last executing test programs: 30m6.317626812s ago: executing program 32 (id=17): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r2, 0x8e, 0x20000000, 0x5) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x121d, r2, 0x1, {0x2, 0x3}, 0x7f}, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24000094) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) openat(r5, &(0x7f00000000c0)='.\x00', 0x0, 0x88) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r6, 0x200, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6012000800033a01fe8000000000000000000000000000bbff0200000000000000000000000000018300907896b216ec18639f230700fc000000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) 30m2.485268251s ago: executing program 33 (id=93): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x20a3}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x7ffffffe, 0x0, 0x0) io_setup(0x1, &(0x7f0000000540)=0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285629, &(0x7f00000002c0)={0x3, 0x0, 0x85, '\x00', &(0x7f0000000640)}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x980914, 0x96}) r5 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r5) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) 29m36.128975511s ago: executing program 4 (id=309): syz_open_dev$dvb_demux(0x0, 0x0, 0x41) mkdir(&(0x7f0000000140)='./control\x00', 0x111) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400100001800db8d0000000000000000022000000000fe010000000008000400", @ANYRES32, @ANYBLOB="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"], 0x140}}, 0x60800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x1, 0x7000000, 0xb67, 0x4, 0x7e]}, &(0x7f0000000180)=0x54) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000280)={{0x80, 0x76f29e8b}, 0x100, './control\x00'}) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x111) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400100001800db8d0000000000000000022000000000fe010000000008000400", @ANYRES32, @ANYBLOB="f2000880d53a0dd3721e2e0bb905633b4161fa0d4a344cbe0bf665262c025dd8e61c3e18db79205b93e799f99971906e24f178f87189594b10104db1bd69499ff74925d188afdb70d06db70c601e0925df2d224666970d0acbc4a1afab44b89ee38ec7cdcf84a43bd7e1282c6116d885224870bc20f4bb963184044f8f09d0a4af49116ec00df4e19b89047d0d6c3f97c68b17030f6942ece5be065266d27ad72be7d63493645ba268aecd26c51206f1cb53b155b546ab293e902fd78ee4a8deadf0859663966bddc2e4a72ea9a9c2241baea171776437a5a1c794e953c811b997167b8509c9d6a090e6682ded1ec102d423000006001d004e24000005001b001100000006001d004e22000005001b003a00000008001e0008"], 0x140}}, 0x60800) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x1, 0x7000000, 0xb67, 0x4, 0x7e]}, &(0x7f0000000180)=0x54) (async) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000280)={{0x80, 0x76f29e8b}, 0x100, './control\x00'}) (async) 29m35.889059409s ago: executing program 4 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYBLOB], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 29m35.887758651s ago: executing program 4 (id=314): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) socket(0x8000000010, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x48000) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket(0x15, 0x3, 0x3a) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d27, 0x6f0d, 0x1, 0x0, 0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0xc2, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000001c0)={0xfffc, 0x1, 0x81, r8, 0x2000230d}, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000040)) 29m34.937336602s ago: executing program 4 (id=319): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) read$FUSE(r6, &(0x7f0000000b80)={0x2020}, 0x2020) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 29m34.279494309s ago: executing program 4 (id=328): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') exit(0x3) getdents64(r2, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020}, 0x2020) unshare(0x6a060200) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, 0x1}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000280)=@setlink={0x30, 0x13, 0x501, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10002, 0x30}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000018}, 0xc000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x20000001, 0x10001, 0x1000b6a, 0x4, 0x6]}, &(0x7f0000000000)=0x54) 29m33.339350794s ago: executing program 4 (id=338): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x4, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bind$unix(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000003000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x5000000) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r9, &(0x7f0000000240)=[{&(0x7f00000001c0)="85", 0x1}, {&(0x7f0000000100)="85", 0x1}], 0x2) landlock_restrict_self(r8, 0x8) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0x4112, 0x0) 29m18.325543939s ago: executing program 34 (id=338): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x4, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bind$unix(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000003000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x5000000) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r9, &(0x7f0000000240)=[{&(0x7f00000001c0)="85", 0x1}, {&(0x7f0000000100)="85", 0x1}], 0x2) landlock_restrict_self(r8, 0x8) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0x4112, 0x0) 21m11.108236325s ago: executing program 1 (id=3159): open(&(0x7f0000000140)='./bus\x00', 0xe2b40, 0xa8) io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x90f4, 0x2, 0x2, 0x10001d4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21m10.990202896s ago: executing program 1 (id=3160): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x8000, 0x1) preadv(r0, &(0x7f0000000980)=[{&(0x7f0000000380)=""/256, 0x100}], 0x1, 0xffffff58, 0x6) 21m10.822405987s ago: executing program 1 (id=3161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 21m10.503317037s ago: executing program 1 (id=3162): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 21m10.402185883s ago: executing program 1 (id=3164): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, 0x0) setreuid(r1, r2) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0x7fffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x1) add_key(0x0, 0x0, 0x0, 0xffffffffffffffa6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21m9.970965604s ago: executing program 1 (id=3167): setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) socket$netlink(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/54, 0x36}], 0x1, 0xa3, 0xfffffefc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@nullb, 0x0, 0x0) 21m9.783007499s ago: executing program 35 (id=3167): setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) socket$netlink(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/54, 0x36}], 0x1, 0xa3, 0xfffffefc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@nullb, 0x0, 0x0) 11m26.92271486s ago: executing program 0 (id=6671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x10000000, 0x0, 0x44000}, 0x20040844) 11m26.764034348s ago: executing program 0 (id=6672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000012002103"], 0x1c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfb}, 0x10}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000e14010429bd7000ffdbdf2508000300020000000800010001000000df014338427b6d26b841859d16f78ba2ddb6b609a0154ad151345c657836e48fe6cdbb76b096cd91d6fe41008fb4504c1f828d7bed6d3f4fb6c99582b39f93b012fe511d9312e1208f1f2bc0c2e90da52513fe4ae99ba72c01e15cd2a7cc0fece6ac31b877be15a10fb1f356292f301883493c0c68703012f00ce8081b5da53b3b42e87ff5da030491746301b57f9c691c2967b995a272ba532a43660d8a93f37df8001d81d599a6c343687cd13c59165523426714424013e1"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 11m26.583392889s ago: executing program 0 (id=6674): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad3", 0xc8}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 11m25.389602477s ago: executing program 0 (id=6679): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x5202, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f0000003180)=[{&(0x7f00000002c0)="c3514fb9ad2e1dd2775f83a8669aca492ec5c8afc6b06e99c4f3b6dbe00a9d52c7c3ec5bc5b203db6e70dd47e1eec10dfe5a3e32a3286c6817e347c12c366df9125d113b6804b979c924f7d8cf47153dc1b8ca63768baa00ae7a621c1ce94147f66905bdf10511d572333ffe040bce115a2c3e27eb6e165f33f5817b1ac6fc29c9d6614ef332736d27c0653acb785399002e303d46d42195dc646c6b395d3cb5cd19f1852f82dcf92e19e7cdc43faf072046fef2e47d1bd1ed4cafe230e9f8293ade39bb0a2388e2c4fbdd", 0xcb}, {&(0x7f00000007c0)="27a11251d8eda4cde547ea377a5b489324308fb1abcd3bdc45fca06f46593034c2560e5a8ced60752289ba5af3e6a04040534bc81d08dbc1a4f43be1c17ebb4472b981c3f164f1b06bce3c9632c5e238871ddf532beefeafb581f0bae0729f14706069edd25b8cdbb75b7e798233c7816b9e9125f0c27599849d821d0a181f9dc510bca9ae7fec0e07cb69e74fc90c88b9d62a18f4e10f5b85eb22d81103ebdeb6ebc83d16f8b653e501f9be68ac40517da9b77439235a3b95aa237cb51abed5f53077205e8ac709cac4cfbabfe6f8613908332bbbdc45bcadbd60c76b7b7ce3a4d87b88b97b40790bb49880a1970641a9e8c85b7ee79c2997a7d3dfffd6ed85af4fd04e5d7b95b81096df30328fdea3c0b88413f1fc67482a580f95c8baf1bbab2ec10d1865ef19cee5b2bd5176f1fb689424ab44f24c19d91ddc076979f39e59827af0dad9438273c240fea07c0edd18c5975ad967609b0ceea23dba91e48d6fd2681ced0e9103bb77ecada55ed4af261eb187f02e9a49f69effa2d07d2ff869fdb3b9c6e0f4aa4ac7b75615dd04106989610c625bad09e07f2bed8fb664d7d2e89cf2c8ba927ef449ded9b4f10e89317daeb599dbabb92e5372d7064a9a025f7c03f6a6dc4cc6a4ac8d6a3de2512cce078d895cc78e818293e8c6928f2d0e9efac1fe8e3167f0bc5c37c2e38865bd2a9b418046ab81524e7de8d87fa5a2d453041506826955b288ca9c545b1a9de9ae7825319c50ae09253757456afd08313cc0e6b55037d089dd07bc7b0001182d717947b39347e8cb13fdfe9a8a16b5a00388db229d297067eac6698be99a63ebc79461b3abe4fdcb6537bd1eb7ed89357f2b176f487d3445e3f7251d98022508bdff8414ea29ebd6ff5ce73206d693970535793d7550a3bdd3b1f8f28970bd6f4cb4c5d1c1a2a2999e86a978d5d02176c9ea4c5370540b19d71c155db271eeecf4b13bc7e0c66a47ffe404bf4b54067ee99a6a811026b76215adcdf50bcecb06a0f1a1f4b81b75d06326ca97835d7f173c8ab03c0848d5954dec7b38909f18e7e5c813b5e09e8deddbdf3549c6cf661ca9f3d85779fcfe6653483c5084bff7207d0a784e29dca5ea5cab47526f19ef9219269984bb645a79cdf5f2162b635f413a70eca19296f47e463ecf28f77de5bd06ec02012fd4c1f380ab7ea03191585f89cbe459093a52070ebda66862d620123a97e2be2f409d0d624568efad959049ee033e086bb0c55f9ef28deed88abdd1377f0c9d7ad943babcb21939a9f8d1fc2b29e0bd30c1697ddaafb8626c7c0e17f1c6a4a0ab0424155bdf8449f5e3ae3a3c604526bad1f018077a5ad0ef96ff5dbf5dce29d672c926bfec92aa1d1f032d9d9a215aafab6fad0114509d723ac6350354aa67d5adc5c0981b7ddf74876de9a09e971397b551b61478d90beef577eacf81bbdc70721c8136bab8e93bd558979957a9713324b62db9c520439a1fc2579c81011f2a76a34997ea158534c046be9aa7aff54b4ae6dc0db6bc84a55871fd3cfb6f7bd3f986b1da7e01b3b05d3b1058486c48acb0260f716884fd46d465ab649ed167c25fecdad2ab120282ffbfce8a60c87e0fde49c245b98ad3edb6c7cd0ad4b98e403c39a3665b6e8eeff0b72f4a7e32a0e562a456b7ba4ca4505e99d484064c7ee6a0295443433ba1fdcf68d6ab537a5085a8d08a4d19fd3b377f192d6554d08da3ef16d3102c97f3d3149fbc5c4471b853c249c982a61f9980b1b6086216d896ab5368425efa06d90d30a912eac9256b0977476446419452b096fe36d3edf10768a3ce29d32ad68b7ddce16c9c0b489ca3dbba1c663b79033d4154423204d8ba98ea87cbda86bb2b11662563483e75ba3aa046066f618298e2b4d882494ae3b73d21e033c888ef4c24bd4056c650b1501961e7629010c7c7831779e40331a0e645ab167957adb808bd3df5e3b6dcedfb44674a498619fe811c7292d9f523e484e3695717b737cfb5364cf7013ef6764b2535ba80e13683660bd5adbe1b4c7f6174a6552402355b7e35a8be22a0695f56b838a83812eaac9d781de1a26d8d11a99122b632cfb509abd1c7c80731a35c3c3e684eb5c69d1a707d91e5d63b68e1eb92967c057b9ce0c89152ade23242d4085815d042f1175d73561c479bd98f69d06f2e8ca343ca8b89365fd03b971814acd859bcd6a32dfac6227c3aa1c96a351e0f6d017908f8e59723416ef1dc545f8865079888df2a232d65d79c29b7f2a64b670061df21ed41f7204f9d7921e05e7b6d8fd7f4aca293de419ca80fd7822c21c235e21e1d48f9029ddbae133baca3d30bfbd8cf3f77f053287f959165b8fc1771e7b0e1339c9e324262312d80a41930cec94664ce73bc750ea84a34fdad714a45abe695fee2e934c346e5060687942b129ab5c68d8633a1529b5322c171d122b6a4137ae324ed2f9d38ec6c03360c2088dbe4fbeb5a88f7619995d3dbeb329d78770bb510352b0a6035c030546e08c64d37ec34c0c74030262a2732e87fc0baa9816914852cb85a42bef2f2ee53dfee7940b9dabc4106c2084f8c368f68a6b79bef2dcc023b21cddac23996e53b2388e05836841f27916549da49d008b5eb0adbcd49f783e604315d0eea86f2dc5eafc2ae64a820b540f28d1e86716712e7c61e3cb8aa1f822d10ba2308441b201fcffd7c514859974c3744f11ee11814663bbe92c6b356faa201ba4ee2ddd0db7236b8b8ee2043b53481e71ae57a78645c5751affd0fecbec0e1334efe1184aefd8bab2c0d76a5c6aa6c4b3c2ae837a66edad728140d74468ff0de477e0affae6d158a00ee9993e1a609a13011e190e7bbef8adff29c33bb10bf44599bd3ca523657d232f7edeb949b36df0ef3db7cd4d07d6ca35cee6a1b4576d8e44dc79b48d579f352b97bff31ca307824616080fffd70102f72898fc6ecd88ad156bed9eca4e41feaa4f3691dab9f5ec09874ffc727b61e5d5eb22100ef23b8f6bc7c13dcbd431fac0f3b0ee0595a4ea5a9c3155badcdde4f51a873ac3f76515e591e8a7bbfc01fda125cd81948508df4c5d1af503f2e3dfef559413e2e6f78b2e3fa35779dcc42561ba5dd7a2808d956779ad07626d9371a980f0e85ac55d18594065ad6dfc9e728a3a9b1809c027ddb5ed694b1d0c0c08e4a2abf9fc84748fa4f6695da7a79d5aff854856599b76f73d9e4c2fbc6dffd3be222353214e96cd25d9285a91889b9d043c110ef301f678f8d98813b9c7c02b8c8f6cfd4c85e7dc515fa631100e217226ae9759dbc98112c060f396c6a8b1e07cc9d9fec606769649064968c20854bf52b5ee318bd4d7220a432a90b8a1d5c2b9fb42894280cd41ef0ede3088d75ed0b921f7a6230164edf28a5fbd49767c589c09568c63a9c1940989816f549260d97290ee97a6f47c6de94e98730325bb04ca61598fae72312c68baa0dd3d8208773831580d3a47849c283ecaf208279998c4d9e8ce2ac8617c3dc69762e26e8889bc2b8c54f773a7358f6fb19429dfe069fd3c32cdf915726851f79f7b380cd3d11d6a4c10bd60c3966db677bfc15380c9b624e4f286653065251aabf34327f97eb5c25d86ab4fb03514dd5f6e1006938b7df307fd1d1646e65a011477fc647a8102f6dbc7940149aa8ad4ca0d1ebd70a2c2fde2f048e9be0903706bea682f48c0ca1607f46f602977a45204c517cab643e925f19f4d702a70df36f84df635c5054198a49c3cb081bc8f96dc2b385fa1849f9fd3bc0d809fa9ca6c4edd14d8bb97e04bfc733f7b2c07aa0189813655a568020b8d4d552fa191d9c6ed52c15524554401033449945e4ab3b8a713489f77de626a41670f65d6e063f97c86d64a225a9c85b7ee53cfa2bc187f2c523fc0537d943366504c6c899cd778076d803bdd918fcacdc752f1e4beb57ceca36e1bdcc336b18e3f07b4fbf1c6111df18c8588e274140c9773040a97eec2120e50e69992ffb6aab85c085809757a8acd6abe792dc6091b01cd34e3fcc3c34c2184087d5f33bee0c85c1880fea0f43271a4ac1870280b443c8bcfe0fba74f90184857f2f6e2ed793932f62d5f50ccbc964db367ba800a34f4a133e9134a675ab205c6515184ae85f112148cd30c25d7ec2959d1d83326f9bf859ea3601abdf31585d6c92851ca4ab289a601750df37a5b999b15082de04d19223c41abe4f457a5f49717ee40969a55b506e64d5981e92ffa977021006a1064786443c97ab3a6c60d5292be53f3122b982563ac4599de70f4a099c61e82db0d54c8ca62eb7feb0a833b30a802e94a6c49842e4d79664a2a25668315049eceb8768c51243081132629162e5dcc6cd2275fe470486e7634f46ce96055ce8c0ba22bf34de769271eb49d5b18766a08c704173fad35f4633e743e57e99ac97fcfae392faefea528a3f3d52565ce951d0ddaa1cc3506064332e33041d6b8b940742478f33b422ca03adcace14ed5bd8807420ae82a43145eef472680576448507629f26bcf17b7d632e6a999fc94c6262742994397a6d076986b34ce97834e69beaa22b32db5c702c892164fdf0e2e1f8f9a894cad20e2dd425ddbc9ac6976f522c70646c375e425bd118fac1c0fc0d4161df5081e0e25b980cbaeb8ea830a407641a6c42d1dbdcf1b14c69a08abd1abd0203cf65a9439c8c2ac6fa79084a9062d840097ded206108982b9ad44f58f5605ce2e4d7cc51dad17e9604b60cad3845b35f6f2a088b78ad874b4b067048934ec580eb590155f7094aee07aeca84127c02a060bfe52a2e106ac901b2b105c57aed7632511750fc32a30896e17e9e291b480debc6413d8285193c9d9e4d66f63f8c02cd0fcb0ccb77da58b260f14eec889c486eee4ee066070635f93ef8b133928c242835a700bea57e792b21a24a01a62a3027a3f4ee6709ee0b337c58a70b792e1a040028e8283a916558e0a5f08530420de625fe7883d8f58143d2b21080ce644eb9319cfabbc11d67b51745f36ba83abac987828cc28cf069267e14c4d5502ffe7b8392b01381aa4bfeb92268c2eb4f26c8e924f98917ec7438795e12b335be29ae6e52863ef40842a29ce455f9fca7e227216e778c473153c0309c4bdf5bfe35b5aaee61295fbcd155e86758754323110c9287b853a8b17da2112ff918b9419ae245967c8fd0b3c0323302fbf1b102563b459520612e94356a7bbe446b4c904655ef4c29a1d1cce8d3a2fa3626b0624b36ab865e7db6c1b00a3ac691da5dca0f42424d94144e4aecb392eb90ae2e751e1f1720fa8afde2d1d0880af41bde5047f378045822963cf2299e08ecae4dc1bd4db823f2ecd5055f79453b7d71f951f18f8a574466784a5d87b9173817e36e8b0baaac1a5de92bb7077f64a755dfd1cef444f48af548403d529fb2fb5fc0f25b3156e003dd9da30f48ee9c0460bb93e4f19af851cdaef4a80efe10cd65e0a62295e6cc94e1100c02046398f1975bdbf8640804ca1098011de26861415343756a788685cb53dbac2572dfa681167846f377b6d524457d6eacf7aa5cbf5bf1f94a18cf65f88428fb4d94818bf85b4e93e72e079770f2dfc598ec7629f68a1fab00715d7bc5d6281d18ee43ea8e85ec314da538007e67c7a4c85ed5bed90eddfd2acf286d7ba57e174c9e6497b00b9ba4a77036681c2d2e0578b34e26340f63ec3c0d35b686dd3cd3d9907704ff2c3a508fcd18c4ee6ac62eb7bf6b9328060d42bfdfdd6bbe4b6cad439c7f6a4acaa40796c0b3aa6abfdc6257d8a9ca664d8010f872e8335c93e4", 0x1000}, {&(0x7f00000017c0)="aa47be748edaf75b593f083e6e02fcefeedf2135a3c87a0af0137c29c230377ac10f909bc92f5f5332e08756fe77c11a49570499d115a57fe694c6570102279bf62d36918242f1ee0b37994dfd26abdf9548686c659f0edd9baf5f3b31f2a62555bc10f5191aa8b96a55a3ec8c6a9ee979d784f40231bb099c7f23b7243385c988c20852885560aa5fbfa42592f97200569c60d1a8fd3ee02cf15426184546d98eced7924f77df6f65a4fc4b583f4a7fa16089610ef2e0ed0557", 0xba}, {&(0x7f0000001880)="6370f471939280a0aa412b5a5e5758a924a67b8bad2bb08e86873a547642a52b7739f186fc6e85d11d84022c727f0c965961d68710187840c226aee0ae3568a2ad33dfe39ee5459ec70471774155f2d0d67e12c297f50c364c27b07f4c2bde43cd7c412b6c501b8694570462347af47420b7f091fa277309543b0aff4d3e7181b67f417ff0ace36ba00aea73718a0f973e54c64ef28df684dd7348ce0e1436f00c6f9a7b99a923004a90a9d5ed7c0e30da01a5352221f09c3bb08e85ff37b4f88f", 0xc1}, {&(0x7f0000002080)="6a6edfd0fa95c30d678fbcb84116ee2ac9154cc7f3cde72f2b1280d2b86b52a6d8b2d9189c75f4b65137d195c53cf1364e29c88c9a8faed45d292547a5d4cc0a99bbd7f5f620e7847549a9105a4fe71e681db22ca01b9fa620357f75c113e966193217e1db2bbf3bd2dd0949f3d60eb05f0b4b82fbedad6fa718fe24e3f7c66e371bb41ce8335d16fddb636e1b60810617ae4832dad53927fe1f92c5aa67f517c1c3305cc51a40756eb6f20cfa8de7d553735e5d467435702080e7a2b8bc375bdcc5cb7ba015eeb46a0c1ad4d98e290be53d2df46312f31dcf056e640cf8ff0d0c661cd17b39cd87d64c8338ecfc5e7a9dce4ceb7a5581bc51173e3e6755c2b4c6beeb20fc8ee36f0d55352cbaa9b75986043ff575797b58d4be90bee0dd0d1b605b988eb9e1d81ec97810a67d98019a0e451878277911a3158c69c43ceb92ae464442e33553fa047849b68fe68f4da38f8ebe08b1ffbd67a82d6ddd9523d8a927baa6078d4a7b5f4b45c879e8c26986c7ebdb151fbc58b18ff9f64f90cd64dc87f25ac3626b52516cf3703d6f629926f89929a6fcd538b5df489cc7df0fd11598984ef2730530987e56c8b66b26f3a2437151b7e3006eb6b713e26946ec13e444d9447ce248a0a8ef2d1740038e43477355058ea14ff59cead3aec707b972c7f12bdbf5f8d48a3473c2d545e21ebb9603199d68f92cb91ab2b58f50b42e27cacab854e1427fb7b536468b5ff658e7bddb3ac8405b068e30ad7ed7ecabfb29a7066a6fdf0060edede3e456cf13a62bffa957df760101b0e733ff691d1617139a4332456209d04efe1f23bd43c5e120b5d037e07d94c4d9f93b2d4245fde811b7116f5eb89d750c24f665e5aff3834ea1bf738299d5747aa672cb1780e53a694238a003778b1372aae8618ebc8b8203b205507ff5531040b07b913b16113b6d33e2cf8e20c7e459aefe8958f717c62e3a334bc5ee0e13ac51cdfdcc8aca558c0dd55b532de3a33c4194c15dd53f549c73f0905c40698fb848c0ed51fa37cafd7b632772edc1ff65f2784d41c92789bf8975395db5cb32fb8853058780add7367d5a3475638339a128d1a4c28add9c047b3d29169b5577efd7361de9431b2eb3c482a7b568554abbf93cc753b07ad4060ee5335ed2f2f37dbdf2524862c813b43866c5285bb0cf888734b63756197491b169901dbfb78a8ca0165e6224998896e773bb57dc0c7733e64e715afcefb44197bb5065d43219cde1e28724c58c009faefd58013b7bae93431e82729519e6d4788750192af09cb687375125caa71e304af64834b5484d15b9fa312121a55edefcc1a0d83f1f844c02db6c66ed1aef7055f4da5252388972f8969576b44d34db54f8b17072e93c54cc3a8b10eea3a33124654b54beacbce1253c302bc15dd1f0f5148dce6fc2f9b4453a141420d9f99f5822c32cd1bbfccb7adf1cbcf3a6a07a7aefabec5964f2f0583bb30d0876f181485582a6f9e3f61fdf044e5dedd25e762719883557b74be7a5cceb8e5a69ed9cf83ac12957a77c28f17fc8972a8083a9b851032e218769e93a3cc407ec84413e5c6abe72603f6f40c3e7a1bd597d814571213bfcb3e39ba7e165255d05f7185c48012a3065341f07b1c53856376cb8ff4806ddce033c2b96c64287a088ac2d8018aaccb323fa3f9bd6aaf495ebabc8d30181d6c6c879214750e73c771e09b715ef6b1f5975b42ca84267c11b597168912fc9767428c6b22fe4c3ae165ceeb67614f5fc28fb865be63c2dc8479c70a6553774e540a7cfed6c5cb777473cfcca04d2c5a2ad95531ca8b3ce920b2be70733d3a3e7b13ae4684d9877aba7864933ae4fd542d8cffca033851999894c5d136471d9b1c210889c3fe0cc564995b7cfdada4f8b75f6561d3d5ff20eb5b6e4297611319776f489a3047cf607484502b70103ecc767b15b2992badefe4ee58989bc7c868059c8d82e4677e1d0e5d9873045c718d7a452fe9e94e4a8b8d6d8dafe27427b5ffd2259b2ddf9030d9a1f4a21f1650e2e397ed2c4b2ca7d7adebafc3edee9a9c88c6bad87dfb1350c192e7341af46bdd9b3d240ad0895c1413967d34b4ed140d0f38b8f820d8bca8b87a75911178e87cab1efd659f64d6735443042c32ffd640e2619983de21d8d5393eebaa1f04c7fa89a89f5e4a6678dd898ec9adac6c5729de2cd1a9f1e841f3480261b575d28adf63aeac35660e42eee5ff4ba2587a70145b5c20c516d6e1029882cf08e37cabd2d706fcc6ac17b10f817a666a7c5ee671dfa38f00b637874072e8fb0838199d55e6832f0551de399b3faefe67c31f0afd921cba34b81ce6eec06c5d60bd212fe2d793dbef80d4bc53ebdb738fe585e4f4e2e5c9de54361d037123fc576f66103a5b7a49e81a35cc29b381ba2f4d943693c50c1e8bbffef8f846663fb3b9b48a71b28cbdaee4bc653f26596afb8b3d182b98d966de88e6dbb1f47307f309350fb703628ab9633d2c421c2f360595a1d6b56cdee1b6c2038d507bdf15dc2dbd9ca1731215833138d12233e3eb78da27223457114ab3d358ea305f6a2a3b0ca32e4cb1397f9c3e285453a8ef28fac86269e211f009df33b2492454a4eab30397da329413b1df38d9a3758c5f8d346c5acb0fdd4405c39c678f3573414706a7a8a9115b34e5499bf310b80331596e356258187994d9b3eee958f403a432294cc063388a81d6cd7d19b67f73864d83b7dabc4c13d02d9fdd8daa20ed4758712d8a7eac544857adb45366f86eef6683c8828f97a9a4148a3fd99630be03bd3a4f8c60ad0edacea7a76ddeddd69f0ecb8b722c901e300fa21662c9738ccedc7f580cca8270b8b3502cc372591f7222fa7720fb0f9938fda889036e05e400d1552be684ca4d4a0b3ce379db2b3c2ba2f3bac84a25682dfa938e549992b51b18066d45f4bd618b1c2b3d3f6cfdc6ccaedf2820a03d857a219074ead10cce2e703a73b0ef15011f55a9341a25ad6758c11da2e9d8bca43da7900101beeca47809ac39245544a86ca2502a054508c44cfee372fed2873e2ceee731dde668ca64e6df40b031cbb715da4fc221c84ef35f468aa3bcd4ce94ab56ed945e1c4ef2329f210063ad83430096c9b79e8d2bab43a1d4c0040c5e4fd3591dd53b93e9e159e7aead55d8761ac8b966687964d5dfac6b80494a79f2b9c90f76b48e4c9f4a33ffbbecab64f433ea1f9076d2b6a55ef04eb1f53d01ad684a87178639d6e38d1bc99260975b4679e31107de452d2197ae201ee9527a49d66bd5cb2bdc6221916bef5cb84549fca225dcef4ff383bffc1016a34385619d86d869951208e16170debfb80427e7a390002394dd912ced3c043405ec5a764bf3f2c627bcb16aa18c7d34fedb4f8b5bdeb9c0d8c8d233e2d08fe0d3d36b58ac65f32075a904359472ee880b86914b93b0bdc91d1f96319f47e36fbf31baa243bbc0f50df20b562ce3de025a127def78e2468a8fc747c3a8ae8f66fb8bcb637ad758c4233136d4006ce25a597d79155783352ce500f5f3a71b4ab82d00f57e521af48c984fb16d787a11d5b850bc82f48490868c906b0db02587c7b78698e788c45179fd1e10f3a3fca7716c4c63e955f5cfe84b6afd2235c2f3af9214f02f04fa8e6d50e17485db2544d87f9b5a0f892495037d290aaa48b0a0376aded4d5583cb1c7e3421977007ec88f6ea00e07e2564a388668846200d393d936d90f2770dc8db8bc984ba710ee1d595ffc6114c395ff2fa9a197eca6cd2f70ffc71564f389d95d5f2d5274e90df8964e19d818ca37721e5da516020c5121cda02c26dec10de25e3e07e0a2ffcdc82dd36020cfb363117a291817a8cd85b4fba543fb3a93a689d69b9186346810a83ba02fd1101be779a8fe38764f985d6bd5cd4850005384621c5eb2e75ece0c021a08ed42c13577e5344eba17f050c7c0ac7965358b17afeb8e2adabcb9fff2c4b8c81b342c3a995b2b319bab4caef79e7c416058b239394eddbd870ed7038fba924cf7fd7649dda3e4c5ca564a658790c521ba155cb942341bb80b75a9f47cb06c141643c909325c424eb608cec600cd8a84abb1bb702cdd51bec04f77ef1cad2649ce34459153fd958701b56d3ebf1e2c42a276baeb2f6bca4b7613b98e12ac7c29350112071956b8ad42a1126109249bd9c38b75afa291172066967782eb10d9d1c803da6ed131772bcf34cddf03f1de1a2dd66cc3a6294926ea82c9254abab3c6e4cf57095d7762af6dc57904f7f18c0f0b788d860f07ff42027e0ac276d5675c6e93e3b1014d8f3bf4e486a6a17bb14bb39f967cf66cf3265a0034e43eca2acee754ae6d6e2a6b5572ae55688f59b034938eaef3836d8e5c686fbbb99141e7f9ca85b0456e6633deb37aa5e24e47e7a342665f813e5a3c247737deb4775d4925de3d09e159d8b0ac230935cf7c4467f2bd0dcc8d6abc49606fb9acbb6d7229c6e88517a1300528ccbbe2754ad2cc3f4b49fd39302fb15e86fb87909283978dc79ca1ffdf8022e8f346205c7a2e4a175b0e1a594ec8e149fab6c9b1912988834be7db6dcbe9db278fb4c8975b16b447b2d0ff74b6fc89fe0f677645bbec5d51ca7b4299f2b2c5c2eabed7398654bbba8aec49b2d0d2aac69001d2ae86fd9e4fa5e72442b4f82d659458147a6be4447593833d54f1935f7b871c97e4447edf5f116c8342f98e60861b4e02cdcaa92a7f6eca21e854f744b5fceba7166600bb09d015b39a967d3c6bb6d2b7f80915671f3049cad934b78ac4f6c60238b1e45840c4e6039bc77662a8f63c7798968523c6be5b5954b9cce8039b58dd092894351c8326d94865e885ede50bac589449d9b39a2faabe40f01dc2afdb82f604f565092748b03706e4048728dd45fd282358b947dcf96b42139beae468e014d92a9a6e3d9ec7139b9b1b2ff003758fb25ea40d2f0d935b9aa93b99e7cf2ca7b3f84d0e15f72680d8b49210ffc4d4b504ca18a00441363db95e8d1148fe78555c32c0e4ef8c0e50dc379b4819412433a7ab996813215cc3e5461f5dcc3acf97557cce164d976dac36231a8b4acbea66e8464ce98ce7d946e912c79770ae072808756cf1642e112b35cc59e423c254ac1e579cca1558a339a9ae7c7e6e24ed8a7ede8cc37dc42d8bea8236b6b9db4cb8ea3d95a404548c8092246998f2f6716bc760afe2be12f9c6b2d4283d7639ae3588824479a001d5dcdbc366e25654b755f9d631d37e1fdff01cb723ec761a8175444cdd185b9d984175611038fe50ac0a74756c7e9784e6dac51ac4480dfdaebf911d928d2b4b6b448e47e47b8fa9a020ed24887af5b415348bafc20845da34677a70378848033066a08a03191c87656738ac47e03ca64115bddc377057795ae283965a2be2f9e54d19bd71960ed2f2c56d303ee55fee9f18adc06d9f0284c21abe19c480e73d1c14a8c01119e2c101965345981764cf81cc09bee5b25647d79d7cc43fe7ddbde0f20de092e9f60670dba9aca732a1399b5831c71410d682af497eb3541056bb291f2f3a0dcdd341cf9127c98cb71087a7760ef2aa84e6f5c43c04f1e00eacdffb5ebdf79a25191d401446439c248f63ac6c5a082f2dc51e5cb06b50f5721d38f904a7a77c1aa288534369ac9da1fe6f395fc7e80a067575e9428f984c2ac9f0d9a097ad1e5f90eaf6d743d62a25a40493c13d0435d9772c02347ac6e8129aa0626634a96261e3d8c0395cef895ed1084a474ab5012bf652748d8a91558fcd3611832959b72be9479e241d2e0487baba1d7", 0x1000}, {&(0x7f0000003080)="d71997452a514114d6de2e33a39b1e95a555e2f3c8612fb17ea780dcde4c93ad110eeb77616507be59c58ab0d3b2a86c03eb0cead23c04db91f73dc0ecd29a938ac2b1a3a28873314ba63fdfd80a", 0x4e}, {&(0x7f0000003100)="04b961a04c63cd991a7b4676f4239b54889bda8b7d764b309aef9de8098d68a1b22ee2ddcb161e3443cce0b312b17ebcde77dc95e7bd31da17d229d461ac6869d52a298db9ee82473364ab4d39", 0x4d}], 0x7) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbf6, {0x2, 0x0, 0x14, 0x0, 0xfe, 0x1, 0xfd, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 11m24.943944389s ago: executing program 0 (id=6682): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x7, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xe, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11m23.31406213s ago: executing program 0 (id=6687): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 11m23.240016506s ago: executing program 36 (id=6687): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 10m56.348425224s ago: executing program 7 (id=6784): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) r0 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_getvlan={0x20, 0x72, 0xb01, 0x70bd2b, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x4040) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x9, @raw_data="06233e7bea6ace9303a6aa42c6928974d665a6a5e38a6404523a050d4f9e0ea0722a83e718cf5682c398122fa021036cb2d9eaac27256f38e6542820b6925474bea8a2c329ee4c844643b17481cc2a3e7751f3a0e228e91e711c3f007898fb156a69f69d7c8632f3785959c4ad7569fcaa426ac7a62361529e09133aaff6109db6b6fc7c1516b7428f2d7785cebfc5cc0fcda650917532b647e48c81bb0cbcdfb68127e8c4c9db0f658c3637158b5036178a0de6e921c1ac979008ccb7cf29df4f9c942bf6317af1"}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x8ce74718f458098b) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x400000, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x210, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x1, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r4, r5, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x4, 0x6, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0x4000, 0x0, r4, r5, 0x4, 0x4}}, {0xffffdfffffffffff, 0x401, 0x9a, 0x8100008, '&+%*!\xeb(^-@\x00r\xc9\x9b\xc0!]s\xfe\xaaW\xfb\x00\xee@*\xc452\xf2\xa0\xfb#;0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r10, r11, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r11) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000042bb364b9bbd068000000040000000a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x406, r12) setsockopt$inet6_group_source_req(r13, 0x29, 0x2c, 0x0, 0xfc92) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x40080, 0x9) 10m56.081956448s ago: executing program 7 (id=6787): socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4091) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000019380)={0x0, 0xed76, 0x40, 0x2, 0xcd}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10m54.593939838s ago: executing program 7 (id=6792): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$dri(0x0, 0xd21, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 10m54.388516764s ago: executing program 7 (id=6794): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x1ef002) socket$kcm(0x2, 0x200000000000001, 0x106) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2503000000200001800f00010069623a6970766c612e430440933a536b498976ce8a6630f653bb8202800800030000010000"], 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2082c2) syz_clone(0x0, &(0x7f0000000000)="d202803d2d03234276df66661dfbafeba1383dd0397a41f1133db37b5f77862e4fe38bcc72b1ed0499dc6810d2a893311fc2d180f83157fb4e340ce637e93be005610f8a4e4a1e83f80e5aeafe500549666505429a4bcc1037aca0399e1417952f3571e804bc2fc80c4aab1f7ab83d2b9e071d2710af6f7fb0abff2a065f124ec660a83d1e75275463a9b0031de8eaf2ffc6085f534cec5a50d3ae3791bfe4a91386254a709d815b4da3452be92dd69ae89f7236b6d9c97210a868e3", 0xbc, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="49d5c5f04e648155eb8b34919c5469ae2722f0a96646b4c984bf5a59") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000001880)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f0000000880)="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", 0x1000}], 0x3) pselect6(0x40, &(0x7f0000000240)={0x7ff, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x4000000003ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$adsp1(0xffffff9c, &(0x7f0000000340), 0x10101, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f00000003c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xfffffff7]}, 0x8, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x8204}], 0x2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r5, &(0x7f00000018c0)={0x2020, 0x0, 0x0}, 0xffffffffffffff3b) write$FUSE_INTERRUPT(r5, &(0x7f0000003900)={0x10, 0xfffffffffffffffe, r8}, 0x10) pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r6, 0x0, 0x4048881) 10m53.433356638s ago: executing program 7 (id=6799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 10m51.973582901s ago: executing program 7 (id=6801): socket(0x40000000015, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xc002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = syz_open_dev$evdev(0x0, 0x1bbc, 0x801) write$evdev(r5, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000180)=0x7) 10m36.799380111s ago: executing program 37 (id=6801): socket(0x40000000015, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xc002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = syz_open_dev$evdev(0x0, 0x1bbc, 0x801) write$evdev(r5, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000180)=0x7) 9m10.321845816s ago: executing program 8 (id=7262): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) syz_usb_ep_write(r1, 0x82, 0x41, &(0x7f00000000c0)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) syz_usb_ep_write(r1, 0x82, 0x41, &(0x7f00000000c0)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") (async) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) (async) 9m9.161518879s ago: executing program 8 (id=7272): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f00000000c0)={0x0, 0x5b5f, 0x10000, 0x3, 0x51}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x589c9bd8c1bcd27f}, 0x4010) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtaction={0xe8, 0x30, 0x800, 0x70bd2b, 0xbc, {}, [{0xd4, 0x1, [@m_ipt={0xd0, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x3, 'nat\x00', 0xd, 0x4, "6913ace14a6ed89a10126bdccf8bb0e47081056269c6b4936fa4dd86021e400713aaa74a4ed7eda0f2dbf90544044a13da288952ea21409e3670e5c1e0a6978f1ea244af83d36c88ea3fd2"}}]}, {0x2d, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xe8}}, 0x40) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x1, 0x60, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000144035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x40084) r9 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000140)={0xa, @raw_data="386e307f1bd987262cfc65583bbc9e142b24ab6c02f3b425b0205dede43f915276dee794c68519a062d5423a46a656bf5e6fe57401f7c176460098b631eb3b8bd5a17f0d7827e7a968a4a2bb98b9736992be248ffd7e2b0244e17829ef4a7ae949ed42cec0dc6112ff4bee2e9f9d74a0b4b265acf6304c7de90245b74e1bb47eeb3348e95dd96a4e37c4b9df6580b8bd863722825d59d46794aa2546bc40051f20b4f0f171bdcd63b5b08f8669876fd7ac9c41aceb7c2e7892ca53ca4280a494b85678c7696e04d5"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000c"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 9m9.062117354s ago: executing program 8 (id=7273): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) lseek(r0, 0x3, 0x0) 9m8.381467497s ago: executing program 8 (id=7276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x6) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) close(r3) r5 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r6, 0x0, 0x1) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 9m8.210425332s ago: executing program 8 (id=7278): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4c48, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x10140, 0x0, 0x0) 9m7.111097054s ago: executing program 8 (id=7284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x25}, 0x94) (fail_nth: 3) 9m7.022910458s ago: executing program 38 (id=7284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x25}, 0x94) (fail_nth: 3) 1m6.915535492s ago: executing program 9 (id=9589): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0xfffffffd, 0xd4af, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x8, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x7, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x4, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x3f}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1m6.492301511s ago: executing program 9 (id=9590): fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$inet6(0xa, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000100)={0x0, 0x6, 0xffffff80, 0x81, 0x5, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)=0x2100) 1m3.550179374s ago: executing program 9 (id=9600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 1m3.394891599s ago: executing program 9 (id=9602): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m3.362509493s ago: executing program 9 (id=9603): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 1m3.013808901s ago: executing program 9 (id=9605): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001f00)=""/4095, 0xfff}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000280)=""/124, 0x7c}], 0x9}, 0x102) recvmsg$kcm(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000a140) 1m2.893785871s ago: executing program 39 (id=9605): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001f00)=""/4095, 0xfff}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000280)=""/124, 0x7c}], 0x9}, 0x102) recvmsg$kcm(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x4000a140) 14.512088777s ago: executing program 2 (id=9877): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x28100, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) 13.906168407s ago: executing program 2 (id=9882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="1201010200000040"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001da45a14024042c01404e010203010902120600500800000000000000892c"], 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000780)=ANY=[@ANYBLOB="120110030000000882050c00400001020301090269000301002000080b030101052006090400000001012000092400000200000000000401000001022000090401010101022000090501092000010fab08040200000102200009040201010102200009058209100007810008250103030e08008acc918029ba950eaa907755ffd304c30721e1ea964111f8d4d4537791119a086267726e7d5fd4a46921035bfeac646efeb217f06788b42fe7f377e4b5d33496f5"], 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsopen(&(0x7f0000000300)='pstore\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x23, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0xfffffffd}, 0x50) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee00, 0x0) r6 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r6, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0xee00, 0x0, 0xee01, 0x110}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x40, 0x80000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x700, 0x803, 0x2, 0x2, 0xfffffffffffffffd], 0x9000, 0x202}) stat(&(0x7f0000000080)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a80)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x405) 11.300291888s ago: executing program 6 (id=9895): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x56555958}}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="44abfa0ae3947c024699d8eac090508edc06ba881b87498029d9c3739a9f24338e26df997465a8d173a1627736d3e467f425b307183af2dd33cc2c2fe9517024be1e7d0be5852f1bed8c"], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004538001400e3d2021e186600e0031190780000a70e79524f9cc47cfbc109f40600"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x101, 0x820) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000001300)={0x0, 0x25b9, 0x0, '\x00', 0x0}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000005c0)="1a6be8754556c820a33ae608b8") r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x15b0, &(0x7f0000000380)={0x0, 0x5ec6, 0x800, 0x1, 0x334}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) recvmmsg(r5, &(0x7f00000002c0), 0x90, 0x0, 0x0) poll(&(0x7f0000000040)=[{r5, 0x2000}], 0x1, 0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0bcbb55", @ANYRES16=r3, @ANYBLOB="20002dbd7000fddbdf250500000009000100aaaaaaaaaa00000014000600ff020000000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11.248133478s ago: executing program 6 (id=9896): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) setgroups(0x2d5b, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) 9.721627416s ago: executing program 2 (id=9901): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x40000000, 0x4, 0x1, 0x7, 0xb, 0x7, 0x5}, {0x8000000e, 0x8, 0x1, 0x400, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x107, 0xdf1, 0x2, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0x5, 0x3, 0x7ff, 0x8}, {0x80000000, 0x100, 0x4, 0x6, 0x10, 0x2, 0x3}, {0xd, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) close_range(r3, r5, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f00000001c0)=0xe) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x13, r6, 0x71f36000) 8.909938879s ago: executing program 3 (id=9902): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x58, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xc, @private0, 0x9}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c300000008"], 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000f40)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x880) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000200)={"00001000", 0x0, 0x6, 0x2, 0xbc, 0x1ff, "3377f877c734c40400", '\x00', "020100", "d9f2d351", ['\x00', "008000f8ffffffffff8f00", "000008000000000000c40820", "0016fab26600f5ffffff8100"]}) 8.509325679s ago: executing program 3 (id=9904): r0 = socket$kcm(0x10, 0x2, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000010010000010000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) sendmsg$kcm(r0, 0x0, 0xff0f000000000000) 8.384304607s ago: executing program 2 (id=9906): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="796111fffa00000000007e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200b, 0x200000000000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1100, 0x3, 0xf0}, @flat=@weak_handle={0x77682a85, 0x1}, @flat=@handle={0x73682a85, 0x100a}}, &(0x7f0000000000)={0x16, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 6.671850934s ago: executing program 3 (id=9908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 6.54948075s ago: executing program 3 (id=9910): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) setgroups(0x2d5b, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) 5.22402804s ago: executing program 6 (id=9903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x28100, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) 4.923775791s ago: executing program 5 (id=9914): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) io_submit(r1, 0x3, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff42, r0, &(0x7f0000000340)="17", 0x1, 0x100000001}, 0x0, 0x0]) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x5, 0x0, 0x0, 0xa03, 0x1e, 0x0, 0x8, 0x7bc5febe79bbd6b0}) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f0000000040)="a899daa11e52690e550819bd0955", 0xe, 0x8000000000000001, 0x0, 0x1}, &(0x7f00000000c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) write$snapshot(r10, &(0x7f0000000040)='X', 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) fcntl$dupfd(r10, 0x406, r10) 4.793469437s ago: executing program 6 (id=9915): r0 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) syz_open_dev$I2C(0x0, 0x4, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r3, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r7 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$CDROMPLAYBLK(r7, 0x5317, &(0x7f0000000000)={0x5, 0x9}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESOCT=r4, @ANYRESHEX=r0, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) 4.594063798s ago: executing program 2 (id=9916): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x576, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x40) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x4, 0x4c314356, 0x1, @discrete={0x64, 0x9}}) 4.562046377s ago: executing program 3 (id=9917): r0 = socket$kcm(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4089, 0xff9}], 0x1}, 0x1}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) 3.732882015s ago: executing program 2 (id=9918): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0xfffffffffffffcfc, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 3.675543512s ago: executing program 5 (id=9919): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x37, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x50, 0x0, &(0x7f0000000500)="b6eb87326432ec24b52e946042d382512c731ba74640f446e51e92783f5124c981211d727b67549e0b07ac875210cdd524df4d4ccf21c8af21d9bad85b760f491ad7d9d106b8417e43ef8d9bec28b481"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000640)=[@dead_binder_done], 0x0, 0x0, 0x0}) 3.267180343s ago: executing program 6 (id=9920): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x400c0c8) 3.182754911s ago: executing program 6 (id=9921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffffffffff58) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r5, 0x4, 0x4, 0x7a, 0xb, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8, 0x1, 0x6, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', r5, 0xff10, 0x7800, 0xfffffffc, 0x8aba, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, {[@timestamp={0x44, 0x1c, 0xb1, 0x0, 0x7, [0x5, 0x6, 0xfffffffd, 0x5, 0x80000000, 0xc]}, @ssrr={0x89, 0x1b, 0x31, [@loopback, @rand_addr=0x64010100, @broadcast, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0x60, 0x0, 0x9, [0x36, 0x3, 0x7fffffff, 0x5]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001140)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000000680)={0xa7c, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1b33}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x190, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x2, 0x10, 0x8}, {0x9, 0x8, 0xc5, 0x4}, {0x8, 0x4, 0xff, 0x2}, {0x5, 0xb, 0xf7, 0x9}, {0x0, 0x31, 0x9, 0x4}, {0x8000, 0x5, 0x81, 0x2c5}, {0x0, 0x9, 0x9}, {0x9, 0x7, 0x3, 0x8}, {0xb2bd, 0x7, 0x2}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfffc, 0x3f, 0x7, 0xfffffffb}, {0x8, 0x5, 0x18, 0x7f}, {0xd, 0x5, 0x7, 0x5}, {0xe, 0x4, 0x8, 0x4}, {0x6, 0x7, 0x6, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x43e}}}]}}, {{0x8, 0x1, r10}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe1d5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa7}}}]}}, {{0x8, 0x1, r5}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0xa7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.775222953s ago: executing program 3 (id=9922): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="ffff00000ae00000000000000000000000000000b14be562394c6b5e2ade454c9fd991b3e59aa9fc17040b158e328b1b492bdce72cc330f547eee5badcbb7fdc15542c75ae7595254c7b90588a56d92f1ce170dc8e8a0f01b684ff899ea2619e82b459b3bb2c96bf96b61d67a0192a6272147b19dfca85df29e8893a43e860c52693d90a496ba711004dcfff1a018324c40ff0dfca72855a85b09d08ff2240a454155054e5a7afa652a424dcc6228c4778e9ad62c97c7262e8d61b208e710d8f81fe1351fc4637ccd0e7a0f55d2798b04f96042e999179e315925819faa5da5849891614b0ee97943597", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) r4 = socket$inet6(0x10, 0x80000, 0x4) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae5af847cf809c4ee3c41512cb0", 0x4d}], 0x1}, 0x44000) write(r4, 0x0, 0x0) 2.714342419s ago: executing program 5 (id=9923): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x28100, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) 1.793477964s ago: executing program 5 (id=9924): socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x100) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="ffff00000ae00000000000000000000000000000b14be562394c6b5e2ade454c9fd991b3e59aa9fc17040b158e328b1b492bdce72cc330f547eee5badcbb7fdc15542c75ae7595254c7b90588a56d92f1ce170dc8e8a0f01b684ff899ea2619e82b459b3bb2c96bf96b61d67a0192a6272147b19dfca85df29e8893a43e860c52693d90a496ba711004dcfff1a018324c40ff0dfca72855a85b09d08ff2240a454155054e5a7afa652a424dcc6228c4778e9ad62c97c7262e8d61b208e710d8f81fe1351fc4637ccd0e7a0f55d2798b04f96042e999179e315925819faa5da5849891614b0ee97943597", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) 864.351248ms ago: executing program 5 (id=9925): socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x100) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="ffff00000ae00000000000000000000000000000b14be562394c6b5e2ade454c9fd991b3e59aa9fc17040b158e328b1b492bdce72cc330f547eee5badcbb7fdc15542c75ae7595254c7b90588a56d92f1ce170dc8e8a0f01b684ff899ea2619e82b459b3bb2c96bf96b61d67a0192a6272147b19dfca85df29e8893a43e860c52693d90a496ba711004dcfff1a018324c40ff0dfca72855a85b09d08ff2240a454155054e5a7afa652a424dcc6228c4778e9ad62c97c7262e8d61b208e710d8f81fe1351fc4637ccd0e7a0f55d2798b04f96042e999179e315925819faa5da5849891614b0ee97943597", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) 0s ago: executing program 5 (id=9926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket(0x10, 0x803, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@local, @dev}, &(0x7f0000000180)=0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000190001000000000000000000200100"/32], 0xb4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') kernel console output (not intermixed with test programs): _hcd.0: pdev(6) rhport(0) sockfd(10) [ 1677.542504][ T5375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1677.545831][ T5375] vhci_hcd vhci_hcd.0: Device attached [ 1677.621767][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.624700][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.633500][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.637832][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.687683][ T5372] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8959'. [ 1677.767716][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1677.772197][ T29] usb 10-1: no configurations [ 1677.773818][ T29] usb 10-1: can't read configurations, error -22 [ 1677.818140][T29607] usb 50-1: SetAddress Request (54) to port 0 [ 1677.818743][T21862] usb 14-1: new high-speed USB device number 30 using dummy_hcd [ 1677.820340][T29607] usb 50-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1677.968180][T21862] usb 14-1: Using ep0 maxpacket: 8 [ 1677.971572][T21862] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1677.974446][T21862] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1677.978574][T21862] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1677.982838][T21862] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1677.987017][T21862] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.992638][T21862] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1677.996517][T21862] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.343630][ T5378] vhci_hcd: connection reset by peer [ 1678.350373][ T4516] vhci_hcd vhci_hcd.6: stop threads [ 1678.355478][ T4516] vhci_hcd vhci_hcd.6: release socket [ 1678.360443][ T4516] vhci_hcd vhci_hcd.6: disconnect device [ 1678.361647][T21862] usb 14-1: usb_control_msg returned -32 [ 1678.364596][T21862] usbtmc 14-1:16.0: can't read capabilities [ 1679.242529][ T5393] fuse: Unknown parameter 'fÀ#[Çؾçüá! ÷<)0x000000000000000b-rootmode' [ 1679.957574][ T5404] overlayfs: failed to resolve './file2': -2 [ 1679.967386][ T5404] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 1680.940744][T28894] usb 14-1: USB disconnect, device number 30 [ 1681.665008][ T5437] usb usb1: usbfs: process 5437 (syz.9.8977) did not claim interface 0 before use [ 1681.679682][ T5437] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8977'. [ 1681.709847][ T5438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1681.722067][ T5438] netlink: 'syz.2.8976': attribute type 4 has an invalid length. [ 1681.724852][ T5438] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1682.952871][T29607] usb 50-1: device descriptor read/8, error -110 [ 1683.015817][ T5458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8984'. [ 1683.390476][T29607] usb usb50-port1: attempt power cycle [ 1684.119401][T29607] usb usb50-port1: unable to enumerate USB device [ 1684.694751][ T5468] afs: Unknown parameter 'D' [ 1684.779286][ T5481] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1684.787351][T22779] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.790728][T22779] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.793533][T22779] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.796269][T22779] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.834043][ T5483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1684.837177][ T5483] IPv6: NLM_F_CREATE should be set when creating new route [ 1684.840325][ T5483] IPv6: NLM_F_CREATE should be set when creating new route [ 1684.906544][ T5486] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8990'. [ 1686.302250][ T5503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8994'. [ 1686.310005][ T5503] netlink: 'syz.2.8994': attribute type 4 has an invalid length. [ 1686.312775][ T5503] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8994'. [ 1687.024542][ T5510] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1687.062731][ T5510] syzkaller0: entered promiscuous mode [ 1687.067951][ T5510] syzkaller0: entered allmulticast mode [ 1687.337584][ T5516] input: syz1 as /devices/virtual/input/input67 [ 1687.339817][ T5516] input: failed to attach handler leds to device input67, error: -6 [ 1690.508138][T28894] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1690.668090][T28894] usb 10-1: Using ep0 maxpacket: 8 [ 1690.673241][T28894] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1690.676215][T28894] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1690.683939][T28894] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1690.687176][T28894] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1690.691703][T28894] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1690.695705][T28894] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1690.699916][T28894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.087712][T28894] usb 10-1: GET_CAPABILITIES returned 0 [ 1691.093402][T28894] usbtmc 10-1:16.0: can't read capabilities [ 1691.650667][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9006'. [ 1692.124708][ T5586] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9010'. [ 1692.154671][ T5581] netlink: 'syz.9.9010': attribute type 4 has an invalid length. [ 1692.158068][ T5581] netlink: 17 bytes leftover after parsing attributes in process `syz.9.9010'. [ 1692.340120][ T5589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9014'. [ 1692.343980][ T5589] netlink: 'syz.6.9014': attribute type 4 has an invalid length. [ 1692.346576][ T5589] netlink: 17 bytes leftover after parsing attributes in process `syz.6.9014'. [ 1693.233337][ T5592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1693.238220][ T5592] netlink: 'syz.2.9012': attribute type 4 has an invalid length. [ 1693.240842][ T5592] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1693.280084][T29607] usb 10-1: USB disconnect, device number 10 [ 1693.737982][T29607] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1694.141514][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.161686][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.223497][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.244324][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.379442][T29607] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1694.393550][T29607] usb 10-1: no configurations [ 1694.395674][T29607] usb 10-1: can't read configurations, error -22 [ 1694.771465][ T5616] lo speed is unknown, defaulting to 1000 [ 1694.885016][ T5616] lo speed is unknown, defaulting to 1000 [ 1696.605294][ T5646] overlayfs: missing 'lowerdir' [ 1696.670003][ T5649] AppArmor: change_hat: Invalid input 'š—' [ 1696.703552][ T5649] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1696.912123][ T5662] tipc: Enabled bearer , priority 0 [ 1696.923063][ T5662] syzkaller0: entered promiscuous mode [ 1696.927457][ T5662] syzkaller0: entered allmulticast mode [ 1696.949168][ T5662] tipc: Resetting bearer [ 1696.965489][ T5661] tipc: Resetting bearer [ 1697.020201][ T5661] tipc: Disabling bearer [ 1698.468003][T29571] usb 11-1: new high-speed USB device number 111 using dummy_hcd [ 1698.619830][T29571] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1698.623285][T29571] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1698.630049][T29571] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1698.635302][T29571] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1698.643253][T29571] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1698.692284][T29571] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1698.696434][T29571] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1698.702099][T29571] usb 11-1: Product: syz [ 1698.703456][T29571] usb 11-1: Manufacturer: syz [ 1698.727845][T29571] cdc_wdm 11-1:1.0: skipping garbage [ 1698.730052][T29571] cdc_wdm 11-1:1.0: skipping garbage [ 1698.736456][T29571] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 1698.747924][T29571] cdc_wdm 11-1:1.0: Unknown control protocol [ 1698.895048][ T5687] overlayfs: missing 'lowerdir' [ 1698.936470][T29571] usb 11-1: USB disconnect, device number 111 [ 1699.366749][ T5694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9043'. [ 1699.376761][ T5694] netlink: 'syz.2.9043': attribute type 4 has an invalid length. [ 1699.380346][ T5694] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9043'. [ 1700.565371][ T5704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1701.265633][ T5706] lo speed is unknown, defaulting to 1000 [ 1701.500309][ T5706] lo speed is unknown, defaulting to 1000 [ 1701.569567][ T42] audit: type=1326 audit(1784262657.158:9698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.582392][ T42] audit: type=1326 audit(1784262657.158:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.598245][ T42] audit: type=1326 audit(1784262657.168:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.620954][ T42] audit: type=1326 audit(1784262657.168:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.668292][ T42] audit: type=1326 audit(1784262657.168:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.705121][ T42] audit: type=1326 audit(1784262657.168:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.727988][ T42] audit: type=1326 audit(1784262657.168:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.739524][ T42] audit: type=1326 audit(1784262657.168:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.756619][ T42] audit: type=1326 audit(1784262657.168:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1701.767975][ T42] audit: type=1326 audit(1784262657.168:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.5.9050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03fec code=0x7ffc0000 [ 1703.110145][ T5738] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1703.192232][ T5738] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1703.272974][ T5746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1703.307594][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9055'. [ 1703.563662][T15829] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1703.758055][T15829] usb 10-1: Using ep0 maxpacket: 8 [ 1703.765104][T15829] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.770093][T15829] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.775822][T15829] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1703.778995][T15829] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1703.786086][T15829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.799789][T15829] usb 10-1: config 0 descriptor?? [ 1705.623535][T15829] hid_parser_main: 4 callbacks suppressed [ 1705.623553][T15829] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1706.181080][T15829] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1706.183384][T15829] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1706.185631][T15829] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1706.188070][T15829] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 1706.190753][T15829] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1706.271831][T15829] usb 10-1: USB disconnect, device number 13 [ 1706.442559][ T5784] syz_tun: entered allmulticast mode [ 1706.464671][ T5783] syz_tun: left allmulticast mode [ 1710.217679][ T5825] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9075'. [ 1710.230631][ T5824] netlink: 'syz.6.9075': attribute type 4 has an invalid length. [ 1710.233773][ T5824] netlink: 17 bytes leftover after parsing attributes in process `syz.6.9075'. [ 1713.984490][ T5868] binder: BINDER_SET_CONTEXT_MGR already set [ 1713.995595][ T5868] binder: 5856:5868 ioctl 4018620d 80004a80 returned -16 [ 1715.264070][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9090'. [ 1717.152766][ T5911] netlink: 'syz.9.9097': attribute type 1 has an invalid length. [ 1717.174664][ T5911] netlink: 'syz.9.9097': attribute type 2 has an invalid length. [ 1717.184928][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9097'. [ 1718.487751][ T5927] bridge3: entered promiscuous mode [ 1718.493324][ T5927] bridge3: entered allmulticast mode [ 1718.522981][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9101'. [ 1719.934988][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9105'. [ 1719.943051][ T5950] netlink: 'syz.9.9105': attribute type 4 has an invalid length. [ 1719.946074][ T5950] netlink: 17 bytes leftover after parsing attributes in process `syz.9.9105'. [ 1720.324039][ T5959] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9109'. [ 1721.495322][ T5978] binder: BINDER_SET_CONTEXT_MGR already set [ 1721.501731][ T5978] binder: 5965:5978 ioctl 4018620d 80004a80 returned -16 [ 1721.642830][ T5983] overlayfs: failed to resolve './bus': -2 [ 1722.878139][T29437] usb 11-1: new full-speed USB device number 112 using dummy_hcd [ 1722.941444][ T5999] netlink: 'syz.5.9120': attribute type 4 has an invalid length. [ 1722.944952][ T5999] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1723.042326][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.053325][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.066894][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1723.080081][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.113035][ T5994] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9119'. [ 1723.275042][T29437] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1723.278465][T29437] usb 11-1: no configurations [ 1723.280340][T29437] usb 11-1: can't read configurations, error -22 [ 1723.487232][ T6005] afs: Bad value for 'source' [ 1724.882329][ T6033] binder: BINDER_SET_CONTEXT_MGR already set [ 1724.886203][ T6033] binder: 6030:6033 ioctl 4018620d 80004a80 returned -16 [ 1728.308024][T29437] usb 14-1: new full-speed USB device number 31 using dummy_hcd [ 1728.468609][ T6076] FAULT_INJECTION: forcing a failure. [ 1728.468609][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.472769][ T6076] CPU: 3 UID: 0 PID: 6076 Comm: syz.2.9140 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.472800][ T6076] Tainted: [L]=SOFTLOCKUP [ 1728.472805][ T6076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1728.472813][ T6076] Call Trace: [ 1728.472818][ T6076] [ 1728.472823][ T6076] dump_stack_lvl+0x100/0x190 [ 1728.472843][ T6076] should_fail_ex.cold+0x5/0xa [ 1728.472857][ T6076] should_failslab+0xc2/0x120 [ 1728.472873][ T6076] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1728.472889][ T6076] ? kvasprintf_const+0x66/0x1a0 [ 1728.472910][ T6076] kvasprintf+0xbc/0x150 [ 1728.472926][ T6076] ? __pfx_kvasprintf+0x10/0x10 [ 1728.472942][ T6076] ? lockdep_hardirqs_on+0x78/0x100 [ 1728.472962][ T6076] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1728.472980][ T6076] ? __debug_object_init+0x2de/0x3d0 [ 1728.472998][ T6076] kvasprintf_const+0x66/0x1a0 [ 1728.473019][ T6076] kobject_set_name_vargs+0x5a/0x140 [ 1728.473036][ T6076] dev_set_name+0xc7/0x100 [ 1728.473111][ T6076] ? __pfx_dev_set_name+0x10/0x10 [ 1728.473127][ T6076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1728.473146][ T6076] ? lockdep_init_map_type+0x5c/0x250 [ 1728.473165][ T6076] ? __init_waitqueue_head+0xca/0x150 [ 1728.473177][ T6076] ? input_allocate_device+0x271/0x350 [ 1728.473220][ T6076] input_allocate_device+0x293/0x350 [ 1728.473235][ T6076] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 1728.473255][ T6076] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1728.473272][ T6076] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1728.473294][ T6076] ? find_held_lock+0x2b/0x80 [ 1728.473306][ T6076] ? __fget_files+0x215/0x3d0 [ 1728.473328][ T6076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1728.473344][ T6076] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 1728.473363][ T6076] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1728.473391][ T6076] __do_fast_syscall_32+0xe7/0x970 [ 1728.473406][ T6076] ? lockdep_hardirqs_on+0x78/0x100 [ 1728.473424][ T6076] do_fast_syscall_32+0x32/0x70 [ 1728.473436][ T6076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1728.473452][ T6076] RIP: 0023:0xf70aefec [ 1728.473467][ T6076] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1728.473473][ T6076] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1728.473485][ T6076] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008004552d [ 1728.473492][ T6076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1728.473499][ T6076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1728.473506][ T6076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1728.473512][ T6076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.473526][ T6076] [ 1728.577773][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.581232][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.617992][ T42] kauditd_printk_skb: 208 callbacks suppressed [ 1728.618013][ T42] audit: type=1326 audit(1784262684.198:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.2.9141" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 1728.641553][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.645217][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.124424][ T6089] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1729.135086][ T6089] block device autoloading is deprecated and will be removed. [ 1731.516588][T29437] usb 14-1: unable to get BOS descriptor or descriptor too short [ 1731.521460][T29437] usb 14-1: no configurations [ 1731.523074][T29437] usb 14-1: can't read configurations, error -22 [ 1731.776856][ T6136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.801420][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9155'. [ 1731.937577][ T6136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.002883][ T6143] FAULT_INJECTION: forcing a failure. [ 1732.002883][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.014915][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.6.9157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.014947][ T6143] Tainted: [L]=SOFTLOCKUP [ 1732.014954][ T6143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1732.014965][ T6143] Call Trace: [ 1732.014972][ T6143] [ 1732.014999][ T6143] dump_stack_lvl+0x100/0x190 [ 1732.015027][ T6143] should_fail_ex.cold+0x5/0xa [ 1732.015049][ T6143] should_failslab+0xc2/0x120 [ 1732.015073][ T6143] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1732.015095][ T6143] ? skb_clone+0x190/0x400 [ 1732.015122][ T6143] skb_clone+0x190/0x400 [ 1732.015143][ T6143] pfkey_process+0xc0/0x810 [ 1732.015170][ T6143] ? trace_contention_end+0x126/0x160 [ 1732.015200][ T6143] ? __pfx_pfkey_process+0x10/0x10 [ 1732.015220][ T6143] ? pfkey_sendmsg+0x41a/0x840 [ 1732.015258][ T6143] ? __pfx___alloc_skb+0x10/0x10 [ 1732.015284][ T6143] pfkey_sendmsg+0x428/0x840 [ 1732.015310][ T6143] ____sys_sendmsg+0xa4d/0xbe0 [ 1732.015336][ T6143] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1732.015359][ T6143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1732.015400][ T6143] ___sys_sendmsg+0x190/0x1e0 [ 1732.015429][ T6143] ? __pfx____sys_sendmsg+0x10/0x10 [ 1732.015467][ T6143] ? find_held_lock+0x2b/0x80 [ 1732.015504][ T6143] __sys_sendmsg+0x160/0x210 [ 1732.015526][ T6143] ? __pfx___sys_sendmsg+0x10/0x10 [ 1732.015554][ T6143] ? __pfx_ksys_write+0x10/0x10 [ 1732.015585][ T6143] __do_fast_syscall_32+0xe7/0x970 [ 1732.015605][ T6143] ? lockdep_hardirqs_on+0x78/0x100 [ 1732.015634][ T6143] do_fast_syscall_32+0x32/0x70 [ 1732.015653][ T6143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1732.015676][ T6143] RIP: 0023:0xf700efec [ 1732.015696][ T6143] Code: Unable to access opcode bytes at 0xf700efc2. [ 1732.015704][ T6143] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1732.015723][ T6143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1732.015734][ T6143] RDX: 00000000000040c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1732.015745][ T6143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1732.015755][ T6143] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1732.015765][ T6143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.015790][ T6143] [ 1732.905669][ T6136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1733.089137][ T6155] netlink: 'syz.6.9159': attribute type 21 has an invalid length. [ 1733.091845][ T6155] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9159'. [ 1733.194452][ T6155] netlink: 'syz.6.9159': attribute type 5 has an invalid length. [ 1733.202629][ T6155] netlink: 'syz.6.9159': attribute type 6 has an invalid length. [ 1733.236249][ T6155] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9159'. [ 1733.303157][ T6136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1733.520568][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9160'. [ 1733.533433][ T6165] netlink: 'syz.5.9160': attribute type 4 has an invalid length. [ 1733.544559][ T6165] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9160'. [ 1733.705138][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9163'. [ 1733.757805][T22779] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.730727][T22779] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.882973][ T4516] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.935673][ T4516] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1735.414396][ T6194] xt_hashlimit: max too large, truncated to 1048576 [ 1738.180699][ T6225] sctp: [Deprecated]: syz.2.9178 (pid 6225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1738.180699][ T6225] Use struct sctp_sack_info instead [ 1738.195990][ T6225] syzkaller0: entered promiscuous mode [ 1738.204233][ T6225] syzkaller0: entered allmulticast mode [ 1738.208993][ T6225] tipc: Started in network mode [ 1738.210831][ T6225] tipc: Node identity e23164892ae7, cluster identity 4711 [ 1738.213720][ T6225] tipc: Enabled bearer , priority 0 [ 1738.237090][ T6222] tipc: Resetting bearer [ 1738.288934][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9177'. [ 1738.376905][ T6222] tipc: Disabling bearer [ 1739.367314][ T6250] binder: 6248:6250 ioctl c0306201 0 returned -14 [ 1739.376649][ T6250] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.379181][ T6250] binder: 6248:6250 ioctl 4018620d 80000040 returned -16 [ 1741.928151][ T34] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1742.091965][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.097716][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.102215][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.108896][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.170272][ T6275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9189'. [ 1742.559104][T29435] usb 14-1: new high-speed USB device number 33 using dummy_hcd [ 1742.658187][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1742.708377][T29435] usb 14-1: Using ep0 maxpacket: 16 [ 1742.772992][T29435] usb 14-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1742.789684][T29435] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.801508][T29435] usb 14-1: Product: syz [ 1742.807564][T29435] usb 14-1: Manufacturer: syz [ 1742.816751][T29435] usb 14-1: SerialNumber: syz [ 1742.861790][T29435] usb 14-1: config 0 descriptor?? [ 1743.251975][ T34] usb 10-1: no configurations [ 1743.289946][ T6298] random: crng reseeded on system resumption [ 1743.314063][ T34] usb 10-1: can't read configurations, error -22 [ 1743.315442][T29435] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1743.337599][T29435] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1743.354474][T29435] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1743.375977][T29435] usb 14-1: media controller created [ 1743.426098][T29435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1743.433328][ T6300] netlink: 'syz.6.9197': attribute type 13 has an invalid length. [ 1743.452413][ T6302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1743.455223][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1743.468105][ T6302] vhci_hcd vhci_hcd.0: Device attached [ 1743.490285][ T6302] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 1743.492981][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1743.500291][ T6302] vhci_hcd vhci_hcd.0: Device attached [ 1743.551539][ T6306] vhci_hcd: connection closed [ 1743.564900][ T4516] vhci_hcd vhci_hcd.2: stop threads [ 1743.569644][ T4516] vhci_hcd vhci_hcd.2: release socket [ 1743.574383][ T6303] vhci_hcd: connection closed [ 1743.576885][ T4516] vhci_hcd vhci_hcd.2: disconnect device [ 1743.590612][ T4516] vhci_hcd vhci_hcd.2: stop threads [ 1743.592410][ T4516] vhci_hcd vhci_hcd.2: release socket [ 1743.594979][ T4516] vhci_hcd vhci_hcd.2: disconnect device [ 1743.832942][ T6316] input: syz1 as /devices/virtual/input/input70 [ 1743.946743][ T6320] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9201'. [ 1744.008382][T29435] zl10353_read_register: readreg error (reg=127, ret==0) [ 1744.011105][T29435] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1744.013512][T29435] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1744.763256][ T6333] binder: BINDER_SET_CONTEXT_MGR already set [ 1744.774200][ T6333] binder: 6327:6333 ioctl 4018620d 80004a80 returned -16 [ 1745.291525][ T34] usb 14-1: USB disconnect, device number 33 [ 1745.403574][ T34] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1747.050199][ T6352] rdma_rxe: rxe_newlink: failed to add lo [ 1747.087713][ T6352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1747.418841][ T6361] 9p: Bad value for 'version' [ 1747.708264][ T34] usb 11-1: new high-speed USB device number 114 using dummy_hcd [ 1747.858110][ T34] usb 11-1: device descriptor read/64, error -71 [ 1748.108444][ T34] usb 11-1: new high-speed USB device number 115 using dummy_hcd [ 1748.248004][ T34] usb 11-1: device descriptor read/64, error -71 [ 1748.358693][ T34] usb usb11-port1: attempt power cycle [ 1748.698937][ T34] usb 11-1: new high-speed USB device number 116 using dummy_hcd [ 1748.750524][ T34] usb 11-1: device descriptor read/8, error -71 [ 1749.008120][ T34] usb 11-1: new high-speed USB device number 117 using dummy_hcd [ 1749.039574][ T34] usb 11-1: device descriptor read/8, error -71 [ 1750.422665][ T34] usb usb11-port1: unable to enumerate USB device [ 1750.641044][ T6385] binder: BINDER_SET_CONTEXT_MGR already set [ 1750.656864][ T6385] binder: 6377:6385 ioctl 4018620d 80004a80 returned -16 [ 1751.446288][ T6401] fuse: Bad value for 'max_read' [ 1751.449494][ T6391] xt_HMARK: proto mask must be zero with L3 mode [ 1754.234787][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9227'. [ 1754.245648][ T6419] vlan2: entered allmulticast mode [ 1754.247576][ T6419] bridge0: entered allmulticast mode [ 1755.462828][ T6442] syzkaller1: entered promiscuous mode [ 1755.464623][ T6442] syzkaller1: entered allmulticast mode [ 1755.496986][ T6442] netlink: 'syz.6.9233': attribute type 1 has an invalid length. [ 1755.512150][ T6442] bond2: entered promiscuous mode [ 1755.514311][ T6442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1755.659502][ T6438] netlink: 'syz.9.9232': attribute type 9 has an invalid length. [ 1755.998071][T15400] usb 14-1: new full-speed USB device number 34 using dummy_hcd [ 1756.130652][ T6442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1756.141188][ T6442] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1756.156828][ T6442] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1756.174507][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.192296][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.204242][ T6442] bond2: (slave vti0): making interface the new active one [ 1756.210962][ T6442] vti0: entered promiscuous mode [ 1756.220593][ T6442] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1756.284274][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.290566][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.297509][ T6447] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9234'. [ 1756.431909][T15400] usb 14-1: unable to get BOS descriptor or descriptor too short [ 1756.438209][T15400] usb 14-1: no configurations [ 1756.439718][T15400] usb 14-1: can't read configurations, error -22 [ 1756.553435][ T6454] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.567499][ T6454] binder: 6451:6454 ioctl 4018620d 80004a80 returned -16 [ 1759.642748][ T29] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1759.903075][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.911085][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.922508][ T6497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.931426][ T6497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.011241][ T6497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9246'. [ 1761.209162][ T6504] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1761.211709][ T6504] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1761.221797][ T6504] vhci_hcd vhci_hcd.0: Device attached [ 1761.246078][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1761.255717][ T29] usb 10-1: no configurations [ 1761.257561][ T29] usb 10-1: can't read configurations, error -22 [ 1761.424201][ T6515] vhci_hcd: connection closed [ 1761.451944][T23894] vhci_hcd vhci_hcd.2: stop threads [ 1761.478094][T23894] vhci_hcd vhci_hcd.2: release socket [ 1761.479956][T23894] vhci_hcd vhci_hcd.2: disconnect device [ 1761.498084][T15829] usb 42-1: enqueue for inactive port 0 [ 1762.077045][T15829] usb usb42-port1: attempt power cycle [ 1762.515126][ T6538] rdma_rxe: rxe_newlink: failed to add lo [ 1762.664848][T15829] usb usb42-port1: unable to enumerate USB device [ 1763.400573][ T6551] netlink: 'syz.5.9259': attribute type 10 has an invalid length. [ 1764.233723][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.243889][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.334271][ T6551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1764.342717][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1764.386616][ T6551] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1765.314894][ T6563] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1765.373506][ T6563] netlink: 'syz.6.9262': attribute type 1 has an invalid length. [ 1765.827511][ T6580] fuse: Bad value for 'fd' [ 1767.789012][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9274'. [ 1767.797535][ T6600] ip6gre1: entered promiscuous mode [ 1767.800330][ T6600] ip6gre1: entered allmulticast mode [ 1767.858524][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9273'. [ 1768.398081][ T34] usb 11-1: new full-speed USB device number 118 using dummy_hcd [ 1768.565079][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.572408][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.584468][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.608688][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.624268][ T6613] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9278'. [ 1768.768620][ T34] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1768.773077][ T34] usb 11-1: no configurations [ 1768.775317][ T34] usb 11-1: can't read configurations, error -22 [ 1769.325802][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9281'. [ 1769.326568][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9282'. [ 1769.909849][ T6643] FAULT_INJECTION: forcing a failure. [ 1769.909849][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.913764][ T6643] CPU: 1 UID: 0 PID: 6643 Comm: syz.9.9283 Tainted: G L syzkaller #0 PREEMPT(full) [ 1769.913794][ T6643] Tainted: [L]=SOFTLOCKUP [ 1769.913799][ T6643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1769.913806][ T6643] Call Trace: [ 1769.913811][ T6643] [ 1769.913817][ T6643] dump_stack_lvl+0x100/0x190 [ 1769.913837][ T6643] should_fail_ex.cold+0x5/0xa [ 1769.913851][ T6643] should_failslab+0xc2/0x120 [ 1769.913867][ T6643] __kmalloc_cache_noprof+0x91/0x6c0 [ 1769.913887][ T6643] ? netstat_seq_show+0x10d/0x9b0 [ 1769.913905][ T6643] netstat_seq_show+0x10d/0x9b0 [ 1769.913919][ T6643] ? traverse.part.0.constprop.0+0x397/0x650 [ 1769.913940][ T6643] traverse.part.0.constprop.0+0x107/0x650 [ 1769.913962][ T6643] seq_lseek+0x2fb/0x430 [ 1769.913981][ T6643] proc_reg_llseek+0x208/0x2f0 [ 1769.914012][ T6643] ksys_lseek+0xf3/0x1b0 [ 1769.914030][ T6643] __do_fast_syscall_32+0xe7/0x970 [ 1769.914045][ T6643] ? lockdep_hardirqs_on+0x78/0x100 [ 1769.914064][ T6643] do_fast_syscall_32+0x32/0x70 [ 1769.914076][ T6643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.914092][ T6643] RIP: 0023:0xf7f13fec [ 1769.914106][ T6643] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 1769.914111][ T6643] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000013 [ 1769.914123][ T6643] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 1769.914131][ T6643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1769.914137][ T6643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1769.914144][ T6643] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1769.914150][ T6643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1769.914164][ T6643] [ 1770.848080][T29435] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 1771.418151][T29435] usb 14-1: Using ep0 maxpacket: 32 [ 1771.860487][T29435] usb 14-1: config index 0 descriptor too short (expected 35577, got 27) [ 1771.864054][T29435] usb 14-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1771.867653][T29435] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.871966][T29435] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1771.877599][T29435] usb 14-1: config 1 has no interface number 0 [ 1771.881533][T29435] usb 14-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1771.885339][T29435] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.894802][T29435] snd_usb_pod 14-1:1.1: Line 6 Pocket POD found [ 1772.334872][T29435] snd_usb_pod 14-1:1.1: set_interface failed [ 1772.342928][T29435] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now disconnected [ 1772.349924][T29435] snd_usb_pod 14-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1772.371149][T29435] usb 14-1: USB disconnect, device number 36 [ 1772.469242][ T6670] fuse: Bad value for 'fd' [ 1773.668317][T29571] usb 14-1: new full-speed USB device number 37 using dummy_hcd [ 1773.838045][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.848607][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.894042][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.908430][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.030053][ T6682] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9296'. [ 1774.194931][T29571] usb 14-1: unable to get BOS descriptor or descriptor too short [ 1774.209172][T29571] usb 14-1: no configurations [ 1774.211301][T29571] usb 14-1: can't read configurations, error -22 [ 1774.879089][ T6695] No source specified [ 1777.198065][ T55] usb 11-1: new high-speed USB device number 120 using dummy_hcd [ 1777.348088][ T55] usb 11-1: Using ep0 maxpacket: 16 [ 1777.388915][ T6721] FAULT_INJECTION: forcing a failure. [ 1777.388915][ T6721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1777.393873][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.6.9311 Tainted: G L syzkaller #0 PREEMPT(full) [ 1777.393905][ T6721] Tainted: [L]=SOFTLOCKUP [ 1777.393909][ T6721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1777.393918][ T6721] Call Trace: [ 1777.393922][ T6721] [ 1777.393937][ T6721] dump_stack_lvl+0x100/0x190 [ 1777.393957][ T6721] should_fail_ex.cold+0x5/0xa [ 1777.393968][ T6721] ? prepare_alloc_pages+0x16d/0x5f0 [ 1777.393985][ T6721] should_fail_alloc_page+0xeb/0x140 [ 1777.394001][ T6721] prepare_alloc_pages+0x1f0/0x5f0 [ 1777.394019][ T6721] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1777.394033][ T6721] ? rcu_is_watching+0x12/0xc0 [ 1777.394050][ T6721] ? __lock_acquire+0x49f/0x1a40 [ 1777.394066][ T6721] ? __css_rstat_updated+0x1ce/0x5a0 [ 1777.394084][ T6721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1777.394097][ T6721] ? __lock_acquire+0x49f/0x1a40 [ 1777.394115][ T6721] ? rcu_is_watching+0x12/0xc0 [ 1777.394134][ T6721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1777.394151][ T6721] ? policy_nodemask+0xed/0x4f0 [ 1777.394168][ T6721] alloc_pages_mpol+0x1fb/0x540 [ 1777.394183][ T6721] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1777.394198][ T6721] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 1777.394211][ T6721] ? __kernel_text_address+0xd/0x30 [ 1777.394230][ T6721] alloc_pages_noprof+0x1a/0x160 [ 1777.394247][ T6721] kvm_vm_ioctl+0x3ad/0x4030 [ 1777.394268][ T6721] ? tomoyo_path_number_perm+0x46d/0x580 [ 1777.394286][ T6721] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1777.394301][ T6721] ? __lock_acquire+0x49f/0x1a40 [ 1777.394317][ T6721] ? tomoyo_path_number_perm+0x46d/0x580 [ 1777.394346][ T6721] ? do_raw_spin_lock+0x128/0x260 [ 1777.394357][ T6721] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 1777.394376][ T6721] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 1777.394392][ T6721] ? __lock_acquire+0x49f/0x1a40 [ 1777.394408][ T6721] ? do_raw_spin_unlock+0x145/0x1e0 [ 1777.394420][ T6721] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1777.394443][ T6721] ? rcu_is_watching+0x12/0xc0 [ 1777.394455][ T6721] ? trace_hrtimer_start+0x77/0x220 [ 1777.394469][ T6721] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1777.394485][ T6721] ? find_held_lock+0x2b/0x80 [ 1777.394497][ T6721] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 1777.394509][ T6721] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 1777.394521][ T6721] ? rcu_is_watching+0x12/0xc0 [ 1777.394533][ T6721] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1777.394545][ T6721] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 1777.394557][ T6721] ? rcu_is_watching+0x12/0xc0 [ 1777.394569][ T6721] ? trace_sched_exit_tp+0x120/0x160 [ 1777.394583][ T6721] ? __schedule+0x126e/0x6730 [ 1777.394598][ T6721] ? tomoyo_path_number_perm+0x188/0x580 [ 1777.394617][ T6721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1777.394633][ T6721] ? do_vfs_ioctl+0x226/0x13e0 [ 1777.394650][ T6721] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1777.394666][ T6721] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 1777.394681][ T6721] ? lockdep_hardirqs_on+0x78/0x100 [ 1777.394699][ T6721] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1777.394720][ T6721] ? __ia32_compat_sys_ioctl+0xeb/0x360 [ 1777.394735][ T6721] ? __sanitizer_cov_trace_switch+0x59/0x90 [ 1777.394755][ T6721] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1777.394771][ T6721] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1777.394787][ T6721] __do_fast_syscall_32+0xe7/0x970 [ 1777.394799][ T6721] ? lockdep_hardirqs_on+0x78/0x100 [ 1777.394817][ T6721] do_fast_syscall_32+0x32/0x70 [ 1777.394829][ T6721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1777.394844][ T6721] RIP: 0023:0xf700efec [ 1777.394859][ T6721] Code: Unable to access opcode bytes at 0xf700efc2. [ 1777.394864][ T6721] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1777.394876][ T6721] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae41 [ 1777.394883][ T6721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1777.394889][ T6721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1777.394896][ T6721] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1777.394902][ T6721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1777.394916][ T6721] [ 1777.826364][ T6725] netlink: 'syz.9.9312': attribute type 1 has an invalid length. [ 1777.872217][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1777.910685][ T6725] bond0: (slave dummy0): making interface the new active one [ 1777.919729][ T6725] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1778.296968][ T6737] binder: BINDER_SET_CONTEXT_MGR already set [ 1778.302544][ T6737] binder: 6730:6737 ioctl 4018620d 80004a80 returned -16 [ 1780.052474][T29571] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1780.100482][ T55] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1780.226796][ T6751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.236327][ T6751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.255813][ T6751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.272622][ T6751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.295137][ T6751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9321'. [ 1780.591223][ T55] usb 11-1: no configurations [ 1780.592773][ T55] usb 11-1: can't read configurations, error -22 [ 1781.965294][ T6768] netlink: 84 bytes leftover after parsing attributes in process `syz.9.9326'. [ 1782.138046][ T55] usb 11-1: new high-speed USB device number 122 using dummy_hcd [ 1782.288036][ T55] usb 11-1: Using ep0 maxpacket: 16 [ 1782.793468][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1782.895106][T29571] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1782.901022][T29571] usb 10-1: no configurations [ 1782.903067][T29571] usb 10-1: can't read configurations, error -22 [ 1783.039241][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1783.047220][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1783.057029][ T6801] rdma_rxe: rxe_newlink: failed to add bond0 [ 1783.064946][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1783.079769][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1783.082658][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1783.138142][T19770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1783.150804][T19770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1783.155596][T19770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1783.159761][T19770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1783.166703][T19770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1783.236701][T23888] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.349376][T23888] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.459514][ T6823] netlink: 'syz.5.9347': attribute type 16 has an invalid length. [ 1783.462108][ T6823] netlink: 'syz.5.9347': attribute type 4 has an invalid length. [ 1783.464663][ T6823] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9347'. [ 1783.511032][T23888] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.546540][ T6795] lo speed is unknown, defaulting to 1000 [ 1783.593202][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9350'. [ 1783.631445][T23888] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.742931][ T6795] lo speed is unknown, defaulting to 1000 [ 1785.026750][ T55] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1785.029451][ T55] usb 11-1: no configurations [ 1785.030992][ T55] usb 11-1: can't read configurations, error -22 [ 1785.314741][T19770] Bluetooth: hci3: command tx timeout [ 1787.378195][T19770] Bluetooth: hci3: command tx timeout [ 1788.099803][ T6872] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1788.201895][T23888] vlan4: left allmulticast mode [ 1788.211099][T23888] geneve0: left allmulticast mode [ 1788.213273][T23888] vlan4: left promiscuous mode [ 1788.220158][T23888] geneve0: left promiscuous mode [ 1788.223778][T23888] bridge0: port 3(vlan4) entered disabled state [ 1788.229871][T23888] bridge_slave_1: left allmulticast mode [ 1788.232306][T23888] bridge_slave_1: left promiscuous mode [ 1788.234902][T23888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.242634][T23888] bridge_slave_0: left allmulticast mode [ 1788.245126][T23888] bridge_slave_0: left promiscuous mode [ 1788.247596][T23888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.452008][T23888] team0: Port device gretap1 removed [ 1788.500814][T23888] bond1 (unregistering): Released all slaves [ 1788.508227][T23888] bond2 (unregistering): Released all slaves [ 1788.516333][T23888] bond0 (unregistering): (slave dummy0): Releasing active interface [ 1788.520623][T23888] bond0 (unregistering): Released all slaves [ 1788.664031][T23888] tipc: Left network mode [ 1788.728212][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.730361][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.732599][ T6795] bridge_slave_0: entered allmulticast mode [ 1788.738562][ T6795] bridge_slave_0: entered promiscuous mode [ 1788.743032][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.759115][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.761872][ T6795] bridge_slave_1: entered allmulticast mode [ 1788.764684][ T6795] bridge_slave_1: entered promiscuous mode [ 1788.814157][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.823094][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.861146][ T6795] team0: Port device team_slave_0 added [ 1788.868259][ T6795] team0: Port device team_slave_1 added [ 1788.899585][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1788.956234][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.959835][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.969221][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.980560][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.986953][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.002760][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.157995][ T6795] hsr_slave_0: entered promiscuous mode [ 1789.161112][ T6795] hsr_slave_1: entered promiscuous mode [ 1789.273642][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1789.458299][ T5748] Bluetooth: hci3: command tx timeout [ 1789.512921][T23888] hsr_slave_0: left promiscuous mode [ 1789.515285][T23888] hsr_slave_1: left promiscuous mode [ 1789.517554][T23888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.524507][T23888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.527592][T23888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1789.530214][T23888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.535635][T23888] veth1_macvtap: left promiscuous mode [ 1789.537551][T23888] veth0_macvtap: left promiscuous mode [ 1789.539883][T23888] veth1_vlan: left promiscuous mode [ 1789.541616][T23888] veth0_vlan: left promiscuous mode [ 1789.771635][T23888] team0 (unregistering): Port device team_slave_1 removed [ 1789.783683][T23888] team0 (unregistering): Port device team_slave_0 removed [ 1789.868090][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1790.304065][ T6950] lo speed is unknown, defaulting to 1000 [ 1790.453435][ T6950] lo speed is unknown, defaulting to 1000 [ 1790.453453][ T6958] lo speed is unknown, defaulting to 1000 [ 1790.480844][T23888] IPVS: stop unused estimator thread 0... [ 1790.548220][ T6795] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1790.552799][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1790.562179][ T6958] lo speed is unknown, defaulting to 1000 [ 1790.562395][ T6795] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1790.571479][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1790.595691][ T6795] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1790.601317][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1790.616689][ T6795] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1790.622077][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1790.696603][ T6976] lo speed is unknown, defaulting to 1000 [ 1790.732487][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.741899][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.752692][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.754798][ T8566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.825147][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.828026][ T8566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.866054][ T6976] lo speed is unknown, defaulting to 1000 [ 1791.111183][ T6990] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.9392'. [ 1791.116796][ T6990] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.9392'. [ 1791.122876][ T6990] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.9392'. [ 1791.228171][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 1791.233222][T19770] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1791.462825][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.564931][T19770] Bluetooth: hci3: command tx timeout [ 1791.638059][T28894] usb 11-1: new high-speed USB device number 124 using dummy_hcd [ 1791.713809][ T6795] veth0_vlan: entered promiscuous mode [ 1791.735238][ T6795] veth1_vlan: entered promiscuous mode [ 1791.774506][ T6795] veth0_macvtap: entered promiscuous mode [ 1791.799260][ T6795] veth1_macvtap: entered promiscuous mode [ 1791.812645][T28894] usb 11-1: Using ep0 maxpacket: 32 [ 1791.826763][T28894] usb 11-1: config 0 has an invalid interface number: 184 but max is 0 [ 1791.842553][T28894] usb 11-1: config 0 has no interface number 0 [ 1791.844526][T28894] usb 11-1: config 0 interface 184 has no altsetting 0 [ 1791.854353][T28894] usb 11-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1791.857185][T28894] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.860317][T28894] usb 11-1: Product: syz [ 1791.861681][T28894] usb 11-1: Manufacturer: syz [ 1791.863206][T28894] usb 11-1: SerialNumber: syz [ 1791.866811][T28894] usb 11-1: config 0 descriptor?? [ 1791.877203][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1791.898092][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.906866][ T4517] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.909658][ T4517] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.913180][ T4517] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.916023][ T4517] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.091149][T29126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.100112][T29126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.113900][T28894] smsc75xx 11-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1792.117322][T28894] smsc75xx 11-1:0.184: probe with driver smsc75xx failed with error -71 [ 1792.127183][T28894] usb 11-1: USB disconnect, device number 124 [ 1792.157854][T29126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.161746][T29126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.393601][ T7037] lo speed is unknown, defaulting to 1000 [ 1792.530071][ T7037] lo speed is unknown, defaulting to 1000 [ 1793.237135][ T7061] binder: 7056:7061 ioctl 402c5639 80000140 returned -22 [ 1794.107813][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1794.119907][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1794.130067][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1794.145604][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1794.168284][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1794.188426][T15400] usb 11-1: new high-speed USB device number 125 using dummy_hcd [ 1794.360213][T15400] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1794.369450][T15400] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1794.387702][T15400] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1794.419690][T15400] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1794.422663][T15400] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1794.425570][T15400] usb 11-1: Product: syz [ 1794.426978][T15400] usb 11-1: Manufacturer: syz [ 1794.435321][T15400] usb 11-1: SerialNumber: syz [ 1794.666276][T15400] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1794.769995][ T7065] lo speed is unknown, defaulting to 1000 [ 1794.864187][T15400] usb 11-1: USB disconnect, device number 125 [ 1795.070789][ T7063] usblp0: removed [ 1795.128716][T23891] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1795.203343][T23891] bond1 (unregistering): Released all slaves [ 1795.215291][T23891] bond2 (unregistering): Released all slaves [ 1795.232034][T23891] bond0 (unregistering): Released all slaves [ 1795.243633][T23891] bond3 (unregistering): Released all slaves [ 1795.255969][ T7065] lo speed is unknown, defaulting to 1000 [ 1795.459028][ T7100] binder: 7099:7100 ioctl c0306201 800003c0 returned -14 [ 1795.712919][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1795.788315][T29607] usb 14-1: new high-speed USB device number 39 using dummy_hcd [ 1795.808957][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.812951][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.820078][ T7065] bridge_slave_0: entered allmulticast mode [ 1795.824293][ T7065] bridge_slave_0: entered promiscuous mode [ 1795.846548][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.850877][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.854032][ T7065] bridge_slave_1: entered allmulticast mode [ 1795.858115][ T7065] bridge_slave_1: entered promiscuous mode [ 1795.905598][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.915228][ T7121] lo speed is unknown, defaulting to 1000 [ 1795.922388][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.959745][T29607] usb 14-1: Using ep0 maxpacket: 16 [ 1795.972419][T29607] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.988626][T29607] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.995085][T29607] usb 14-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1796.000337][T29607] usb 14-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1796.006917][T29607] usb 14-1: Manufacturer: syz [ 1796.012727][T29607] usb 14-1: config 0 descriptor?? [ 1796.013199][ T7065] team0: Port device team_slave_0 added [ 1796.022381][ T7065] team0: Port device team_slave_1 added [ 1796.056763][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.061375][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.090366][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.131904][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1796.137965][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.140594][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.148509][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.161356][ T7121] lo speed is unknown, defaulting to 1000 [ 1796.306773][ T7065] hsr_slave_0: entered promiscuous mode [ 1796.311184][ T7065] hsr_slave_1: entered promiscuous mode [ 1796.314812][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 1796.317480][ T7065] Cannot create hsr debugfs directory [ 1796.328893][T23891] hsr_slave_0: left promiscuous mode [ 1796.331253][T23891] hsr_slave_1: left promiscuous mode [ 1796.340044][T19770] Bluetooth: hci1: command tx timeout [ 1796.435187][T29607] creative-sb0540 0003:041E:3100.000F: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1796.630165][ T7018] usb 14-1: USB disconnect, device number 39 [ 1797.033702][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1797.332535][T23891] IPVS: stop unused estimator thread 0... [ 1797.953729][ T7065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1797.959760][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1797.962542][ T7065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1797.970526][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1797.976041][ T7065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1797.980689][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1797.983447][ T7065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1797.989790][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1798.033874][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1798.044403][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.050290][ T211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.052576][ T211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.062470][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.064733][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.168103][ T34] usb 14-1: new high-speed USB device number 40 using dummy_hcd [ 1798.350025][ T34] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.356381][ T34] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1798.365407][ T34] usb 14-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1798.371015][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1798.374125][ T34] usb 14-1: SerialNumber: syz [ 1798.418384][T19770] Bluetooth: hci1: command tx timeout [ 1798.431940][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.590161][ T34] usb 14-1: 0:2 : does not exist [ 1798.617386][ T7065] veth0_vlan: entered promiscuous mode [ 1798.636287][ T7065] veth1_vlan: entered promiscuous mode [ 1798.665609][ T34] usb 14-1: USB disconnect, device number 40 [ 1798.676967][ T7065] veth0_macvtap: entered promiscuous mode [ 1798.683525][ T7065] veth1_macvtap: entered promiscuous mode [ 1798.698037][T15829] usb 11-1: new high-speed USB device number 126 using dummy_hcd [ 1798.701470][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.711330][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.725531][ T3693] udevd[3693]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1798.735340][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.743625][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.752530][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.759440][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.847073][ T8566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.864621][ T8566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.871545][T15829] usb 11-1: Using ep0 maxpacket: 32 [ 1798.883285][T15829] usb 11-1: config 2 has an invalid interface number: 88 but max is 0 [ 1798.889864][T15829] usb 11-1: config 2 has an invalid descriptor of length 88, skipping remainder of the config [ 1798.901222][T15829] usb 11-1: config 2 has no interface number 0 [ 1798.904457][T15829] usb 11-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1798.904899][T29127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.909532][T15829] usb 11-1: config 2 interface 88 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1798.916625][T15829] usb 11-1: config 2 interface 88 has no altsetting 0 [ 1798.924339][T15829] usb 11-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1798.928368][T15829] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1798.939758][T29127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.950317][T15829] usb 11-1: Product: syz [ 1798.954369][T15829] usb 11-1: Manufacturer: syz [ 1798.957105][T15829] usb 11-1: SerialNumber: syz [ 1798.963596][ T7245] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1798.970309][T15829] asix 11-1:2.88: probe with driver asix failed with error -22 [ 1799.169866][T28894] usb 11-1: USB disconnect, device number 126 [ 1799.303341][ T7272] futex_wake_op: syz.9.9454 tries to shift op by 144; fix this program [ 1799.317495][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9454'. [ 1799.948123][T12838] usb 11-1: new high-speed USB device number 127 using dummy_hcd [ 1800.101650][T12838] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.109311][T12838] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.112628][T12838] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1800.117063][T12838] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1800.121342][T12838] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.128411][T12838] usb 11-1: config 0 descriptor?? [ 1800.351326][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9460'. [ 1800.508174][T19770] Bluetooth: hci1: command tx timeout [ 1800.558121][T12838] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1800.951326][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9465'. [ 1800.972004][ C2] plantronics 0003:047F:FFFF.0010: hid_field_extract() called with n (132) > 32! (swapper/2) [ 1801.179648][T21862] usb 11-1: USB disconnect, device number 127 [ 1801.314244][ T7315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1801.540926][ T7318] binder: 7317:7318 ioctl 4018620d 0 returned -22 [ 1802.479705][T20081] usb 14-1: new high-speed USB device number 41 using dummy_hcd [ 1802.578005][T19770] Bluetooth: hci1: command tx timeout [ 1802.628007][T20081] usb 14-1: Using ep0 maxpacket: 8 [ 1802.633387][T20081] usb 14-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1802.641709][T20081] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1802.643865][T20081] usb 14-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 1802.651346][T20081] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.659833][T20081] usb 14-1: config 0 descriptor?? [ 1802.861163][ T55] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1802.880551][T20081] usbhid 14-1:0.0: can't add hid device: -71 [ 1802.890148][T20081] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 1802.900351][T20081] usb 14-1: USB disconnect, device number 41 [ 1803.008515][ T55] usb 11-1: Using ep0 maxpacket: 32 [ 1803.011556][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.018757][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1803.028118][ T55] usb 11-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1803.035962][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.048550][ T55] usb 11-1: config 0 descriptor?? [ 1803.051860][ T55] hub 11-1:0.0: USB hub found [ 1803.259740][ T55] hub 11-1:0.0: 1 port detected [ 1803.468846][ T55] hub 11-1:0.0: hub_hub_status failed (err = -71) [ 1803.488795][ T55] hub 11-1:0.0: config failed, can't get hub status (err -71) [ 1803.499574][ T55] usbhid 11-1:0.0: can't add hid device: -71 [ 1803.501585][ T55] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1803.540326][ T55] usb 11-1: USB disconnect, device number 2 [ 1804.252339][T23464] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1804.408095][T23464] usb 11-1: Using ep0 maxpacket: 16 [ 1804.422333][T23464] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.436178][T23464] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.442373][T23464] usb 11-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1804.447991][T23464] usb 11-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1804.452779][T23464] usb 11-1: Manufacturer: syz [ 1804.467130][T23464] usb 11-1: config 0 descriptor?? [ 1804.815120][ T7380] input: syz1 as /devices/virtual/input/input72 [ 1804.897417][T23464] creative-sb0540 0003:041E:3100.0011: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1805.086574][T23464] usb 11-1: USB disconnect, device number 3 [ 1805.768073][T20081] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1805.921641][T20081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1805.931741][T20081] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1805.938353][T20081] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.947275][T20081] usb 10-1: config 0 descriptor?? [ 1806.218578][T20081] usbhid 10-1:0.0: can't add hid device: -71 [ 1806.226937][T20081] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1806.246528][T20081] usb 10-1: USB disconnect, device number 20 [ 1807.938067][T23464] usb 14-1: new high-speed USB device number 42 using dummy_hcd [ 1808.089414][T23464] usb 14-1: Using ep0 maxpacket: 16 [ 1808.100645][T23464] usb 14-1: config 0 has an invalid interface number: 34 but max is 0 [ 1808.107195][T23464] usb 14-1: config 0 has no interface number 0 [ 1808.114046][T23464] usb 14-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1808.123378][T23464] usb 14-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1808.136552][T23464] usb 14-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1808.142940][T23464] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.148147][T23464] usb 14-1: Product: syz [ 1808.150556][T23464] usb 14-1: Manufacturer: syz [ 1808.156174][T23464] usb 14-1: SerialNumber: syz [ 1808.164673][T23464] usb 14-1: config 0 descriptor?? [ 1808.167996][ T7450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1808.172833][ T7450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1808.386588][ T7450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1808.391567][ T7450] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1808.652324][T23464] asix 14-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1808.659383][T23464] asix 14-1:0.34: probe with driver asix failed with error -32 [ 1808.943884][ T7463] binder: 7462:7463 ioctl 80049363 0 returned -22 [ 1809.025404][ T7472] binder: 7471:7472 ioctl 40046210 0 returned -14 [ 1809.084627][ T7478] lo speed is unknown, defaulting to 1000 [ 1809.208289][ T7478] lo speed is unknown, defaulting to 1000 [ 1809.287975][ T55] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1809.448209][ T55] usb 10-1: Using ep0 maxpacket: 32 [ 1809.452678][ T55] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.457185][ T55] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.464491][ T55] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1809.468951][ T55] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1809.474201][ T55] usb 10-1: Product: syz [ 1809.475881][ T55] usb 10-1: Manufacturer: syz [ 1809.509619][ T55] hub 10-1:4.0: USB hub found [ 1809.694958][ T55] hub 10-1:4.0: 2 ports detected [ 1810.720925][ T7027] usb 14-1: USB disconnect, device number 42 [ 1810.904561][T15400] hub 10-1:4.0: activate --> -90 [ 1811.305081][ T55] usb 10-1: USB disconnect, device number 21 [ 1811.528103][T15400] usb 10-1-port2: config error [ 1812.539959][ T4516] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1812.547295][ T4516] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1812.555250][ T4516] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1812.558659][ T4516] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1812.978681][ T7027] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1813.130409][ T7027] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1813.138664][ T7027] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.147348][ T7027] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1813.154421][ T7027] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1813.164480][ T7027] usb 10-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1813.169479][ T7027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.173056][ T7027] usb 10-1: Product: syz [ 1813.174902][ T7027] usb 10-1: Manufacturer: syz [ 1813.176997][ T7027] usb 10-1: SerialNumber: syz [ 1813.401437][ T7027] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor [ 1813.404917][ T7027] usb 10-1: 1:1 : unsupported format bits 0x20c6 [ 1813.408516][ T7027] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1813.469831][ T7027] usb 10-1: USB disconnect, device number 22 [ 1813.520238][ T4096] udevd[4096]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1813.578325][T29607] usb 14-1: new high-speed USB device number 43 using dummy_hcd [ 1813.731082][T29607] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.734744][T29607] usb 14-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1813.738973][T29607] usb 14-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1813.745333][T29607] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1813.749462][T29607] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.752553][T29607] usb 14-1: Product: syz [ 1813.753940][T29607] usb 14-1: Manufacturer: syz [ 1813.755882][T29607] usb 14-1: SerialNumber: syz [ 1813.763924][T29607] usb 14-1: 0:2 : does not exist [ 1813.993756][T29607] usb 14-1: USB disconnect, device number 43 [ 1814.014302][ T3693] udevd[3693]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1814.386342][ T7581] lo speed is unknown, defaulting to 1000 [ 1814.468196][ T7581] lo speed is unknown, defaulting to 1000 [ 1814.557302][ T7581] hub 8-0:1.0: USB hub found [ 1814.561383][ T7581] hub 8-0:1.0: 1 port detected [ 1814.589358][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9565'. [ 1818.234578][ T42] audit: type=1326 audit(1784262773.818:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.244594][ T7646] input: syz1 as /devices/virtual/input/input73 [ 1818.276584][ T42] audit: type=1326 audit(1784262773.818:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.317329][ T42] audit: type=1326 audit(1784262773.818:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.358134][ T42] audit: type=1326 audit(1784262773.818:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.378459][ T42] audit: type=1326 audit(1784262773.818:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.411067][ T42] audit: type=1326 audit(1784262773.828:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.438328][ T42] audit: type=1326 audit(1784262773.828:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.458001][ T42] audit: type=1326 audit(1784262773.828:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.478051][ T42] audit: type=1326 audit(1784262773.828:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.498377][ T42] audit: type=1326 audit(1784262773.828:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7645 comm="syz.9.9589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1818.861930][ T7607] lo speed is unknown, defaulting to 1000 [ 1819.340790][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9591'. [ 1819.364335][ T7607] lo speed is unknown, defaulting to 1000 [ 1819.668005][T12271] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1819.819798][T12271] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.831621][T12271] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1819.838534][T12271] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.849507][T12271] usb 10-1: config 0 descriptor?? [ 1820.262998][T12271] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 1820.282404][T12271] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0926:3333.0012/input/input74 [ 1820.442579][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1820.455173][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1820.465233][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1820.481134][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1820.490503][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1820.511695][ T7675] ip6gre2: entered allmulticast mode [ 1820.518294][ T4517] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1820.640423][T12271] keytouch 0003:0926:3333.0012: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1820.670461][ T7164] syz_tun (unregistering): left allmulticast mode [ 1820.683329][T20081] usb 10-1: USB disconnect, device number 23 [ 1820.844708][ T7680] fido_id[7680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/report_descriptor': No such file or directory [ 1820.918010][T29607] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1820.987753][ T7672] lo speed is unknown, defaulting to 1000 [ 1821.081851][T29607] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.086406][T29607] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.091232][T29607] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1821.096602][T29607] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1821.097304][ T7672] lo speed is unknown, defaulting to 1000 [ 1821.101034][T29607] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.108682][T29607] usb 11-1: config 0 descriptor?? [ 1821.276898][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.280098][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.283174][ T7672] bridge_slave_0: entered allmulticast mode [ 1821.287085][ T7672] bridge_slave_0: entered promiscuous mode [ 1821.294111][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.297236][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.307420][ T7672] bridge_slave_1: entered allmulticast mode [ 1821.310828][ T7672] bridge_slave_1: entered promiscuous mode [ 1821.333240][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1821.340173][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1821.362544][ T7672] team0: Port device team_slave_0 added [ 1821.365791][ T7672] team0: Port device team_slave_1 added [ 1821.391972][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1821.394812][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1821.403310][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1821.407949][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1821.410273][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1821.418902][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1821.460975][ T7672] hsr_slave_0: entered promiscuous mode [ 1821.464264][ T7672] hsr_slave_1: entered promiscuous mode [ 1821.467273][ T7672] debugfs: 'hsr0' already exists in 'hsr' [ 1821.470155][ T7672] Cannot create hsr debugfs directory [ 1821.538085][T29607] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1821.975029][ T4517] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.162225][ T4517] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.215057][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1822.231657][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1822.237224][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1822.246204][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1822.257055][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1822.287690][ T4517] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.450325][ T4517] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.465638][ T7672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1822.471973][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1822.478325][ T7672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1822.490626][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1822.494493][ T7672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1822.498851][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1822.501961][ T7672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1822.512911][ T7672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1822.588710][ T5748] Bluetooth: hci4: command tx timeout [ 1822.655819][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.677360][ T4517] bridge_slave_1: left allmulticast mode [ 1822.679428][ T4517] bridge_slave_1: left promiscuous mode [ 1822.681409][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.686007][ T4517] bridge_slave_0: left allmulticast mode [ 1822.688470][ T4517] bridge_slave_0: left promiscuous mode [ 1822.690916][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.862841][ T4517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1822.868098][ T4517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1822.871993][ T4517] bond0 (unregistering): Released all slaves [ 1822.883840][ T7710] lo speed is unknown, defaulting to 1000 [ 1822.893143][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.902282][T29120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.904640][T29120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.915317][T29120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.917684][T29120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.036073][ T7710] lo speed is unknown, defaulting to 1000 [ 1823.266861][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1823.481320][ T4517] hsr_slave_0: left promiscuous mode [ 1823.484933][ T4517] hsr_slave_1: left promiscuous mode [ 1823.488653][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1823.491832][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.498273][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1823.501745][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.535403][ T4517] veth1_macvtap: left promiscuous mode [ 1823.538139][ T4517] veth0_macvtap: left promiscuous mode [ 1823.539149][T21862] usb 11-1: USB disconnect, device number 4 [ 1823.542585][ T4517] veth1_vlan: left promiscuous mode [ 1823.542741][ T4517] veth0_vlan: left promiscuous mode [ 1823.720309][ T4517] team0 (unregistering): Port device team_slave_1 removed [ 1823.728700][ T4517] team0 (unregistering): Port device team_slave_0 removed [ 1823.799771][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1823.806961][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.810432][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.813866][ T7710] bridge_slave_0: entered allmulticast mode [ 1823.818336][ T7710] bridge_slave_0: entered promiscuous mode [ 1823.823709][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.826923][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.830671][ T7710] bridge_slave_1: entered allmulticast mode [ 1823.835161][ T7710] bridge_slave_1: entered promiscuous mode [ 1823.842468][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.878817][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1823.886479][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1823.985606][ T7710] team0: Port device team_slave_0 added [ 1824.346630][ T5748] Bluetooth: hci0: command tx timeout [ 1824.558087][T15829] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 1824.658042][ T5748] Bluetooth: hci4: command tx timeout [ 1824.712044][T15829] usb 10-1: config 1 interface 0 altsetting 54 endpoint 0x1 is Bulk; changing to Interrupt [ 1824.715342][T15829] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1824.720474][T15829] usb 10-1: string descriptor 0 read error: -22 [ 1824.722639][T15829] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.40 [ 1824.725555][T15829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.736447][ T7776] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1824.754043][T15829] hub 10-1:1.0: bad descriptor, ignoring hub [ 1824.756751][T15829] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1824.988163][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1825.089040][T21862] usb 10-1: USB disconnect, device number 24 [ 1825.638161][ T7781] hub 8-0:1.0: USB hub found [ 1825.641054][ T7781] hub 8-0:1.0: 1 port detected [ 1826.428185][ T5748] Bluetooth: hci0: command tx timeout [ 1826.752656][ T5748] Bluetooth: hci4: command tx timeout [ 1827.712945][ T7804] hub 8-0:1.0: USB hub found [ 1827.721871][ T7804] hub 8-0:1.0: 1 port detected [ 1828.233348][ T7710] team0: Port device team_slave_1 added [ 1828.237344][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1828.331558][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1828.334596][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1828.350136][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1828.362820][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1828.367934][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1828.377034][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1828.393858][ T7801] lo speed is unknown, defaulting to 1000 [ 1828.435750][ T7710] hsr_slave_0: entered promiscuous mode [ 1828.438365][ T7710] hsr_slave_1: entered promiscuous mode [ 1828.444621][ T7809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1828.493861][ T7672] veth0_vlan: entered promiscuous mode [ 1828.499578][ T5748] Bluetooth: hci0: command tx timeout [ 1828.551713][ T7672] veth1_vlan: entered promiscuous mode [ 1828.561301][ T7801] lo speed is unknown, defaulting to 1000 [ 1828.682975][ T5452] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1828.719987][ T7672] veth0_macvtap: entered promiscuous mode [ 1828.727468][ T7672] veth1_macvtap: entered promiscuous mode [ 1828.739621][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.749258][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.754835][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9627'. [ 1828.757184][ T4516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.758979][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9627'. [ 1828.765114][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9627'. [ 1828.767684][ T4516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.777117][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9627'. [ 1828.810382][ T4516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.820101][ T4516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.828003][ T5748] Bluetooth: hci4: command tx timeout [ 1830.586154][ T5748] Bluetooth: hci0: command tx timeout [ 1832.288321][ T8566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.291739][ T8566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.317524][T29126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.322149][T29126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.766624][ T7710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1832.791144][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1832.794956][ T7710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1832.804915][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1832.819073][ T7710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1832.825439][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1832.834059][ T7710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1832.847180][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1832.933590][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.945785][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.951878][T29120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.954242][T29120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.968392][T29120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.970825][T29120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.698012][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1836.859094][ T7938] lo speed is unknown, defaulting to 1000 [ 1836.969781][ T7938] lo speed is unknown, defaulting to 1000 [ 1837.090136][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1837.117462][ T7710] veth0_vlan: entered promiscuous mode [ 1837.123910][ T7710] veth1_vlan: entered promiscuous mode [ 1837.146499][ T7710] veth0_macvtap: entered promiscuous mode [ 1837.169573][ T7710] veth1_macvtap: entered promiscuous mode [ 1837.183636][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.188463][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.222175][T23887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.237978][T23887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.244602][T23887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.258699][T23887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.400742][T25216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.405932][T25216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.431281][T25216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.434739][T25216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.499825][ T7993] lo speed is unknown, defaulting to 1000 [ 1837.665202][ T7993] lo speed is unknown, defaulting to 1000 [ 1841.917382][ T8055] exFAT-fs (loop3): unable to read boot sector [ 1841.928213][ T8055] exFAT-fs (loop3): failed to read boot sector [ 1841.933068][ T8055] exFAT-fs (loop3): failed to recognize exfat type [ 1842.869573][ T8072] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9684'. [ 1843.308454][ T5529] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1843.461193][ T5529] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.464620][ T5529] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 536, setting to 64 [ 1843.468084][ T5529] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 97, changing to 7 [ 1843.471636][ T5529] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 1843.476744][ T5529] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1843.480379][ T5529] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.482970][ T5529] usb 11-1: Product: syz [ 1843.484326][ T5529] usb 11-1: Manufacturer: syz [ 1843.485966][ T5529] usb 11-1: SerialNumber: syz [ 1843.579902][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9690'. [ 1844.513776][ T5529] cdc_ncm 11-1:1.0: bind() failure [ 1844.518865][ T5529] cdc_ncm 11-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1844.521686][ T5529] cdc_mbim 11-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1844.524979][ T5529] usbtest 11-1:1.1: probe with driver usbtest failed with error -71 [ 1844.531856][ T5529] usb 11-1: USB disconnect, device number 5 [ 1845.185329][ T8119] binder: 8118:8119 ioctl c0306201 80000080 returned -14 [ 1846.330062][ T8159] tipc: Enabling of bearer rejected, failed to enable media [ 1846.358119][ T5529] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 1846.414679][ T8165] Invalid argument reading file caps for ./file0 [ 1846.528159][ T5529] usb 11-1: Using ep0 maxpacket: 32 [ 1846.532221][ T5529] usb 11-1: config 2 has an invalid interface number: 194 but max is 0 [ 1846.535597][ T5529] usb 11-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.541571][ T5529] usb 11-1: config 2 has no interface number 0 [ 1846.544236][ T5529] usb 11-1: config 2 interface 194 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1846.550077][ T5529] usb 11-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1846.553717][ T5529] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.698116][ T7029] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1846.768314][ T5529] usb 11-1: string descriptor 0 read error: -71 [ 1846.774042][ T5529] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 1846.812021][ T5529] snd-usb-audio 11-1:2.194: probe with driver snd-usb-audio failed with error -2 [ 1846.816640][ T5529] usb 11-1: USB disconnect, device number 6 [ 1846.838116][T29435] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1846.849639][ T7029] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1846.852841][ T7029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.856939][ T7029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1846.860905][ T7029] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1846.864892][ T7029] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1846.868394][ T7029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.874136][ T7029] usb 8-1: config 0 descriptor?? [ 1846.942077][ T8205] binder: 8204:8205 ioctl c0306201 80000080 returned -14 [ 1846.973654][ T8207] tipc: Enabling of bearer rejected, failed to enable media [ 1846.997997][T29435] usb 10-1: Using ep0 maxpacket: 16 [ 1847.005055][T29435] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.009496][T29435] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1847.013200][T29435] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1847.017404][T29435] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1847.023470][T29435] usb 10-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1847.026814][T29435] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.029531][T29435] usb 10-1: Product: syz [ 1847.033271][T29435] usb 10-1: Manufacturer: syz [ 1847.034787][T29435] usb 10-1: SerialNumber: syz [ 1847.256724][ T8223] lo speed is unknown, defaulting to 1000 [ 1847.257086][T29435] usb 10-1: cannot find UAC_HEADER [ 1847.296701][ T7029] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 1847.319254][ T7029] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1847.320497][T29435] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1847.346247][T29435] usb 10-1: USB disconnect, device number 25 [ 1847.381115][ T8032] udevd[8032]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1847.441848][ T8223] lo speed is unknown, defaulting to 1000 [ 1847.540309][ T847] usb 8-1: USB disconnect, device number 3 [ 1847.752669][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9734'. [ 1847.864292][ T8305] syzkaller0: entered promiscuous mode [ 1847.877957][ T8305] syzkaller0: entered allmulticast mode [ 1847.883342][ T8305] tipc: Enabled bearer , priority 0 [ 1847.891071][ T8304] tipc: Resetting bearer [ 1847.910234][ T8304] tipc: Disabling bearer [ 1848.098118][ T8319] support for the xor transformation has been removed. [ 1848.258770][ T55] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 1848.434381][ T55] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1848.438934][ T55] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.442926][ T55] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1848.451085][ T55] usb 11-1: string descriptor 0 read error: -22 [ 1848.453130][ T55] usb 11-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 1848.457160][ T55] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.475342][ T55] usb 11-1: 0:1 : does not exist [ 1848.478455][ T55] usb 11-1: 0:2 : does not exist [ 1848.568082][ T847] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1848.687751][ T55] usb 11-1: 6:0: failed to get current value for ch 0 (-22) [ 1848.700224][ T55] usb 11-1: 6:0: cannot get min/max values for control 4 (id 6) [ 1848.719201][ T847] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.728064][ T847] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1848.735428][ T847] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1848.742862][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1848.748210][ T847] usb 8-1: SerialNumber: syz [ 1848.772510][ T55] usb 11-1: USB disconnect, device number 7 [ 1848.971950][ T847] usb 8-1: 0:2 : does not exist [ 1849.008270][ T847] usb 8-1: USB disconnect, device number 4 [ 1849.268557][ T8402] syzkaller0: entered promiscuous mode [ 1849.270972][ T8402] syzkaller0: entered allmulticast mode [ 1849.361797][ T8408] cgroup: none used incorrectly [ 1849.538726][ T8414] input: syz1 as /devices/virtual/input/input78 [ 1849.964732][ T8445] syzkaller0: entered promiscuous mode [ 1849.966561][ T8445] syzkaller0: entered allmulticast mode [ 1849.981585][ T8445] tipc: Enabled bearer , priority 0 [ 1849.987595][ T8444] tipc: Resetting bearer [ 1850.008029][T28894] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1850.016276][ T8444] tipc: Disabling bearer [ 1850.157944][T28894] usb 8-1: Using ep0 maxpacket: 32 [ 1850.161040][T28894] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.164288][T28894] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1850.168500][T28894] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1850.171821][T28894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.176229][T28894] usb 8-1: config 0 descriptor?? [ 1850.184849][T28894] hub 8-1:0.0: bad descriptor, ignoring hub [ 1850.191135][T28894] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1850.201679][T28894] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1850.338529][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1850.488197][T12271] usb 8-1: USB disconnect, device number 5 [ 1850.546969][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9766'. [ 1851.478220][T29435] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1851.642862][T29435] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.647701][T29435] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1851.653243][T29435] usb 11-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1851.657066][T29435] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1851.660591][T29435] usb 11-1: SerialNumber: syz [ 1851.872332][T29435] usb 11-1: 0:2 : does not exist [ 1851.890594][T29435] usb 11-1: USB disconnect, device number 8 [ 1851.925839][ T8032] udevd[8032]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1851.978069][T20081] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1852.128057][T20081] usb 10-1: Using ep0 maxpacket: 8 [ 1852.132393][T20081] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1852.135658][T20081] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.139650][T20081] usb 10-1: config 0 has no interface number 0 [ 1852.144489][T20081] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1852.147755][T20081] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.151112][T20081] usb 10-1: Product: syz [ 1852.153047][T20081] usb 10-1: Manufacturer: syz [ 1852.154986][T20081] usb 10-1: SerialNumber: syz [ 1852.159660][T20081] usb 10-1: config 0 descriptor?? [ 1852.369866][T20081] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1852.372927][T20081] uvcvideo 10-1:0.31: No valid video chain found. [ 1852.573133][T20081] usb 10-1: USB disconnect, device number 26 [ 1852.940785][ T8574] syzkaller0: entered promiscuous mode [ 1852.942643][ T8574] syzkaller0: entered allmulticast mode [ 1853.231997][ T8598] lo speed is unknown, defaulting to 1000 [ 1853.320382][ T8598] lo speed is unknown, defaulting to 1000 [ 1853.899959][ T8660] usb usb1: usbfs: process 8660 (syz.2.9804) did not claim interface 4 before use [ 1854.008024][ T55] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1854.148300][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 1854.148314][ T42] audit: type=1326 audit(1784262809.738:9934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.157208][ T42] audit: type=1326 audit(1784262809.738:9935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.165882][ T42] audit: type=1326 audit(1784262809.738:9936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.178107][ T42] audit: type=1326 audit(1784262809.738:9937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.180897][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 1854.185321][ T42] audit: type=1326 audit(1784262809.758:9938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.196464][ T42] audit: type=1326 audit(1784262809.758:9939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.200155][ T55] usb 8-1: config index 0 descriptor too short (expected 37359, got 202) [ 1854.205934][ T42] audit: type=1326 audit(1784262809.758:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.212174][ T55] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1854.215743][ T42] audit: type=1326 audit(1784262809.758:9941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.215772][ T42] audit: type=1326 audit(1784262809.758:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.219124][ T55] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.227742][ T42] audit: type=1326 audit(1784262809.758:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.2.9808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 1854.235889][ T55] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1854.255580][ T55] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1854.259464][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.262039][ T55] usb 8-1: Product: syz [ 1854.263458][ T55] usb 8-1: Manufacturer: syz [ 1854.264955][ T55] usb 8-1: SerialNumber: syz [ 1854.272414][ T55] usb 8-1: 0:2 : does not exist [ 1854.476482][ T55] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1854.508945][ T55] usb 8-1: USB disconnect, device number 6 [ 1854.526620][ T8032] udevd[8032]: setting owner of /dev/bus/usb/008/006 to uid=0, gid=0 failed: No such file or directory [ 1854.541734][ T8032] udevd[8032]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1854.934533][ T8716] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1854.936976][ T8716] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1854.940279][ T8716] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1854.942913][ T8716] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1855.368735][T12271] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1855.770995][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.110963][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.187075][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.204526][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.230140][ T8730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9821'. [ 1856.546645][ T8760] binder: BINDER_SET_CONTEXT_MGR already set [ 1856.558484][ T8760] binder: 8749:8760 ioctl 4018620d 80004a80 returned -16 [ 1858.898428][T12271] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1858.901714][T12271] usb 8-1: no configurations [ 1858.904789][T12271] usb 8-1: can't read configurations, error -22 [ 1862.168046][T15400] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1862.350792][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.360160][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.372865][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.390909][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.403934][ T8840] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9842'. [ 1865.135681][T15400] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1865.145092][T15400] usb 10-1: no configurations [ 1865.146652][T15400] usb 10-1: can't read configurations, error -22 [ 1869.057040][ T8930] tipc: Enabled bearer , priority 0 [ 1869.065674][ T8923] syzkaller0: entered promiscuous mode [ 1869.072729][ T8923] syzkaller0: entered allmulticast mode [ 1869.086545][ T8917] tipc: Resetting bearer [ 1869.115836][ T8917] tipc: Disabling bearer [ 1869.244978][ T8954] syzkaller0: entered promiscuous mode [ 1869.247559][ T8954] syzkaller0: entered allmulticast mode [ 1869.254470][ T8954] tipc: Started in network mode [ 1869.256782][ T8954] tipc: Node identity 3e900f3743f8, cluster identity 4711 [ 1869.269795][ T8954] tipc: Enabled bearer , priority 0 [ 1869.282953][ T8953] tipc: Resetting bearer [ 1869.329646][ T8953] tipc: Disabling bearer [ 1869.372687][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9866'. [ 1869.623554][ T8968] binder: BINDER_SET_CONTEXT_MGR already set [ 1869.627750][ T8968] binder: 8941:8968 ioctl 4018620d 80004a80 returned -16 [ 1869.710125][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9867'. [ 1869.946489][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1869.966278][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1870.412899][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9876'. [ 1870.429909][ T9004] overlayfs: failed to resolve './bus': -2 [ 1873.513449][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9893'. [ 1873.519072][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9893'. [ 1873.527368][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9893'. [ 1875.097810][ T9097] nfs: Unknown parameter '' [ 1875.265487][ T9102] netlink: 1276 bytes leftover after parsing attributes in process `syz.5.9900'. [ 1876.581003][T19770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1876.585060][ T9120] syzkaller0: entered promiscuous mode [ 1876.585078][ T9120] syzkaller0: entered allmulticast mode [ 1876.596961][T19770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1876.601380][T19770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1876.605572][T19770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1876.614272][T19770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1876.909414][ T9115] lo speed is unknown, defaulting to 1000 [ 1877.002831][ T9115] lo speed is unknown, defaulting to 1000 [ 1877.199036][ T34] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1877.258391][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.268640][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.271695][ T9115] bridge_slave_0: entered allmulticast mode [ 1877.274706][ T9115] bridge_slave_0: entered promiscuous mode [ 1877.285504][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.288184][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.294221][ T9115] bridge_slave_1: entered allmulticast mode [ 1877.298888][ T9115] bridge_slave_1: entered promiscuous mode [ 1877.350300][ T34] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1877.353947][ T34] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1877.357406][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1877.368369][ T34] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1877.379990][ T34] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1877.385665][ T34] usb 10-1: Product: syz [ 1877.390469][ T34] usb 10-1: Manufacturer: syz [ 1877.393758][ T34] usb 10-1: SerialNumber: syz [ 1877.407370][ T34] usb 10-1: config 0 descriptor?? [ 1877.413993][ T9151] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1877.419735][ T34] usb 10-1: selecting invalid altsetting 0 [ 1877.493750][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.510661][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.581875][ T9115] team0: Port device team_slave_0 added [ 1877.692011][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.694710][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.697296][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.702992][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.713610][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.721575][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.725012][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.728455][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.731865][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.735258][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.739475][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.743029][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.746332][ T9151] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 1877.751139][ T34] usb 10-1: USB disconnect, device number 29 [ 1877.807601][ T9144] binder: BINDER_SET_CONTEXT_MGR already set [ 1877.809866][ T9144] binder: 9118:9144 ioctl 4018620d 80004a80 returned -16 [ 1877.810056][ T9115] team0: Port device team_slave_1 added [ 1877.840932][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.843758][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.855523][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.871300][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.873589][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.883051][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.918430][ T9115] hsr_slave_0: entered promiscuous mode [ 1877.920942][ T9115] hsr_slave_1: entered promiscuous mode [ 1877.923240][ T9115] debugfs: 'hsr0' already exists in 'hsr' [ 1877.925135][ T9115] Cannot create hsr debugfs directory [ 1878.590647][ T9115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1878.597372][ T9115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1878.601662][ T9115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1878.605982][ T9115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1878.609551][ T9115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1878.614011][ T9115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1878.616834][ T9115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1878.622590][ T9115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1878.647960][T23464] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1878.668216][ T5748] Bluetooth: hci3: command tx timeout [ 1878.704973][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1878.724255][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1878.733164][T29126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.736275][T29126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.765445][T29127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.768223][T29127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.810982][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.823987][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.834660][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.847543][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.876777][ T9439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9909'. [ 1878.914314][T23464] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1878.921189][T23464] usb 10-1: no configurations [ 1878.924965][T23464] usb 10-1: can't read configurations, error -22 [ 1879.122184][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1879.343336][ T9115] veth0_vlan: entered promiscuous mode [ 1879.349714][ T9115] veth1_vlan: entered promiscuous mode [ 1879.372815][ T9115] veth0_macvtap: entered promiscuous mode [ 1879.388052][ T9115] veth1_macvtap: entered promiscuous mode [ 1879.398355][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1879.407552][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1879.415504][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.424229][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.436961][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.444811][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.496611][T29120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.513993][T29120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.562417][T29126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.574923][T29126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.709956][ T9504] overlayfs: failed to resolve './bus': -2 [ 1879.787704][ T9508] FAULT_INJECTION: forcing a failure. [ 1879.787704][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.800582][ T9508] CPU: 3 UID: 0 PID: 9508 Comm: syz.5.9913 Tainted: G L syzkaller #0 PREEMPT(full) [ 1879.800612][ T9508] Tainted: [L]=SOFTLOCKUP [ 1879.800619][ T9508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1879.800629][ T9508] Call Trace: [ 1879.800637][ T9508] [ 1879.800644][ T9508] dump_stack_lvl+0x100/0x190 [ 1879.800670][ T9508] should_fail_ex.cold+0x5/0xa [ 1879.800691][ T9508] should_failslab+0xc2/0x120 [ 1879.800713][ T9508] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1879.800734][ T9508] ? _copy_from_iter+0x270/0x1690 [ 1879.800758][ T9508] ? __alloc_skb+0x140/0x710 [ 1879.800784][ T9508] __alloc_skb+0x140/0x710 [ 1879.800802][ T9508] ? __pfx___alloc_skb+0x10/0x10 [ 1879.800828][ T9508] ? __asan_memset+0x23/0x50 [ 1879.800847][ T9508] tipc_buf_acquire+0x26/0xe0 [ 1879.800902][ T9508] tipc_msg_build+0x827/0x1100 [ 1879.800934][ T9508] ? __pfx_tipc_msg_build+0x10/0x10 [ 1879.800965][ T9508] ? tipc_nametbl_lookup_mcast_nodes+0x214/0x370 [ 1879.800991][ T9508] tipc_sendmcast+0x797/0xba0 [ 1879.801024][ T9508] ? __pfx_tipc_sendmcast+0x10/0x10 [ 1879.801045][ T9508] ? __pfx___might_resched+0x10/0x10 [ 1879.801071][ T9508] ? find_held_lock+0x2b/0x80 [ 1879.801093][ T9508] ? down_write+0x146/0x1f0 [ 1879.801113][ T9508] ? __pfx_woken_wake_function+0x10/0x10 [ 1879.801130][ T9508] ? up_write+0x2e5/0x5c0 [ 1879.801154][ T9508] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1879.801180][ T9508] __tipc_sendmsg+0x6b9/0x1ab0 [ 1879.801201][ T9508] ? __lock_acquire+0x49f/0x1a40 [ 1879.801230][ T9508] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1879.801255][ T9508] ? __lock_acquire+0x49f/0x1a40 [ 1879.801280][ T9508] ? aa_sk_perm+0x309/0xaa0 [ 1879.801315][ T9508] ? __local_bh_enable_ip+0x9e/0x120 [ 1879.801337][ T9508] tipc_sendmsg+0x4f/0x70 [ 1879.801359][ T9508] ____sys_sendmsg+0xa4d/0xbe0 [ 1879.801384][ T9508] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1879.801408][ T9508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1879.801436][ T9508] ? _kstrtoull+0x13c/0x1f0 [ 1879.801453][ T9508] ? __pfx__kstrtoull+0x10/0x10 [ 1879.801471][ T9508] ___sys_sendmsg+0x190/0x1e0 [ 1879.801497][ T9508] ? __pfx____sys_sendmsg+0x10/0x10 [ 1879.801519][ T9508] ? __lock_acquire+0x49f/0x1a40 [ 1879.801570][ T9508] __sys_sendmmsg+0x309/0x440 [ 1879.801594][ T9508] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1879.801612][ T9508] ? find_held_lock+0x2b/0x80 [ 1879.801636][ T9508] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1879.801665][ T9508] ? fput+0x79/0x100 [ 1879.801684][ T9508] ? ksys_write+0x1ac/0x250 [ 1879.801712][ T9508] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1879.801736][ T9508] ? lockdep_hardirqs_on+0x78/0x100 [ 1879.801762][ T9508] __do_fast_syscall_32+0xe7/0x970 [ 1879.801779][ T9508] ? lockdep_hardirqs_on+0x78/0x100 [ 1879.801804][ T9508] do_fast_syscall_32+0x32/0x70 [ 1879.801826][ T9508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1879.801847][ T9508] RIP: 0023:0xf704efec [ 1879.801867][ T9508] Code: Unable to access opcode bytes at 0xf704efc2. [ 1879.801875][ T9508] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1879.801894][ T9508] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080006740 [ 1879.801904][ T9508] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1879.801915][ T9508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1879.801924][ T9508] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1879.801934][ T9508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1879.801956][ T9508] [ 1880.344038][ T9518] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1880.649222][ T9524] random: crng reseeded on system resumption [ 1880.741201][ T5748] Bluetooth: hci3: command tx timeout [ 1881.302706][ T9533] binder: 9532:9533 ioctl c0306201 80000080 returned -14 [ 1881.734655][ T9544] netlink: 'syz.6.9921': attribute type 1 has an invalid length. [ 1882.184860][ T9559] overlayfs: failed to resolve './bus': -2 [ 1882.818032][ T5748] Bluetooth: hci3: command tx timeout [ 1884.258198][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1884.898197][ T5748] Bluetooth: hci3: command tx timeout [ 1885.018805][T25210] ------------[ cut here ]------------ [ 1885.037676][T25210] time_after(jiffies, timeout) [ 1885.037693][T25210] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#2: kworker/u33:7/25210 [ 1885.043276][T25210] Modules linked in: [ 1885.046120][T25210] CPU: 2 UID: 0 PID: 25210 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1885.049796][T25210] Tainted: [L]=SOFTLOCKUP [ 1885.051310][T25210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1885.054469][T25210] Workqueue: iou_exit io_ring_exit_work [ 1885.056236][T25210] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 1885.058676][T25210] Code: 8e e8 eb 59 43 01 48 8b 05 04 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 d2 d4 d3 00 4d 85 ff 79 12 e8 28 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 16 da d3 00 48 8b 74 24 20 [ 1885.065138][T25210] RSP: 0000:ffffc90006b5faa0 EFLAGS: 00010293 [ 1885.067056][T25210] RAX: 0000000000000000 RBX: ffff88805124c710 RCX: ffffffff81354e8e [ 1885.069701][T25210] RDX: ffff8880795a0000 RSI: ffffffff81354e98 RDI: ffff8880795a0000 [ 1885.072414][T25210] RBP: ffffc90006b5fc38 R08: 0000000000000007 R09: 0000000000000000 [ 1885.074876][T25210] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88805124c000 [ 1885.077346][T25210] R13: dffffc0000000000 R14: 000000005124c700 R15: fffffffffffffffa [ 1885.079977][T25210] FS: 0000000000000000(0000) GS:ffff888096df1000(0000) knlGS:0000000000000000 [ 1885.082729][T25210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1885.084812][T25210] CR2: 00000000f7252e1f CR3: 000000000e992000 CR4: 0000000000352ef0 [ 1885.087658][T25210] DR0: 0000000000000005 DR1: 0000000000000006 DR2: 0000000000040003 [ 1885.091191][T25210] DR3: 00000000000003af DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1885.094100][T25210] Call Trace: [ 1885.095502][T25210] [ 1885.096651][T25210] ? do_raw_spin_lock+0x128/0x260 [ 1885.098359][T25210] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1885.100153][T25210] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1885.101980][T25210] ? debug_object_deactivate+0x2e4/0x3b0 [ 1885.103757][T25210] ? rcu_is_watching+0x12/0xc0 [ 1885.105502][T25210] process_one_work+0xa23/0x1940 [ 1885.107129][T25210] ? __pfx_process_one_work+0x10/0x10 [ 1885.108985][T25210] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1885.110957][T25210] worker_thread+0x5ef/0xe50 [ 1885.112448][T25210] ? kthread+0x13a/0x450 [ 1885.113815][T25210] ? __pfx_worker_thread+0x10/0x10 [ 1885.115412][T25210] kthread+0x370/0x450 [ 1885.116724][T25210] ? __pfx_kthread+0x10/0x10 [ 1885.118368][T25210] ret_from_fork+0x72b/0xd50 [ 1885.119814][T25210] ? __pfx_ret_from_fork+0x10/0x10 [ 1885.121424][T25210] ? __switch_to+0x800/0x10f0 [ 1885.122900][T25210] ? __pfx_kthread+0x10/0x10 [ 1885.124381][T25210] ret_from_fork_asm+0x1a/0x30 [ 1885.125894][T25210] [ 1885.126891][T25210] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1885.129086][T25210] CPU: 2 UID: 0 PID: 25210 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1885.132463][T25210] Tainted: [L]=SOFTLOCKUP [ 1885.133832][T25210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1885.136940][T25210] Workqueue: iou_exit io_ring_exit_work [ 1885.138859][T25210] Call Trace: [ 1885.139988][T25210] [ 1885.141058][T25210] dump_stack_lvl+0x100/0x190 [ 1885.142554][T25210] vpanic+0x552/0x970 [ 1885.143824][T25210] ? __pfx_vpanic+0x10/0x10 [ 1885.145322][T25210] panic+0xd1/0xe0 [ 1885.146639][T25210] ? __pfx_panic+0x10/0x10 [ 1885.148165][T25210] ? check_panic_on_warn+0x1f/0x90 [ 1885.149815][T25210] check_panic_on_warn.cold+0x19/0x34 [ 1885.151808][T25210] ? io_ring_exit_work+0x479/0xd7a [ 1885.153730][T25210] __warn.cold+0x191/0x318 [ 1885.155140][T25210] __report_bug+0x30f/0x440 [ 1885.156620][T25210] ? io_ring_exit_work+0x479/0xd7a [ 1885.158223][T25210] ? __pfx___report_bug+0x10/0x10 [ 1885.159778][T25210] ? rcu_is_watching+0x12/0xc0 [ 1885.161302][T25210] ? trace_contention_end+0x126/0x160 [ 1885.162967][T25210] ? __mutex_lock+0x26d/0x1bd0 [ 1885.164790][T25210] ? io_ring_exit_work+0x422/0xd7a [ 1885.166505][T25210] ? find_held_lock+0x2b/0x80 [ 1885.168041][T25210] ? io_ring_exit_work+0x434/0xd7a [ 1885.169878][T25210] ? io_ring_exit_work+0x479/0xd7a [ 1885.171865][T25210] report_bug+0xb2/0x220 [ 1885.173551][T25210] ? io_ring_exit_work+0x479/0xd7a [ 1885.175540][T25210] handle_bug+0x16a/0x2a0 [ 1885.177037][T25210] exc_invalid_op+0x17/0x50 [ 1885.178480][T25210] asm_exc_invalid_op+0x1a/0x20 [ 1885.180090][T25210] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 1885.181860][T25210] Code: 8e e8 eb 59 43 01 48 8b 05 04 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 d2 d4 d3 00 4d 85 ff 79 12 e8 28 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 16 da d3 00 48 8b 74 24 20 [ 1885.187884][T25210] RSP: 0000:ffffc90006b5faa0 EFLAGS: 00010293 [ 1885.189779][T25210] RAX: 0000000000000000 RBX: ffff88805124c710 RCX: ffffffff81354e8e [ 1885.192261][T25210] RDX: ffff8880795a0000 RSI: ffffffff81354e98 RDI: ffff8880795a0000 [ 1885.194992][T25210] RBP: ffffc90006b5fc38 R08: 0000000000000007 R09: 0000000000000000 [ 1885.197541][T25210] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88805124c000 [ 1885.200003][T25210] R13: dffffc0000000000 R14: 000000005124c700 R15: fffffffffffffffa [ 1885.202464][T25210] ? io_ring_exit_work+0x46e/0xd7a [ 1885.204114][T25210] ? io_ring_exit_work+0x478/0xd7a [ 1885.205744][T25210] ? do_raw_spin_lock+0x128/0x260 [ 1885.207329][T25210] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1885.209066][T25210] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1885.210916][T25210] ? debug_object_deactivate+0x2e4/0x3b0 [ 1885.212691][T25210] ? rcu_is_watching+0x12/0xc0 [ 1885.214374][T25210] process_one_work+0xa23/0x1940 [ 1885.215982][T25210] ? __pfx_process_one_work+0x10/0x10 [ 1885.217681][T25210] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1885.219401][T25210] worker_thread+0x5ef/0xe50 [ 1885.220921][T25210] ? kthread+0x13a/0x450 [ 1885.222608][T25210] ? __pfx_worker_thread+0x10/0x10 [ 1885.224327][T25210] kthread+0x370/0x450 [ 1885.225607][T25210] ? __pfx_kthread+0x10/0x10 [ 1885.227113][T25210] ret_from_fork+0x72b/0xd50 [ 1885.228611][T25210] ? __pfx_ret_from_fork+0x10/0x10 [ 1885.230179][T25210] ? __switch_to+0x800/0x10f0 [ 1885.232145][T25210] ? __pfx_kthread+0x10/0x10 [ 1885.233863][T25210] ret_from_fork_asm+0x1a/0x30 [ 1885.235521][T25210] [ 1885.237418][T25210] Kernel Offset: disabled [ 1885.238777][T25210] Rebooting in 86400 seconds..