff9d9a75933af135aa9f4b449f615c10bb9e594a5c575358ecb5498fcf0a8135549ce489a6d6496c7cd3be81c82ba2faed3e91df9d69fa4da796e17a6b26ecb0d3680bec232accee3a293e2115bcaeef5e4528e5cc5427d66615da16b3d363ac71d13a7fbc1a0c68f33a1aa961b5d2f48609390703e0e89c64094538bd3c6b5c05052251e777b3eb166bf8c941249ecaab171234aed57b5b9712af8b57b3e42f994b44fb466c4c9d1687d37ae3506c4e67cc9bf2"}}, &(0x7f0000000d40)={0x20, 0x1, 0x1, 0xf9}, &(0x7f0000000d80)={0x20, 0x0, 0x1, 0x4}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaabaaaaaaaaaaaaaaaaaa08004500001c00ec0d"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x6b, 0x5a, {0x5a, 0xf, "aa66adbd9678ff775c869d114d044fca2066745aec781cf70391e1e03571561c5fbaa121087192b2d9c0d23acb3bf6e30b9e094df42f7d4927d3898bb0d8e8d74e09bbcad5e253d949ab172c308c84a1827eabddd7342bd6"}}, &(0x7f0000000140)={0x0, 0x3, 0x25, @string={0x25, 0x3, "4c4618781923a2227109d98ed77b64b5bf2bcc7bf01e8d278c0fb319eab564e0ba7d4a"}}, &(0x7f00000002c0)={0x0, 0xf, 0xfffffd80, {0x5, 0xf, 0xae, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "1530af016e3fcc5de059f88ec437c32d"}, @generic={0x8b, 0x10, 0xa, "aa79d78036546b409b2bd5af155b9082d6505ad2fb17448a0d51a49ada54da607b5210ae6974129ad70f35feb61a4cc1e8007bc31b4664164b8f7f53d3d149fa33c39f6d3b7ef68b2be764913f62e857ad644e6efbbe6cd9fc4b4d0b8e4575f5927781fd1dcba2690425bba0ddbf3ce5454ae728b68ff871118c5a53f21f3ac19c182fcef3444e5e"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x9, 0xd54c}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x3, 0x5, 0xa, "8015be8a", "fd1d342b"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x2, 0x5, 0xf1, 0x4, 0x2}}}, &(0x7f0000000900)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x7}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x9, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "aea8"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "9ea3"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x46}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x40}}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000100c0)={&(0x7f0000010100)=[{0x18, 0x4800, 0x1, &(0x7f00000001c0)='\x00'}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x700000c, 0x11, r6, 0x180000000) socket$nl_xfrm(0x10, 0x3, 0x6) 2m35.23051486s ago: executing program 0 (id=2480): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 2m32.814481766s ago: executing program 0 (id=2491): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9c) 2m32.735327373s ago: executing program 0 (id=2493): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r0, &(0x7f0000000080)=[{0x1e, 0xdc, 0x0, 0xfd, @time={0x1}, {}, {}, @result}], 0x1c) 2m32.694608052s ago: executing program 0 (id=2494): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3", 0x21}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e", 0x42}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8", 0x1c}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m32.421705926s ago: executing program 0 (id=2495): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) close(0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m31.511851764s ago: executing program 0 (id=2498): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x6, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x101, 0x2, 0x1, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0x101, 0x800800, 0xa239, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0xc88c4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) r7 = eventfd2(0x7, 0x800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r9, 0x0, 0x0, 0x10, 0x0, 0x1, r7}]) 2m23.172026334s ago: executing program 1 (id=2537): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x52}, 0x28) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x4000084) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r0, 0x100000000) 2m21.861990962s ago: executing program 1 (id=2540): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2m21.639659089s ago: executing program 1 (id=2544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440d0}, 0xc0) 2m21.580370221s ago: executing program 1 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = epoll_create1(0x0) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet_udp(0x2, 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee01) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x12200, 0x54, 0x10}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2m20.005086633s ago: executing program 1 (id=2552): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x40}, 0x28) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x4000084) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r0, 0x100000000) 2m17.968256873s ago: executing program 1 (id=2557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xc36e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, &(0x7f0000000700)}, 0x20) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) 2m16.358671024s ago: executing program 34 (id=2498): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x6, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x101, 0x2, 0x1, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0x101, 0x800800, 0xa239, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x6, 0xefcb, 0x8]}) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0xc88c4) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) r7 = eventfd2(0x7, 0x800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r9, 0x0, 0x0, 0x10, 0x0, 0x1, r7}]) 2m2.880492529s ago: executing program 35 (id=2557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xc36e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, &(0x7f0000000700)}, 0x20) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) 1m2.672650632s ago: executing program 6 (id=2941): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x31e, 0x9, 0x8}, 0x3, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x4, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0xe8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x7f, 0x4, 0x0, 0x0, 0x6, 0x8, 0x4}}, {0xc, 0x2, [0x8, 0x4, 0xc02, 0x2ca0]}}, {{0x1c, 0x1, {0x80, 0x3, 0xffff, 0x2, 0x1, 0x80, 0x7, 0x4}}, {0xc, 0x2, [0x4, 0x9, 0x757, 0xff]}}, {{0x1c, 0x1, {0x8, 0x2, 0x0, 0x9d, 0x0, 0x0, 0x7f, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0x8c70, 0x4]}}, {{0x1c, 0x1, {0x91, 0x2, 0xd3, 0x0, 0x1, 0x7, 0x5, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x7, 0xd2, 0x9, 0x100, 0x1, 0x9, 0x5e05, 0x2}}, {0x8, 0x2, [0x6, 0xdc]}}]}]}, 0xe8}}, 0x4048000) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r8], 0x2000, 0x800) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 1m2.526101499s ago: executing program 6 (id=2944): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x4041) syz_usb_connect(0x3, 0xa89, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x41, 0xf1, 0xf8, 0xff, 0x403, 0xe40b, 0x7439, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa77, 0x3, 0x9, 0x81, 0x0, 0x8, "", [{{0x9, 0x4, 0x3, 0x2, 0xb, 0x34, 0xf4, 0x40, 0xef, [], [{{0x9, 0x5, 0x9, 0x10, 0x0, 0x6, 0x2, 0xca, [@generic={0x73, 0x21, "d8884c1ee2e468634385735497cb99058212a7e7a3b0ecbd687d3d22683fdacf28b9be646100bd30619829ac532a51375bb6a1d4cf38e536130e81c829ab1837fd5ef7db477512ad4af91924b9a3a2a81e6a6433b3a0cf3331a2bb2f15d4691ed8c60ebfe739b91ef1606ff783447cdcc2"}, @generic={0xc6, 0x4d, "d3b3b42fb266266a9c8fea849a60b0ee14cefc78a3f6892784274a3073c4c181325b90169eb21493c9faa4dad20ff5edc17e71b22276e9f4dd54d46f182775050043f9b54b7819b73b867df788c473d3f4aab3bb1c5dfb6c2a252260f66479a742b562882e7b7461ec58e33841bbde0f4da4458692e3a885989ea3f7322a198800d744afaddb6a7bd29f83f6269c4538bddaf68634ef069e1c5c1b4fbaca25acada3aec421fa1ce4a300a63ccd8bba9d5c6d610e3e61fab9891b09fe4fb7ef5a5c9e1f94"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x9, 0x7a, 0x2, [@generic={0xbb, 0xf, "b1e0c8601a05d89f9686955cd3f08da4f75c65689c1f9fc5259f4ae03860447faa77f60e683eddc001309f0c24a967634a9ac00ba47a30dfc03466af4e1417a964e34ac4d7395776968ee60448165f6606b709e80115f37de784d7d89e4389f83173da14b55d0b0b3fcbbb787617cfead3a32ed8967b4ad0197ac7fc2e52a8d2b540b83a24b0c20eec0523bff7a8169c23145621d1f779d96f6ccc7ccc851a010e21dc0c8090f4cc9cb08973e35dd63750e4ff0eaf8676ce93"}, @generic={0x8d, 0xe, "c11615d512b633f0a4a400dde086ba51eba441d6ac86143ec9590895843f4f48bd94b373f5f29f77be1400f70604e7146a3ecfb03394ff17093c68eca63a4f067fd34b13825c68145b5b6aab9deffda3f1ba9889d4c33c019744c6be6c1939f721ad9cc452c173945d8581f346e10ca856902d0bc735b90776434c561ec28c1ced3c692a0edf6392600399"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x4, 0x0, 0x3, [@generic={0x22, 0x14, "5c609379debff4fb6dde9d826c7abd28c838476a5e9f15f26bf2b8792cf90070"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0x80, 0xea, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x200}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x14, 0x1, 0x8}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x2, 0x5, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}, @generic={0xf3, 0xb, "21ce8d15392f090bc21f7c65c78293fe4a2e882344711faa62a58227b825a255001ffd54b4ad1e12b4f29df25cf50b10a22e3b75edfc5a8c0c1f6413518d76c6627eac1eac7e8ad140a4244bbc2b82268799686e763cdd9df32c1cf4834c7db34eb3cf054abfb7d61bf9305846c230e117da359a3e547a0f5e0020174600cc063ac9cc4368262b9305c541800961dd1044c44765565cc7844f8164d8d2724296a0b0f03e2544ccbf2fb9bd327caeac6b31f847523f00d5bfcb0edcedbbe8e7b5eba673031cf373e4404302da76f5e5a2bc7846be3d5da7ff0b12247a92ef65876957f5dd768e2b4186001c72064018f9ca"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x1, 0xef, 0xc}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x6, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1a}, @generic={0xad, 0x30, "0a754e72de6e09ec1463c8740c0b4da193f59aae912e7b1492e52cab50c23bb9cf74e11f233c31b33e74e2baea880ebd439f61eb7822c7be54155b9cec763a536b867144e6fdd0f75bf152aa573ed9d31cb942a3f4da22cbb98c979ea631515020165dac61e5ac6dbb97cc54770c5e295c8dca875bebd05b14e5b728bb00b8e6cf78398d59dbcb1ebfcaba39ed7a6f2762a5ddb4deba6e7a9289d7ac36ba53a3efe513e9772cef32c7241b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x7, 0x9, 0xff}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x6, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x33, 0x4, 0xc, 0xff, 0x6, 0x14, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xe7, 0x9, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x1, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xe1, 0x3, 0xd, 0xc3, 0x5, 0x5}, @dmm={0x7, 0x24, 0x14, 0x9, 0x504}, @network_terminal={0x7, 0x24, 0xa, 0x3a, 0x9, 0x8, 0xb}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x2, [0x7, 0x1, 0x9, 0xfeac]}]}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0xc, 0x5, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xfff}, @generic={0x5, 0x31, "fcd13e"}]}}, {{0x9, 0x5, 0x9, 0x1f560865aa9738ef, 0x8, 0x8, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x800}]}}, {{0x9, 0x5, 0x0, 0x10, 0x100, 0x9, 0x7f, 0xfd}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x2, 0x2}}, {{0x9, 0x5, 0x14af4393b685578b, 0x10, 0x200, 0x3, 0x8, 0xb0, [@generic={0xae, 0x11, "8b60feee69ae7056b89d7c3e97babc5464ff9d8dcccc5dbb552e6e392b3a6cf88e8b3780c822192a0797f5704062841b139a26a436f54a7e8f3d4711e00b40fc3c444e836a1d8d04810086d3ae3a52a1091574273e821d60565012a2554eaedc88eb8b416ead6131fd9ac157f626c5800fb942082abffbfc66be2ea67a8fac7e221825e02e0a30b244c4325e91e95427b12f2b1f0e2828505b5226c47e7d75f22ae43ae7a128ed3b063a9a23"}, @generic={0xe4, 0x7, "dbee82d14da44ff6e09f5c23568bf00e515650a55d3022eee33061916ad392745265d07d889f7526ab8a73c2be4bd30ee04d3ec253581892655e68f62087318185a81c13b097130a5df1947cc3d4419674b69ac3f3d446eac2093ab09ee80218534b511e07cbe13b9dd6e78b3a3608a6865a14c901b93b23e6e50e652312f3483886cce47aa2152d600302dec7b19457602058a75206e4f6d7fbe4628647f3136cb318e6e15eabc76e3be0fd293b45530fbf84e1491d3766117ee6de22b609561bbfe1db6d2b372f01ee6ea71b1d51902157fe182e1af2d802ca5e3635d92ecb60d4"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xae, 0x70, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0x2}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x8, 0x0, 0x93, [@generic={0x11, 0xf, "79031f02cfe694d22af304ebc46da7"}, @generic={0x31, 0x5, "59977ab334dc402eec9262f5fb0ed94a0f6fbf94fb3a18c7da8ef05c677efd2ec69822dfa140bd6bbbb702aacf73b1"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x7, 0xa, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x3, 0x220, 0x8, 0x7, 0xfe}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x3, 0xfd, 0x0, [@generic={0x29, 0x10, "5a17eefafd676f6a466c708c40f189a72f95fcbf18d67208f4f466fade4681674080170f4887b0"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3d7, 0x8, 0x9, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x8, 0xf2, 0x5}}]}}, {{0x9, 0x4, 0x4b, 0xb2, 0xd, 0xff, 0x9d, 0x9e, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "ae57ca34348b"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x1, 0xab45, 0x14}, [@country_functional={0xe, 0x24, 0x7, 0x10, 0x9, [0x6400, 0x0, 0x8, 0x7ff]}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "9923a8df12"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0xe1, 0xd66b, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0xa6}, @mbim={0xc, 0x24, 0x1b, 0x7f, 0x7, 0x7f, 0xc, 0x0, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x42, 0x1, [0xa, 0x9, 0x9, 0x3, 0x9]}, @acm={0x4, 0x24, 0x2, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x8b, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x4, [0x0]}]}], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x0, 0x7, 0x5}}, {{0x9, 0x5, 0x2, 0x17, 0x20, 0x3, 0xc8, 0xe}}, {{0x9, 0x5, 0x2, 0x1b, 0x8, 0x9b, 0xc, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x6, 0xe8, 0xcf}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x58, 0xd}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0x1, 0x99}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x6, 0x40, 0x3, [@generic={0xbf, 0x31, "d2b4580d5757aab266d7bc95cb6bc4853b823d511b3955f413aedf5dbc65fdb79b5b37099dcefee613def70ca28eb0df0227156e8ab30d7ca88a230c760bcd390e3e4a4d855aaae66ad8a52add918386d4b8dfdc567ed0d08acf21b239bed6fb7ecba58b7a2f0bb4ef96ff1276c0d93a1b9effe7a4289e0048139c3a69fe8f2d70a0726da26b71bdb11bdce26f32ec1a61f32cd4fd3b6695f3a1dcb3d9fe4dea8ccec1565c95fc07f4c0e970c13d2bb3ea6a7cd5e5d78ae99064a3cc70"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x456d}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x64}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x9, 0x2, 0x9, [@generic={0x9e, 0xd, "8d9e4610974f2e2b432c5a3240ce2e4ecb4fa9067c01c462edd525880f83f540166ceee45508a2fe5fe56faa199508a2279082196a39a45d1afef81bdc484db98cb083d5f590748b53a35ad5016fc273dba423fa4de0610c2cefb56a6bbc0b9fa209a28f22a217066096473a02be32027de9ae7cd896d6fdd94752b2a4fa96e6666577aa7575659c85e1cf32304a33189639adb2b9b95ed27a3ba5bd"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe0, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x6, 0x10, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x5}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x40, 0x6, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x71}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xed3b}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0xfe, 0xb9, 0x20, 0x8}, 0x47, &(0x7f0000000040)={0x5, 0xf, 0x47, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x54, 0x6, 0x7, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x4, 0x1, 0xff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7f, 0x5, 0xff00}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xf, 0x7d, 0x3, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "9e40c2720096c2a3e7cfa334b5926371"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x83, &(0x7f0000000100)=@string={0x83, 0x3, "67b924c103ccf1989169116e3eef630d5a15e64fc5e3a08f0008d66d54ebbdf3bd96e11629c2a2c7108bd59fa2f6e95e3f9daa88991725e710def402cfe4d942cc1c1bae9b20012b83e45cff4918b186efd153d8180d1dfdcb9fa4a4e01c01bd1f7bd5e488f61d23a2c9288265d43336e0d24327b23caf77c5094e732d83d5361e"}}, {0x4, &(0x7f00000001c0)=@string={0x4, 0x3, ':D'}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x82, &(0x7f0000000240)=@string={0x82, 0x3, "6a0a3bc403ea1a742b7e4a1f3f7ee588ee73e4d3c0b2131a85d7c79cac622fa0c3421a5a2073788762d5a6303685e1f770a9092b4039b28992c6d4b795c16bdc051afd8ad96fe735bed703a71f6ae9bd2341cdc5f1510c3d80a60e7a300b06350f5f576a71c7c4635bba751d731297604812740fe94df36df6cf3222669a72a9"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0xff, &(0x7f0000000380)=@string={0xff, 0x3, "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"}}, {0x8c, &(0x7f0000000480)=@string={0x8c, 0x3, "d6d2a53ca179bdc40284964afc9f760ca502b9a44d0a141a77214aae250b0d93a28d00fd08940df50b5977c2a86a4ddd05f39f0f6fb4081bbc10b0070b3a986a9992ccc0c11a2a2f149eb1106101e7d968e0dfdf579f73a3c5d2cc9376a9d1199421f3b676202fff18b2702c0a95c759ed54c9393925fdbb7977b0537c714c7568a04a70a7be6dea2a5b"}}]}) 1m0.884216637s ago: executing program 6 (id=2951): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x3) 1m0.619921235s ago: executing program 6 (id=2953): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0000000ffffffffffff0802"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 1m0.331677289s ago: executing program 6 (id=2954): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090300c9fa8c126acded0090f9758d577cbacfd29539b99151794e9719b14fe9d18b641425437aae51b52e2751708f9216ae7451c0e1b5d1de1fa51a7b008507e37e5d744f"], 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04330a00000000000000000100f9b714dd"], 0xd) sched_setaffinity(r1, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a000400000008000280040001808a99878ee85b6fd0572139c1578090f97458aa913c1d9d8867343ea9"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 56.861643377s ago: executing program 6 (id=2962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.485339097s ago: executing program 36 (id=2962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.35717525s ago: executing program 2 (id=3097): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 12.775062569s ago: executing program 8 (id=3098): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x4365, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0xa, 0x5, 0x0, 0x3, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28a441, 0x143) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x1, 0x2, 0x301, 0x0, 0x0, {0x1}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) listen(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5d, 0x40000003) sendmmsg$inet6(r5, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="0c7f1034033756d55bf91c774c3a0bbe07e73e0e70b3123b3cf59847bb45acc3aba96ed9513d913b1d0c119ecfc105d3e5a8d59e89394dcca861d1ee80043d24c29e645d5d90d6f0b28ccb87a8b456db722bcd390eae08173cfb125f3bffbd82bdba8b0dd2229ea21149eb9abb8fe9ac393f28eee80dbb5ef3d8b93ca2e9f306d06af5b620d6", 0x86}, {&(0x7f0000000540)="9c457f50c3fedf29aad103f83a78c4f5ced159faf540befc7357d3750e6c0fd57cbb11f05b89dc5870650bc8d390e4029cd02cb0ef83997d8a7878a8ca4097314f92957ba537b857f40010cad794463511911588ba50b6a57bdf55239b0c1beafedcf8ee1999d62704c043bed02110334437c8c1864c6b8ed72805adacd7da322d32c9f706acd10113ef1af531ef127487e9", 0x92}, {&(0x7f0000000600)="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", 0x1000}], 0x3, &(0x7f0000000200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x81}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x68}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x7, @private1, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001600)="6c0a281db3073a52def91b76e6ac78ad57658876d2eaace32f21693b63f1dcd14695278f02e66234a4b6ab40cd5a816f99319622a7f0fe2b9b47fdcb709f07ebd532adaaf76973bf09552ae0e587894f1bca1aaa02a954de8914670b548fb4815f64d89c941e5d0dbd7b01946e7fe69214054f0bf84103fd", 0x78}], 0x1, &(0x7f0000001680)=[@hoplimit={{0x14, 0x29, 0x34, 0x10}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x73, 0x10, '\x00', [@generic={0x9, 0x44, "f1df729e2f2b17233d73527746016a0ed3885e4a847b13e9b5b71e64b2ae513baa2a632da2d54426be6ed9e45a7c90f81d7badae0a9c6281dda49e1ccf7927d1ed686829"}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x18, {0x2, 0x4, 0x10, 0x3827, [0x6, 0x2]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4}, @hao={0xc9, 0x10, @mcast2}]}}}], 0xb0}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffffb, @private0, 0xa}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001740)="5097c4d9492d20238a90164364ea604db4a0bdc9f245204d739009a1b5dc7e19ee34c2c8a6c1e1d383f5d3e463677641fd1099b144d3739b2fb4429532ef5be5f1688747229d4b40284dc390202fa9edc172d5d5b52b6f498d3b989d8e4c2fd7dfa138fe28827c3eac1b349f717ace4e7630c520e2e09f42cb10e8261708a71288bc9312fbb3a1c0d85969727c3db44302f0892c2508486d3d726c9f7d6c7b51d047ecd4d1dc65ba4cc044ab8c66868e42eecc2984daa3a8d84eeae561f741112e", 0xc1}], 0x1, &(0x7f0000001880)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @hopopts={{0x78, 0x29, 0x36, {0x32, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @generic={0x2, 0x56, "a1bbf6b74e94902e9129ae9c43514885280738c26cd690e1687bcdff8e47c743c84a3921cac2a2cb4b3f922f4002c8f32fe62b7dc212d87cad9a7de709dbbdb080ddbe7994c5df9a32bf69e3b86bcd2ddd3f8c6e5981"}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0xff, 0x0, 0x1, 0x8}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x3ff}}, @rthdr={{0x68, 0x29, 0x39, {0x5e, 0xa, 0x0, 0x0, 0x0, [@mcast1, @private1, @loopback, @remote, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa8}}], 0x170}}, {{&(0x7f0000001a00)={0xa, 0x4e24, 0x7, @loopback, 0x5}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001a40)="453895a669328852ec5eb87d747fb740f9fbddd525656c6760e68a3cc3c8cacd", 0x20}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="09b6bfd9f31a92a6004430e9486e76ba1647087a01099f6b938974bc3246dc28a4ceaba961136c518ad082407ce9550dd0b1b35e73", 0x35}, {&(0x7f0000001b00)="78e608c9e69ad97265fd9f2d911206533a5f20c2adf9f4a12a964a76f5380c93833526b9d8b16cd91ca1bf05ce7d509896bb044436de7eb9a0974a0b8d6604925a43684f", 0x44}, {0x0}], 0x5, &(0x7f0000001d00)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x3b, 0xc, '\x00', [@generic={0xc0, 0x42, "02ca29c6a6a38b05063fa79a0a0ae4b992c712396a3d6f231e585948f441d462aed1b74823777f340e9a637b40043ad00be7b3d60752b28204f9ef490e5693de6a26"}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5e, 0x2, 0x2, 0xd, 0x0, [@mcast1]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x1, 0x20, 0x0, [@local, @private2, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3b, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x3, [0x2]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x208}}, {{&(0x7f0000001f40)={0xa, 0x4e23, 0xbf, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f80)="561e8f663fcb7c44c25d7e791bf5ee35758d451b2d3d5b8312b844c11d54f17113ecada7b9a585a24a18bffd337fedd54c7f01716566daa5f4876059e1e758489e1260123362f89f931541d7aca1d63224ba801e6409f387d2a41a53086578de57d5fafc2972c2aad3ac318a1ef23bbc5fab1c212439b6435bdd1650c59001314c12c3e35b39650c9a32e78942ff8e9cdb2c74605454f06875b33dd3cefe371cd6396a837243a00fce482179c6e4e31fcc7447066adbd8c0fd5fa9071c2840cafade4629a99e80fb3950347b396e7c433cdb2e34dd4aa24d2bbbc9e317dd9fc676c8", 0xe2}], 0x1, &(0x7f00000020c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x81}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0xe, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@pad1, @pad1, @generic={0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x1, 0x2, 0x0, [@empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x178}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=[@hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x30}}], 0x6, 0x2000020) ptrace$setsig(0x4203, r4, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) 12.698956157s ago: executing program 2 (id=3100): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x8920) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r7, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 10.443509256s ago: executing program 7 (id=3101): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 10.42344173s ago: executing program 3 (id=3102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000071400078008001240fffffffe080013400800ffff050004000000000010000300686173683a69702c6d61630005000500"], 0x5c}}, 0x0) 10.169322092s ago: executing program 3 (id=3103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2e003300d0000000ffffffffffff080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 10.144289625s ago: executing program 7 (id=3104): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x5, 0x40, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "c3ddbf"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0xe, 0x7f}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x2, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x3, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4e, 0xe7}}}}}}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0x91, &(0x7f0000000100)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x20, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x4, 0xf0, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1e}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x5, 'SjD'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x2, 0x3, 0x100, 0x8, 0xf7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x3, "9cc1de"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x48, 0x8, 0x2, {0x7, 0x25, 0x1, 0xc, 0xf, 0xd9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x0, 0x1, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x1, 0x1, 0x9, 0xff, 0x81}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 10.027700215s ago: executing program 8 (id=3105): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r7, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 9.955865814s ago: executing program 3 (id=3106): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090300c9fa8c126acded0090f9758d577cbacfd29539b99151794e9719b14fe9d18b641425437aae51b52e2751708f9216ae7451c0e1b5d1de1fa51a7b008507e37e5d744f8ac04be7a920ec70efa3dedf"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04330a00000000000000000100f9b714dd"], 0xd) sched_setaffinity(r1, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a000400000008000280040001808a99878ee85b6fd0572139c1578090f97458aa913c1d9d8867343ea9"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8.871199846s ago: executing program 2 (id=3108): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090300c9fa8c126acded0090f9758d577cbacfd29539b99151794e9719b14fe9d18b641425437aae51b52e2751708f9216ae7451c0e1b5d1de1fa51a7b008507e37e5d744f"], 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) syz_emit_vhci(0x0, 0xd) sched_setaffinity(r1, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a000400000008000280040001808a99878ee85b6fd0572139c1578090f97458aa913c1d9d8867343ea9"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8.759595932s ago: executing program 3 (id=3109): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x8920) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 8.616424276s ago: executing program 8 (id=3111): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000300)={[{0x9, 0x4e00, "e1ee6baaffa61ec0c0"}]}) 8.463628935s ago: executing program 9 (id=3112): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 8.345413503s ago: executing program 9 (id=3113): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r8, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 7.440644889s ago: executing program 2 (id=3114): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x25, 0x9f, 0x96, 0x20, 0xbb4, 0xa1d, 0xef31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000ac0)={0x14, 0x0, 0x0}, &(0x7f0000000d40)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.011804078s ago: executing program 7 (id=3115): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6.966836944s ago: executing program 7 (id=3116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'ipvlan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x17, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r6 = gettid() r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x48090) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r6}, 0x0) socket(0x40000000015, 0x5, 0x0) 6.921731278s ago: executing program 9 (id=3117): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x1ff, @remote, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) 5.806128763s ago: executing program 9 (id=3118): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32, @ANYBLOB="ffff018abe00"/23], 0x50) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() ioprio_get$pid(0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @ib={0x1b, 0x6, 0x9, {"49c13bc2632ff7799458db1ad3028c6a"}, 0x8, 0x4, 0x6}}}, 0x118) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x9, 0x428581) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$usbip_server(r8, &(0x7f0000000a00)=@ret_submit={{0x3, 0x2, 0x0, 0x0, 0x9}, 0x2cd20bfa, 0x0, 0x3a7287ea, 0x285, 0x80, 0x0, "", [{0x5, 0x7, 0xffff, 0x3}, {0x0, 0x1ff, 0x1, 0xb8d}, {0x5, 0x7, 0x5, 0x10001}, {0x3, 0x6, 0x8, 0x5}, {0x3, 0x8, 0x5, 0xffffffff}, {0x7fffffff, 0x5, 0x9, 0x1000}, {0x6f07, 0x9, 0x2, 0x40}, {0x4, 0x3, 0x2, 0x1d}, {0x1, 0x7, 0x84, 0xfff}, {0x0, 0x1, 0x10, 0xffff}, {0x9f1, 0x1, 0x100, 0x6}, {0x0, 0x9, 0x2e6db1be, 0x7}, {0x7, 0x40, 0x401, 0x6}, {0x0, 0xffffb6cd, 0xffff, 0x400}, {0x3, 0x7, 0x750f, 0x41}, {0x8, 0x2, 0xc6fd, 0x847}, {0xd132, 0x10, 0x32a7, 0x8}, {0xfffffff8, 0x5, 0x8, 0xa7}, {0x9, 0x6, 0x0, 0x29}, {0x9, 0x3, 0xda1e, 0x1}, {0x6c3, 0x8, 0x5, 0x5}, {0xf, 0x800, 0xfff, 0x2}, {0x40, 0x6, 0x2, 0x5}, {0x9, 0x81, 0x6, 0x9}, {0x8, 0xd, 0xfffffff2, 0x800}, {0x1, 0x45a, 0x9, 0x8}, {0x5, 0xe, 0x9, 0x1000}, {0x12, 0x6, 0x5, 0x9}, {0x4, 0x8, 0xf, 0x622545a4}, {0x5, 0x40, 0x4, 0x3bf1}, {0x63c1, 0x9, 0x5, 0x1}, {0x7, 0xf, 0x4, 0x4}, {0x81, 0x4, 0x5, 0xf357}, {0xff, 0x1ff, 0xc3b5, 0xa}, {0x2, 0xa, 0x6, 0x21cc99b9}, {0xa09, 0x0, 0x7fffffff, 0xfffffffc}, {0x0, 0x5, 0x0, 0x4}, {0x200, 0x8, 0xfffffff7, 0x5}, {0x7ff, 0xffffffff, 0x401, 0x5}, {0x6, 0xfffffffb, 0x12, 0xff}, {0x1, 0x400, 0x2, 0x1}, {0xfffffeff, 0x3, 0x4, 0xc2}, {0x1, 0x81, 0x70000000, 0x93}, {0x0, 0x3367, 0xf}, {0x8000, 0x7, 0x1}, {0x5, 0x1, 0x8000, 0xcbe}, {0x7, 0x9, 0x39, 0xe}, {0x9, 0xfffffffb, 0x1, 0x7}, {0x6, 0x3e7, 0xff000000, 0x10001}, {0x6, 0x2, 0x80000000, 0xfffffa2d}, {0x5, 0xc, 0x3, 0x4}, {0x10001, 0x10, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x4}, {0x5, 0x8, 0x4, 0x3}, {0x8, 0x9, 0x2, 0x101}, {0x7fff, 0x3, 0x9, 0xb}, {0x7, 0xf4f6, 0xffffffff, 0x7}, {0x8, 0x4, 0x73, 0x4}, {0x3ff, 0x5, 0x9, 0xa}, {0x81, 0x5, 0x5, 0x401}, {0x57, 0x0, 0x5, 0x1b}, {0x5, 0x98cb, 0x7dc3, 0xf}, {0xe, 0x1, 0x1, 0x3af}, {0x7, 0x3, 0xffff, 0x9}, {0x200, 0x7, 0x1e, 0x2}, {0x7fffffff, 0x5, 0x1000, 0xf}, {0x2, 0x4, 0x3ff, 0x7}, {0x8, 0xffff, 0x2, 0x1df63973}, {0xa, 0xe, 0xe653, 0x4}, {0x8, 0x7b8, 0x9, 0x800}, {0xfffffffa, 0x9, 0x0, 0x81}, {0x9, 0x4, 0x8, 0x4}, {0x259, 0x0, 0x8001, 0xdbc}, {0xffff, 0xb0b, 0x3ff, 0x5}, {0xd, 0x8, 0x4, 0x3}, {0x3, 0x5, 0x8}, {0xa93, 0x8, 0x0, 0x6f3}, {0x0, 0x2}, {0x7, 0x1b80, 0x101, 0x143c00}, {0x7fff, 0x2, 0xf2, 0x9}, {0x8, 0xffffffff, 0x0, 0x100}, {0x1000, 0x8001, 0x8, 0x9}, {0x2, 0x9, 0x401, 0x8}, {0x6, 0x6, 0x9, 0x8}, {0x1, 0x4, 0xd71b, 0x2}, {0x5, 0x8, 0x7, 0x75}, {0x7e4, 0x3, 0x5, 0x80}, {0x5, 0x4, 0xfffffffe, 0x223e7736}, {0x1e, 0x5, 0xd, 0x6}, {0xfffffff9, 0x0, 0x7, 0x3}, {0x1, 0x401, 0x10001, 0x100}, {0x80, 0x1000, 0x4, 0x5}, {0x401, 0xf7, 0x5, 0x70000000}, {0x100, 0xf, 0x78a7, 0x6}, {0x3, 0xfffffff9, 0x8, 0x7a}, {0x8, 0x2, 0x2, 0x8}, {0xff, 0x4, 0x6, 0x75}, {0x2, 0x7f, 0xfffffff8, 0x703}, {0x3, 0x9, 0x3, 0x2}, {0x10, 0x7, 0xffff, 0xa}, {0x10, 0x2, 0x46a, 0xf73230d}, {0xb, 0x8, 0xe, 0x9}, {0x7, 0xffffffff, 0x10}, {0x5, 0x8, 0xe, 0xe48}, {0x2a, 0x9, 0x5, 0x7fbae54f}, {0xe, 0x6, 0x1, 0xc0}, {0x6, 0x4, 0xcca9, 0x4}, {0x1, 0x2, 0x1, 0x23}, {0x80, 0x40, 0x2ea300c7, 0x2}, {0x6, 0x5, 0xf9}, {0xfffffffe, 0xa974, 0x0, 0xd}, {0x5, 0x474, 0x6, 0x4}, {0x80, 0x3, 0x6, 0x500}, {0x4, 0x4, 0x8, 0xb}, {0x5bfaa272, 0x1, 0x1}, {0x5544, 0xffff, 0x7, 0xff}, {0x1, 0xaa, 0x7, 0x6a}, {0x9, 0x4a, 0x6, 0xfffffffc}, {0x6, 0x6378, 0x5, 0x3ff}, {0xec9, 0x4, 0x862b, 0x6}, {0x5, 0x5, 0xd, 0x3}, {0x8, 0x5, 0x9, 0xb0}, {0x1000, 0xfb, 0x1, 0x8}, {0xff0000, 0x9, 0x80000000, 0xfffffff8}, {0x7, 0x0, 0x7, 0x4}, {0xb, 0x2, 0xb, 0x80000000}, {0x493c, 0x101, 0x10001, 0x8}, {0x3, 0x8, 0x6, 0x8}, {0x1000, 0x86f, 0xffff, 0x689a15c8}, {0x160a, 0x7, 0x80, 0x8}, {0x80000001, 0x8, 0x1000, 0x9}, {0x80000, 0x5, 0x2, 0x6c3}, {0x1, 0x1dfc, 0x2, 0xfffffff7}, {0x2, 0x2, 0xffffffff, 0x401}, {0x8, 0xfffffffc, 0x800000, 0x1}, {0xffffffff, 0xffff, 0x2}, {0x3ff, 0xb9, 0xc, 0x8}, {0x3, 0x5, 0x4, 0x545}, {0x0, 0x9, 0x9}, {0xcb5, 0x5, 0x0, 0x474}, {0x5, 0x10001, 0x9, 0x7ff}, {0x8, 0x7, 0x1, 0x2}, {0xe, 0x4, 0x6, 0x6}, {0x80, 0x7, 0x4, 0x3}, {0x0, 0x9ba, 0x7fff, 0xcf}, {0x2b, 0xffffffff, 0x9}, {0xcf98, 0xfffff239, 0x0, 0xd7a4}, {0x7, 0x8, 0x4, 0x7}, {0x7, 0x4e8, 0x10, 0x8}, {0x7, 0x5, 0x1000, 0x8000}, {0x9, 0xa640, 0xe4, 0x9}, {0x0, 0xfc000000, 0x5000000, 0x7ff}, {0x3, 0x4, 0x2, 0x42b0}, {0x0, 0x8, 0x1, 0x8001}, {0x6, 0x7ff, 0x2, 0x800}, {0x1, 0xfff, 0x2, 0xa}, {0x100, 0x0, 0x4, 0x800000}, {0x9, 0xd9, 0x1f63, 0x80000001}, {0x9, 0xffff3999, 0x6, 0x9}, {0xfb, 0xfc, 0x1, 0x6}, {0x5, 0x5, 0xfd, 0x80000001}, {0x7ff, 0x80000001, 0xfffffffa, 0x4}, {0x79, 0x7, 0x1000, 0x100}, {0x101, 0x3, 0x7, 0xfffffffa}, {0x68, 0x3, 0x2d84}, {0x4, 0x3, 0x1000, 0x7fff}, {0xffff, 0x2, 0xb, 0x9}, {0x7, 0xffffffff, 0x1, 0xff}, {0x5, 0x3, 0x2, 0x8}, {0x8, 0x4, 0x14}, {0x1, 0x5, 0xa913}, {0x4, 0x40, 0x6, 0x295f}, {0xe4f, 0x0, 0x1, 0x7}, {0xff, 0x1, 0x0, 0x8000}, {0x8, 0xecf, 0x7ff, 0xffffffff}, {0x7fffffff, 0x9, 0xff, 0x80000}, {0x9, 0x2, 0x6, 0x5ed1}, {0x6, 0x1, 0x6, 0xe75}, {0x9cbd, 0x18f, 0x0, 0x8}, {0x5, 0x7fffffff, 0x1, 0x6}, {0x0, 0xf2f0, 0x1, 0x2}, {0x0, 0x7, 0x0, 0x2}, {0x51d, 0x2, 0x8, 0xfffffffc}, {0xfd42db34, 0xe, 0x3, 0xffff}, {0x0, 0x7, 0x6, 0x6}, {0x7ff, 0x7, 0x0, 0x7204}, {0x1, 0x800, 0x9, 0xfffff44f}, {0x9, 0x2, 0x6, 0x6}, {0x3, 0xa, 0x2, 0x8}, {0x8, 0xfffffff7, 0x98, 0x6}, {0x8, 0x9, 0x200, 0x7}, {0x0, 0x1, 0x7a, 0x6}, {0xd20e, 0xfffffff8, 0x3ff}, {0xc724, 0x5, 0x4f62, 0x6}, {0x80000001, 0x1, 0x20000, 0x200}, {0xffffffff, 0x9, 0x2, 0x2}, {0x4, 0xba32, 0x5b78, 0xfffffff6}, {0x8000, 0xfb4a, 0x0, 0x2}, {0xf, 0x20000, 0x9, 0x98000000}, {0xed6, 0x6, 0x39, 0x2}, {0x9, 0xf, 0x9, 0xffffffff}, {0x80000000, 0xb, 0x753, 0x80000001}, {0x2, 0x2, 0x3, 0x4}, {0x1, 0xbeb, 0x5, 0x8}, {0x4, 0x6, 0x1, 0x9f}, {0x5, 0x9, 0xfffffffa, 0x1}, {0x7, 0x6e6, 0x87, 0x7fffffff}, {0x101, 0x8, 0x9, 0x7}, {0x0, 0x400, 0x80, 0x8b90}, {0xfffffff8, 0x2, 0xe, 0x9}, {0x3, 0x2, 0x40, 0x902}, {0x4, 0xb77, 0x2, 0xffff}, {0x2094, 0x600000, 0x3, 0x8}, {0x8, 0x0, 0x3, 0x7}, {0x3, 0x0, 0x1000, 0x3}, {0x0, 0x3, 0x4, 0x800}, {0x8, 0x8, 0xb, 0x8}, {0xfffffffe, 0xb, 0xa, 0x9}, {0x7fff, 0x80, 0x2, 0x8}, {0x6, 0x2, 0x4, 0x7}, {0xc, 0x54a, 0x10001, 0xfffffffc}, {0x1, 0x2, 0x2, 0x9b70}, {0x9, 0x3, 0x0, 0x4}, {0x7, 0x7, 0x3, 0x41408551}, {0x4, 0x7, 0x1, 0x6}, {0x6, 0x9, 0x8}, {0xd, 0x3ff, 0x9, 0x3}, {0x6b1614e4, 0x8000, 0x2, 0x1}, {0x8, 0x1, 0xdad0}, {0x9a, 0x0, 0x9, 0xfd1}, {0x7, 0x8fa1, 0xd93b, 0xb}, {0x3, 0x61c, 0x1ff, 0x3}, {0xffff, 0x5, 0xa4a, 0x1}, {0x7, 0xfffffffe, 0x8, 0x2}, {0x2, 0x81, 0x1, 0xbab}, {0x61f04f3c, 0x0, 0x7, 0xffff}, {0x1, 0xab, 0x400, 0xffff}, {0x6, 0x2, 0x1, 0x9}, {0x1, 0x8, 0xc, 0x7}, {0x9, 0x4, 0x7, 0x1}, {0x5, 0x704c, 0x7, 0xffff3d8e}, {0x9, 0x0, 0x0, 0x8c1}, {0x7, 0x9, 0x8001, 0x2}, {0x40, 0xc, 0xa, 0x3}, {0x6, 0xfffffffa, 0x1000, 0x1}, {0x7fffffff, 0x7fffffff, 0x0, 0x2}, {0x48, 0x993, 0x5, 0x26d37d77}, {0x8000800, 0x1, 0x4, 0x2}, {0x8, 0xfffff6a3, 0x4, 0x9}, {0x4, 0x2, 0xfffffffb, 0x607d7748}, {0x1, 0x7, 0x1ff, 0x8001}, {0x200, 0x8, 0x5, 0x2}, {0xffff, 0x7, 0x90d, 0x3}, {0x4, 0x75c6544b, 0x1000, 0x8001}, {0x3, 0x1, 0x0, 0x2}, {0xfff, 0x8, 0x80, 0x5}, {0x7, 0xc, 0x2, 0x8}, {0x7, 0x574e560e, 0x3, 0x19}, {0x9, 0x2b30eacb, 0x54, 0x9}, {0x7, 0x7, 0x2, 0x821}, {0x0, 0x8, 0x6, 0x3}, {0x6, 0x68, 0x0, 0x6}, {0x7, 0x0, 0x2, 0x3}, {0x6, 0xbb6f, 0x12}, {0x4, 0x2, 0x758, 0x1}, {0x2, 0x3, 0x7, 0x5}, {0x6, 0x3, 0x1}, {0x9, 0x2, 0xe, 0x1}, {0x2, 0x0, 0x2, 0x3}, {0xd, 0xfff, 0x1, 0x2}, {0x7, 0x0, 0x8, 0x4}, {0xb6, 0x1, 0x10001}, {0x1, 0xffffffff, 0x3, 0x2}, {0x3, 0x4, 0x334d, 0x3}, {0xffffffff, 0x8, 0xffffffff, 0x3c}, {0x8, 0xf, 0x6418, 0xb}, {0xb, 0x4, 0x8, 0x1}, {0xfff, 0x9, 0x80, 0x4}, {0x7, 0x9e2, 0x401, 0xc000}, {0x9, 0x8, 0x6, 0x101}, {0x401, 0x4, 0x1, 0x4}, {0x3, 0x0, 0x800, 0x10000}, {0x9, 0x40000000, 0xffff}, {0x1, 0x9, 0x2a5, 0xf3b}, {0x36, 0x3, 0x2, 0x7ff}, {0x6, 0x246, 0x6e7, 0x7f}, {0x2, 0x0, 0x9, 0x1}, {0x198, 0x3, 0x5, 0x1}, {0x4, 0x1, 0x7, 0x5}, {0xa, 0x4, 0x6, 0xa1e0}, {0x2, 0x8432, 0x677, 0x17dc}, {0x7, 0x6, 0x3, 0x1}, {0x8001, 0x2, 0x0, 0xb818}, {0x4, 0x5, 0x3, 0xb3}, {0xd219, 0x150f, 0xd, 0x2}, {0x7fff, 0x8, 0x10}, {0x100, 0x6, 0xfff, 0x5}, {0x0, 0x0, 0xffffffff, 0xc44a}, {0xd8, 0x3, 0xfffffff9, 0x7}, {0x2, 0x5, 0x200, 0x6}, {0x4, 0x4, 0x5, 0x6}, {0xfffffc00, 0x9, 0x8, 0xffffffff}, {0x0, 0xf, 0x6, 0x1ff}, {0xf, 0xffffff7f, 0x3ff, 0x9}, {0xfff, 0x3, 0x3, 0x7}, {0x4f90049c, 0x2185d4b3, 0x8000, 0x2}, {0x8, 0x1, 0xffffffff, 0x9}, {0x8305, 0x7fffffff, 0x8001, 0x10001}, {0x3e, 0x10d5, 0x8, 0x3}, {0x80, 0x587, 0x5, 0x1}, {0x6, 0x7fff, 0x7b70, 0x3}, {0x9, 0x2, 0x7, 0x3ff}, {0x7, 0x7, 0x9, 0xf}, {0x8, 0x10001, 0x9}, {0x6, 0x8, 0x0, 0x4}, {0xf7ec, 0x25, 0xe81f, 0x8}, {0x5, 0x7, 0xd, 0x4}, {0x81, 0x1ff, 0x8, 0x3}, {0x0, 0x4, 0x80000001, 0xc782}, {0x4, 0x8, 0x731d, 0xa}, {0x7, 0x1, 0xfffffeff, 0x81}, {0x5, 0x10000, 0x5, 0x9}, {0x6d3fe6fd, 0x401, 0x6, 0x800}, {0x4, 0x1d, 0x4, 0x5}, {0x3447, 0x2, 0x1, 0xfb4}, {0x7, 0x4, 0x9, 0x9}, {0x3, 0x3, 0xbe33, 0x8}, {0x3, 0xfffff997, 0x3, 0x9}, {0x8, 0x9, 0xb88c, 0x6}, {0x692f, 0x5, 0x1, 0x5}, {0x2, 0x9, 0x9, 0xfffffffa}, {0x1, 0x1ff, 0x1, 0x1}, {0x7, 0xe140, 0x3, 0x2}, {0x9725, 0x6, 0x2, 0x4}, {0x8, 0xa3, 0x6, 0x7dd2}, {0x7, 0x4d17, 0x4, 0x400}, {0x5, 0x8001, 0x812, 0x39}, {0x80, 0x9, 0x9}, {0xffff, 0x54, 0xbad5}, {0xb, 0xffffffff, 0xb4, 0x10000}, {0x3, 0x7, 0x9e000000, 0x7fff}, {0x7, 0x81, 0x1, 0x2}, {0x6, 0xe6, 0xfffff801, 0x7}, {0xc, 0x7ff, 0xe, 0x7fffffff}, {0xffffff78, 0x9, 0x7, 0x7fffffff}, {0x80000001, 0xfffffff5, 0xc, 0x3}, {0x6, 0x40, 0x7, 0x400}, {0xfffffffa, 0x8, 0x1000, 0x7}, {0x8, 0x5, 0x7f, 0xe1}, {0xfffff717, 0x6b9, 0x4e4, 0xf55}, {0x40, 0x0, 0x7, 0x4}, {0xfffffffb, 0x7, 0x2, 0x9}, {0x8, 0x5, 0x8, 0x2}, {0x43df, 0x101, 0x0, 0x1}, {0x6, 0x4, 0x1000, 0xc}, {0xfffffff9, 0x2, 0x5, 0x2}, {0x101, 0x30c, 0x6, 0xffff}, {0x8, 0x8, 0x0, 0x1}, {0x8, 0x3, 0x8, 0xf}, {0xe11, 0x0, 0x4, 0x831}, {0xae1, 0x0, 0x9}, {0x10001, 0x0, 0x9, 0x6}, {0xe, 0x4, 0x1ff, 0x7}, {0x6, 0x10001, 0xd, 0x9}, {0xeb, 0x101, 0xdd, 0x1}, {0x6, 0x4fb, 0x7fff}, {0x7, 0xc529, 0x8, 0x2}, {0x1ff, 0xd, 0x6c, 0xffffffff}, {0xe7, 0x5, 0xffffffa1, 0x19c}, {0xfffffffa, 0x0, 0x3, 0x6}, {0x100, 0x5, 0x10, 0x8}, {0x4, 0x8, 0x8, 0x9898}, {0x3f3d, 0x40, 0xfffff3d0, 0x907}, {0x800, 0x5, 0x9, 0x6}, {0x8000, 0x3, 0x2, 0x3}, {0x4, 0x4, 0x7, 0x9}, {0x0, 0x10000, 0x6, 0x8}, {0x0, 0xcf9c, 0x8}, {0x9, 0x6, 0x1, 0x8}, {0x2, 0x6a, 0x80000000, 0x7ff}, {0x74c, 0x6, 0x3ff, 0x5}, {0x8, 0x2, 0x8000, 0x3}, {0x10, 0xa}, {0x2, 0x5, 0x101}, {0x7fff8, 0x6, 0x3f, 0xc000}, {0x252, 0x2, 0x2, 0x10000}, {0x5, 0x7, 0x4, 0x3}, {0x3f9, 0x1, 0xfffffff7, 0x28}, {0x4, 0x80000000, 0x765af04c}, {0x8, 0xff, 0x70, 0x6}, {0xfffffffc, 0x5, 0x80000000, 0x7}, {0x1ff, 0xb, 0x40, 0x4}, {0x9, 0xffff, 0x33, 0x3}, {0x682, 0x3, 0x9, 0x5}, {0x8, 0x4, 0x8, 0x7}, {0x0, 0x200, 0x7}, {0x1, 0xd1, 0x0, 0x6}, {0x4, 0xdc2, 0x9, 0x1}, {0x800, 0x2, 0x18000, 0x7}, {0x9, 0x6, 0x3, 0x9}, {0x13262f, 0x2, 0x9}, {0xd, 0x9, 0x6, 0x7}, {0x3, 0x6, 0xfffff001, 0x1}, {0x6, 0x5, 0x40}, {0xb, 0x6, 0x5, 0x5}, {0x1, 0x6, 0x2, 0x1}, {0x80000001, 0x42, 0x7, 0x8000}, {0x0, 0x0, 0x9, 0x1}, {0x8001, 0x3, 0x1, 0x401}, {0xfffffffa, 0x5, 0x80, 0x2}, {0x3, 0x6, 0x5, 0xfffffff9}, {0x3, 0xa, 0x3, 0x4}, {0x3, 0x10000, 0xed4f, 0xa}, {0x7, 0x8, 0x4, 0x100}, {0x1, 0x8, 0x101}, {0x4, 0x8, 0x100, 0x1ff}, {0x4, 0x8, 0x7, 0x101}, {0x1000000, 0x24, 0x6, 0x1}, {0x3ff, 0x0, 0x8}, {0x7, 0x7, 0x4, 0xfda7c91}, {0x6, 0x3, 0x3, 0x2}, {0x0, 0xacff, 0x8, 0x401}, {0x2, 0x8, 0x6}, {0x6, 0x800, 0x8, 0xf85}, {0x0, 0x6, 0x4, 0x200}, {0x4, 0x0, 0x6, 0x2555}, {0x61b, 0x4e48, 0x6, 0x2}, {0xeb, 0x80000000, 0xffffffc0, 0x4}, {0x9, 0x685f013d, 0x95, 0x10000}, {0x0, 0x7, 0x5, 0x7}, {0x8000, 0xfffffff8, 0xcc7d, 0x40}, {0x3, 0x8, 0xfffffffc, 0x9}, {0x27, 0x101, 0x1, 0x8}, {0x40, 0x4, 0x200, 0x9}, {0x1, 0xf5, 0x1ff, 0x3}, {0x7, 0x1, 0x8, 0x10}, {0x4, 0x9, 0x3}, {0x4, 0xfffffffd}, {0x6, 0x6, 0x80, 0x31bc}, {0x7, 0x6, 0x246, 0xffffff23}, {0x6b, 0x9, 0x8, 0x800}, {0x10000, 0xf, 0x2, 0x8}, {0xe07c, 0x3, 0x40, 0x6}, {0x4000, 0x6, 0x8, 0x9}, {0xfb8, 0xfc, 0x2, 0x7ff}, {0xfff, 0x81, 0x2, 0x7}, {0x7fffffff, 0x7fff, 0x800, 0x5}, {0x7, 0x8, 0x5d}, {0x1ff, 0x8, 0x8, 0x340000}, {0x2, 0x7, 0x3, 0x9}, {0xd2a1, 0x10001, 0x6a3d, 0xfffffff1}, {0x9, 0x9, 0x8, 0xafe00}, {0x7fffffff, 0x3, 0x8, 0x8001}, {0x8, 0xd25, 0xcd6d, 0x4}, {0x6, 0xfff, 0x9, 0x6ae69289}, {0x3, 0xcf, 0x80, 0xa}, {0xffffff29, 0x9, 0x7f, 0x2}, {0x401, 0x80, 0xac, 0x9}, {0x1, 0xff, 0x8, 0x9}, {0x1, 0xf48, 0x3, 0x4}, {0xfffffffd, 0x5, 0x8001, 0xb}, {0x6, 0x6, 0x294, 0xfe1a}, {0x3, 0x6, 0x0, 0x43}, {0xfff, 0x4, 0x5, 0xffffc2c4}, {0x3, 0xe, 0x7, 0x81}, {0x7, 0x7, 0x6b84, 0x1}, {0x3, 0x0, 0x66, 0x4}, {0x9, 0x6, 0x0, 0xf6}, {0x0, 0x3, 0x7f}, {0x1, 0x8, 0x0, 0x5}, {0x3, 0x200, 0x200, 0x7}, {0x7, 0x1, 0x7, 0x400}, {0x40, 0x3ff, 0x3, 0x2}, {0x0, 0x6, 0x80000000, 0xc65}, {0x9, 0x80000000, 0x6, 0x7ff}, {0x0, 0x1, 0x3, 0x400}, {0x2, 0x1, 0x5ea6, 0x1ff}, {0x5, 0x8, 0x1, 0x7f}, {0x5, 0x7fff, 0x1, 0xffff0001}, {0x86c, 0x9, 0x19, 0xfffff801}, {0x80, 0x6, 0x0, 0x7ff}, {0x4, 0xffff, 0x4, 0x6}, {0x6, 0x1, 0x2, 0x219436c8}, {0x3, 0x800, 0xfffffffa, 0xffffffff}, {0x9, 0xbb, 0x9, 0x7}, {0x5, 0xe8, 0x4, 0x8}, {0x103, 0xff, 0x7b2, 0x9}, {0xf, 0x10000, 0x7f, 0x8}, {0x100, 0x8000, 0x2, 0xa}, {0x7, 0x6, 0x7, 0xe0e1}, {0x2, 0x9, 0x0, 0x1}, {0x2, 0x6, 0xe, 0x1}, {0x4, 0x400, 0x9698, 0x1ff}, {0x0, 0x0, 0x185, 0xfff}, {0x0, 0xd8, 0x5, 0x7}, {0x5, 0x8001, 0x14c, 0x5}, {0x66, 0x5, 0x800, 0xb}, {0x6, 0x7ff, 0x10000, 0x80000001}, {0x3, 0x8000, 0x3, 0xfff}, {0x7, 0x1ff, 0xe59c, 0x7fffffff}, {0x6, 0x0, 0xfffffff8, 0x4}, {0x4, 0x40, 0x1, 0x8}, {0x1, 0xfffffffe, 0x6eb, 0x2}, {0x0, 0x7fffffff, 0x0, 0x7f}, {0x8001, 0x7, 0x2, 0x9}, {0x0, 0x9, 0x2, 0x2}, {0x6, 0x5, 0x1, 0x4}, {0x1, 0x8, 0x81}, {0x1, 0x7, 0x5, 0x8}, {0x4, 0x5ce, 0x4, 0x1}, {0xff, 0x7, 0xb8e8, 0x6}, {0xff, 0x9, 0x8001, 0x5}, {0x5, 0xfff, 0x9, 0x8}, {0xa9, 0x3, 0x800, 0x100}, {0x1f, 0x0, 0x1, 0x7fffffff}, {0x2, 0x7, 0xfffffeff, 0x3}, {0xa21, 0x9, 0x2, 0x6}, {0x2, 0xcf67, 0x5, 0x8}, {0x6, 0x33, 0x6, 0x77}, {0x9, 0x9c3, 0x8, 0x97b2}, {0x1, 0x8, 0x0, 0x10}, {0x38b7, 0x1, 0x8, 0x30a}, {0x8000, 0x5, 0x3}, {0x3ff, 0x90, 0x8, 0x8}, {0x3, 0x8, 0x1, 0x2}, {0x4, 0x100, 0xecac, 0x18}, {0x2, 0x3, 0x9, 0x6}, {0xc9, 0x0, 0xff, 0x2fac4fb2}, {0x5, 0x0, 0xb7c, 0x8}, {0x4, 0xfffffff9, 0x9, 0x4}, {0x63, 0x0, 0x5, 0x80000001}, {0x8, 0x2, 0xa, 0x5}, {0x0, 0x2, 0x9, 0x2}, {0x9, 0xb, 0x7, 0x8}, {0x1ff, 0x7ff, 0x6, 0x80000000}, {0x0, 0x8, 0x101, 0x9}, {0xc, 0x2, 0x1000, 0x10}, {0x0, 0x9b3, 0x3, 0x58}, {0xa18a, 0x1}, {0x0, 0x6, 0x7ff, 0x4}, {0x764, 0x6, 0xdad, 0x9}, {0x6, 0xffffffff, 0x6, 0x6}, {0xffffd7c2, 0x1, 0x8903, 0x3}, {0xffff, 0x1ff, 0x4, 0x5}, {0x2, 0x7fff, 0x2, 0xb}, {0x3, 0x7, 0x9, 0xf}, {0x3, 0x10000, 0x4, 0x3e1}, {0x7, 0x5, 0x42f, 0xf}, {0x7, 0x1, 0x45a, 0xbd9b}, {0xfffffffc, 0x9, 0x0, 0x1}, {0x3ff, 0x8000, 0x9, 0x1027}, {0x6, 0x4, 0x72319662, 0x3}, {0x3dc7, 0x101, 0x9, 0xc9}, {0x3e, 0x1, 0x0, 0x10000}, {0x7, 0x0, 0x3, 0xff}, {0x101, 0x5637, 0x8, 0x8000}, {0x7, 0x80000000, 0x100, 0x4}, {0x10, 0xf, 0x6, 0x96}, {0x6, 0x7, 0x1, 0xffff8001}, {0x5, 0x6, 0x4, 0xe}, {0x6, 0x3, 0xfffffffe, 0x5}, {0x6, 0x73, 0x5, 0x5}, {0x0, 0x4, 0x57f8, 0x2}, {0x7ff, 0x1, 0xfffff6af}, {0x5, 0x4d39, 0xfffffffb, 0x9}, {0x2, 0x7, 0xfffffff7, 0x7}, {0xed, 0x6, 0x1, 0x6}, {0x8001, 0xfff, 0x9, 0x5}, {0x4, 0x9, 0x7fff, 0x6}, {0x5, 0x4, 0x0, 0x1}, {0x100, 0xff, 0x0, 0x200}, {0x80, 0x4, 0x6d, 0x4f5}, {0x6, 0x8, 0x3, 0x7fff}, {0x49, 0x3, 0x65d}, {0x85bc, 0x889, 0x5, 0x5}, {0xff, 0x7, 0x8, 0xd}, {0x3, 0x1, 0xfffffff8, 0x2}, {0x9, 0x0, 0x3, 0x5}, {0x3, 0x5d, 0x6, 0x8}, {0x1ff, 0x9, 0xd, 0x3355}, {0x3dc5, 0xeab, 0x9, 0x3}, {0x4, 0x6, 0x168, 0x2}, {0x7, 0x82, 0xc, 0x576}, {0x1, 0x1, 0x26, 0x401}, {0x8, 0x6, 0x8, 0x32a}, {0xc2, 0x3, 0x8, 0x8}, {0x3, 0x1, 0xf, 0x10001}, {0x5, 0x200, 0xec, 0x100}, {0x1, 0x605, 0x8000, 0x8}, {0xed9c, 0x9, 0x8ab, 0xffffffff}, {0x8fa2, 0x0, 0x0, 0xfffffff3}, {0x9, 0xbc13, 0xfffffc00, 0x103}, {0x9, 0x8581, 0x6}, {0x7, 0x6, 0x1, 0x125}, {0x2, 0x3dee, 0x9, 0x4549}, {0x7f, 0x2, 0x40, 0xc6}, {0x7fff, 0x2, 0x4c236446, 0x82a}, {0x9, 0xffffffff, 0x8, 0x6c60}, {0x7, 0x9, 0x7ff, 0x1}, {0x6, 0x1, 0x4, 0x4}, {0x1, 0x0, 0x401, 0x6}, {0x9, 0x81, 0xffff8001, 0x3}, {0x0, 0x4, 0xfffffeff, 0x401}, {0x75, 0x4, 0xfff, 0x10001}, {0x7, 0x951, 0x5, 0x1}, {0x1da, 0x8, 0x7, 0x7}, {0x800, 0x8000, 0x6e, 0x3}, {0x40, 0x9, 0xacc, 0x6}, {0x0, 0x200, 0x3, 0x8}, {0x50000000, 0x6, 0x8, 0x3}, {0x7, 0xffffffff, 0x1, 0x4}, {0x101, 0x8, 0x1}, {0x4, 0x6, 0x23, 0x8}, {0xff, 0x0, 0xfffffff9, 0x6}, {0xfffffff7, 0x2, 0x500000, 0x6}, {0x81, 0x80000000, 0x5, 0xfffffff7}, {0x9, 0x7, 0xc8b, 0x7}, {0xe, 0x7fff, 0x7, 0x101}, {0x1, 0x7f, 0x6, 0x80000001}, {0x8, 0x400, 0x7, 0x2}, {0x3, 0x40000, 0x798, 0x7}, {0x6, 0x10, 0x6, 0x12ee424a}, {0x6, 0x3, 0xfffffffe, 0x8}, {0x6, 0x7fffffff, 0x2, 0x3}, {0x5, 0x6, 0x1, 0x10001}, {0xffffffc9, 0x6, 0x9, 0xffff}, {0x3, 0x5, 0xf7600000, 0x7fffffff}, {0x80, 0x5, 0x8e, 0x9}, {0x7b85, 0x10, 0x17, 0x2}, {0x8, 0x81, 0x7, 0x7}, {0x7fffffff, 0x80000001, 0xffff, 0xfffffff9}, {0x6, 0x2, 0xd9, 0x6}, {0x400, 0x5, 0xffff7fff, 0x5}, {0x4, 0xf, 0x8, 0x9}, {0x5, 0x84, 0x1, 0x9}, {0x9, 0x8, 0x1, 0x2}, {0x6, 0x2, 0x7, 0x8}, {0x1, 0x4, 0x0, 0xe}, {0x7, 0x7ff, 0x9, 0x101}, {0x7fffffff, 0x2, 0x2}, {0xfffffffc, 0x3, 0x3, 0x1000}, {0x4, 0xfffffc01, 0x9}, {0x3, 0x800, 0xa, 0xb}, {0x80000000, 0x1, 0x3, 0x1}, {0x6, 0x4, 0x3}]}, 0x2880) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r7, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f00000001c0)="ecf8eb", 0x3, 0x7}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000180)={0x28, 0x5, 0x0, r7, 0x1000, 0x7, 0x3ffe}) 5.777811791s ago: executing program 7 (id=3119): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x8920) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r7, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 4.698042959s ago: executing program 9 (id=3120): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090300c9fa8c126acded0090f9758d577cbacfd29539b99151794e9719b14fe9d18b641425437aae51b52e2751708f9216ae7451c0e1b5d1de1fa51a7b008507e37e5d744f8ac04be7a920ec"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04330a00000000000000000100f9b714dd"], 0xd) sched_setaffinity(r1, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a000400000008000280040001808a99878ee85b6fd0572139c1578090f97458aa913c1d9d8867343ea9"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.60321969s ago: executing program 8 (id=3121): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x8920) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r7, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 4.555384296s ago: executing program 3 (id=3122): socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r0 = dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000033c0), 0x0, 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0xa0eaf39514e1c490) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'pcl730\x00', [0x400, 0xd1, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x6, 0x5, 0x400, 0x2, 0x13, 0x100, 0x1, 0x9, 0x34e, 0x2, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x4, 0x7, 0xf58, 0x8]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400fcff010000000000007ef3e9cda66d986002c301a7275ee493d55000a4a22970960700010000840000000000000000020000000000004d"], 0x0, 0x3e, 0x0, 0x4}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0) 4.376185942s ago: executing program 2 (id=3123): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090300c9fa8c126acded0090f9758d577cbacfd29539b99151794e9719b14fe9d18b641425437aae51b52e2751708f9216ae7451c0e1b5d1de1fa51a7b008507e37e5d74"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04330a00000000000000000100f9b714dd"], 0xd) sched_setaffinity(r1, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a000400000008000280040001808a99878ee85b6fd0572139c1578090f97458aa913c1d9d8867343ea9"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.21422541s ago: executing program 2 (id=3124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x26, 0x0, 0x0, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0xc048aeca, &(0x7f00000011c0)=@vmx={0x6, 0x0, 0x2080, {0xd000, 0x60000, {0x3}, 0x0, 0x800}, {"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", "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"}}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xd8, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8c15}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48800}, 0x40010) 2.978814954s ago: executing program 3 (id=3125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.528700565s ago: executing program 8 (id=3126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x2, 0x4, 0x60402}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x33}, @in6=@mcast1, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000}, {0x1, 0x2}, {0x8}, 0x0, 0x0, 0xa, 0x3, 0x2}, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r8 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x1, 0x4054) recvmsg(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 1.405976759s ago: executing program 8 (id=3127): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000380), 0x0, 0x1, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.367451173s ago: executing program 7 (id=3128): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) 0s ago: executing program 9 (id=3129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'ipvlan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x17, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r6 = gettid() r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x48090) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2a1e08004502005800000000002f9078ac1414bbe0000001248086dd00088b021b3400000010000800000086dd080088be00000000100000040100000000000000080022eb00000000200000000200000000000000000000000800655800000000189d97e18741c99c9f129162c99d9d0cd51581a034dedbe33db10634d66cd38c46f9ae8e1a43fdf90f4121e1ff1c263a621665d5041014105465bc52958f54c3400e6b0c7206878fb78225576872fa83c62047721d885e0c3414e96b73f4db8f2738ee4de7873b07d244d23e6b27d3e63aaa69560b191013c7c507e5723603322649322ddc2152434e1af358e620f6818978d51318f1e39faaf9950c38b6c1a8313135ad061eb48f5d762caef2c76f38af31f74f2d0054"], 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r6}, 0x0) socket(0x40000000015, 0x5, 0x0) kernel console output (not intermixed with test programs): 886.120781][ T5856] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 886.135693][ T30] audit: type=1400 audit(1772476330.071:990): avc: denied { bind } for pid=15161 comm="syz.2.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 886.213519][ T5883] usb 2-1: unit 1 not found! [ 886.280676][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 886.299760][ T5856] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 886.314656][ T5883] usb 2-1: USB disconnect, device number 54 [ 886.321938][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.331676][ T5856] usb 1-1: Product: syz [ 886.335905][ T5856] usb 1-1: Manufacturer: syz [ 886.340486][ T5856] usb 1-1: SerialNumber: syz [ 886.353755][ T5856] usb 1-1: config 0 descriptor?? [ 886.375057][T13866] udevd[13866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.500622][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 886.626432][T15176] netlink: 'syz.3.2386': attribute type 10 has an invalid length. [ 886.634479][T15176] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2386'. [ 886.660673][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 886.667665][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 886.684855][ T24] usb 3-1: config 9 has an invalid interface number: 5 but max is 1 [ 886.693708][ T24] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 886.706444][ T24] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 886.715477][ T24] usb 3-1: config 9 has no interface number 0 [ 886.723798][ T24] usb 3-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 886.735640][ T24] usb 3-1: config 9 interface 5 has no altsetting 0 [ 886.744232][ T24] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 886.754246][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.767099][ T24] usb 3-1: Product: syz [ 886.774256][ T5856] airspy 1-1:0.0: Board ID: 00 [ 886.779188][ T5856] airspy 1-1:0.0: Firmware version: [ 886.784726][ T24] usb 3-1: Manufacturer: syz [ 886.789327][ T24] usb 3-1: SerialNumber: syz [ 886.826565][T15182] netlink: 'syz.1.2389': attribute type 4 has an invalid length. [ 887.929918][ T5856] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 888.004231][ T5856] airspy 1-1:0.0: Registered as swradio24 [ 888.010008][ T5856] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 888.022786][ T5856] usb 1-1: USB disconnect, device number 101 [ 888.380846][T15172] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 888.399266][T11466] Bluetooth: hci0: command 0x0406 tx timeout [ 889.391043][T15172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 889.397074][T15172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 889.413311][T15172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 889.487613][ T30] audit: type=1400 audit(1772476333.421:991): avc: denied { nlmsg_read } for pid=15207 comm="syz.3.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 889.955159][ T24] usb 3-1: USB disconnect, device number 78 [ 890.018221][ T30] audit: type=1400 audit(1772476333.951:992): avc: denied { bind } for pid=15211 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 890.079135][ T30] audit: type=1400 audit(1772476333.961:993): avc: denied { connect } for pid=15211 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 890.242416][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'. [ 890.432020][ T24] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 890.456811][T11466] Bluetooth: hci3: command 0x0406 tx timeout [ 890.878433][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.043975][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.227296][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 891.266939][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.431618][T11466] Bluetooth: hci4: command 0x0406 tx timeout [ 891.475837][ T24] usb 1-1: config 0 descriptor?? [ 891.490803][T11466] Bluetooth: hci1: command 0x0c1a tx timeout [ 891.830575][T15247] trusted_key: encrypted_key: insufficient parameters specified [ 892.332379][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 892.338318][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 892.365935][ T24] usb 1-1: USB disconnect, device number 102 [ 892.372036][ T30] audit: type=1400 audit(1772476336.271:994): avc: denied { bind } for pid=15236 comm="syz.1.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 892.619253][ T5143] block nbd5: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 60 seconds [ 892.630016][ T5143] block nbd5: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 60 seconds [ 892.642647][ T5143] block nbd5: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 60 seconds [ 892.659254][ T5143] block nbd5: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 60 seconds [ 892.900252][ T24] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 893.057402][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.506732][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.517087][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 893.526298][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.558535][ T24] usb 1-1: config 0 descriptor?? [ 894.077652][ T24] usb 1-1: can't set config #0, error -71 [ 894.107333][ T24] usb 1-1: USB disconnect, device number 103 [ 894.208531][ T30] audit: type=1400 audit(1772476338.131:995): avc: denied { setopt } for pid=15283 comm="syz.2.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 894.423710][ T30] audit: type=1400 audit(1772476338.141:996): avc: denied { read } for pid=15283 comm="syz.2.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 894.534527][T13742] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 895.405156][T15309] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2432'. [ 895.770816][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 895.936544][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 896.009671][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 896.166391][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.176591][ T10] usb 2-1: Product: syz [ 896.181042][ T10] usb 2-1: Manufacturer: syz [ 896.185683][ T10] usb 2-1: SerialNumber: syz [ 896.214762][ T10] usb 2-1: config 0 descriptor?? [ 896.226553][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 897.009688][T15343] IPv6: NLM_F_CREATE should be specified when creating new route [ 897.017637][T15343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 897.025436][T15343] IPv6: NLM_F_CREATE should be set when creating new route [ 897.157379][ T10] gspca_ov534_9: reg_w failed -110 [ 897.167793][ T2696] block nbd6: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 60 seconds [ 897.179471][ T2696] block nbd6: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 60 seconds [ 897.199874][ T2696] block nbd6: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 60 seconds [ 897.210917][ T2696] block nbd6: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 60 seconds [ 897.480615][ T30] audit: type=1400 audit(1772476341.411:997): avc: denied { ioctl } for pid=15349 comm="syz.2.2445" path="socket:[48625]" dev="sockfs" ino=48625 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 897.830618][ T10] gspca_ov534_9: Unknown sensor 0000 [ 897.830696][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 899.346968][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2463'. [ 899.359301][T15397] chnl_net:caif_netlink_parms(): no params data found [ 899.478947][ T5869] usb 2-1: USB disconnect, device number 55 [ 899.666838][ T10] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 900.462946][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 900.471325][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 900.580899][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 900.609028][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 900.628997][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 900.715548][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.760692][ T30] audit: type=1400 audit(1772476344.691:998): avc: denied { append } for pid=15421 comm="syz.3.2471" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 901.607402][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 901.630753][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.652767][ T10] usb 3-1: Product: syz [ 901.656985][ T10] usb 3-1: Manufacturer: syz [ 901.992542][ T10] usb 3-1: SerialNumber: syz [ 902.758666][ T10] usb 3-1: USB disconnect, device number 79 [ 902.880999][ T5856] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 903.177842][ T5856] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 903.288949][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 903.320622][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 903.433366][ T5856] usb 1-1: SerialNumber: syz [ 903.731061][ T30] audit: type=1400 audit(1772476347.651:999): avc: denied { connect } for pid=15460 comm="syz.1.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 903.784886][ T5856] usb 1-1: bad CDC descriptors [ 903.943184][ T30] audit: type=1400 audit(1772476347.881:1000): avc: denied { write } for pid=15460 comm="syz.1.2485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 904.007591][ T5856] usb 1-1: USB disconnect, device number 104 [ 904.690937][ T5869] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 904.864241][ T5869] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 904.878247][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.880881][ T5856] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 904.890423][ T5869] usb 3-1: Product: syz [ 904.894036][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 904.898254][ T5869] usb 3-1: Manufacturer: syz [ 904.910485][ T5869] usb 3-1: SerialNumber: syz [ 904.926047][ T5869] usb 3-1: config 0 descriptor?? [ 905.070893][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 905.081838][ T5856] usb 7-1: unable to get BOS descriptor or descriptor too short [ 905.099505][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 905.108102][ T5856] usb 7-1: not running at top speed; connect to a high speed hub [ 905.128304][ T24] usb 2-1: config 8 has an invalid interface number: 46 but max is 0 [ 905.141300][ T5856] usb 7-1: config 65 has an invalid interface number: 126 but max is 0 [ 905.154496][ T24] usb 2-1: config 8 has no interface number 0 [ 905.168024][ T5856] usb 7-1: config 65 has no interface number 0 [ 905.178002][ T24] usb 2-1: config 8 interface 46 has no altsetting 0 [ 905.208319][ T5856] usb 7-1: config 65 interface 126 has no altsetting 0 [ 905.226321][ T24] usb 2-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 905.242419][ T5856] usb 7-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d9 [ 905.242768][ T5869] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 905.255243][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.268023][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.282051][ T5856] usb 7-1: Product: syz [ 905.286275][ T24] usb 2-1: Product: syz [ 905.291859][ T5856] usb 7-1: Manufacturer: syz [ 905.296509][ T24] usb 2-1: Manufacturer: syz [ 905.301369][ T5856] usb 7-1: SerialNumber: syz [ 905.306006][ T24] usb 2-1: SerialNumber: syz [ 905.528034][ T5856] hdpvr 7-1:65.126: Could not find bulk-in endpoint [ 905.535370][ T5856] hdpvr 7-1:65.126: probe with driver hdpvr failed with error -12 [ 905.545983][ T5856] usb 7-1: USB disconnect, device number 28 [ 905.645402][ T30] audit: type=1400 audit(1772476349.571:1001): avc: denied { map } for pid=15490 comm="syz.0.2495" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 905.671114][ T30] audit: type=1400 audit(1772476349.571:1002): avc: denied { execute } for pid=15490 comm="syz.0.2495" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 905.756877][ T24] kaweth 2-1:8.46: couldn't find required endpoints [ 906.055194][ T5143] block nbd2: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 90 seconds [ 906.068679][ T5143] block nbd2: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 90 seconds [ 906.086964][ T5143] block nbd2: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 90 seconds [ 906.098092][ T5143] block nbd2: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 90 seconds [ 906.395221][ T30] audit: type=1400 audit(1772476350.331:1003): avc: denied { create } for pid=15499 comm="syz.0.2498" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 906.416991][ T30] audit: type=1400 audit(1772476350.331:1004): avc: denied { read } for pid=15499 comm="syz.0.2498" name="file0" dev="tmpfs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 906.441045][ T30] audit: type=1400 audit(1772476350.331:1005): avc: denied { open } for pid=15499 comm="syz.0.2498" path="/479/file0" dev="tmpfs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 906.502423][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 906.670769][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 906.679523][ T10] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 906.689282][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.699511][ T10] usb 7-1: Product: syz [ 906.704850][ T10] usb 7-1: Manufacturer: syz [ 906.709716][ T10] usb 7-1: SerialNumber: syz [ 906.721142][ T10] usb 7-1: config 0 descriptor?? [ 906.739639][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 906.747707][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 906.753835][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 906.764312][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 906.770180][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 906.784000][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.794594][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 906.808039][ T5869] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 906.830781][ T5869] usb 3-1: USB disconnect, device number 80 [ 906.839873][ T10] usb 7-1: media controller created [ 906.870709][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.899473][ T10] usb 7-1: selecting invalid altsetting 3 [ 906.918189][ T10] ttusb2: set interface to alts=3 failed [ 906.958285][T15498] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 906.982799][ T10] DVB: Unable to find symbol tda10086_attach() [ 906.989308][T15498] ttusb2: i2c wr len=58 too high [ 906.995031][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 907.010070][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 907.018201][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 907.030976][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 907.036775][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 907.055511][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 907.068847][T15507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.083469][T15507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.099751][ T10] usb 7-1: USB disconnect, device number 29 [ 907.150081][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 908.290850][T15511] Invalid ELF header magic: != ELF [ 908.318027][ T30] audit: type=1400 audit(1772476352.201:1006): avc: denied { module_load } for pid=15509 comm="syz.2.2501" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=49029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 908.546234][ T10] usb 2-1: USB disconnect, device number 56 [ 908.777302][ T30] audit: type=1400 audit(1772476352.711:1007): avc: denied { ioctl } for pid=15520 comm="syz.3.2504" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 909.582317][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 909.643447][ T5869] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 909.750601][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 909.765777][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.777337][ T792] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 909.807211][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 909.817566][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.837122][ T5869] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 909.847855][ T10] usb 2-1: Product: syz [ 909.852643][ T10] usb 2-1: Manufacturer: syz [ 909.857594][ T5869] usb 3-1: config 8 has no interface number 0 [ 909.867079][ T10] usb 2-1: SerialNumber: syz [ 909.873638][ T5869] usb 3-1: config 8 interface 177 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 909.929772][ T5869] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 909.940061][ T5869] usb 3-1: config 8 interface 177 altsetting 9 bulk endpoint 0x87 has invalid maxpacket 0 [ 909.950095][ T5869] usb 3-1: config 8 interface 177 has no altsetting 0 [ 909.957056][ T792] usb 7-1: Using ep0 maxpacket: 8 [ 909.962318][ T5869] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 909.971696][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.981102][ T792] usb 7-1: unable to get BOS descriptor or descriptor too short [ 909.992611][T15532] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 910.002741][ T792] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 910.011932][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.019935][ T792] usb 7-1: Product: syz [ 910.024346][ T792] usb 7-1: Manufacturer: syz [ 910.028954][ T792] usb 7-1: SerialNumber: syz [ 910.116180][ T10] usb 2-1: unit 6 not found! [ 910.120860][ T10] usb 2-1: unit 1 not found! [ 910.211054][ T5869] usb 3-1: string descriptor 0 read error: -71 [ 910.225613][ T5869] ir_toy 3-1:8.177: required endpoints not found [ 910.242695][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 910.304051][ T5869] usb 3-1: USB disconnect, device number 81 [ 910.330722][ T792] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 910.337716][ T792] usb 7-1: MIDIStreaming interface descriptor not found [ 910.359946][ T10] usb 2-1: USB disconnect, device number 57 [ 910.396058][T15174] udevd[15174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.529944][ T792] usb 7-1: USB disconnect, device number 30 [ 911.055350][T14637] udevd[14637]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.360634][ T30] audit: type=1400 audit(1772476356.221:1008): avc: denied { connect } for pid=15566 comm="syz.3.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 913.169981][ T5143] block nbd1: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 120 seconds [ 913.185226][ T5143] block nbd1: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 120 seconds [ 913.196491][ T5143] block nbd1: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 120 seconds [ 913.208120][ T5143] block nbd1: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 120 seconds [ 913.707791][T15606] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2529'. [ 913.717117][T15606] vlan0: entered promiscuous mode [ 914.350786][ T2696] block nbd4: Possible stuck request ffff888027e20000: control (read@0,1024B). Runtime 90 seconds [ 914.361442][ T2696] block nbd4: Possible stuck request ffff888027e20200: control (read@1024,1024B). Runtime 90 seconds [ 914.372460][ T2696] block nbd4: Possible stuck request ffff888027e20400: control (read@2048,1024B). Runtime 90 seconds [ 914.383341][ T2696] block nbd4: Possible stuck request ffff888027e20600: control (read@3072,1024B). Runtime 90 seconds [ 914.829367][T15620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.841123][T15620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.601071][T15633] --map-set only usable from mangle table [ 915.672356][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 915.992831][T15641] 9p: Bad value for 'afid' [ 919.910230][T15703] sp0: Synchronizing with TNC [ 919.926846][T15701] sp1: Synchronizing with TNC [ 919.972100][T15701] sp1: Found TNC [ 921.081069][T15709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.089596][T15709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.473441][ T7888] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.506432][ T7888] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.525145][ T7888] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.551238][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 921.554463][ T7888] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.572822][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 921.583952][T15729] xfrm0 speed is unknown, defaulting to 1000 [ 921.584035][ T7888] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.589988][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 921.599019][ T7888] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.607156][T15729] syz1: Port: 1 Link DOWN [ 921.617721][ T7888] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.706790][ T7888] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.736388][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 921.745797][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 921.784971][T15734] xfrm0 speed is unknown, defaulting to 1000 [ 922.058529][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 923.519881][ T5143] block nbd5: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 90 seconds [ 923.532322][ T5143] block nbd5: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 90 seconds [ 923.543549][ T5143] block nbd5: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 90 seconds [ 923.554619][ T5143] block nbd5: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 90 seconds [ 924.113874][T11466] Bluetooth: hci5: command tx timeout [ 924.411527][T15734] lo speed is unknown, defaulting to 1000 [ 924.447351][ T30] audit: type=1400 audit(1772476366.521:1009): avc: denied { connect } for pid=15742 comm="syz.6.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 924.468856][ T30] audit: type=1400 audit(1772476366.581:1010): avc: denied { bind } for pid=15742 comm="syz.6.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 924.513393][ T30] audit: type=1400 audit(1772476366.581:1011): avc: denied { listen } for pid=15742 comm="syz.6.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 924.537300][ T30] audit: type=1400 audit(1772476366.581:1012): avc: denied { accept } for pid=15742 comm="syz.6.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 924.679091][T15775] syzkaller0: entered promiscuous mode [ 924.686114][T15775] syzkaller0: entered allmulticast mode [ 924.956440][T15734] chnl_net:caif_netlink_parms(): no params data found [ 925.632075][T15734] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.639257][T15734] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.646820][T15734] bridge_slave_0: entered allmulticast mode [ 925.655866][T15734] bridge_slave_0: entered promiscuous mode [ 925.672780][T15734] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.687174][T15734] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.701706][T15734] bridge_slave_1: entered allmulticast mode [ 925.709236][T15734] bridge_slave_1: entered promiscuous mode [ 925.762473][T15734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.787902][T15797] sp0: Synchronizing with TNC [ 925.794882][T15734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.829282][T15734] team0: Port device team_slave_0 added [ 925.837901][T15734] team0: Port device team_slave_1 added [ 925.940164][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.946826][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.981107][T15734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.020556][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.144214][T11466] Bluetooth: hci5: command tx timeout [ 926.250657][T15734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.378561][T15734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.402374][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.432113][T15734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.479638][T15734] hsr_slave_0: entered promiscuous mode [ 926.486992][T15734] hsr_slave_1: entered promiscuous mode [ 926.493192][T15734] debugfs: 'hsr0' already exists in 'hsr' [ 926.498921][T15734] Cannot create hsr debugfs directory [ 926.533130][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 926.682308][ T30] audit: type=1400 audit(1772476370.611:1013): avc: denied { write } for pid=15809 comm="syz.3.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 927.941509][ T2696] block nbd6: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 90 seconds [ 927.952180][ T2696] block nbd6: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 90 seconds [ 927.963318][ T2696] block nbd6: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 90 seconds [ 927.974324][ T2696] block nbd6: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 90 seconds [ 928.043347][ T30] audit: type=1400 audit(1772476371.941:1014): avc: denied { listen } for pid=15823 comm="syz.3.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 928.064022][ T30] audit: type=1400 audit(1772476371.941:1015): avc: denied { accept } for pid=15823 comm="syz.3.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 928.212978][T15734] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 928.218232][ T5820] Bluetooth: hci5: command tx timeout [ 928.310400][T15734] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 928.366326][T15734] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 928.403558][T15734] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 928.584169][T15734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.617043][T15734] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.645370][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.652548][T13741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.709853][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.717047][T13741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.357563][ T30] audit: type=1400 audit(1772476373.291:1016): avc: denied { read } for pid=15860 comm="syz.3.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 929.399313][ T30] audit: type=1400 audit(1772476373.331:1017): avc: denied { watch_sb } for pid=15864 comm="syz.2.2606" path="/561" dev="tmpfs" ino=3238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 929.535369][T15734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.569244][ T5820] Bluetooth: hci4: unexpected cc 0x202f length: 2 < 9 [ 930.131840][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 930.290881][ T5820] Bluetooth: hci5: command tx timeout [ 930.858227][T15734] veth0_vlan: entered promiscuous mode [ 930.914700][T15734] veth1_vlan: entered promiscuous mode [ 930.964681][T15734] veth0_macvtap: entered promiscuous mode [ 930.976886][T15734] veth1_macvtap: entered promiscuous mode [ 931.007716][T15734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.051656][T15734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.074775][ T7888] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.099388][ T7888] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.128334][ T7888] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.172645][ T7888] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.875493][T13744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.886663][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.894557][T13744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.903573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.203406][T15932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.211908][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 932.223000][T15932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.546489][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 933.700669][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 933.711903][ T9] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 933.723623][ T9] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 933.723837][ T30] audit: type=1400 audit(1772476377.661:1018): avc: denied { listen } for pid=15963 comm="syz.7.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 933.733035][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.768400][ T9] usb 7-1: Product: syz [ 933.772806][ T9] usb 7-1: Manufacturer: syz [ 933.777412][ T9] usb 7-1: SerialNumber: syz [ 933.812719][ T9] usb 7-1: config 0 descriptor?? [ 933.829051][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 933.887929][ T9] usb 7-1: setting power ON [ 933.892656][ T10] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 933.906472][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 933.925479][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 933.945604][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 933.964402][ T9] usb 7-1: media controller created [ 933.984965][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.021319][ T9] usb 7-1: selecting invalid altsetting 6 [ 934.027139][ T9] usb 7-1: digital interface selection failed (-22) [ 934.035930][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 934.037333][T15946] dvb-usb: bulk message failed: -22 (3/0) [ 934.045073][ T9] usb 7-1: setting power OFF [ 934.050669][T15946] cxusb: i2c wr: len=81 is too big! [ 934.050669][T15946] [ 934.054926][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 934.070192][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 934.080319][ T9] (NULL device *): no alternate interface [ 934.080475][ T10] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 934.104345][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 934.116128][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 934.142346][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 934.152395][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 934.169821][ T9] usb 7-1: USB disconnect, device number 31 [ 934.176214][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 934.185647][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 934.197715][ T10] usb 3-1: Product: syz [ 934.202134][ T10] usb 3-1: Manufacturer: syz [ 934.206837][ T10] usb 3-1: SerialNumber: syz [ 934.227416][ T10] usb 3-1: config 0 descriptor?? [ 934.237231][T15966] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 934.249007][ T10] usb 3-1: selecting invalid altsetting 0 [ 934.821662][ T9] usb 3-1: USB disconnect, device number 82 [ 935.082245][T11466] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 935.095482][T11466] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 935.103556][T11466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 935.111237][T11466] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 935.118663][T11466] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 935.175270][T15987] xfrm0 speed is unknown, defaulting to 1000 [ 935.553417][T15987] lo speed is unknown, defaulting to 1000 [ 936.427420][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 936.453903][ T30] audit: type=1400 audit(1772476380.181:1019): avc: denied { mount } for pid=16001 comm="syz.7.2655" name="/" dev="autofs" ino=51520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 937.145340][ T30] audit: type=1400 audit(1772476381.031:1020): avc: denied { unmount } for pid=15734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 937.175085][T11466] Bluetooth: hci6: command tx timeout [ 937.213430][ T5143] block nbd2: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 120 seconds [ 937.228644][ T5143] block nbd2: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 120 seconds [ 937.241505][ T5143] block nbd2: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 120 seconds [ 937.252754][ T5143] block nbd2: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 120 seconds [ 937.406557][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 937.468622][ T10] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 937.492450][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.500489][ T10] usb 7-1: Product: syz [ 937.505179][ T10] usb 7-1: Manufacturer: syz [ 937.509768][ T10] usb 7-1: SerialNumber: syz [ 937.533012][ T10] usb 7-1: config 0 descriptor?? [ 937.552354][ T10] usb 7-1: selecting invalid altsetting 1 [ 937.558095][ T10] technisat-usb2: could not set alternate setting to 0 [ 937.761475][T15997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.770227][T15997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.890826][T15997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.904337][T15997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.944721][ T10] technisat-usb2: firmware version: 0.0 [ 937.960606][ T10] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 937.985789][T15987] chnl_net:caif_netlink_parms(): no params data found [ 938.341120][T15987] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.348326][T15987] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.357568][T15987] bridge_slave_0: entered allmulticast mode [ 938.357999][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 938.366783][T15987] bridge_slave_0: entered promiscuous mode [ 938.501865][T15987] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.539951][T15987] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.594459][T15987] bridge_slave_1: entered allmulticast mode [ 938.707630][T15987] bridge_slave_1: entered promiscuous mode [ 938.779062][ T10] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 938.787946][ T10] usb 7-1: media controller created [ 938.803691][ T10] technisat-usb2: i2c-error: out failed 53 = -22 [ 938.811864][ T10] dvb-usb: MAC address reading failed. [ 938.839741][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 938.839800][T15987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.860219][T15987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.902158][ T10] DVB: Unable to find symbol stv090x_attach() [ 938.909978][ T10] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 938.921191][T15987] team0: Port device team_slave_0 added [ 938.931308][T15987] team0: Port device team_slave_1 added [ 938.970117][T15987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.988391][T15987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.017496][ T10] rc_core: IR keymap rc-technisat-usb2 not found [ 939.027145][ T10] Registered IR keymap rc-empty [ 939.033239][ T10] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 939.054909][ T10] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input89 [ 939.117460][T16065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.126733][T16065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.141953][T15987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.156196][T15987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.167233][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 939.174325][T15987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.201511][T15987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.201939][ T10] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 939.229817][ T10] usb 7-1: USB disconnect, device number 32 [ 939.250745][T11466] Bluetooth: hci6: command tx timeout [ 939.294381][T15987] hsr_slave_0: entered promiscuous mode [ 939.303670][T15987] hsr_slave_1: entered promiscuous mode [ 939.310240][T15987] debugfs: 'hsr0' already exists in 'hsr' [ 939.336695][T15987] Cannot create hsr debugfs directory [ 939.343591][ T10] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 939.543022][T15987] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 939.555565][T15987] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 939.577515][T15987] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 939.588012][T15987] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 939.641801][T15987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.671384][T15987] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.702212][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.709390][T13741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.811695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.818918][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.866117][T15987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.332711][T11466] Bluetooth: hci6: command tx timeout [ 941.761296][T15987] veth0_vlan: entered promiscuous mode [ 941.807012][T15987] veth1_vlan: entered promiscuous mode [ 941.985389][T15987] veth0_macvtap: entered promiscuous mode [ 942.054060][T15987] veth1_macvtap: entered promiscuous mode [ 942.230648][T15987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.486151][T15987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.739678][T13744] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.882816][T13744] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.027767][T13744] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.075975][T13744] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.218116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.249913][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.325206][T13744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.348882][T13744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.410719][T11466] Bluetooth: hci6: command tx timeout [ 943.876699][ T30] audit: type=1326 audit(1772476387.811:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 943.911982][ T30] audit: type=1326 audit(1772476387.851:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 943.936864][ T5143] block nbd1: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 150 seconds [ 943.947636][ T5143] block nbd1: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 150 seconds [ 943.958693][ T5143] block nbd1: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 150 seconds [ 943.970061][ T5143] block nbd1: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 150 seconds [ 943.987155][ T30] audit: type=1326 audit(1772476387.851:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.022944][ T30] audit: type=1326 audit(1772476387.851:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.047193][ T30] audit: type=1326 audit(1772476387.851:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.075380][ T30] audit: type=1326 audit(1772476387.851:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.102152][ T30] audit: type=1326 audit(1772476387.851:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.127008][ T30] audit: type=1326 audit(1772476387.851:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.217142][ T30] audit: type=1326 audit(1772476387.851:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.244616][ T5820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 944.282245][ T5820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 944.292387][ T5820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 944.314366][ T5820] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 944.321465][ T30] audit: type=1326 audit(1772476387.851:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.7.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007c99c799 code=0x7ffc0000 [ 944.350843][ T5820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 944.417313][T16174] xfrm0 speed is unknown, defaulting to 1000 [ 944.451530][ T2696] block nbd4: Possible stuck request ffff888027e20000: control (read@0,1024B). Runtime 120 seconds [ 944.462405][ T2696] block nbd4: Possible stuck request ffff888027e20200: control (read@1024,1024B). Runtime 120 seconds [ 944.473459][ T2696] block nbd4: Possible stuck request ffff888027e20400: control (read@2048,1024B). Runtime 120 seconds [ 944.484505][ T2696] block nbd4: Possible stuck request ffff888027e20600: control (read@3072,1024B). Runtime 120 seconds [ 944.785616][T15729] usb 4-1: USB disconnect, device number 22 [ 944.846926][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2724'. [ 944.962456][T16174] lo speed is unknown, defaulting to 1000 [ 946.021752][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 946.115067][T16174] chnl_net:caif_netlink_parms(): no params data found [ 946.450619][ T5820] Bluetooth: hci7: command tx timeout [ 947.226533][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.264394][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.301186][T16174] bridge_slave_0: entered allmulticast mode [ 947.310166][T16174] bridge_slave_0: entered promiscuous mode [ 947.318782][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.326131][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.333585][T16174] bridge_slave_1: entered allmulticast mode [ 947.344439][T16174] bridge_slave_1: entered promiscuous mode [ 947.395147][T16174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.417751][T16174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.498718][T15729] libceph: connect (1)[c::]:6789 error -101 [ 947.503986][T16174] team0: Port device team_slave_0 added [ 947.506739][T15729] libceph: mon0 (1)[c::]:6789 connect error [ 947.518702][T16174] team0: Port device team_slave_1 added [ 947.531688][T15726] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 947.561353][T16174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.568353][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.601896][T16174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.607694][T16273] ceph: No mds server is up or the cluster is laggy [ 947.616697][T16174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.627353][T16174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.656024][T16174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.692451][T15726] usb 9-1: Using ep0 maxpacket: 32 [ 947.726150][T16174] hsr_slave_0: entered promiscuous mode [ 947.726517][T15726] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 947.733366][T16174] hsr_slave_1: entered promiscuous mode [ 947.747239][T16174] debugfs: 'hsr0' already exists in 'hsr' [ 947.753211][T16174] Cannot create hsr debugfs directory [ 947.781949][T15726] usb 9-1: config 0 has no interface number 0 [ 947.793715][T15726] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 947.815009][T15726] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 947.827724][T15726] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 947.840621][T15726] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 947.859028][T16287] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 947.865549][T16287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.877075][T16287] vhci_hcd vhci_hcd.0: Device attached [ 947.882807][T15726] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 947.893051][T15726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.904772][T15726] usb 9-1: Product: syz [ 947.908930][T15726] usb 9-1: Manufacturer: syz [ 947.913632][T15729] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 947.927204][T15726] usb 9-1: SerialNumber: syz [ 947.934305][T15726] usb 9-1: config 0 descriptor?? [ 947.940161][T16261] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 947.956594][T15726] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input90 [ 947.969561][ T5163] usb 9-1: BOGUS urb xfer, pipe 1 != type 3 [ 948.003802][T16174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.023478][ C1] bcm5974 9-1:0.119: trackpad urb failed: -1 [ 948.071311][T15729] usb 3-1: Using ep0 maxpacket: 16 [ 948.093419][T15729] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 948.093738][T16174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.102689][T15729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.120986][T15726] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 948.128566][T15729] usb 3-1: Product: syz [ 948.133536][T15729] usb 3-1: Manufacturer: syz [ 948.138140][T15729] usb 3-1: SerialNumber: syz [ 948.148082][T15729] r8152-cfgselector 3-1: Unknown version 0x0000 [ 948.154606][T15729] r8152-cfgselector 3-1: config 0 descriptor?? [ 948.188523][T16174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.206194][ T5876] usb 9-1: USB disconnect, device number 2 [ 948.257759][T16174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.397638][T16174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 948.407553][T16174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 948.417175][T16174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 948.426225][T16174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 948.475848][T16174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.490399][T16174] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.507203][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.514348][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.528332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.535405][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.542948][ T5820] Bluetooth: hci7: command tx timeout [ 948.709721][T16174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.783577][T16174] veth0_vlan: entered promiscuous mode [ 948.801900][T16174] veth1_vlan: entered promiscuous mode [ 948.832834][T16174] veth0_macvtap: entered promiscuous mode [ 948.843264][T16174] veth1_macvtap: entered promiscuous mode [ 948.883746][T16174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.897507][T16174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.922814][ T7888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.937889][ T7888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.950223][ T7888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.968852][ T7888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.056438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.086058][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.127570][T13742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.142589][T13742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.257449][T16329] batman_adv: batadv0: Adding interface: dummy0 [ 949.264049][T16329] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.277760][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2769'. [ 949.290813][T16329] batman_adv: batadv0: Interface activated: dummy0 [ 949.329096][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 949.329111][ T30] audit: type=1400 audit(1772476393.261:1036): avc: denied { ioctl } for pid=16328 comm="syz.3.2711" path="socket:[54434]" dev="sockfs" ino=54434 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 949.365319][T16329] batadv0: mtu less than device minimum [ 949.388388][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.400208][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.411526][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.423136][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.434458][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.445748][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.457064][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.468323][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.479594][T16329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 949.731245][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 949.900613][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 949.907436][ T24] usb 9-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 949.916923][ T24] usb 9-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 949.946065][ T24] usb 9-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 949.960581][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.968588][ T24] usb 9-1: Product: syz [ 949.980583][ T24] usb 9-1: Manufacturer: syz [ 949.985188][ T24] usb 9-1: SerialNumber: syz [ 950.210285][ T24] usb 9-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 950.477183][ T30] audit: type=1326 audit(1772476394.411:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.503712][ T30] audit: type=1326 audit(1772476394.411:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.548090][ T30] audit: type=1326 audit(1772476394.411:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.575232][ T30] audit: type=1326 audit(1772476394.411:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.603059][ T30] audit: type=1326 audit(1772476394.411:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.626875][ T30] audit: type=1326 audit(1772476394.411:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.654621][ T5820] Bluetooth: hci7: command tx timeout [ 950.661258][ T30] audit: type=1326 audit(1772476394.411:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.688596][ T30] audit: type=1326 audit(1772476394.411:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16373 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c19c799 code=0x7ffc0000 [ 950.728360][ T5869] r8152-cfgselector 3-1: USB disconnect, device number 83 [ 950.756985][T16381] syzkaller0: entered promiscuous mode [ 950.763012][T16381] syzkaller0: entered allmulticast mode [ 950.822581][T16290] vhci_hcd: connection reset by peer [ 950.833359][ T13] vhci_hcd vhci_hcd.7: stop threads [ 950.838604][ T13] vhci_hcd vhci_hcd.7: release socket [ 950.858528][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 950.873227][ T24] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 950.968354][T11466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 950.978193][T11466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 950.995258][T11466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 951.005571][T11466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 951.018038][T11466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 951.058785][T16385] xfrm0 speed is unknown, defaulting to 1000 [ 951.259862][ T24] usb 9-1: [UEAGLE-ATM] interface 1 not found [ 951.301341][ T24] ueagle-atm 9-1:157.0: usbatm_usb_probe: bind failed: -19! [ 951.325700][ T24] usb 9-1: USB disconnect, device number 3 [ 951.354917][T16385] lo speed is unknown, defaulting to 1000 [ 951.542357][ T30] audit: type=1400 audit(1772476395.471:1045): avc: denied { wake_alarm } for pid=16400 comm="syz.6.2799" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 951.714086][T16385] chnl_net:caif_netlink_parms(): no params data found [ 951.853588][T16385] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.861113][T16385] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.871037][T16385] bridge_slave_0: entered allmulticast mode [ 951.879119][T16385] bridge_slave_0: entered promiscuous mode [ 951.895424][T16385] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.904904][T16385] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.912151][T16385] bridge_slave_1: entered allmulticast mode [ 951.919722][T16385] bridge_slave_1: entered promiscuous mode [ 951.986398][T16385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.005347][T16385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.098535][T16385] team0: Port device team_slave_0 added [ 952.107872][T16385] team0: Port device team_slave_1 added [ 952.147962][T16385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.155145][T16385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.195928][T16385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.209507][T16385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.216616][T16385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.243440][T16385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.696285][T11466] Bluetooth: hci7: command tx timeout [ 952.718646][T16385] hsr_slave_0: entered promiscuous mode [ 952.725378][T16385] hsr_slave_1: entered promiscuous mode [ 952.733783][T16385] debugfs: 'hsr0' already exists in 'hsr' [ 952.739551][T16385] Cannot create hsr debugfs directory [ 953.091557][T11466] Bluetooth: hci3: command tx timeout [ 953.180001][T16385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 953.196899][T16385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 953.207178][T16385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 953.217185][T16385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 953.240652][T15726] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 953.289294][T16385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.308491][T16385] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.322487][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.329621][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.339358][T15731] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 953.353757][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.360903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.465271][T16385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 953.500834][T15731] usb 4-1: Using ep0 maxpacket: 16 [ 953.515577][T16447] overlayfs: failed to resolve './file0': -2 [ 953.586673][T16453] overlayfs: failed to resolve './file1': -2 [ 953.605876][T15731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.621999][T15731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 953.649748][T15731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 953.665271][T15731] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 953.689094][T15731] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.718219][T15731] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 953.732596][T15731] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 953.751892][T15731] usb 4-1: Manufacturer: syz [ 953.766831][T15731] usb 4-1: config 0 descriptor?? [ 954.021626][T16385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.066252][ T5143] block nbd5: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 120 seconds [ 954.077482][ T5143] block nbd5: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 120 seconds [ 954.089118][ T5143] block nbd5: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 120 seconds [ 954.141178][T15731] rc_core: IR keymap rc-hauppauge not found [ 954.153151][T15731] Registered IR keymap rc-empty [ 954.183175][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.236940][T16385] veth0_vlan: entered promiscuous mode [ 954.261088][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.279308][T16385] veth1_vlan: entered promiscuous mode [ 954.361160][T15731] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 954.419805][T16385] veth0_macvtap: entered promiscuous mode [ 954.428076][T15731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input91 [ 954.544230][ T5143] block nbd5: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 120 seconds [ 954.676909][T16385] veth1_macvtap: entered promiscuous mode [ 954.731902][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.753791][T16385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.770668][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.794213][T16385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.803629][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.846141][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.850846][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.900438][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.910701][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.929075][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.941072][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 954.967407][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.985571][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 955.056218][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 955.100742][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 955.176962][ T5820] Bluetooth: hci3: command tx timeout [ 955.200980][T15731] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 955.209751][T10607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.217603][T10607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.649543][T15731] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 955.658849][T11466] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 955.664985][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 955.672319][T15731] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 955.688173][T15731] usb 4-1: USB disconnect, device number 23 [ 955.777027][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.803422][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.053344][T16492] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 957.150615][T15726] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 957.252749][ T5820] Bluetooth: hci3: command tx timeout [ 957.329023][T15726] usb 4-1: Using ep0 maxpacket: 16 [ 957.352733][T15726] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 957.391386][T15726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.399421][T15726] usb 4-1: Product: syz [ 957.430760][T15726] usb 4-1: Manufacturer: syz [ 957.435378][T15726] usb 4-1: SerialNumber: syz [ 957.481738][T15726] usb 4-1: config 0 descriptor?? [ 957.493885][T15726] usb 4-1: selecting invalid altsetting 1 [ 957.499626][T15726] technisat-usb2: could not set alternate setting to 0 [ 957.696615][T16486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.745068][T16518] overlayfs: failed to clone upperpath [ 957.751619][T16486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.813501][T16486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.833830][T16486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.856107][T15726] technisat-usb2: firmware version: 0.0 [ 957.861760][T15726] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 958.400804][T15726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 958.418975][T15726] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 958.428389][T15726] usb 4-1: media controller created [ 958.438902][T15726] technisat-usb2: i2c-error: out failed 53 = -22 [ 958.449066][T15726] dvb-usb: MAC address reading failed. [ 958.561326][ T2696] block nbd6: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 120 seconds [ 958.572143][ T2696] block nbd6: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 120 seconds [ 958.588809][ T2696] block nbd6: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 120 seconds [ 958.599930][ T2696] block nbd6: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 120 seconds [ 959.078362][T15726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 959.222204][T15726] DVB: Unable to find symbol stv090x_attach() [ 959.240922][T15726] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 959.331607][ T5820] Bluetooth: hci3: command tx timeout [ 960.251602][T13740] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 960.310775][T15726] rc_core: IR keymap rc-technisat-usb2 not found [ 960.331934][T15726] Registered IR keymap rc-empty [ 960.337718][T15726] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 960.375534][T15726] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input92 [ 960.512551][T15726] dvb-usb: schedule remote query interval to 100 msecs. [ 960.545426][T15726] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 960.601758][T15726] usb 4-1: USB disconnect, device number 24 [ 960.693880][T15726] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 960.782052][ T5869] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 960.964497][ T5869] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 960.973240][ T5869] usb 3-1: config 0 has no interface number 0 [ 960.985415][ T5869] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 961.039981][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.067950][ T5869] usb 3-1: Product: syz [ 961.076159][ T5869] usb 3-1: Manufacturer: syz [ 961.093567][ T5869] usb 3-1: SerialNumber: syz [ 961.109351][ T5869] usb 3-1: config 0 descriptor?? [ 961.396816][ T5869] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 961.415638][ T5869] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 961.451602][ T5869] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 961.475390][ T5869] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 961.541675][ T5869] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 961.894214][ T5856] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 961.896262][ T5869] usb 3-1: USB disconnect, device number 84 [ 961.921465][ T5869] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 961.941916][ T5869] keyspan 3-1:0.133: device disconnected [ 962.051190][ T5856] usb 9-1: Using ep0 maxpacket: 32 [ 962.061041][ T5856] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.071638][ T5856] usb 9-1: config 0 has no interfaces? [ 962.350324][ T5856] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 962.363815][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 962.416003][ T5856] usb 9-1: Product: syz [ 962.426418][ T5856] usb 9-1: Manufacturer: syz [ 962.435626][ T5856] usb 9-1: SerialNumber: syz [ 962.448052][ T5856] usb 9-1: config 0 descriptor?? [ 962.693927][ T5856] usb 9-1: USB disconnect, device number 4 [ 967.492477][ T5143] block nbd2: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 150 seconds [ 967.503435][ T5143] block nbd2: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 150 seconds [ 967.514490][ T5143] block nbd2: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 150 seconds [ 967.525756][ T5143] block nbd2: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 150 seconds [ 967.530603][ T792] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 967.744961][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 967.758083][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.769115][ T792] usb 3-1: config 0 has no interfaces? [ 967.788429][ T792] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 967.801998][ T792] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 967.807381][T16647] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 967.810267][ T792] usb 3-1: Product: syz [ 967.827458][ T792] usb 3-1: Manufacturer: syz [ 967.833271][ T792] usb 3-1: SerialNumber: syz [ 968.454030][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 968.517793][ T792] usb 3-1: config 0 descriptor?? [ 968.742359][ T9] usb 4-1: device descriptor read/64, error -71 [ 968.791772][ T5869] usb 3-1: USB disconnect, device number 85 [ 969.000862][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 969.160660][ T9] usb 4-1: device descriptor read/64, error -71 [ 969.777578][ T9] usb usb4-port1: attempt power cycle [ 970.799096][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 970.832871][ T9] usb 4-1: device descriptor read/8, error -71 [ 971.105056][ T30] audit: type=1326 audit(1772476415.041:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16682 comm="syz.6.2880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d73f9c799 code=0x0 [ 971.219668][T16688] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 972.910409][T16704] delete_channel: no stack [ 973.659210][T16711] overlayfs: failed to clone upperpath [ 973.843649][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 973.928347][T15729] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 974.022207][ T9] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 974.032453][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 974.041691][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.050557][ T9] usb 4-1: Product: syz [ 974.054791][ T9] usb 4-1: Manufacturer: syz [ 974.060619][T15729] usb 9-1: device descriptor read/64, error -71 [ 974.116929][ T9] usb 4-1: SerialNumber: syz [ 974.147230][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 974.170977][ T792] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 974.238400][T16722] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 975.346554][ T792] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 975.346992][T15729] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 975.353692][ T792] ath9k_htc: Failed to initialize the device [ 975.367694][ T2696] block nbd4: Possible stuck request ffff888027e20000: control (read@0,1024B). Runtime 150 seconds [ 975.370708][ T5143] block nbd1: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 180 seconds [ 975.389145][ T5143] block nbd1: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 180 seconds [ 975.399288][ T2696] block nbd4: Possible stuck request ffff888027e20200: control (read@1024,1024B). Runtime 150 seconds [ 975.401099][ T5143] block nbd1: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 180 seconds [ 975.422060][ T2696] block nbd4: Possible stuck request ffff888027e20400: control (read@2048,1024B). Runtime 150 seconds [ 975.422088][ T2696] block nbd4: Possible stuck request ffff888027e20600: control (read@3072,1024B). Runtime 150 seconds [ 975.450616][ T5143] block nbd1: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 180 seconds [ 975.481597][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.490233][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.243990][T15729] usb 9-1: device descriptor read/64, error -71 [ 976.263065][ T792] usb 4-1: ath9k_htc: USB layer deinitialized [ 976.264063][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.333769][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.379539][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.381039][T15729] usb usb9-port1: attempt power cycle [ 976.452865][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.496291][ T5856] usb 4-1: USB disconnect, device number 29 [ 976.940644][ T5856] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 977.092809][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 977.104855][ T5856] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 977.113287][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 977.124889][ T5856] usb 4-1: New USB device found, idVendor=235a, idProduct=0109, bcdDevice=bd.da [ 977.134569][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.145762][ T5856] usb 4-1: config 0 descriptor?? [ 977.238371][ T30] audit: type=1326 audit(1772476421.171:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16735 comm="syz.7.2896" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f007c99c799 code=0x0 [ 977.392796][T15729] usb usb9-port1: Cannot enable. Maybe the USB cable is bad? [ 977.400663][ T792] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 977.523663][T16745] 8021q: VLANs not supported on ipvlan0 [ 977.541697][T15729] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 977.572810][T15729] usb 9-1: Using ep0 maxpacket: 32 [ 977.584813][T15729] usb 9-1: config 9 has an invalid interface number: 61 but max is 0 [ 977.594277][T15729] usb 9-1: config 9 has no interface number 0 [ 977.601148][T15729] usb 9-1: config 9 interface 61 has no altsetting 0 [ 977.677049][T15729] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 977.715815][T15729] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.727181][T15729] usb 9-1: Product: syz [ 977.761189][T15729] usb 9-1: Manufacturer: syz [ 977.766027][T15729] usb 9-1: SerialNumber: syz [ 977.870907][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 977.878201][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.898646][ T792] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 977.926534][ T792] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 977.947130][ T792] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 977.965823][ T792] usb 3-1: Product: syz [ 977.970002][ T792] usb 3-1: Manufacturer: syz [ 977.983973][ T792] usb 3-1: SerialNumber: syz [ 978.094136][ T792] usb 3-1: config 0 descriptor?? [ 978.255554][T16753] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 978.317208][ T792] usb 3-1: USB disconnect, device number 86 [ 978.492668][ T9] usb 4-1: USB disconnect, device number 30 [ 981.986738][ T5178] udevd[5178]: worker [14160] /devices/virtual/block/nbd2 is taking a long time [ 982.500600][ T5178] udevd[5178]: worker [14162] /devices/virtual/block/nbd4 is taking a long time [ 982.509683][ T5178] udevd[5178]: worker [13868] /devices/virtual/block/nbd1 timeout; kill it [ 982.540678][ T5178] udevd[5178]: seq 18775 '/devices/virtual/block/nbd1' killed [ 982.549490][ T5178] udevd[5178]: worker [13869] /devices/virtual/block/nbd5 is taking a long time [ 982.593424][ T5178] udevd[5178]: worker [13857] /devices/virtual/block/nbd6 is taking a long time [ 982.904685][T16794] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 984.619006][T16812] netlink: 'syz.6.2919': attribute type 2 has an invalid length. [ 984.626752][T16812] netlink: 'syz.6.2919': attribute type 1 has an invalid length. [ 984.634482][T16812] netlink: 'syz.6.2919': attribute type 1 has an invalid length. [ 984.642187][T16812] netlink: 'syz.6.2919': attribute type 1 has an invalid length. [ 984.697125][ T5143] block nbd5: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 150 seconds [ 984.707883][ T5143] block nbd5: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 150 seconds [ 984.718956][ T5143] block nbd5: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 150 seconds [ 984.729960][ T5143] block nbd5: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 150 seconds [ 986.937384][T11466] Bluetooth: hci0: command 0x0406 tx timeout [ 986.943614][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 987.150258][T16829] syzkaller0: entered promiscuous mode [ 987.173608][T15726] usb 9-1: USB disconnect, device number 8 [ 987.352741][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.359095][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.439150][T16829] syzkaller0: entered allmulticast mode [ 988.025120][T16840] netlink: 'syz.8.2927': attribute type 1 has an invalid length. [ 988.309093][T16854] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 989.221568][ T2696] block nbd6: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 150 seconds [ 989.232361][ T2696] block nbd6: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 150 seconds [ 989.243488][ T2696] block nbd6: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 150 seconds [ 989.255474][ T2696] block nbd6: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 150 seconds [ 989.448629][T16860] overlayfs: failed to resolve './file0': -2 [ 990.911764][T16869] netlink: 'syz.3.2932': attribute type 2 has an invalid length. [ 990.919621][T16869] netlink: 'syz.3.2932': attribute type 1 has an invalid length. [ 990.927456][T16869] netlink: 'syz.3.2932': attribute type 1 has an invalid length. [ 990.935330][T16869] netlink: 'syz.3.2932': attribute type 1 has an invalid length. [ 991.828083][T13742] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 993.432527][ T30] audit: type=1326 audit(1772476437.371:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16879 comm="syz.3.2934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff38c19c799 code=0x0 [ 994.652949][ T30] audit: type=1400 audit(1772476438.591:1049): avc: denied { relabelfrom } for pid=16835 comm="syz.8.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 994.675872][ T30] audit: type=1400 audit(1772476438.591:1050): avc: denied { relabelto } for pid=16835 comm="syz.8.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 994.700372][T16840] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 995.644512][T16918] 8021q: VLANs not supported on ipvlan0 [ 996.560689][ T5869] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 996.730654][ T5869] usb 9-1: Using ep0 maxpacket: 16 [ 996.742818][ T5869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.742861][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 996.742888][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.742910][ T5869] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 996.742934][ T5869] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.743805][ T5869] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 996.743829][ T5869] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 996.743849][ T5869] usb 9-1: Manufacturer: syz [ 996.782377][ T5869] usb 9-1: config 0 descriptor?? [ 997.096287][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 997.096528][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 997.285276][ T5869] rc_core: IR keymap rc-hauppauge not found [ 997.285294][ T5869] Registered IR keymap rc-empty [ 997.285370][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 997.300713][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 997.321933][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 997.322762][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input93 [ 997.417640][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 997.449623][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 997.459624][ C0] rc rc0: IR event FIFO is full! [ 997.464564][ C0] rc rc0: IR event FIFO is full! [ 997.469474][ C0] rc rc0: IR event FIFO is full! [ 997.474379][ C0] rc rc0: IR event FIFO is full! [ 997.479563][ C0] rc rc0: IR event FIFO is full! [ 997.484493][ C0] rc rc0: IR event FIFO is full! [ 997.489400][ C0] rc rc0: IR event FIFO is full! [ 997.494302][ C0] rc rc0: IR event FIFO is full! [ 997.499208][ C0] rc rc0: IR event FIFO is full! [ 997.504116][ C0] rc rc0: IR event FIFO is full! [ 997.509026][ C0] rc rc0: IR event FIFO is full! [ 997.513930][ C0] rc rc0: IR event FIFO is full! [ 997.518835][ C0] rc rc0: IR event FIFO is full! [ 997.523750][ C0] rc rc0: IR event FIFO is full! [ 997.528654][ C0] rc rc0: IR event FIFO is full! [ 997.535488][ C0] rc rc0: IR event FIFO is full! [ 997.540409][ C0] rc rc0: IR event FIFO is full! [ 997.545510][ C0] rc rc0: IR event FIFO is full! [ 997.550444][ C0] rc rc0: IR event FIFO is full! [ 997.555374][ C0] rc rc0: IR event FIFO is full! [ 997.560294][ C0] rc rc0: IR event FIFO is full! [ 997.567362][ C0] rc rc0: IR event FIFO is full! [ 997.572287][ C0] rc rc0: IR event FIFO is full! [ 997.577203][ C0] rc rc0: IR event FIFO is full! [ 997.583897][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 997.591279][ C0] rc rc0: IR event FIFO is full! [ 997.596389][ C0] rc rc0: IR event FIFO is full! [ 997.601320][ C0] rc rc0: IR event FIFO is full! [ 997.606248][ C0] rc rc0: IR event FIFO is full! [ 997.611156][ C0] rc rc0: IR event FIFO is full! [ 997.616069][ C0] rc rc0: IR event FIFO is full! [ 997.620989][ C0] rc rc0: IR event FIFO is full! [ 997.625905][ C0] rc rc0: IR event FIFO is full! [ 997.630822][ C0] rc rc0: IR event FIFO is full! [ 997.636087][ C0] rc rc0: IR event FIFO is full! [ 997.641007][ C0] rc rc0: IR event FIFO is full! [ 997.645938][ C0] rc rc0: IR event FIFO is full! [ 997.651116][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 997.659434][ T5143] block nbd2: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 180 seconds [ 997.659459][ C0] rc rc0: IR event FIFO is full! [ 997.659476][ C0] rc rc0: IR event FIFO is full! [ 997.675467][ T5143] block nbd2: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 180 seconds [ 997.683236][ C0] rc rc0: IR event FIFO is full! [ 997.691200][ T5143] block nbd2: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 180 seconds [ 997.695818][ C0] rc rc0: IR event FIFO is full! [ 997.706776][ T5143] block nbd2: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 180 seconds [ 997.712615][ C0] rc rc0: IR event FIFO is full! [ 997.722780][T15726] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 997.727473][ C0] rc rc0: IR event FIFO is full! [ 997.739895][ C0] rc rc0: IR event FIFO is full! [ 997.745082][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 997.752224][ C0] rc rc0: IR event FIFO is full! [ 997.752235][ C0] rc rc0: IR event FIFO is full! [ 997.752243][ C0] rc rc0: IR event FIFO is full! [ 997.752463][ C0] rc rc0: IR event FIFO is full! [ 997.752471][ C0] rc rc0: IR event FIFO is full! [ 997.752478][ C0] rc rc0: IR event FIFO is full! [ 997.752484][ C0] rc rc0: IR event FIFO is full! [ 997.752492][ C0] rc rc0: IR event FIFO is full! [ 997.752500][ C0] rc rc0: IR event FIFO is full! [ 997.752692][ C0] rc rc0: IR event FIFO is full! [ 997.752699][ C0] rc rc0: IR event FIFO is full! [ 997.752707][ C0] rc rc0: IR event FIFO is full! [ 997.752906][ C0] rc rc0: IR event FIFO is full! [ 997.752913][ C0] rc rc0: IR event FIFO is full! [ 997.752920][ C0] rc rc0: IR event FIFO is full! [ 997.752926][ C0] rc rc0: IR event FIFO is full! [ 997.752933][ C0] rc rc0: IR event FIFO is full! [ 997.752939][ C0] rc rc0: IR event FIFO is full! [ 997.753174][ C0] rc rc0: IR event FIFO is full! [ 997.753182][ C0] rc rc0: IR event FIFO is full! [ 997.753188][ C0] rc rc0: IR event FIFO is full! [ 997.753195][ C0] rc rc0: IR event FIFO is full! [ 997.753202][ C0] rc rc0: IR event FIFO is full! [ 997.753209][ C0] rc rc0: IR event FIFO is full! [ 997.753215][ C0] rc rc0: IR event FIFO is full! [ 997.753222][ C0] rc rc0: IR event FIFO is full! [ 997.758333][ C0] rc rc0: IR event FIFO is full! [ 997.758344][ C0] rc rc0: IR event FIFO is full! [ 997.758351][ C0] rc rc0: IR event FIFO is full! [ 997.758359][ C0] rc rc0: IR event FIFO is full! [ 997.758366][ C0] rc rc0: IR event FIFO is full! [ 997.758372][ C0] rc rc0: IR event FIFO is full! [ 997.759567][ C0] rc rc0: IR event FIFO is full! [ 997.759576][ C0] rc rc0: IR event FIFO is full! [ 997.759582][ C0] rc rc0: IR event FIFO is full! [ 997.764574][ C0] rc rc0: IR event FIFO is full! [ 997.764583][ C0] rc rc0: IR event FIFO is full! [ 997.769530][ C0] rc rc0: IR event FIFO is full! [ 997.769539][ C0] rc rc0: IR event FIFO is full! [ 997.769546][ C0] rc rc0: IR event FIFO is full! [ 997.774543][ C0] rc rc0: IR event FIFO is full! [ 997.774552][ C0] rc rc0: IR event FIFO is full! [ 997.774559][ C0] rc rc0: IR event FIFO is full! [ 997.774566][ C0] rc rc0: IR event FIFO is full! [ 997.774572][ C0] rc rc0: IR event FIFO is full! [ 997.774580][ C0] rc rc0: IR event FIFO is full! [ 997.779557][ C0] rc rc0: IR event FIFO is full! [ 997.779566][ C0] rc rc0: IR event FIFO is full! [ 997.779572][ C0] rc rc0: IR event FIFO is full! [ 997.779580][ C0] rc rc0: IR event FIFO is full! [ 997.779586][ C0] rc rc0: IR event FIFO is full! [ 997.779593][ C0] rc rc0: IR event FIFO is full! [ 997.784600][ C0] rc rc0: IR event FIFO is full! [ 997.784615][ C0] rc rc0: IR event FIFO is full! [ 997.789611][ C0] rc rc0: IR event FIFO is full! [ 997.789620][ C0] rc rc0: IR event FIFO is full! [ 997.789627][ C0] rc rc0: IR event FIFO is full! [ 997.789633][ C0] rc rc0: IR event FIFO is full! [ 997.789640][ C0] rc rc0: IR event FIFO is full! [ 997.794611][ C0] rc rc0: IR event FIFO is full! [ 997.794619][ C0] rc rc0: IR event FIFO is full! [ 997.794626][ C0] rc rc0: IR event FIFO is full! [ 997.794632][ C0] rc rc0: IR event FIFO is full! [ 997.794639][ C0] rc rc0: IR event FIFO is full! [ 997.799596][ C0] rc rc0: IR event FIFO is full! [ 997.804612][ C0] rc rc0: IR event FIFO is full! [ 997.804623][ C0] rc rc0: IR event FIFO is full! [ 997.804630][ C0] rc rc0: IR event FIFO is full! [ 997.804637][ C0] rc rc0: IR event FIFO is full! [ 997.804644][ C0] rc rc0: IR event FIFO is full! [ 997.804651][ C0] rc rc0: IR event FIFO is full! [ 997.809624][ C0] rc rc0: IR event FIFO is full! [ 997.809636][ C0] rc rc0: IR event FIFO is full! [ 997.814631][ C0] rc rc0: IR event FIFO is full! [ 997.814643][ C0] rc rc0: IR event FIFO is full! [ 997.814650][ C0] rc rc0: IR event FIFO is full! [ 997.814656][ C0] rc rc0: IR event FIFO is full! [ 997.814663][ C0] rc rc0: IR event FIFO is full! [ 997.814671][ C0] rc rc0: IR event FIFO is full! [ 997.819646][ C0] rc rc0: IR event FIFO is full! [ 997.819655][ C0] rc rc0: IR event FIFO is full! [ 997.819662][ C0] rc rc0: IR event FIFO is full! [ 997.824663][ C0] rc rc0: IR event FIFO is full! [ 997.824673][ C0] rc rc0: IR event FIFO is full! [ 997.824680][ C0] rc rc0: IR event FIFO is full! [ 997.839660][ C0] rc rc0: IR event FIFO is full! [ 997.839672][ C0] rc rc0: IR event FIFO is full! [ 997.839680][ C0] rc rc0: IR event FIFO is full! [ 997.844652][ C0] rc rc0: IR event FIFO is full! [ 997.844661][ C0] rc rc0: IR event FIFO is full! [ 997.844668][ C0] rc rc0: IR event FIFO is full! [ 997.844676][ C0] rc rc0: IR event FIFO is full! [ 997.844683][ C0] rc rc0: IR event FIFO is full! [ 997.849642][ C0] rc rc0: IR event FIFO is full! [ 997.849650][ C0] rc rc0: IR event FIFO is full! [ 997.849657][ C0] rc rc0: IR event FIFO is full! [ 998.390942][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 998.425083][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 998.460707][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 998.480961][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 998.484196][T15726] usb 3-1: Using ep0 maxpacket: 32 [ 998.501438][ T5869] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 998.523275][ T5869] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 998.540803][ T5869] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 998.549339][T15726] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 998.553355][ T5869] usb 9-1: USB disconnect, device number 9 [ 998.607474][T15726] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 998.617429][T15726] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 998.654059][T15726] usb 3-1: Product: syz [ 998.658277][T15726] usb 3-1: Manufacturer: syz [ 998.678942][T15726] usb 3-1: SerialNumber: syz [ 998.822821][T15726] usb 3-1: config 0 descriptor?? [ 998.903639][T16959] delete_channel: no stack [ 999.310055][ T9] usb 3-1: USB disconnect, device number 87 [ 999.863911][T16971] 8021q: VLANs not supported on ipvlan0 [ 1001.150593][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1001.360610][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1001.497813][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1001.537643][ T24] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1001.561606][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.576290][ T24] usb 4-1: Product: syz [ 1001.590563][ T24] usb 4-1: Manufacturer: syz [ 1001.598030][ T24] usb 4-1: SerialNumber: syz [ 1001.615176][ T24] usb 4-1: config 0 descriptor?? [ 1001.621438][T16976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1001.641141][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input94 [ 1001.911639][T16976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.941852][T16976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.084167][ T24] usb 4-1: USB disconnect, device number 31 [ 1002.090091][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1002.285440][ T5856] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1002.440575][ T5856] usb 9-1: Using ep0 maxpacket: 32 [ 1002.447708][ T5856] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1002.458095][ T5856] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1002.473144][ T5856] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1002.482391][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1002.490909][ T5856] usb 9-1: Product: syz [ 1002.495244][ T5856] usb 9-1: Manufacturer: syz [ 1002.499899][ T5856] usb 9-1: SerialNumber: syz [ 1002.527873][ T5856] usb 9-1: config 0 descriptor?? [ 1002.640657][ T5869] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1002.750993][ T5856] usb 9-1: USB disconnect, device number 10 [ 1002.800618][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 1002.812748][ T5869] usb 3-1: config 9 has an invalid interface number: 61 but max is 0 [ 1002.864525][ T5869] usb 3-1: config 9 has no interface number 0 [ 1002.900951][ T5869] usb 3-1: config 9 interface 61 has no altsetting 0 [ 1002.920599][ T5869] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1002.933288][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.954055][ T5869] usb 3-1: Product: syz [ 1002.958217][ T5869] usb 3-1: Manufacturer: syz [ 1002.974404][ T5869] usb 3-1: SerialNumber: syz [ 1003.324585][T17019] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.455131][T17022] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1005.804467][T17029] syzkaller0: entered promiscuous mode [ 1005.827224][T17029] syzkaller0: entered allmulticast mode [ 1005.892159][ T2696] block nbd4: Possible stuck request ffff888027e20000: control (read@0,1024B). Runtime 180 seconds [ 1005.902975][ T5143] block nbd1: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 210 seconds [ 1005.903024][ T2696] block nbd4: Possible stuck request ffff888027e20200: control (read@1024,1024B). Runtime 180 seconds [ 1005.913867][ T5143] block nbd1: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 210 seconds [ 1005.924876][ T2696] block nbd4: Possible stuck request ffff888027e20400: control (read@2048,1024B). Runtime 180 seconds [ 1005.935854][ T5143] block nbd1: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 210 seconds [ 1005.946832][ T2696] block nbd4: Possible stuck request ffff888027e20600: control (read@3072,1024B). Runtime 180 seconds [ 1005.959298][ T5143] block nbd1: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 210 seconds [ 1006.260565][ T5856] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1006.408934][ T24] usb 3-1: USB disconnect, device number 88 [ 1006.640622][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 1006.652746][ T5856] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1006.661875][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.680891][T17040] 8021q: VLANs not supported on ipvlan0 [ 1006.701556][T17040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.882439][ T5856] usb 4-1: config 0 has no interface number 0 [ 1006.918184][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1007.003115][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.029850][ T5856] usb 4-1: Product: syz [ 1007.042659][ T5856] usb 4-1: Manufacturer: syz [ 1007.052190][ T5856] usb 4-1: SerialNumber: syz [ 1007.086209][ T5856] usb 4-1: config 0 descriptor?? [ 1007.106328][ T5856] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1007.127650][ T5856] uvcvideo 4-1:0.31: No valid video chain found. [ 1007.148459][T17042] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1008.169503][T15729] usb 4-1: USB disconnect, device number 32 [ 1008.374065][T17048] overlayfs: failed to resolve './file0': -2 [ 1009.190618][ T5856] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1009.354900][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 1009.382303][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1009.400763][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1009.411043][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1009.433691][ T5856] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1009.454830][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1009.480708][ T5856] usb 4-1: Product: syz [ 1009.484891][ T5856] usb 4-1: Manufacturer: syz [ 1009.510709][ T5856] usb 4-1: SerialNumber: syz [ 1009.539476][ T5856] usb 4-1: config 0 descriptor?? [ 1009.673674][T17060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.854722][T15733] usb 4-1: USB disconnect, device number 33 [ 1010.460577][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 1010.500742][T11466] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1010.630460][T17073] overlayfs: failed to resolve './file0': -2 [ 1010.795579][T17078] misc userio: Invalid payload size [ 1011.106536][T17080] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1012.059067][T17084] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1013.219859][T11466] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1013.226126][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 1013.500842][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2997'. [ 1014.181699][T17106] overlayfs: failed to resolve './file0': -2 [ 1014.662799][T17109] ieee802154 phy0 wpan0: encryption failed: -22 [ 1014.876112][ T5143] block nbd5: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 180 seconds [ 1014.887000][ T5143] block nbd5: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 180 seconds [ 1014.898089][ T5143] block nbd5: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 180 seconds [ 1014.909246][ T5143] block nbd5: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 180 seconds [ 1015.010577][T15733] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1015.160820][T15733] usb 4-1: Using ep0 maxpacket: 32 [ 1015.166122][T15733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1015.166141][T15733] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1015.167807][T15733] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1015.167828][T15733] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1015.167840][T15733] usb 4-1: Product: syz [ 1015.167849][T15733] usb 4-1: Manufacturer: syz [ 1015.167858][T15733] usb 4-1: SerialNumber: syz [ 1015.169173][T15733] usb 4-1: config 0 descriptor?? [ 1015.250969][T17120] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1015.396566][T15733] usb 4-1: USB disconnect, device number 34 [ 1016.252889][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1016.259196][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 1016.816723][T11466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1016.831478][T11466] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1016.839247][T11466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1016.851664][T11466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1016.860880][T11466] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1016.963448][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1017.010280][T17128] xfrm0 speed is unknown, defaulting to 1000 [ 1017.338136][T17128] lo speed is unknown, defaulting to 1000 [ 1018.545261][T17138] netlink: 'syz.3.3013': attribute type 2 has an invalid length. [ 1018.553031][T17138] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 1018.560773][T17138] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 1018.568459][T17138] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 1018.930867][T11466] Bluetooth: hci4: command tx timeout [ 1019.332467][ T2696] block nbd6: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 180 seconds [ 1019.343428][ T2696] block nbd6: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 180 seconds [ 1019.360584][ T2696] block nbd6: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 180 seconds [ 1019.372823][ T2696] block nbd6: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 180 seconds [ 1019.857806][T17149] netlink: 'syz.7.3014': attribute type 2 has an invalid length. [ 1020.098545][T17149] netlink: 'syz.7.3014': attribute type 1 has an invalid length. [ 1020.107416][T17149] netlink: 'syz.7.3014': attribute type 1 has an invalid length. [ 1020.121190][T17149] netlink: 'syz.7.3014': attribute type 1 has an invalid length. [ 1020.253901][T17128] chnl_net:caif_netlink_parms(): no params data found [ 1020.561385][T17128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.577435][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.591688][T15729] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1020.614823][T17128] bridge_slave_0: entered allmulticast mode [ 1020.635059][T17128] bridge_slave_0: entered promiscuous mode [ 1020.650201][T17128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.663160][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.672138][T17128] bridge_slave_1: entered allmulticast mode [ 1020.675002][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 1020.679318][T17128] bridge_slave_1: entered promiscuous mode [ 1020.688274][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3016'. [ 1020.699798][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3021'. [ 1020.736133][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.743648][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.750562][T15729] usb 3-1: Using ep0 maxpacket: 32 [ 1020.757888][T15729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1020.775252][T15729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1020.803594][T15729] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1020.836544][T15729] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1020.846367][T17171] bridge0: entered allmulticast mode [ 1020.846582][T15729] usb 3-1: Product: syz [ 1020.860832][T15729] usb 3-1: Manufacturer: syz [ 1020.866140][T15729] usb 3-1: SerialNumber: syz [ 1020.937151][T15729] usb 3-1: config 0 descriptor?? [ 1020.968088][T17128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.996758][T17128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.012176][T11466] Bluetooth: hci4: command tx timeout [ 1021.053354][T17128] team0: Port device team_slave_0 added [ 1021.062057][T17128] team0: Port device team_slave_1 added [ 1021.089140][T17128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.096515][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.143693][T17128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.166508][T15729] usb 3-1: USB disconnect, device number 89 [ 1021.414601][T17128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.428924][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.538517][T17128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.670311][T17128] hsr_slave_0: entered promiscuous mode [ 1021.682183][T17128] hsr_slave_1: entered promiscuous mode [ 1021.695686][T17128] debugfs: 'hsr0' already exists in 'hsr' [ 1021.706652][T17128] Cannot create hsr debugfs directory [ 1022.472748][T17128] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1022.533943][T17128] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1022.616039][T17128] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1022.651350][T17128] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1023.101128][ T5820] Bluetooth: hci4: command tx timeout [ 1023.161741][T17128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.260359][T17128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.352251][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.359431][T13741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.395406][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.402509][T13741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.457424][T17128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.479432][T17128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.028594][T17128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.487356][ T1334] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1025.170838][T11466] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1025.174500][ T5820] Bluetooth: hci4: command tx timeout [ 1025.177208][T11466] Bluetooth: hci0: command 0x0406 tx timeout [ 1025.223188][T17128] veth0_vlan: entered promiscuous mode [ 1025.295070][T17128] veth1_vlan: entered promiscuous mode [ 1025.432055][T17128] veth0_macvtap: entered promiscuous mode [ 1025.442246][T17128] veth1_macvtap: entered promiscuous mode [ 1025.508603][T17128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.557702][T17128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.592268][ T1334] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.626415][ T1334] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.693312][ T1334] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.788893][ T1334] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.323968][T17256] 8021q: VLANs not supported on ipvlan0 [ 1026.397743][T13744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.431857][T13744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.646550][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.674781][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.130673][ T5869] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1027.282765][ T5869] usb 9-1: device descriptor read/64, error -71 [ 1027.390763][ T5856] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1027.688760][ T5869] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1027.790578][ T5856] usb 10-1: Using ep0 maxpacket: 32 [ 1027.804377][ T5856] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1027.830598][ T5869] usb 9-1: device descriptor read/64, error -71 [ 1027.840904][ T5856] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1027.864385][ T5856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.891921][ T5856] usb 10-1: Product: syz [ 1027.903418][ T5856] usb 10-1: Manufacturer: syz [ 1027.920650][ T5856] usb 10-1: SerialNumber: syz [ 1027.941053][ T5869] usb usb9-port1: attempt power cycle [ 1027.941332][ T5856] usb 10-1: config 0 descriptor?? [ 1027.978764][T17271] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1027.992626][ T5856] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input96 [ 1028.330017][ T5143] block nbd2: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 210 seconds [ 1028.350822][ T5869] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1028.350902][ T5143] block nbd2: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 210 seconds [ 1028.369993][ T5143] block nbd2: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 210 seconds [ 1028.382550][T17281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.383179][T17281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.392451][ T5143] block nbd2: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 210 seconds [ 1028.451876][T17282] 8021q: VLANs not supported on ipvlan0 [ 1028.481191][T17282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.723681][ T5869] usb 9-1: device descriptor read/8, error -71 [ 1028.888111][ T792] usb 10-1: USB disconnect, device number 2 [ 1028.888160][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1028.971343][ T5869] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1030.006173][ T5869] usb 9-1: device descriptor read/8, error -71 [ 1030.160877][ T5869] usb usb9-port1: unable to enumerate USB device [ 1030.287006][T15729] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1030.584290][T15729] usb 3-1: Using ep0 maxpacket: 8 [ 1030.593591][T15729] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1030.620334][T15729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.647315][T15729] usb 3-1: config 0 has no interface number 0 [ 1030.657249][T17307] net_ratelimit: 10 callbacks suppressed [ 1030.657267][T17307] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:e9:00:00:00:85 [ 1030.679920][T15729] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1030.691689][T15729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.704174][T15729] usb 3-1: Product: syz [ 1030.709530][T15729] usb 3-1: Manufacturer: syz [ 1030.716013][T15729] usb 3-1: SerialNumber: syz [ 1030.753389][T15729] usb 3-1: config 0 descriptor?? [ 1030.771040][T15729] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1030.790677][T15729] uvcvideo 3-1:0.31: No valid video chain found. [ 1031.059212][T15726] usb 3-1: USB disconnect, device number 90 [ 1032.081385][T17326] 8021q: VLANs not supported on ipvlan0 [ 1032.211521][T11466] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1032.216219][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 1032.248819][T15726] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1032.620597][T15726] usb 3-1: device descriptor read/64, error -71 [ 1033.372478][T15726] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1033.840350][T15726] usb 3-1: device descriptor read/64, error -71 [ 1034.493158][T15726] usb usb3-port1: attempt power cycle [ 1034.840621][T15726] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1034.888402][T15726] usb 3-1: device descriptor read/8, error -71 [ 1036.055221][ T2696] block nbd4: Possible stuck request ffff888027e20000: control (read@0,1024B). Runtime 210 seconds [ 1036.065989][ T2696] block nbd4: Possible stuck request ffff888027e20200: control (read@1024,1024B). Runtime 210 seconds [ 1036.077278][ T2696] block nbd4: Possible stuck request ffff888027e20400: control (read@2048,1024B). Runtime 210 seconds [ 1036.088485][ T2696] block nbd4: Possible stuck request ffff888027e20600: control (read@3072,1024B). Runtime 210 seconds [ 1036.102165][ T5143] block nbd1: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 240 seconds [ 1036.113260][ T5143] block nbd1: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 240 seconds [ 1036.124381][ T5143] block nbd1: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 240 seconds [ 1036.135422][ T5143] block nbd1: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 240 seconds [ 1038.226003][T17372] overlayfs: failed to resolve './file1': -2 [ 1038.290928][T11466] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1038.297291][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 1039.824208][T17386] 8021q: VLANs not supported on ipvlan0 [ 1040.444800][T17390] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3079'. [ 1040.779213][T17397] 8021q: VLANs not supported on ipvlan0 [ 1040.808611][T17397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.420648][ T5869] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1041.567038][T17414] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1041.578492][T17375] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1041.586829][T17375] Bluetooth: hci0: command 0x0406 tx timeout [ 1041.670569][ T5869] usb 9-1: Using ep0 maxpacket: 32 [ 1041.752429][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3088'. [ 1041.763285][ T5869] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1041.809768][ T5869] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1041.953766][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.670419][ T5869] usb 9-1: Product: syz [ 1042.676941][ T5869] usb 9-1: Manufacturer: syz [ 1042.694049][ T5869] usb 9-1: SerialNumber: syz [ 1042.732405][ T5869] usb 9-1: config 0 descriptor?? [ 1042.737979][T17396] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1042.923650][ T5869] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input97 [ 1042.994814][T17431] overlayfs: failed to resolve './file1': -2 [ 1043.077156][T17396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.087479][T17396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.275672][ T5869] usb 9-1: USB disconnect, device number 15 [ 1043.281786][ C0] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1043.367214][T17436] 8021q: VLANs not supported on ipvlan0 [ 1043.759526][T13414] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1043.766637][T13414] Bluetooth: hci0: command 0x0406 tx timeout [ 1044.031680][T15733] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1044.280537][T15733] usb 10-1: Using ep0 maxpacket: 32 [ 1044.294172][T15733] usb 10-1: config 9 has an invalid interface number: 61 but max is 0 [ 1044.307392][T15733] usb 10-1: config 9 has no interface number 0 [ 1044.313838][T15733] usb 10-1: config 9 interface 61 has no altsetting 0 [ 1044.324015][T15733] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1044.405187][T15733] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.812170][T15733] usb 10-1: Product: syz [ 1044.823324][T15733] usb 10-1: Manufacturer: syz [ 1044.831064][T15733] usb 10-1: SerialNumber: syz [ 1044.970753][ T5143] block nbd5: Possible stuck request ffff888027ed8000: control (read@0,1024B). Runtime 210 seconds [ 1044.981673][ T5143] block nbd5: Possible stuck request ffff888027ed8200: control (read@1024,1024B). Runtime 210 seconds [ 1044.992861][ T5143] block nbd5: Possible stuck request ffff888027ed8400: control (read@2048,1024B). Runtime 210 seconds [ 1045.046381][ T5143] block nbd5: Possible stuck request ffff888027ed8600: control (read@3072,1024B). Runtime 210 seconds [ 1045.338281][T17460] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1046.222350][T13414] Bluetooth: hci5: command 0x0406 tx timeout [ 1048.018835][T17477] overlayfs: failed to resolve './file1': -2 [ 1048.156030][T15729] usb 10-1: USB disconnect, device number 3 [ 1048.790814][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.798241][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.422205][ T2696] block nbd6: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 210 seconds [ 1049.433121][ T2696] block nbd6: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 210 seconds [ 1049.444720][ T2696] block nbd6: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 210 seconds [ 1049.456106][ T2696] block nbd6: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 210 seconds [ 1049.490733][T17375] Bluetooth: hci0: command 0x0406 tx timeout [ 1049.492544][T13414] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1049.550711][T15733] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1049.888917][T17509] overlayfs: failed to resolve './file0': -2 [ 1049.906180][T15733] usb 9-1: device descriptor read/64, error -71 [ 1050.471114][T15733] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1050.620549][T15733] usb 9-1: device descriptor read/64, error -71 [ 1050.743845][T15733] usb usb9-port1: attempt power cycle [ 1050.779576][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1051.098117][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1051.471560][T17522] 8021q: VLANs not supported on ipvlan0 [ 1051.712537][T15733] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1051.971305][T17375] Bluetooth: hci0: command 0x0406 tx timeout [ 1051.982597][T13414] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1052.012655][ T10] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1052.050796][T15733] usb 9-1: device descriptor read/8, error -71 [ 1052.057118][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.080770][T17524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1052.091357][ T10] usb 3-1: Product: syz [ 1052.096015][ T10] usb 3-1: Manufacturer: syz [ 1053.140507][ T10] usb 3-1: SerialNumber: syz [ 1053.189237][ T10] usb 3-1: config 0 descriptor?? [ 1053.336843][ T10] usb 3-1: selecting invalid altsetting 1 [ 1053.354753][ T10] technisat-usb2: could not set alternate setting to 0 [ 1053.408904][ T10] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 1053.487270][ T10] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 1053.710414][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1053.729868][ T10] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 1053.741584][ T30] audit: type=1400 audit(1772476497.661:1051): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1053.765280][T17535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1055.330633][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 1055.336717][T13414] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1056.469809][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1057.731757][ T31] INFO: task syz.0.2498:15500 blocked for more than 143 seconds. [ 1057.805079][ T31] Tainted: G L syzkaller #0 [ 1057.815849][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1057.844045][ T31] task:syz.0.2498 state:D stack:24928 pid:15500 tgid:15499 ppid:5810 task_flags:0x400140 flags:0x00080002 [ 1057.930703][ T31] Call Trace: [ 1057.949362][ T31] [ 1057.967713][ T31] __schedule+0xfee/0x6120 [ 1057.994647][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1058.018246][ T31] ? __pfx___schedule+0x10/0x10 [ 1058.050656][ T31] ? find_held_lock+0x2b/0x80 [ 1058.064681][ T31] ? schedule+0x2bf/0x390 [ 1058.079156][ T31] schedule+0xdd/0x390 [ 1058.090689][ T31] io_schedule+0x8a/0xf0 [ 1058.100741][ T31] folio_wait_bit_common+0x414/0xa70 [ 1058.120168][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 1058.143582][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1058.162715][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1058.179329][ T31] ? __pfx___might_resched+0x10/0x10 [ 1058.195341][ T31] migrate_pages_batch+0x1b85/0x4530 [ 1058.210841][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1058.223003][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1058.265605][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1058.283977][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1058.297754][ T31] ? css_rstat_updated+0x1ce/0x5a0 [ 1058.308062][T17565] batman_adv: batadv0: Adding interface: dummy0 [ 1058.314429][ T31] ? trace_sched_exit_tp+0x13a/0x180 [ 1058.319916][T17565] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.345396][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1058.351104][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1058.356996][ T31] ? finish_task_switch.isra.0+0x205/0xb80 [ 1058.363904][ T31] ? rcu_is_watching+0x12/0xc0 [ 1058.368777][ T31] migrate_pages_sync+0x4db/0x880 [ 1058.375130][ T5143] block nbd2: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 240 seconds [ 1058.388458][ T5143] block nbd2: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 240 seconds [ 1058.400417][T17565] batman_adv: batadv0: Interface activated: dummy0 [ 1058.400772][ T5143] block nbd2: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 240 seconds [ 1058.418401][ T5143] block nbd2: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 240 seconds [ 1058.429825][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1058.436429][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1058.441963][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1058.447596][ T31] migrate_pages+0x1aae/0x28a0 [ 1058.455444][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 1058.470997][ T31] ? __pfx_compaction_free+0x10/0x10 [ 1058.477483][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 1058.484491][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1058.491134][ T31] ? __nr_to_section+0xaa/0x100 [ 1058.496046][ T31] ? pfn_to_online_page+0x178/0x4c0 [ 1058.501845][ T31] compact_zone+0x2464/0x44c0 [ 1058.506640][ T31] ? debug_object_free+0x295/0x550 [ 1058.513107][ T31] ? __pfx_debug_object_free+0x10/0x10 [ 1058.518642][ T31] ? __pfx_compact_zone+0x10/0x10 [ 1058.523971][ T31] ? __flush_work+0x928/0xcb0 [ 1058.528709][ T31] ? __flush_work+0x928/0xcb0 [ 1058.533766][ T31] compact_node+0x17f/0x2c0 [ 1058.538384][ T31] ? __pfx_compact_node+0x10/0x10 [ 1058.545363][ T31] ? __lru_add_drain_all+0x43c/0x650 [ 1058.551321][ T31] ? __lru_add_drain_all+0x441/0x650 [ 1058.556668][ T31] sysctl_compaction_handler+0x141/0x210 [ 1058.562593][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 1058.567923][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1058.596398][ T31] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1058.635276][T17566] batadv0: mtu less than device minimum [ 1058.641059][ T31] iter_file_splice_write+0x830/0x10a0 [ 1058.651280][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1058.660122][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.671041][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.681891][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.692731][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.703567][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.714391][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.725193][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.735980][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.746784][T17566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.769172][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 1058.774904][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1058.781182][ T31] direct_splice_actor+0x192/0x6c0 [ 1058.788780][ T31] splice_direct_to_actor+0x345/0xa30 [ 1058.796747][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 1058.802584][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1058.808619][ T31] do_splice_direct+0x174/0x240 [ 1058.813733][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 1058.819212][ T31] ? avc_policy_seqno+0x9/0x20 [ 1058.866334][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1058.894434][ T31] ? rw_verify_area+0xce/0x6d0 [ 1058.909279][ T31] do_sendfile+0xadc/0xe20 [ 1058.923522][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 1058.937707][ T31] __x64_sys_sendfile64+0x154/0x220 [ 1058.955401][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1058.972824][ T31] do_syscall_64+0x106/0xf80 [ 1058.989544][ T31] ? clear_bhb_loop+0x40/0x90 [ 1059.007361][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.029624][ T31] RIP: 0033:0x7eff9679c799 [ 1059.061394][ T31] RSP: 002b:00007eff975cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1059.088565][ T31] RAX: ffffffffffffffda RBX: 00007eff96a15fa0 RCX: 00007eff9679c799 [ 1059.113151][ T31] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000008 [ 1059.140425][ T31] RBP: 00007eff96832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1059.163334][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1059.200646][ T31] R13: 00007eff96a16038 R14: 00007eff96a15fa0 R15: 00007ffc3b0276c8 [ 1059.228623][ T31] [ 1059.231996][ T31] [ 1059.231996][ T31] Showing all locks held in the system: [ 1059.281265][ T31] 6 locks held by kworker/0:1/10: [ 1059.303707][ T31] #0: ffff888022a9a948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1059.335794][ T31] #1: ffffc900000f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1059.380771][ T31] #2: ffff88802aff8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1059.408636][ T31] #3: ffff8880303f5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1059.536248][ T31] #4: ffff88802b21b160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1059.615551][T17571] 8021q: VLANs not supported on ipvlan0 [ 1060.007976][ T31] #5: ffffffff8e693cf0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 1060.691595][T17575] netlink: 'syz.2.3124': attribute type 2 has an invalid length. [ 1060.699427][T17575] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 1060.707298][T17575] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 1060.715139][T17575] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 1061.041034][ T31] 1 lock held by khungtaskd/31: [ 1061.050316][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1061.086116][ T31] 2 locks held by getty/5565: [ 1061.090864][ T5820] Bluetooth: hci6: command 0x0406 tx timeout [ 1061.098413][ T31] #0: ffff888037b8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1061.108585][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1061.130583][ T31] 6 locks held by kworker/u9:2/13414: [ 1061.137010][ T31] #0: ffff88803636c148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1061.153947][ T31] #1: ffffc90003487d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1061.166032][ T31] #2: ffff88805b704ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 1061.176218][ T31] #3: ffff88805b7040c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 1061.186063][ T31] #4: ffffffff908a8c28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x119/0x360 [ 1061.195959][ T31] #5: ffff88805c7442f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 1061.207620][ T31] 1 lock held by udevd/13857: [ 1061.213033][ T31] #0: ffff888027eb2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1061.225025][ T31] 1 lock held by udevd/13868: [ 1061.230428][ T31] #0: ffff8880277fc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1061.240038][ T31] 1 lock held by udevd/13869: [ 1061.250599][ T31] #0: ffff888027030358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1061.264397][ T31] 1 lock held by udevd/14160: [ 1061.270638][ T31] #0: ffff888027cf8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1061.280028][ T31] 1 lock held by udevd/14162: [ 1061.289278][ T31] #0: ffff888027db8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1061.300551][ T31] 4 locks held by udevd/15174: [ 1061.305381][ T31] #0: ffff88807e689d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1061.320666][ T31] #1: ffff888068be8488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1061.355355][ T31] #2: ffff88808c0a4008 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1061.376370][ T31] #3: ffff8880303f5198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1061.385972][ T31] 1 lock held by syz.0.2498/15500: [ 1061.397147][ T31] #0: ffff88803595e420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1061.408386][ T31] 2 locks held by syz.1.2557/15713: [ 1061.415033][ T31] #0: ffff88802fde00e0 (&type->s_umount_key#81/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1061.426455][ T31] #1: ffff8880277fc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1061.436069][ T31] 1 lock held by syz.2.3108/17507: [ 1061.444318][ T31] 2 locks held by dhcpcd/17572: [ 1061.457961][ T31] #0: ffff888052fac260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1061.480704][ T31] #1: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1061.494519][ T31] 1 lock held by syz.2.3124/17573: [ 1061.502054][ T31] #0: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1061.512286][ T31] 2 locks held by dhcpcd/17577: [ 1061.530605][ T31] #0: ffff8880491ba260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1061.542834][ T31] #1: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1061.556484][ T31] [ 1061.582689][ T31] ============================================= [ 1061.582689][ T31] [ 1061.606537][ T31] NMI backtrace for cpu 1 [ 1061.606553][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.606569][ T31] Tainted: [L]=SOFTLOCKUP [ 1061.606573][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.606580][ T31] Call Trace: [ 1061.606584][ T31] [ 1061.606589][ T31] dump_stack_lvl+0x100/0x190 [ 1061.606610][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1061.606622][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1061.606644][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1061.606662][ T31] sys_info+0x141/0x190 [ 1061.606675][ T31] watchdog+0xd25/0x1050 [ 1061.606693][ T31] ? __pfx_watchdog+0x10/0x10 [ 1061.606707][ T31] ? __kthread_parkme+0x18c/0x230 [ 1061.606724][ T31] ? kthread+0x13a/0x450 [ 1061.606733][ T31] ? __pfx_watchdog+0x10/0x10 [ 1061.606746][ T31] kthread+0x370/0x450 [ 1061.606755][ T31] ? __pfx_kthread+0x10/0x10 [ 1061.606766][ T31] ret_from_fork+0x754/0xd80 [ 1061.606777][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1061.606788][ T31] ? __switch_to+0x7b4/0x1120 [ 1061.606801][ T31] ? __pfx_kthread+0x10/0x10 [ 1061.606812][ T31] ret_from_fork_asm+0x1a/0x30 [ 1061.606831][ T31] [ 1061.606835][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1061.734617][ C0] NMI backtrace for cpu 0 [ 1061.734635][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.734655][ C0] Tainted: [L]=SOFTLOCKUP [ 1061.734666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.734675][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1061.734696][ C0] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 9f 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1061.734710][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1061.734722][ C0] RAX: 0000000003c3e323 RBX: ffffffff8e4975c0 RCX: ffffffff8b8fec75 [ 1061.734732][ C0] RDX: 0000000000000000 RSI: ffffffff8de72ef9 RDI: ffffffff8c1af6a0 [ 1061.734740][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1061.734749][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1061.734758][ C0] R13: 0000000000000000 R14: ffffffff90d98410 R15: 0000000000000000 [ 1061.734767][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 1061.734782][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1061.734791][ C0] CR2: 0000001b34ffbff8 CR3: 00000000395fd000 CR4: 00000000003526f0 [ 1061.734800][ C0] Call Trace: [ 1061.734805][ C0] [ 1061.734810][ C0] default_idle+0x9/0x10 [ 1061.734825][ C0] default_idle_call+0x6c/0xb0 [ 1061.734840][ C0] do_idle+0x35b/0x4b0 [ 1061.734859][ C0] ? __pfx_do_idle+0x10/0x10 [ 1061.734877][ C0] cpu_startup_entry+0x4f/0x60 [ 1061.734894][ C0] rest_init+0x251/0x260 [ 1061.734910][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1061.734931][ C0] start_kernel+0x47f/0x480 [ 1061.734948][ C0] x86_64_start_reservations+0x24/0x30 [ 1061.734967][ C0] x86_64_start_kernel+0x12b/0x130 [ 1061.734984][ C0] common_startup_64+0x13e/0x148 [ 1061.735004][ C0] [ 1062.161628][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1062.168496][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.179144][ T31] Tainted: [L]=SOFTLOCKUP [ 1062.183441][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1062.193467][ T31] Call Trace: [ 1062.196720][ T31] [ 1062.199623][ T31] dump_stack_lvl+0x100/0x190 [ 1062.204297][ T31] vpanic+0x552/0x970 [ 1062.208250][ T31] ? __pfx_vpanic+0x10/0x10 [ 1062.212733][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1062.218863][ T31] panic+0xd1/0xe0 [ 1062.222565][ T31] ? __pfx_panic+0x10/0x10 [ 1062.226985][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1062.233136][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1062.239265][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1062.245479][ T31] ? watchdog.cold+0x198/0x1ca [ 1062.250213][ T31] ? watchdog+0xd35/0x1050 [ 1062.254604][ T31] watchdog.cold+0x1a9/0x1ca [ 1062.259171][ T31] ? __pfx_watchdog+0x10/0x10 [ 1062.263825][ T31] ? __kthread_parkme+0x18c/0x230 [ 1062.268832][ T31] ? kthread+0x13a/0x450 [ 1062.273078][ T31] ? __pfx_watchdog+0x10/0x10 [ 1062.277729][ T31] kthread+0x370/0x450 [ 1062.281770][ T31] ? __pfx_kthread+0x10/0x10 [ 1062.286331][ T31] ret_from_fork+0x754/0xd80 [ 1062.290893][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.295975][ T31] ? __switch_to+0x7b4/0x1120 [ 1062.300624][ T31] ? __pfx_kthread+0x10/0x10 [ 1062.305184][ T31] ret_from_fork_asm+0x1a/0x30 [ 1062.309927][ T31] [ 1062.313191][ T31] Kernel Offset: disabled [ 1062.317489][ T31] Rebooting in 86400 seconds..