last executing test programs: 13.324724202s ago: executing program 1 (id=375): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x223c, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x17a9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/153, 0x99, 0x0, &(0x7f0000000240)=""/206, 0xce}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000001900000000400000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000003c0)) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000d7fe68ca", @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 11.083934402s ago: executing program 1 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) unshare(0x64000600) unshare(0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@permit_directio}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.793712215s ago: executing program 1 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) unshare(0x64000600) unshare(0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@permit_directio}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) keyctl$set_timeout(0xf, r1, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.57446809s ago: executing program 1 (id=388): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) msgget$private(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x50000000}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000580)={r9, 0xe6}, &(0x7f00000005c0)=0x8) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000022ee0000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff) openat$vhost_vsock(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:run_init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 8.374163066s ago: executing program 3 (id=390): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) fcntl$addseals(r2, 0x409, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x45, 0x1, 0x80002, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '\xec'}, {}, {0x20, '/dev/loop#\x00'}, {0x20, '#! '}, {0x20, '#! '}, {}], 0xa, "4230133220d6d1dedbf8adc05b47ca8fe7f0cb078a8285d4ff458f279dbe556d21ca76988602e199406bdb47c24db8e7940dbd3d35235b9a26de7762"}, 0x6c) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) ioctl$DVB_DEMUX_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x80000}) bind$bt_hci(r0, 0x0, 0x0) 7.065840288s ago: executing program 3 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) unshare(0x64000600) unshare(0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@permit_directio}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.873591842s ago: executing program 3 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x442, 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r7, 0x8800000) read$FUSE(r7, &(0x7f0000002f40)={0x2020}, 0xfffffd24) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x2d8, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0xfffffffc, 0x1f0, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r9}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r13, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r16, 0xc008ae09, &(0x7f0000000240)={0x1, 0x0, [{0x2, 0x3ff, 0x7, 0x5, 0x9, 0x7, 0xfffffffe}]}) r17 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x5, 0x3ff8, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 6.58200926s ago: executing program 1 (id=400): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240), 0x106, 0x1}}, 0x20) 5.751038901s ago: executing program 3 (id=404): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x820080, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x7ff}, 0x18}, 0x10) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) creat(0x0, 0x80) chdir(&(0x7f0000000000)='./bus\x00') open$dir(&(0x7f0000000040)='./file1\x00', 0x200, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/anycast6\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(0x0, 0x0) socket(0x2d, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 4.399692396s ago: executing program 0 (id=408): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x28000600) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r4}}, 0x20) r5 = getpid() syz_pidfd_open(r5, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r7, &(0x7f0000001f40)={0x2020}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4042) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r9, 0x11f90aaf22dbaef5, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x40}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd2(0xfffffffd, 0xc0000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYBLOB="020d29bd7000010400002b0000000c0005000203aaaaaaaaaaaa0a0001007770616e310000000a0001007770616e300000000c0005000200aaaaaaaaaaaa0a0001007770616e340000000c0005000201aaaaaaaaaaaa0c0005000200aaaaaaaaaaaa0c0005000202aaaaaaaaaaaa0c0005000200aaaaaaaaaaaa08000200", @ANYRES8=r7, @ANYBLOB="24525167f9780dc4c9ba19fba6503c3742565d0ba0f23e0e34dc173bc9fef612a1fcdeebf33c4d4e1fc4cf3d79fe8a8a8661c9d72207aa1790b83d21f5751bc96901cd3ce0cb9965abb4ca0526e27178a6aa466a9b506638aeaee9ff58bb32c27c242685d3c6"], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 4.361100261s ago: executing program 2 (id=409): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00'}) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc7036281514157658997a0d49d2ccdb2c2a0199eac8bb2681222991cfd939737569cd7e4a692fb61d23cc96c08a35e4d2e4d6dd000000000000000000"], 0x80) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x203, 0x70bd28, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x100, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x400400c) ioctl(r1, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000600)="c18a52f880ebedf18f18b456ff0f610f71edc9ab74e6f4b9607b46dacd65d3c66e3a6026988fa8ea19ef88e50be0ba295bdbfed14e1d4381c51d23928e05a107c2386ecd7ce9db137a6e16bac44e8c758192a8f5d715cfe0868c68dcda5f90dbdace7a5a96f01080132133ae60692d683ce77233b10480192c880381fa3fa1b10b255bb2a6ea83b57c420abee5a13493bd2cc8d28eea5506f53a50bb1db2", 0x9e}, {&(0x7f00000006c0)="e4ea6b7ed5251652e5ff97d112c83c3aa27236fee2bb86bae5e9b4cfa9ed45c6ee24baed3872ebe0c993f1b47fd0d930f82790b8ce4b9b8761f1d2684d4a2b41295a72f7c8d215d7", 0x48}, {&(0x7f0000000740)="811f74d8299073fc7b2cd18a96817181330dc4b85f3e72081fd511579dd7e004d9740fd50b7bf175f9e9fd3a64e1dd7f1e105739ea46063e01e6a496", 0x3c}, {0x0}, {0x0}], 0x5}, 0x40810) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) 3.933862307s ago: executing program 0 (id=410): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x223c, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x17a9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/153, 0x99, 0x0, &(0x7f0000000240)=""/206, 0xce}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000001900000000400000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000003c0)) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=r5, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 2.951640259s ago: executing program 2 (id=411): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2.807677511s ago: executing program 0 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) unshare(0x64000600) unshare(0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@permit_directio}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) keyctl$set_timeout(0xf, r1, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.523719825s ago: executing program 0 (id=413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, r4, 0x0) r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x1) r6 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.790378786s ago: executing program 3 (id=414): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010601"], 0x1c}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x28) unshare(0x40000000) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000003440)=""/4096) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.654559406s ago: executing program 2 (id=415): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0xc00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') chdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x0) 1.516466601s ago: executing program 0 (id=416): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x10001, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r6, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) close(r6) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0x3, 0x9}, {0x0, 0x3, 0x7, 0x3}, {0x0, 0x4, 0xb, 0x7}, {0x2, 0x4, 0xc, 0x6}, {0x3, 0x3, 0x10, 0x1}, {0x0, 0x2, 0x9, 0x9}, {0x1, 0x4, 0x3, 0xb}, {0x3, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xb, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r7, 0x0, 0x0, 0x8d, &(0x7f0000000540), &(0x7f0000000740)=""/141, 0x800, 0x0, 0x48, 0x0, &(0x7f0000000840)="b32d559ecceaf671be599cc5b7534ee68562e24fa1083f81f1947288a4e60ed5b6f20c19c6f3b5f01b82171bc811500face0111299f31f1458c1f16c301b588917ebe6f1d2009ac2", 0x0, 0x1, 0x0, 0x5}, 0x4c) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', 0x0, 0x1008840, &(0x7f00000001c0)=ANY=[]) 591.936841ms ago: executing program 2 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) unshare(0x64000600) unshare(0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@permit_directio}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 438.453575ms ago: executing program 0 (id=418): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x26, 0x5}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff00070581020002"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mknod$loop(0x0, 0xfff, 0x1) setxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v2={0x2000000, [{0x8000, 0x3}, {0x3, 0xff}]}, 0x14, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x800, 0x40, &(0x7f00000012c0)={0xfffffffffffffff7, 0x9, 0x100000001, 0x5}) prctl$PR_SET_UNALIGN(0x6, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) connect$vsock_stream(r5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) 306.483104ms ago: executing program 2 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) 268.605702ms ago: executing program 3 (id=420): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x223c, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x17a9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/153, 0x99, 0x0, &(0x7f0000000240)=""/206, 0xce}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000001900000000400000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000003c0)) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=r5, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 119.16061ms ago: executing program 2 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) unshare(0x64000600) unshare(0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@permit_directio}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=422): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r5, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r7, &(0x7f0000002940), 0x40000000000017d, 0x811) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:7298' (ED25519) to the list of known hosts. [ 33.345029][ T5655] cgroup: Unknown subsys name 'net' [ 33.520462][ T5655] cgroup: Unknown subsys name 'cpuset' [ 33.523065][ T5655] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.598034][ T5655] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.733065][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.735968][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.758008][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.758766][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.762822][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.764494][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.765618][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.766312][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.767190][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.771578][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.772233][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.772615][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.773691][ T5754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.775139][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.775911][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.776742][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.777150][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.777391][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.778316][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.781753][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.400647][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.400728][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.400871][ T5743] bridge_slave_0: entered allmulticast mode [ 39.401875][ T5743] bridge_slave_0: entered promiscuous mode [ 39.427460][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.428086][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.428187][ T5743] bridge_slave_1: entered allmulticast mode [ 39.429498][ T5743] bridge_slave_1: entered promiscuous mode [ 39.452185][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.452442][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.452504][ T5745] bridge_slave_0: entered allmulticast mode [ 39.453363][ T5745] bridge_slave_0: entered promiscuous mode [ 39.454662][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.454705][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.454759][ T5745] bridge_slave_1: entered allmulticast mode [ 39.455454][ T5745] bridge_slave_1: entered promiscuous mode [ 39.492142][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.522996][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.539911][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.569857][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.569931][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.570025][ T5744] bridge_slave_0: entered allmulticast mode [ 39.571370][ T5744] bridge_slave_0: entered promiscuous mode [ 39.574574][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.574684][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.574786][ T5744] bridge_slave_1: entered allmulticast mode [ 39.576175][ T5744] bridge_slave_1: entered promiscuous mode [ 39.578561][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.595834][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.595940][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.596021][ T5739] bridge_slave_0: entered allmulticast mode [ 39.597330][ T5739] bridge_slave_0: entered promiscuous mode [ 39.599931][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.600006][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.600093][ T5739] bridge_slave_1: entered allmulticast mode [ 39.601713][ T5739] bridge_slave_1: entered promiscuous mode [ 39.645565][ T5743] team0: Port device team_slave_0 added [ 39.655180][ T5745] team0: Port device team_slave_0 added [ 39.671102][ T5743] team0: Port device team_slave_1 added [ 39.683721][ T5745] team0: Port device team_slave_1 added [ 39.697160][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.700632][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.715257][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.716768][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.725473][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.725482][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.725494][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.726722][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.726730][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.726748][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.731279][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.731289][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.731301][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.748227][ T5739] team0: Port device team_slave_0 added [ 39.748936][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.748945][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.748958][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.750127][ T5739] team0: Port device team_slave_1 added [ 39.771486][ T5744] team0: Port device team_slave_0 added [ 39.773419][ T5744] team0: Port device team_slave_1 added [ 39.786460][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.786471][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.786483][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.801962][ T5743] hsr_slave_0: entered promiscuous mode [ 39.802458][ T5743] hsr_slave_1: entered promiscuous mode [ 39.803309][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.803321][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.803341][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.803950][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.803960][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.803977][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.804854][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.804861][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.804873][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.839971][ T5745] hsr_slave_0: entered promiscuous mode [ 39.840407][ T5745] hsr_slave_1: entered promiscuous mode [ 39.840711][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 39.840765][ T5745] Cannot create hsr debugfs directory [ 39.879245][ T5744] hsr_slave_0: entered promiscuous mode [ 39.880371][ T5744] hsr_slave_1: entered promiscuous mode [ 39.880906][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 39.880923][ T5744] Cannot create hsr debugfs directory [ 39.889462][ T5739] hsr_slave_0: entered promiscuous mode [ 39.890005][ T5739] hsr_slave_1: entered promiscuous mode [ 39.890306][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 39.890318][ T5739] Cannot create hsr debugfs directory [ 40.111330][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.116559][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.117352][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.122158][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.122645][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.126998][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.138509][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.140317][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.178200][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.180793][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.183975][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.184024][ T5743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.184293][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.184505][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.186844][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.189041][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.189818][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.192664][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.193063][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.197163][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.246500][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.246989][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.279481][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.284692][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.287223][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.298639][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.302145][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.309141][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.332848][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.335437][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.352955][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.378942][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.381816][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.382234][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.384347][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.390972][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.392407][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.395784][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.397615][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.402202][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.420434][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.420485][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.426133][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.429443][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.429523][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.480806][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.490549][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.490593][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.498471][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.498549][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.504588][ T5743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.547507][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.560525][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.576908][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.595031][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.595076][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.603130][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.611566][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.611610][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.619642][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.619693][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.633798][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.633842][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.817928][ T5101] Bluetooth: hci3: command tx timeout [ 40.817938][ T5747] Bluetooth: hci1: command tx timeout [ 40.818305][ T5101] Bluetooth: hci0: command tx timeout [ 40.878892][ T5101] Bluetooth: hci2: command tx timeout [ 40.963006][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.003759][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.013781][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.029478][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.047443][ T5743] veth0_vlan: entered promiscuous mode [ 41.069328][ T5743] veth1_vlan: entered promiscuous mode [ 41.092157][ T5739] veth0_vlan: entered promiscuous mode [ 41.113327][ T5739] veth1_vlan: entered promiscuous mode [ 41.114669][ T5744] veth0_vlan: entered promiscuous mode [ 41.134798][ T5744] veth1_vlan: entered promiscuous mode [ 41.135338][ T5745] veth0_vlan: entered promiscuous mode [ 41.138283][ T5743] veth0_macvtap: entered promiscuous mode [ 41.145102][ T5743] veth1_macvtap: entered promiscuous mode [ 41.148817][ T5745] veth1_vlan: entered promiscuous mode [ 41.166027][ T5739] veth0_macvtap: entered promiscuous mode [ 41.171946][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.175794][ T5739] veth1_macvtap: entered promiscuous mode [ 41.178911][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.179168][ T5744] veth0_macvtap: entered promiscuous mode [ 41.194512][ T5744] veth1_macvtap: entered promiscuous mode [ 41.210617][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.210829][ T5745] veth0_macvtap: entered promiscuous mode [ 41.219105][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.226869][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.227036][ T5745] veth1_macvtap: entered promiscuous mode [ 41.231935][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.245757][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.255764][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.266978][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.326362][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.326376][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.328882][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.328919][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.328946][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.328970][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.328998][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.329025][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.329054][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.329081][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.329104][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.392709][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.392723][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.415868][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.415883][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.428900][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.445924][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.445941][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.456024][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.456038][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.461581][ T5743] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.467228][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.468500][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.468824][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.468998][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.469028][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.469059][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.485726][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.491413][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.510775][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.510793][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.510887][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.529144][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.529161][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.562570][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.562587][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.730578][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.977951][ T5832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.062287][ T5908] futex_wake_op: syz.0.1 tries to shift op by 144; fix this program [ 42.070716][ T5912] Zero length message leads to an empty skb [ 42.163042][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 42.164165][ T5832] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 42.408747][ T5914] fuse: Bad value for 'fd' [ 42.521763][ T5832] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 42.521780][ T5832] usb 6-1: config 0 has no interface number 0 [ 42.521798][ T5832] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 42.655454][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 42.655470][ T5832] usb 6-1: Product: syz [ 42.655477][ T5832] usb 6-1: SerialNumber: syz [ 42.889725][ T5101] Bluetooth: hci3: command tx timeout [ 42.890951][ T5101] Bluetooth: hci0: command tx timeout [ 42.891415][ T5101] Bluetooth: hci1: command tx timeout [ 42.968402][ T5747] Bluetooth: hci2: command tx timeout [ 43.099139][ T5832] usb 6-1: config 0 descriptor?? [ 43.609420][ T5923] mmap: syz.1.2 (5923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.699765][ T5925] ======================================================= [ 43.699765][ T5925] WARNING: The mand mount option has been deprecated and [ 43.699765][ T5925] and is ignored by this kernel. Remove the mand [ 43.699765][ T5925] option from the mount to silence this warning. [ 43.699765][ T5925] ======================================================= [ 43.728655][ T5925] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 43.844203][ T5927] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 44.161629][ T5832] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 44.165157][ T5832] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input5 [ 44.165914][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.166355][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.166574][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.167450][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.167731][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.168060][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.168461][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.168654][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.168834][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.169011][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 44.183354][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 44.183369][ T5832] usb 6-1: USB disconnect, device number 2 [ 44.275222][ T5832] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 44.379449][ T5934] netlink: 'syz.0.7': attribute type 13 has an invalid length. [ 44.958097][ T5101] Bluetooth: hci0: command tx timeout [ 44.958126][ T5101] Bluetooth: hci3: command tx timeout [ 44.958215][ T5747] Bluetooth: hci1: command tx timeout [ 45.037879][ T5747] Bluetooth: hci2: command tx timeout qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 45.702755][ T5946] process 'syz.3.10' launched './file0' with NULL argv: empty string added [ 45.783926][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 45.828616][ T5954] 9pnet_virtio: no channels available for device syz [ 45.831130][ T5954] overlay: ./file0 is not a directory [ 45.844186][ T5950] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 45.927905][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 45.930003][ T35] usb 6-1: unable to get BOS descriptor or descriptor too short [ 45.930043][ T35] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 45.930940][ T35] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 45.930960][ T35] usb 6-1: config 0 has no interface number 0 [ 45.930991][ T35] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 45.931012][ T35] usb 6-1: config 0 interface 88 has no altsetting 0 [ 45.933544][ T35] usb 6-1: string descriptor 0 read error: -22 [ 45.933643][ T35] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 45.945129][ T35] usb 6-1: config 0 descriptor?? [ 45.967415][ T35] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.88/input/input7 [ 45.979053][ T5819] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 46.169371][ T5819] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 46.174268][ T5819] usb 8-1: config 0 has an invalid interface number: 205 but max is 0 [ 46.174294][ T5819] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.174309][ T5819] usb 8-1: config 0 has no interface number 0 [ 46.174331][ T5819] usb 8-1: config 0 interface 205 has no altsetting 0 [ 46.180712][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.180734][ T5819] usb 8-1: Product: syz [ 46.180747][ T5819] usb 8-1: Manufacturer: syz [ 46.180759][ T5819] usb 8-1: SerialNumber: syz [ 46.185035][ T5819] usb 8-1: config 0 descriptor?? [ 46.197302][ T5819] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 46.197535][ T5819] dvb-usb: bulk message failed: -22 (3/0) [ 46.226234][ T5819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 46.229286][ T5819] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 46.229332][ T5819] usb 8-1: media controller created [ 46.237362][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 46.242500][ T5962] nvme_fabrics: missing parameter 'transport=%s' [ 46.242511][ T5962] nvme_fabrics: missing parameter 'nqn=%s' [ 46.251412][ T5819] dvb-usb: bulk message failed: -22 (6/0) [ 46.251508][ T5819] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 46.260820][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input8 [ 46.264325][ T5819] dvb-usb: schedule remote query interval to 150 msecs. [ 46.264440][ T5819] dvb-usb: bulk message failed: -22 (3/0) [ 46.278589][ T5819] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 46.376024][ T43] audit: type=1326 audit(1790014855.053:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.381267][ T43] audit: type=1326 audit(1790014855.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.388011][ T43] audit: type=1326 audit(1790014855.063:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.388037][ T43] audit: type=1326 audit(1790014855.063:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.389060][ T43] audit: type=1326 audit(1790014855.063:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.389088][ T43] audit: type=1326 audit(1790014855.063:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.389106][ T43] audit: type=1326 audit(1790014855.063:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.391496][ T43] audit: type=1326 audit(1790014855.063:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.431169][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 46.431194][ T5819] dvb-usb: error while querying for an remote control event. [ 46.577826][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 46.577855][ T5819] dvb-usb: error while querying for an remote control event. [ 46.737925][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 46.737953][ T5819] dvb-usb: error while querying for an remote control event. [ 46.899254][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 46.899285][ T5819] dvb-usb: error while querying for an remote control event. [ 47.047909][ T5755] Bluetooth: hci3: command tx timeout [ 47.047942][ T5755] Bluetooth: hci0: command tx timeout [ 47.047987][ T5747] Bluetooth: hci1: command tx timeout [ 47.058631][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 47.058656][ T5819] dvb-usb: error while querying for an remote control event. [ 47.127846][ T5747] Bluetooth: hci2: command tx timeout [ 47.150714][ T5976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.17'. [ 47.217876][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 47.217895][ T5819] dvb-usb: error while querying for an remote control event. [ 47.311170][ T43] audit: type=1326 audit(1790014855.993:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 47.311321][ T43] audit: type=1326 audit(1790014855.993:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 47.379314][ T2321] usb 6-1: USB disconnect, device number 3 [ 47.389310][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 47.389335][ T5819] dvb-usb: error while querying for an remote control event. [ 47.557843][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 47.557862][ T5819] dvb-usb: error while querying for an remote control event. [ 47.728100][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 47.728117][ T5819] dvb-usb: error while querying for an remote control event. [ 47.887851][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 47.887877][ T5819] dvb-usb: error while querying for an remote control event. [ 48.047849][ T2321] dvb-usb: bulk message failed: -22 (1/0) [ 48.047869][ T2321] dvb-usb: error while querying for an remote control event. [ 48.500660][ T2321] dvb-usb: bulk message failed: -22 (1/0) [ 48.500680][ T2321] dvb-usb: error while querying for an remote control event. [ 48.657833][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 48.657852][ T5819] dvb-usb: error while querying for an remote control event. [ 48.829044][ T2321] dvb-usb: bulk message failed: -22 (1/0) [ 48.829088][ T2321] dvb-usb: error while querying for an remote control event. [ 48.850581][ T62] cfg80211: failed to load regulatory.db [ 48.997802][ T2321] dvb-usb: bulk message failed: -22 (1/0) [ 48.997824][ T2321] dvb-usb: error while querying for an remote control event. [ 49.077943][ T5819] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.143304][ T30] usb 8-1: USB disconnect, device number 2 [ 49.168065][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 49.168097][ T25] dvb-usb: error while querying for an remote control event. [ 49.327937][ T2321] dvb-usb: bulk message failed: -22 (1/0) [ 49.327968][ T2321] dvb-usb: error while querying for an remote control event. [ 49.347852][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 49.350803][ T5819] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 49.351756][ T5819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.351776][ T5819] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 49.353796][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.353818][ T5819] usb 6-1: Product: syz [ 49.353831][ T5819] usb 6-1: Manufacturer: syz [ 49.353844][ T5819] usb 6-1: SerialNumber: syz [ 49.417298][ T5819] usb 6-1: config 0 descriptor?? [ 49.520015][ T30] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 49.676897][ T62] usb 6-1: USB disconnect, device number 4 [ 49.804751][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 50.042488][ T6007] Bluetooth: MGMT ver 1.23 [ 50.052926][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 50.601813][ T6007] syz.2.23 (6007) used greatest stack depth: 19256 bytes left [ 50.805087][ T6018] comedi comedi1: dt2815: I/O base address or length out of range [ 50.971423][ T6020] IPVS: ip_vs_add_dest(): server weight less than zero [ 51.142321][ T1177] IPVS: starting estimator thread 0... [ 51.239961][ T6021] IPVS: using max 45 ests per chain, 108000 per kthread [ 51.607961][ T43] kauditd_printk_skb: 169 callbacks suppressed [ 51.607975][ T43] audit: type=1326 audit(1790014860.223:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.26" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 51.608001][ T43] audit: type=1326 audit(1790014860.223:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.26" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 51.938052][ T43] audit: type=1804 audit(1790014860.613:183): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.28" name="bus" dev="ramfs" ino=8903 res=1 errno=0 [ 51.942470][ T43] audit: type=1804 audit(1790014860.623:184): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.28" name="bus" dev="ramfs" ino=8903 res=1 errno=0 [ 52.567929][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.715042][ T6042] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 52.720456][ T6042] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.737818][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 52.738282][ T42] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 52.740605][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.740617][ T42] usb 8-1: Product: syz [ 52.740624][ T42] usb 8-1: Manufacturer: syz [ 52.740631][ T42] usb 8-1: SerialNumber: syz [ 52.780279][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 52.780321][ T6047] bridge_slave_1: left allmulticast mode [ 52.780333][ T6047] bridge_slave_1: left promiscuous mode [ 52.780447][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.799331][ T6047] bridge_slave_0: left allmulticast mode [ 52.799389][ T6047] bridge_slave_0: left promiscuous mode [ 52.799701][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.965244][ T42] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 52.975136][ T42] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 52.975278][ T42] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 52.975297][ T42] usb 8-1: media controller created [ 53.002318][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 53.264591][ T6053] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 53.354134][ T42] zl10353_read_register: readreg error (reg=127, ret==-110) [ 53.664855][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.672776][ T6038] bridge_slave_0 (unregistering): left allmulticast mode [ 53.672793][ T6038] bridge_slave_0 (unregistering): left promiscuous mode [ 53.672832][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.791362][ T6059] lo: Caught tx_queue_len zero misconfig [ 53.826217][ T42] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 53.835196][ T42] usb 8-1: USB disconnect, device number 3 [ 54.558638][ T6074] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 54.558663][ T6074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 54.559345][ T6074] vhci_hcd vhci_hcd.0: Device attached [ 54.566841][ T6078] Cannot find add_set index 2 as target [ 54.572541][ T5747] Bluetooth: hci3: hcon ffff88804ca34000 sent 1 < count 1025 [ 54.870310][ T42] usb 40-1: SetAddress Request (2) to port 0 [ 54.870501][ T42] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 54.950098][ T6083] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 54.950115][ T6083] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 54.981523][ T6083] vhci_hcd vhci_hcd.0: Device attached [ 55.290655][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.291768][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.292014][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.300262][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.301318][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.301598][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.302833][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.303411][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.303665][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.303908][ T6088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.357320][ T6075] vhci_hcd: connection reset by peer [ 55.363215][ T5818] vhci_hcd vhci_hcd.1: stop threads [ 55.364962][ T5818] vhci_hcd vhci_hcd.1: release socket [ 55.365924][ T5818] vhci_hcd vhci_hcd.1: disconnect device [ 56.285717][ T25] usb 42-1: SetAddress Request (2) to port 0 [ 56.285785][ T25] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 56.314779][ T6084] vhci_hcd: connection closed [ 56.315872][ T5818] vhci_hcd vhci_hcd.2: stop threads [ 56.315925][ T5818] vhci_hcd vhci_hcd.2: release socket [ 56.316061][ T5818] vhci_hcd vhci_hcd.2: disconnect device [ 56.761033][ T25] usb 42-1: enqueue for inactive port 0 [ 57.148382][ T25] usb usb42-port1: attempt power cycle [ 57.708521][ T25] usb usb42-port1: unable to enumerate USB device [ 58.544203][ T6104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'. [ 58.825967][ T6105] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 58.903080][ T6105] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 59.922123][ T43] audit: type=1326 audit(1790014868.603:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.923981][ T43] audit: type=1326 audit(1790014868.603:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.925777][ T42] usb 40-1: device descriptor read/8, error -110 [ 59.926457][ T43] audit: type=1326 audit(1790014868.603:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.926551][ T43] audit: type=1326 audit(1790014868.603:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.926643][ T43] audit: type=1326 audit(1790014868.603:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.927470][ T43] audit: type=1326 audit(1790014868.603:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.927692][ T43] audit: type=1326 audit(1790014868.603:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.976877][ T43] audit: type=1326 audit(1790014868.653:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.984521][ T43] audit: type=1326 audit(1790014868.653:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.984652][ T43] audit: type=1326 audit(1790014868.663:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.1.47" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf700efec code=0x7ffc0000 [ 60.331104][ T42] usb usb40-port1: attempt power cycle [ 60.905470][ T42] usb usb40-port1: unable to enumerate USB device [ 61.237796][ T855] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.397842][ T855] usb 8-1: Using ep0 maxpacket: 32 [ 61.398650][ T855] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 61.402972][ T855] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.402993][ T855] usb 8-1: config 0 has no interface number 0 [ 61.405011][ T855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.405038][ T855] usb 8-1: Product: syz [ 61.405049][ T855] usb 8-1: Manufacturer: syz [ 61.405058][ T855] usb 8-1: SerialNumber: syz [ 61.407444][ T855] usb 8-1: config 0 descriptor?? [ 61.413782][ T855] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 61.413798][ T855] usb 8-1: selecting invalid altsetting 1 [ 61.413809][ T855] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 61.433918][ T855] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 61.434228][ T855] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 61.434260][ T855] usb 8-1: media controller created [ 61.453182][ T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.732313][ T6135] kvm: apic: phys broadcast and lowest prio [ 61.751106][ T6135] e1000e 0000:00:02.0 eth1: removed PHC [ 61.878937][ T6135] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 62.246735][ T6149] IPVS: ip_vs_add_dest(): server weight less than zero [ 62.326147][ T6151] loop5: detected capacity change from 0 to 6 [ 62.338378][ T6151] Dev loop5: unable to read RDB block 6 [ 62.338638][ T6151] loop5: unable to read partition table [ 62.339375][ T6151] loop5: partition table beyond EOD, truncated [ 62.339390][ T6151] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.555385][ T809] IPVS: starting estimator thread 0... [ 62.648029][ T6150] IPVS: using max 29 ests per chain, 69600 per kthread [ 62.711321][ T855] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 62.711399][ T855] zl10353_read_register: readreg error (reg=127, ret==-110) [ 63.729791][ T855] usb 8-1: USB disconnect, device number 4 [ 65.901507][ T6219] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 65.901525][ T6219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.901620][ T6219] vhci_hcd vhci_hcd.0: Device attached [ 65.933397][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 66.158087][ T1479] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 66.927071][ T6220] vhci_hcd: connection reset by peer [ 66.932813][ T12] vhci_hcd vhci_hcd.2: stop threads [ 66.932919][ T12] vhci_hcd vhci_hcd.2: release socket [ 66.933041][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 67.702792][ T6235] [U]  [ 67.871415][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 69.293048][ T6253] sctp_transport_update_pmtu: 47 callbacks suppressed [ 69.293139][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.294177][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.295989][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.321372][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.322487][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.322999][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.323511][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.324029][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.324532][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.325014][ T6253] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.415836][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 70.761969][ T38] IPVS: starting estimator thread 0... [ 70.763047][ T6282] IPVS: ip_vs_add_dest(): server weight less than zero [ 70.798840][ T43] kauditd_printk_skb: 338 callbacks suppressed [ 70.798853][ T43] audit: type=1326 audit(1790014879.433:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.798876][ T43] audit: type=1326 audit(1790014879.433:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.798936][ T43] audit: type=1326 audit(1790014879.433:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71f75ab code=0x7ffc0000 [ 70.798956][ T43] audit: type=1326 audit(1790014879.433:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.798976][ T43] audit: type=1326 audit(1790014879.433:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.799032][ T43] audit: type=1326 audit(1790014879.433:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.799089][ T43] audit: type=1326 audit(1790014879.433:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.799110][ T43] audit: type=1326 audit(1790014879.433:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.799130][ T43] audit: type=1326 audit(1790014879.433:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.799187][ T43] audit: type=1326 audit(1790014879.433:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.3.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 70.883949][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.884022][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.923918][ T6283] IPVS: using max 37 ests per chain, 88800 per kthread [ 71.278167][ T1479] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 71.616123][ T6290] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 71.702052][ T6292] program syz.1.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.968251][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.028739][ T6290] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 73.374722][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.528245][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 73.535678][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 73.536869][ T6307] bridge_slave_1: left allmulticast mode [ 73.537015][ T6307] bridge_slave_1: left promiscuous mode [ 73.539998][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.651427][ T6307] bridge_slave_0: left allmulticast mode [ 73.651496][ T6307] bridge_slave_0: left promiscuous mode [ 73.724176][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.001460][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 74.001525][ T9] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 74.001543][ T9] usb 7-1: no configurations [ 74.001553][ T9] usb 7-1: can't read configurations, error -22 [ 75.328222][ T6344] IPVS: ip_vs_add_dest(): server weight less than zero [ 78.249067][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 80.676098][ T6432] CIFS: Attempting to mount //127.0.0.1/share [ 80.693374][ T6432] CIFS: VFS: Error connecting to socket. Aborting operation. [ 80.693657][ T6432] CIFS: VFS: cifs_mount failed w/return code = -4 [ 82.075948][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 83.254431][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.398338][ T35] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.399237][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.399261][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.403749][ T35] usb 7-1: config 0 descriptor?? [ 83.614986][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 83.615038][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 83.616481][ T35] usb 7-1: USB disconnect, device number 4 [ 84.049839][ T6498] netlink: 'syz.0.116': attribute type 39 has an invalid length. [ 89.257817][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.408264][ T35] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.409078][ T35] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.409094][ T35] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 89.409105][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.410649][ T35] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.410661][ T35] usb 5-1: Product: syz [ 89.410668][ T35] usb 5-1: Manufacturer: syz [ 89.410675][ T35] usb 5-1: SerialNumber: syz [ 89.423934][ T35] usb 5-1: config 0 descriptor?? [ 89.427328][ T6574] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.446363][ T35] usb 5-1: selecting invalid altsetting 0 [ 89.991550][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 89.991596][ T43] audit: type=1326 audit(1790014898.643:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.991708][ T43] audit: type=1326 audit(1790014898.643:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.991790][ T43] audit: type=1326 audit(1790014898.643:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.991874][ T43] audit: type=1326 audit(1790014898.643:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.991954][ T43] audit: type=1326 audit(1790014898.643:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.992037][ T43] audit: type=1326 audit(1790014898.643:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.992113][ T43] audit: type=1326 audit(1790014898.643:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.992187][ T43] audit: type=1326 audit(1790014898.643:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.992270][ T43] audit: type=1326 audit(1790014898.643:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf709efec code=0x7ffc0000 [ 89.992347][ T43] audit: type=1326 audit(1790014898.643:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.2.132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 90.564265][ T6572] Set syz1 is full, maxelem 65536 reached [ 90.601867][ T25] usb 5-1: USB disconnect, device number 2 [ 91.537832][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.688017][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 91.692792][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.692831][ T25] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 91.693861][ T25] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 91.693881][ T25] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 91.693897][ T25] usb 5-1: config 14 has no interface number 0 [ 91.693911][ T25] usb 5-1: config 14 has no interface number 1 [ 91.693957][ T25] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 91.693976][ T25] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 91.693995][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 91.694016][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 91.694038][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 91.694059][ T25] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.694079][ T25] usb 5-1: config 14 interface 57 has no altsetting 0 [ 91.694094][ T25] usb 5-1: config 14 interface 228 has no altsetting 0 [ 91.696927][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.696946][ T25] usb 5-1: Product: syz [ 91.696956][ T25] usb 5-1: Manufacturer: syz [ 91.696966][ T25] usb 5-1: SerialNumber: syz [ 91.919363][ T6597] devpts: Unknown parameter 'wlan0' [ 92.161479][ T25] legousbtower 5-1:14.57: interrupt endpoints not found [ 92.567888][ T25] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 92.631546][ T25] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 92.890360][ T6636] netlink: 'syz.2.140': attribute type 39 has an invalid length. [ 93.322799][ C3] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 93.323314][ T5819] usb 5-1: USB disconnect, device number 3 [ 93.328933][ T5819] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 93.750825][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 95.288730][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 96.257842][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.408603][ T9] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 96.410261][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 96.413091][ T9] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 96.416284][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.416303][ T9] usb 6-1: Product: syz [ 96.416314][ T9] usb 6-1: Manufacturer: syz [ 96.416324][ T9] usb 6-1: SerialNumber: syz [ 96.441022][ T9] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 96.453712][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 96.463844][ T9] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 97.308536][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 98.638056][ T6683] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 98.643713][ T42] usb 6-1: USB disconnect, device number 5 [ 98.651397][ T42] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 98.659322][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 98.660023][ T42] ti_usb_3410_5052 6-1:2.0: device disconnected [ 99.678176][ T42] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 100.021590][ T42] usb 7-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 100.033243][ T42] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 100.033290][ T42] usb 7-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 100.033510][ T42] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 100.048924][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.048938][ T42] usb 7-1: Product: syz [ 100.048990][ T42] usb 7-1: Manufacturer: syz [ 100.049022][ T42] usb 7-1: SerialNumber: syz [ 100.531774][ T6712] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 100.531953][ T6712] qnx6: wrong signature (magic) in superblock #1. [ 100.531959][ T6712] qnx6: unable to read the first superblock [ 100.937978][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.938402][ T42] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 100.940047][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.941051][ T42] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 101.623151][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.674101][ T42] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 101.675835][ T42] usb 7-1: USB disconnect, device number 5 [ 101.716747][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.957842][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.107869][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 102.113056][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.113081][ T35] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 102.113883][ T35] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 102.113896][ T35] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 102.113905][ T35] usb 5-1: config 14 has no interface number 0 [ 102.113913][ T35] usb 5-1: config 14 has no interface number 1 [ 102.113938][ T35] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 102.113950][ T35] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 102.113962][ T35] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 102.113974][ T35] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 102.113987][ T35] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 102.113999][ T35] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.114012][ T35] usb 5-1: config 14 interface 57 has no altsetting 0 [ 102.114020][ T35] usb 5-1: config 14 interface 228 has no altsetting 0 [ 102.164467][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.164481][ T35] usb 5-1: Product: syz [ 102.164488][ T35] usb 5-1: Manufacturer: syz [ 102.164495][ T35] usb 5-1: SerialNumber: syz [ 102.264599][ T6750] netlink: 'syz.1.160': attribute type 39 has an invalid length. [ 102.583116][ T35] legousbtower 5-1:14.57: interrupt endpoints not found [ 102.985142][ T35] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 102.985979][ T35] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 103.053410][ T6767] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 103.053966][ T6767] ALSA: mixer_oss: invalid index 137438 [ 103.434667][ T42] libceph: connect (1)[c::]:6789 error -101 [ 103.439363][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 103.457566][ T6771] ceph: No mds server is up or the cluster is laggy [ 103.806180][ T25] usb 5-1: USB disconnect, device number 4 [ 103.815480][ T25] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 104.281139][ T6781] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 104.282749][ T6781] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 104.597869][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 104.793005][ T9] usb 8-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 104.795464][ T9] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 104.795482][ T9] usb 8-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 104.795538][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 104.807240][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.807254][ T9] usb 8-1: Product: syz [ 104.807261][ T9] usb 8-1: Manufacturer: syz [ 104.807268][ T9] usb 8-1: SerialNumber: syz [ 105.066961][ T6796] netlink: 88 bytes leftover after parsing attributes in process `syz.2.178'. [ 105.125742][ T6779] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 105.125874][ T6779] qnx6: wrong signature (magic) in superblock #1. [ 105.125879][ T6779] qnx6: unable to read the first superblock [ 105.934903][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.935094][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 105.938323][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.938535][ T9] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 105.943673][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.963395][ T9] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 105.967311][ T9] usb 8-1: USB disconnect, device number 5 [ 106.040314][ T6801] netlink: 'syz.0.179': attribute type 39 has an invalid length. [ 106.156389][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.343197][ T6807] ntfs3(nullb0): Primary boot signature is not NTFS. [ 106.343880][ T6807] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 106.802362][ T855] libceph: connect (1)[c::]:6789 error -101 [ 106.803019][ T855] libceph: mon0 (1)[c::]:6789 connect error [ 106.891795][ T6818] ceph: No mds server is up or the cluster is laggy [ 107.178167][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.327878][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 107.329441][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.329464][ T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 107.330261][ T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 107.330274][ T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 107.330283][ T9] usb 5-1: config 14 has no interface number 0 [ 107.330292][ T9] usb 5-1: config 14 has no interface number 1 [ 107.330317][ T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 107.330328][ T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 107.330340][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 107.330352][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 107.330365][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 107.330378][ T9] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.330390][ T9] usb 5-1: config 14 interface 57 has no altsetting 0 [ 107.330399][ T9] usb 5-1: config 14 interface 228 has no altsetting 0 [ 107.332005][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.332024][ T9] usb 5-1: Product: syz [ 107.332036][ T9] usb 5-1: Manufacturer: syz [ 107.332047][ T9] usb 5-1: SerialNumber: syz [ 107.659483][ T6829] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 107.676171][ T6829] team0 (unregistering): Port device team_slave_0 removed [ 107.689082][ T6829] team0 (unregistering): Port device team_slave_1 removed [ 107.783749][ T9] legousbtower 5-1:14.57: interrupt endpoints not found [ 107.936508][ T6833] Set syz1 is full, maxelem 6117 reached [ 108.024815][ T6829] netlink: 56 bytes leftover after parsing attributes in process `syz.3.187'. [ 108.155551][ T9] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 108.156390][ T9] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 108.168202][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 108.318503][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.319755][ T42] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.319778][ T42] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 108.319796][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.321512][ T42] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.321529][ T42] usb 6-1: Product: syz [ 108.321539][ T42] usb 6-1: Manufacturer: syz [ 108.321548][ T42] usb 6-1: SerialNumber: syz [ 108.323452][ T42] usb 6-1: config 0 descriptor?? [ 108.323995][ T6834] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.327691][ T42] usb 6-1: selecting invalid altsetting 0 [ 108.571142][ T1479] usb 6-1: USB disconnect, device number 6 [ 108.696677][ T6838] ip6t_hbh: unknown flags 58 [ 108.776292][ T6842] ipvlan2: entered allmulticast mode [ 108.776344][ T6842] batadv_slave_1: entered allmulticast mode [ 108.787386][ T6842] batman_adv: batadv0: Adding interface: ipvlan2 [ 108.787402][ T6842] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.787455][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.787498][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.787527][ T6842] batman_adv: batadv0: Interface activated: ipvlan2 [ 108.915037][ T35] usb 5-1: USB disconnect, device number 5 [ 108.923317][ T35] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 109.207874][ T64] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 109.657885][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 109.659990][ T64] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 109.669112][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.669132][ T64] usb 7-1: Product: syz [ 109.669142][ T64] usb 7-1: Manufacturer: syz [ 109.669153][ T64] usb 7-1: SerialNumber: syz [ 109.907524][ T64] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 109.911341][ T64] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.911576][ T64] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 109.911608][ T64] usb 7-1: media controller created [ 109.920132][ T64] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.209546][ T6856] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 110.231503][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.256470][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.260661][ T6856] bond1: (slave batadv1): making interface the new active one [ 110.263135][ T6856] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 110.293498][ T6856] bond1 (unregistering): (slave batadv1): Releasing active interface [ 110.295473][ T6856] bond1 (unregistering): Released all slaves [ 110.324101][ T64] zl10353_read_register: readreg error (reg=127, ret==-110) [ 110.371605][ T64] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 110.372967][ T6862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 110.374008][ T64] usb 7-1: USB disconnect, device number 6 [ 110.382669][ T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 110.528365][ T25] usb 6-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 110.529437][ T25] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 110.529449][ T25] usb 6-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 110.529477][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 110.531382][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.531395][ T25] usb 6-1: Product: syz [ 110.531402][ T25] usb 6-1: Manufacturer: syz [ 110.531409][ T25] usb 6-1: SerialNumber: syz [ 110.797613][ T6855] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 110.797891][ T6855] qnx6: wrong signature (magic) in superblock #1. [ 110.797901][ T6855] qnx6: unable to read the first superblock [ 110.869976][ T6865] 9pnet_virtio: no channels available for device syz [ 110.870634][ T6865] overlay: ./file0 is not a directory [ 111.196155][ T6871] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 111.259258][ T6876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 111.424615][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.424802][ T25] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 111.428016][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.428196][ T25] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 111.429793][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.452468][ T25] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 111.461007][ T25] usb 6-1: USB disconnect, device number 7 [ 111.470359][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.044812][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.204'. [ 113.006125][ T6895] fuse: Bad value for 'fd' [ 113.126309][ T6900] ntfs3(nullb0): Primary boot signature is not NTFS. [ 113.126439][ T6900] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 114.529030][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 116.487934][ T5747] Bluetooth: hci3: command tx timeout [ 116.648574][ T6963] ntfs3(nullb0): Primary boot signature is not NTFS. [ 116.648753][ T6963] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 120.611348][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 120.745203][ T7021] fuse: Bad value for 'fd' [ 121.257849][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 121.438417][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 121.441861][ T35] usb 8-1: unable to get BOS descriptor or descriptor too short [ 121.441884][ T35] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 121.442672][ T35] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 121.442684][ T35] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 121.442693][ T35] usb 8-1: config 14 has no interface number 0 [ 121.442703][ T35] usb 8-1: config 14 has no interface number 1 [ 121.442746][ T35] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 121.442764][ T35] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 121.442782][ T35] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 121.442801][ T35] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 121.442820][ T35] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 121.442839][ T35] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.442858][ T35] usb 8-1: config 14 interface 57 has no altsetting 0 [ 121.442872][ T35] usb 8-1: config 14 interface 228 has no altsetting 0 [ 121.445105][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.445117][ T35] usb 8-1: Product: syz [ 121.445124][ T35] usb 8-1: Manufacturer: syz [ 121.445131][ T35] usb 8-1: SerialNumber: syz [ 121.930424][ T35] legousbtower 8-1:14.57: interrupt endpoints not found [ 121.990150][ T7038] ntfs3(nullb0): Primary boot signature is not NTFS. [ 121.990294][ T7038] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 122.338520][ T35] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 122.340382][ T35] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 123.095829][ T25] usb 8-1: USB disconnect, device number 6 [ 123.110093][ T25] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 123.609433][ T7047] cdrom: dropping to single frame dma [ 123.730385][ T7056] pim6reg: entered allmulticast mode [ 123.733063][ T7056] pim6reg: left allmulticast mode [ 124.502817][ T7088] fuse: Bad value for 'fd' [ 124.612016][ T64] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 124.715036][ T7096] input: syz1 as /devices/virtual/input/input10 [ 124.759082][ T7099] db_root: cannot open: ./my_ [ 124.771328][ T64] usb 7-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 124.772246][ T64] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 124.772262][ T64] usb 7-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 124.772306][ T64] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 124.774375][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.774394][ T64] usb 7-1: Product: syz [ 124.774405][ T64] usb 7-1: Manufacturer: syz [ 124.774416][ T64] usb 7-1: SerialNumber: syz [ 125.049634][ T7085] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 125.049718][ T7085] qnx6: wrong signature (magic) in superblock #1. [ 125.049722][ T7085] qnx6: unable to read the first superblock [ 125.735993][ T7107] sctp_transport_update_pmtu: 104 callbacks suppressed [ 125.736045][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.736436][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.737263][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.738294][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.755349][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.755600][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.755906][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.757529][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.759008][ T35] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 125.776758][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.783261][ T7107] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.987894][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 126.094829][ T35] usb 6-1: unable to get BOS descriptor or descriptor too short [ 126.185700][ T35] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 126.206569][ T35] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 126.206586][ T35] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 126.206596][ T35] usb 6-1: config 14 has no interface number 0 [ 126.206604][ T35] usb 6-1: config 14 has no interface number 1 [ 126.206631][ T35] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 126.206643][ T35] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 126.206655][ T35] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 126.206667][ T35] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 126.206680][ T35] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 126.206692][ T35] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.206705][ T35] usb 6-1: config 14 interface 57 has no altsetting 0 [ 126.206714][ T35] usb 6-1: config 14 interface 228 has no altsetting 0 [ 126.258437][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.258451][ T35] usb 6-1: Product: syz [ 126.258458][ T35] usb 6-1: Manufacturer: syz [ 126.258465][ T35] usb 6-1: SerialNumber: syz [ 126.288662][ T64] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.288871][ T64] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 127.178969][ T64] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.179161][ T64] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 127.321680][ T64] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.406105][ T64] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 127.407159][ T64] usb 7-1: USB disconnect, device number 7 [ 127.438085][ T5751] udevd[5751]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.196894][ T35] legousbtower 6-1:14.57: interrupt endpoints not found [ 128.221196][ T35] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 128.226460][ T35] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 128.693300][ T35] usb 6-1: USB disconnect, device number 8 [ 128.704074][ T35] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 128.812612][ T7126] netlink: zone id is out of range [ 128.812714][ T7126] netlink: zone id is out of range [ 128.812931][ T7126] netlink: zone id is out of range [ 128.813013][ T7126] netlink: zone id is out of range [ 128.813106][ T7126] netlink: zone id is out of range [ 128.813367][ T7126] netlink: zone id is out of range [ 128.813486][ T7126] netlink: zone id is out of range [ 128.813502][ T7126] netlink: zone id is out of range [ 128.813672][ T7126] netlink: zone id is out of range [ 128.813785][ T7126] netlink: zone id is out of range [ 129.945010][ T7155] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.357888][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.527943][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 131.601844][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.601959][ T25] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 131.606168][ T25] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 131.606184][ T25] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 131.606220][ T25] usb 5-1: config 14 has no interface number 0 [ 131.606231][ T25] usb 5-1: config 14 has no interface number 1 [ 131.606332][ T25] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 131.606369][ T25] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 131.606412][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 131.606481][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 131.606523][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 131.606585][ T25] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.606629][ T25] usb 5-1: config 14 interface 57 has no altsetting 0 [ 131.606639][ T25] usb 5-1: config 14 interface 228 has no altsetting 0 [ 131.641971][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.642066][ T25] usb 5-1: Product: syz [ 131.642109][ T25] usb 5-1: Manufacturer: syz [ 131.642228][ T25] usb 5-1: SerialNumber: syz [ 132.229144][ T25] legousbtower 5-1:14.57: interrupt endpoints not found [ 132.320461][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.320507][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.631069][ T25] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 132.635566][ T25] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 133.390980][ T25] usb 5-1: USB disconnect, device number 6 [ 133.409312][ T25] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 133.462210][ T7213] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 133.668974][ T7218] netlink: 14 bytes leftover after parsing attributes in process `syz.3.276'. [ 134.064274][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.097898][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.097951][ T7217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.098419][ T7217] bridge0: entered promiscuous mode [ 134.098431][ T7217] bridge0: entered allmulticast mode [ 134.423992][ T7227] fuse: Bad value for 'fd' [ 137.144501][ T7271] fuse: Bad value for 'fd' [ 137.326396][ T7278] fuse: Bad value for 'fd' [ 139.964752][ T7324] fuse: Bad value for 'fd' [ 140.690290][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 140.690303][ T43] audit: type=1400 audit(1790014948.367:596): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=7330 comm="syz.2.301" name="//o" offset=61 [ 141.199395][ T7335] netlink: 'syz.1.302': attribute type 2 has an invalid length. [ 142.721172][ T7365] fuse: Bad value for 'fd' [ 142.855503][ T7375] fuse: Bad value for 'fd' [ 145.419175][ T7420] netlink: 'syz.3.318': attribute type 13 has an invalid length. [ 146.258285][ T7429] fuse: Bad value for 'fd' [ 146.749153][ T7439] fuse: Bad value for 'fd' [ 146.752703][ T7426] fuse: Bad value for 'fd' [ 149.561311][ T7486] fuse: Bad value for 'fd' [ 150.139002][ T7498] fuse: Bad value for 'fd' [ 150.241064][ T5818] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 150.598855][ T7513] fuse: Bad value for 'fd' [ 150.797906][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 150.967955][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 150.970916][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 150.970956][ T9] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 150.973722][ T9] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 150.973741][ T9] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 150.973756][ T9] usb 7-1: config 14 has no interface number 0 [ 150.973768][ T9] usb 7-1: config 14 has no interface number 1 [ 150.973812][ T9] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 150.973830][ T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 150.973849][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 150.973869][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 150.973890][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 150.973909][ T9] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.973930][ T9] usb 7-1: config 14 interface 57 has no altsetting 0 [ 150.973943][ T9] usb 7-1: config 14 interface 228 has no altsetting 0 [ 150.976679][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.976703][ T9] usb 7-1: Product: syz [ 150.976714][ T9] usb 7-1: Manufacturer: syz [ 150.976725][ T9] usb 7-1: SerialNumber: syz [ 151.256568][ T7522] gadgetfs: bound to dummy_udc driver [ 151.497050][ T9] legousbtower 7-1:14.57: interrupt endpoints not found [ 151.531102][ T7527] fuse: Bad value for 'fd' [ 151.547804][ T30] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 151.548025][ C1] gadgetfs: connected [ 151.548877][ T30] gadgetfs: disconnected [ 151.717986][ C1] gadgetfs: connected [ 151.722097][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 151.722261][ T9] legousbtower 7-1:14.228: get version request failed: -71 [ 151.722333][ T9] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 151.722408][ T30] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 151.722428][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.725509][ C1] gadgetfs: configuration #1 [ 151.739707][ T9] usb 7-1: USB disconnect, device number 8 [ 151.772641][ T7538] syzkaller0: entered promiscuous mode [ 151.772656][ T7538] syzkaller0: entered allmulticast mode [ 151.795933][ T7536] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 151.795952][ T7536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.796242][ T7536] vhci_hcd vhci_hcd.0: Device attached [ 151.929648][ T7515] gadgetfs: suspended from state 3 [ 151.929780][ T7515] gadgetfs: disconnected [ 151.940420][ T42] usb 5-1: USB disconnect, device number 7 [ 152.087894][ T30] usb 44-1: SetAddress Request (2) to port 0 [ 152.087928][ T30] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.182681][ T7549] fuse: Bad value for 'fd' [ 152.718314][ T7539] vhci_hcd: connection reset by peer [ 152.720854][ T5818] vhci_hcd vhci_hcd.3: stop threads [ 152.720927][ T5818] vhci_hcd vhci_hcd.3: release socket [ 152.721201][ T5818] vhci_hcd vhci_hcd.3: disconnect device [ 153.445824][ T7571] fuse: Bad value for 'fd' [ 153.507450][ T7576] fuse: Bad value for 'fd' [ 153.897419][ T7590] WARNING! power/level is deprecated; use power/control instead [ 153.978267][ T7592] netlink: 'syz.1.352': attribute type 13 has an invalid length. [ 154.927932][ T7601] fuse: Bad value for 'fd' [ 155.107613][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 156.425470][ T7631] fuse: Bad value for 'fd' [ 156.633856][ T7638] fuse: Bad value for 'fd' [ 156.637066][ T7640] fuse: Bad value for 'fd' [ 156.776162][ T7653] fuse: Bad value for 'fd' [ 156.798251][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 157.200279][ T30] usb 44-1: device descriptor read/8, error -110 [ 157.688407][ T30] usb usb44-port1: attempt power cycle [ 157.786069][ T7670] fuse: Bad value for 'fd' [ 157.819308][ T7672] fuse: Bad value for 'fd' [ 158.184442][ T7690] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 158.184456][ T7690] netlink: 224 bytes leftover after parsing attributes in process `syz.3.372'. [ 158.577354][ T30] usb usb44-port1: unable to enumerate USB device [ 158.683646][ T7694] fuse: Bad value for 'fd' [ 161.302444][ T7727] fuse: Bad value for 'fd' [ 161.310505][ T7728] fuse: Bad value for 'fd' [ 161.416550][ T7737] netlink: 'syz.2.378': attribute type 13 has an invalid length. [ 161.428513][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 161.574850][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'. [ 161.725800][ T7748] fuse: Bad value for 'fd' [ 162.488914][ T7760] fuse: Bad value for 'fd' [ 163.053910][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 163.197834][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 163.200069][ T35] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 163.204457][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.204472][ T35] usb 6-1: Product: syz [ 163.204479][ T35] usb 6-1: Manufacturer: syz [ 163.204486][ T35] usb 6-1: SerialNumber: syz [ 163.620661][ T43] audit: type=1326 audit(1790014971.297:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.621101][ T43] audit: type=1326 audit(1790014971.297:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.621127][ T43] audit: type=1326 audit(1790014971.297:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.621411][ T43] audit: type=1326 audit(1790014971.297:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.621431][ T43] audit: type=1326 audit(1790014971.297:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.621450][ T43] audit: type=1326 audit(1790014971.297:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.622693][ T43] audit: type=1326 audit(1790014971.297:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.622739][ T43] audit: type=1326 audit(1790014971.297:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.622764][ T43] audit: type=1326 audit(1790014971.297:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff4017 code=0x7ffc0000 [ 163.622783][ T43] audit: type=1326 audit(1790014971.297:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.3.390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 163.980252][ T35] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 164.179874][ T7770] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 164.259891][ T35] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.261680][ T35] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 164.261704][ T35] usb 6-1: media controller created [ 164.271700][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.361998][ T7770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.381771][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 164.386495][ T7781] bond1: (slave batadv1): making interface the new active one [ 164.395446][ T7781] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 164.489914][ T35] zl10353_read_register: readreg error (reg=127, ret==-110) [ 164.526849][ T35] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 164.557673][ T7786] fuse: Bad value for 'fd' [ 165.120118][ T5740] Bluetooth: hci2: command 0x0406 tx timeout [ 165.121435][ T5740] Bluetooth: hci0: command 0x0406 tx timeout [ 165.121481][ T5740] Bluetooth: hci1: command 0x0406 tx timeout [ 165.189535][ T5891] usb 6-1: USB disconnect, device number 9 [ 165.241282][ T7797] fuse: Bad value for 'fd' [ 165.319623][ T7803] fuse: Bad value for 'fd' [ 165.454148][ T7812] fuse: Bad value for 'fd' [ 165.755948][ T7823] fuse: Bad value for 'fd' [ 165.954119][ T7832] Console: switching to colour dummy device 80x25 [ 166.251703][ T7839] fuse: Bad value for 'fd' [ 166.397658][ T7835] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 166.409667][ T7835] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 166.410076][ T7835] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 166.411085][ T7835] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 166.412917][ T7835] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 166.710054][ T7835] pci 0000:00:01.0: Adding to iommu group 1 [ 166.756655][ T7835] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 166.756669][ T7835] pci 0000:00:01.0: vgaarb: bridge control possible [ 166.756676][ T7835] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 166.767562][ T7835] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 166.776836][ T7835] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 166.777003][ T7835] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 166.777138][ T7835] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 166.777290][ T7835] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 166.777538][ T7835] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 166.778315][ T7835] pci 0000:00:02.0: enabling Extended Tags [ 166.827624][ T7835] pci 0000:00:02.0: Adding to iommu group 2 [ 166.879449][ T7835] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 166.883611][ T7835] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 166.883739][ T7835] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 166.885333][ T7835] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 166.887123][ T7835] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 166.888465][ T7835] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 166.889496][ T7835] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 166.932690][ T7835] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 167.008354][ T7835] [drm] Found bochs VGA, ID 0xb0c5. [ 167.008540][ T7835] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 167.097690][ T7850] fuse: Bad value for 'fd' [ 167.145978][ T7835] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 168.005288][ T7863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.015979][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 168.061618][ T7865] block nbd0: NBD_DISCONNECT [ 168.388883][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 168.893380][ T7835] Console: switching to colour frame buffer device 160x50 [ 169.630429][ T7890] fuse: Bad value for 'fd' [ 170.487229][ T7835] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 170.606015][ T7835] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 170.719546][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 171.801877][ T1178] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 171.805420][ T38] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 171.806951][ T1178] (NULL device *): queue 0 connect admin queue failed (-6). [ 171.806979][ T1178] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 171.806992][ T1178] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 171.830523][ T7923] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:fb2e3aa4-4113-4dd7-9044-9f37a7a6b91b [ 171.885817][ T7931] fuse: Bad value for 'fd' [ 172.079248][ T7835] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 172.186162][ T7835] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 172.186189][ T7835] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 172.186439][ T7835] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 172.278156][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 172.364531][ T7948] fuse: Bad value for 'fd' [ 172.557920][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 172.559644][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.559668][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.559687][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.720464][ T5456] genirq: Flags mismatch irq 32. 00200000 (eth1) vs. 00200000 (pcmmio) [ 172.726233][ T5456] ------------[ cut here ]------------ [ 172.726247][ T5456] remove_proc_entry: removing non-empty directory 'irq/30', leaking at least 'eth1-rx-0' [ 172.726260][ T5456] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#2: dhcpcd/5456 [ 172.740910][ T5456] Modules linked in: [ 172.743909][ T5456] CPU: 2 UID: 0 PID: 5456 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 172.747514][ T5456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.751822][ T5456] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 172.754716][ T5456] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00 [ 172.763042][ T5456] RSP: 0000:ffffc9000329f250 EFLAGS: 00010246 [ 172.765123][ T5456] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88806fff5edc [ 172.767816][ T5456] RDX: ffff88801d3fa5dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310 [ 172.770522][ T5456] RBP: ffff88806fff5eb8 R08: ffff8880426b5edc R09: ffffed100dffebc3 [ 172.773023][ T5456] R10: ffff88806fff5e1b R11: 0000000000000000 R12: ffff88806fff5e00 [ 172.775758][ T5456] R13: ffff88801d3fa500 R14: ffff8880426b5eb8 R15: dffffc0000000000 [ 172.779046][ T5456] FS: 00007f9a13a71780(0000) GS:ffff888096b60000(0000) knlGS:0000000000000000 [ 172.782607][ T5456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.784902][ T5456] CR2: 000055974c0a3138 CR3: 000000004b82b000 CR4: 0000000000352ef0 [ 172.787538][ T5456] Call Trace: [ 172.788738][ T5456] [ 172.789730][ T5456] ? __pfx_remove_proc_entry+0x10/0x10 [ 172.791590][ T5456] ? mtree_load+0x3a4/0xb50 [ 172.793207][ T5456] ? __pfx_mtree_load+0x10/0x10 [ 172.794779][ T5456] ? rcu_is_watching+0x13/0xc0 [ 172.796308][ T5456] unregister_irq_proc+0x206/0x2a0 [ 172.797996][ T5456] ? __pfx_unregister_irq_proc+0x10/0x10 [ 172.799769][ T5456] free_desc+0x89/0x330 [ 172.801129][ T5456] ? __pfx_free_desc+0x10/0x10 [ 172.802651][ T5456] ? kasan_quarantine_put+0x104/0x240 [ 172.804370][ T5456] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.806117][ T5456] ? irq_domain_free_irqs+0x400/0x5c0 [ 172.807981][ T5456] irq_free_descs+0x84/0xc0 [ 172.809660][ T5456] irq_domain_free_irqs+0x46a/0x5c0 [ 172.811727][ T5456] msi_domain_free_locked.part.0+0x524/0x6b0 [ 172.813609][ T5456] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 172.815706][ T5456] ? msi_get_device_domain+0x115/0x1f0 [ 172.817522][ T5456] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 172.819985][ T5456] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 172.822119][ T5456] ? pci_msix_shutdown+0x3a3/0x500 [ 172.823780][ T5456] ? __pfx_pci_msix_shutdown+0x10/0x10 [ 172.825640][ T5456] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 172.827426][ T5456] pci_free_msi_irqs+0x1f/0xa0 [ 172.829201][ T5456] pci_disable_msix+0xcf/0x100 [ 172.830819][ T5456] e1000_request_irq+0x473/0xdc0 [ 172.832451][ T5456] e1000e_open+0x471/0x1800 [ 172.834033][ T5456] ? ndisc_netdev_event+0xa1/0x560 [ 172.835751][ T5456] ? __pfx_e1000e_open+0x10/0x10 [ 172.837412][ T5456] ? __pfx_e1000e_open+0x10/0x10 [ 172.839255][ T5456] __dev_open+0x3ad/0x8f0 [ 172.840689][ T5456] ? __pfx___dev_open+0x10/0x10 [ 172.842410][ T5456] ? __local_bh_enable_ip+0xa5/0x120 [ 172.844104][ T5456] __dev_change_flags+0x596/0x850 [ 172.845693][ T5456] ? __pfx___dev_change_flags+0x10/0x10 [ 172.847431][ T5456] netif_change_flags+0x8d/0x160 [ 172.849059][ T5456] dev_change_flags+0xba/0x260 [ 172.850607][ T5456] devinet_ioctl+0x110b/0x1f10 [ 172.852114][ T5456] ? __pfx_devinet_ioctl+0x10/0x10 [ 172.853797][ T5456] ? _copy_from_user+0x59/0xd0 [ 172.855685][ T5456] inet_ioctl+0x3aa/0x3f0 [ 172.857921][ T5456] ? __pfx_inet_ioctl+0x10/0x10 [ 172.859970][ T5456] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.862134][ T5456] ? tomoyo_path_number_perm+0x188/0x580 [ 172.864474][ T5456] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.867005][ T5456] sock_do_ioctl+0x118/0x280 [ 172.869355][ T5456] ? __pfx_sock_do_ioctl+0x10/0x10 [ 172.871507][ T5456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 172.873995][ T5456] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 172.876115][ T5456] sock_ioctl+0x599/0x6b0 [ 172.877976][ T5456] ? __pfx_sock_ioctl+0x10/0x10 [ 172.879918][ T5456] ? __sys_socket+0xac/0x260 [ 172.881467][ T5456] ? __pfx_sock_ioctl+0x10/0x10 [ 172.883338][ T5456] __x64_sys_ioctl+0x18e/0x210 [ 172.884874][ T5456] do_syscall_64+0x121/0x770 [ 172.886358][ T5456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.888373][ T5456] RIP: 0033:0x7f9a13b71378 [ 172.889789][ T5456] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 172.895970][ T5456] RSP: 002b:00007ffe8d7582c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.899558][ T5456] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f9a13b71378 [ 172.902776][ T5456] RDX: 00007ffe8d7684c0 RSI: 0000000000008914 RDI: 0000000000000014 [ 172.906065][ T5456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.909487][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8d778660 [ 172.912707][ T5456] R13: 00007f9a13a71708 R14: 0000000000000028 R15: 0000000000008914 [ 172.916000][ T5456] [ 172.917318][ T5456] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.919902][ T5456] CPU: 2 UID: 0 PID: 5456 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 172.923073][ T5456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.926528][ T5456] Call Trace: [ 172.927628][ T5456] [ 172.928731][ T5456] dump_stack_lvl+0x100/0x190 [ 172.930314][ T5456] vpanic+0x553/0x970 [ 172.931610][ T5456] ? __pfx_vpanic+0x10/0x10 [ 172.933247][ T5456] panic+0xd1/0xe0 [ 172.934598][ T5456] ? __pfx_panic+0x10/0x10 [ 172.936051][ T5456] check_panic_on_warn.cold+0x19/0x34 [ 172.938028][ T5456] ? remove_proc_entry+0x4e7/0x610 [ 172.940190][ T5456] __warn.cold+0x191/0x318 [ 172.942107][ T5456] __report_bug+0x30f/0x440 [ 172.943603][ T5456] ? remove_proc_entry+0x4e7/0x610 [ 172.945205][ T5456] ? __pfx___report_bug+0x10/0x10 [ 172.946786][ T5456] ? do_raw_spin_lock+0x128/0x260 [ 172.948345][ T5456] ? find_held_lock+0x2b/0x80 [ 172.949995][ T5456] ? proc_entry_rundown+0x158/0x1e0 [ 172.951655][ T5456] ? proc_entry_rundown+0x158/0x1e0 [ 172.953298][ T5456] report_bug_entry+0xe2/0x290 [ 172.954822][ T5456] ? remove_proc_entry+0x4f5/0x610 [ 172.956432][ T5456] handle_bug+0x1cd/0x2a0 [ 172.957802][ T5456] exc_invalid_op+0x17/0x50 [ 172.959243][ T5456] asm_exc_invalid_op+0x1a/0x20 [ 172.960852][ T5456] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 172.962946][ T5456] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00 [ 172.968822][ T5456] RSP: 0000:ffffc9000329f250 EFLAGS: 00010246 [ 172.970752][ T5456] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88806fff5edc [ 172.973628][ T5456] RDX: ffff88801d3fa5dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310 [ 172.976970][ T5456] RBP: ffff88806fff5eb8 R08: ffff8880426b5edc R09: ffffed100dffebc3 [ 172.980179][ T5456] R10: ffff88806fff5e1b R11: 0000000000000000 R12: ffff88806fff5e00 [ 172.983463][ T5456] R13: ffff88801d3fa500 R14: ffff8880426b5eb8 R15: dffffc0000000000 [ 172.986736][ T5456] ? __pfx_remove_proc_entry+0x10/0x10 [ 172.988967][ T5456] ? mtree_load+0x3a4/0xb50 [ 172.990860][ T5456] ? __pfx_mtree_load+0x10/0x10 [ 172.992872][ T5456] ? rcu_is_watching+0x13/0xc0 [ 172.994465][ T5456] unregister_irq_proc+0x206/0x2a0 [ 172.996057][ T5456] ? __pfx_unregister_irq_proc+0x10/0x10 [ 172.997820][ T5456] free_desc+0x89/0x330 [ 172.999131][ T5456] ? __pfx_free_desc+0x10/0x10 [ 173.000692][ T5456] ? kasan_quarantine_put+0x104/0x240 [ 173.002433][ T5456] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.004075][ T5456] ? irq_domain_free_irqs+0x400/0x5c0 [ 173.005756][ T5456] irq_free_descs+0x84/0xc0 [ 173.007182][ T5456] irq_domain_free_irqs+0x46a/0x5c0 [ 173.008807][ T5456] msi_domain_free_locked.part.0+0x524/0x6b0 [ 173.010707][ T5456] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 173.012728][ T5456] ? msi_get_device_domain+0x115/0x1f0 [ 173.014460][ T5456] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 173.016365][ T5456] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 173.018421][ T5456] ? pci_msix_shutdown+0x3a3/0x500 [ 173.020009][ T5456] ? __pfx_pci_msix_shutdown+0x10/0x10 [ 173.021748][ T5456] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 173.023611][ T5456] pci_free_msi_irqs+0x1f/0xa0 [ 173.025139][ T5456] pci_disable_msix+0xcf/0x100 [ 173.026651][ T5456] e1000_request_irq+0x473/0xdc0 [ 173.028207][ T5456] e1000e_open+0x471/0x1800 [ 173.029653][ T5456] ? ndisc_netdev_event+0xa1/0x560 [ 173.031306][ T5456] ? __pfx_e1000e_open+0x10/0x10 [ 173.032889][ T5456] ? __pfx_e1000e_open+0x10/0x10 [ 173.034560][ T5456] __dev_open+0x3ad/0x8f0 [ 173.035930][ T5456] ? __pfx___dev_open+0x10/0x10 [ 173.037475][ T5456] ? __local_bh_enable_ip+0xa5/0x120 [ 173.039131][ T5456] __dev_change_flags+0x596/0x850 [ 173.040738][ T5456] ? __pfx___dev_change_flags+0x10/0x10 [ 173.042470][ T5456] netif_change_flags+0x8d/0x160 [ 173.044037][ T5456] dev_change_flags+0xba/0x260 [ 173.045548][ T5456] devinet_ioctl+0x110b/0x1f10 [ 173.047058][ T5456] ? __pfx_devinet_ioctl+0x10/0x10 [ 173.048756][ T5456] ? _copy_from_user+0x59/0xd0 [ 173.050367][ T5456] inet_ioctl+0x3aa/0x3f0 [ 173.052271][ T5456] ? __pfx_inet_ioctl+0x10/0x10 [ 173.053931][ T5456] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.055749][ T5456] ? tomoyo_path_number_perm+0x188/0x580 [ 173.057781][ T5456] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.059995][ T5456] sock_do_ioctl+0x118/0x280 [ 173.061589][ T5456] ? __pfx_sock_do_ioctl+0x10/0x10 [ 173.063284][ T5456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.065231][ T5456] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.066855][ T5456] sock_ioctl+0x599/0x6b0 [ 173.068243][ T5456] ? __pfx_sock_ioctl+0x10/0x10 [ 173.069840][ T5456] ? __sys_socket+0xac/0x260 [ 173.071557][ T5456] ? __pfx_sock_ioctl+0x10/0x10 [ 173.073403][ T5456] __x64_sys_ioctl+0x18e/0x210 [ 173.075166][ T5456] do_syscall_64+0x121/0x770 [ 173.076879][ T5456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.079037][ T5456] RIP: 0033:0x7f9a13b71378 [ 173.080656][ T5456] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 173.087449][ T5456] RSP: 002b:00007ffe8d7582c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.090690][ T5456] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f9a13b71378 [ 173.093164][ T5456] RDX: 00007ffe8d7684c0 RSI: 0000000000008914 RDI: 0000000000000014 [ 173.095603][ T5456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.098052][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8d778660 [ 173.100501][ T5456] R13: 00007f9a13a71708 R14: 0000000000000028 R15: 0000000000008914 [ 173.103016][ T5456] [ 173.104650][ T5456] Kernel Offset: disabled [ 173.106000][ T5456] Rebooting in 86400 seconds..