last executing test programs: 16m59.972960327s ago: executing program 1 (id=33): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000400)={0x0, 0x3e49, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 16m51.405852355s ago: executing program 1 (id=46): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 16m50.918994926s ago: executing program 1 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a", 0x8d}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff53761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fdff01000000000000549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3d3c6f0d17be3ee7", 0xa0}, {&(0x7f0000000140)="de21cf0a7caa580c2ee9f858f448439a91d577dc48e04d539e17cf5357ff6cc0848e8bdfe13b6da3724e6fb7ef168cc7", 0x30}, {&(0x7f0000000540)="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", 0xddf}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 16m47.815714028s ago: executing program 0 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x24005000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m46.519022558s ago: executing program 0 (id=52): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000000000003ff, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4080) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r7, &(0x7f0000000340)="c4b3b2b6e7abb932778df3797cd1adcf94f50226ef395cb41ac6a441e9a81766f15457eae2bb83a7c9d00a8ac90ce7d8b4da35549b9d6efd6e063d5c2f1e969fb1fa75b8013d096230aaa4977f304369f099dd3392770900000000000000c6b9a9cffb631aeeef5977b964283260b5d71c42f0759be1bc9cea9f62d25905c21555fc98042de82fba194b00a60dcab8e8957400d5652f721127518112b59ac85f8424ca123e", 0xa5) write$dsp(r7, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x4000000) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 16m46.219040075s ago: executing program 1 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16m46.067124109s ago: executing program 1 (id=55): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x200000000000004b, &(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x1ffffc, 0x200800, 0xfff, 0x0, 0xc, 0x85}) r7 = memfd_create(&(0x7f0000000240)='\xc6\xefT\xbd\xf1Z\xcc\x7f_>\xdd\x8fDaR\'\xbd\xb7I\xe2\x8b\x06\x006j0g\x8aj\x85\x13K)x\xd0C\xf3\xbc\x92\xfbG\x14?\x06\x00\x00\x00\x00\x00\x00\x00\xe1\vo\xef\x15;\x00\x00\xc0\x98>\x17:\x97\x03\xba\xd3\xd5z\xd8\xa3\xa6\xd3\x1cr\x18\xd0\xe3@|\x8c\xb6b\xdf\xd3^HR\xedp\xcb\xeb\x95q\x9b\xad\xd64a\x13\xf9+\x8e].\xe9\xee|\x9d)\x86\xbc\xa4\x15\x1c\xc6\xf7n81\xd1te\xabt-\xfd\x7f8\xc4\xad`%NC\x1c\x1cb\xa5\xd8g$+\x03\x01\xc0Xu\x11\xbf\xa2\xe4\xaa\xc1\xf08\xb6\xfb\xd1\xcd]\xd4VTBu\xf0\x90\x8e\x98\xf6\xba*\xe8P\n\x05)D\xc5\x9b\xf5n\xdc\xb9\xf5N\xe2`\f\x05C\xda\x8aK\xc3\x83I\x89\"\x8cj\xc5$\xc2\x1e\xb9\xd9hi\xb8.\xf1\xe6-d\xc5\fhM\xc8\xc5\xd7ry\xa5\xf2\x01-\x055A\xfa\a\x00\x00\x00\x00\x00\x00\x00l\xa6\x00\xdd\xb1n1L\x04\xfd\xb5\x98\xfcI{\xe9\xeeQ\xb6\xd7\rbp\x84\"B\x05x\x99m\xa0\x106\xa9\x9c#\xeaw[\x1d\xd2\xf9\xce\xe7\xfd(\x05\x1bT\xf6\x1acPR\xd8R\b\x91\aa2S\x82%\xe0.\x95\xd0L\xfe8\xd8\x00'/328, 0x4) fchown(r7, 0x0, 0xee00) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xffffffff, 0x40802) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f00000001c0)=0x2) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x107000, 0x48, 0x28}, 0x18) timerfd_gettime(0xffffffffffffffff, 0x0) 16m45.710939766s ago: executing program 1 (id=56): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r3, r0, 0x0) 16m45.032181032s ago: executing program 32 (id=56): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r3, r0, 0x0) 16m41.476506984s ago: executing program 0 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x24005000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m39.770516264s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16m35.536332331s ago: executing program 0 (id=66): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000002280)={0x0, 0x0, 0xfffffffe}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 16m31.923049525s ago: executing program 0 (id=72): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) 16m31.529905504s ago: executing program 33 (id=72): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) 11m59.985023324s ago: executing program 3 (id=462): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "2be30de78ad5908bb94572375fdd040ad220a150155d133e", "2addd14e513b73a9f984010e10f5432a1cd5d40a7d8f0635db1640e20904c1d2"}}}}}}}, 0x0) 11m59.780156109s ago: executing program 3 (id=464): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xff07, 0x0, 0x40000}, 0x2000000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000080)) r2 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb236100000001"], 0x0) write$usbip_server(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) pipe2(&(0x7f0000000040), 0x80) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) 11m56.002276366s ago: executing program 3 (id=469): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000200)={0x5, 0xffffffffffffffff, 0x30, {0xa, 0x8000000000000003}, 0xb}, 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000000)={{@hyper, 0x1}, @local, 0x8, 0x2, 0x425, 0x4}) 11m55.153428675s ago: executing program 3 (id=470): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0, @ANYBLOB="1400120003002c16d39f4eced36e537b22ff900f080001042e37d3cad7a80d0eee08dab5c10000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') 11m54.605101118s ago: executing program 3 (id=473): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0, @ANYBLOB="1400120003002c16d39f4eced36e537b22ff900f080001042e37d3cad7a80d0eee08dab5c10000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32, @ANYRES32=r6, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 11m52.135352365s ago: executing program 3 (id=476): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000e0a052000000000000000000a0000050900010073797a3100000000140003800c0000800800034000000002040000800900020073797a3100000000140000001100010000000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, 0x0, 0x1b, 0x0, 0xa}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) 11m36.133988445s ago: executing program 34 (id=476): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000e0a052000000000000000000a0000050900010073797a3100000000140003800c0000800800034000000002040000800900020073797a3100000000140000001100010000000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, 0x0, 0x1b, 0x0, 0xa}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) 5m52.483345309s ago: executing program 2 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) close_range(r0, 0xffffffffffffffff, 0x0) 5m49.591066496s ago: executing program 2 (id=1139): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000200)={0x5, 0xffffffffffffffff, 0x30, {0xa, 0x8000000000000003}, 0xb}, 0x1) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) 5m47.366192958s ago: executing program 2 (id=1143): socket(0x29, 0xa, 0x1cb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="0a000300010040", 0x7) r0 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) close(r3) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x80302, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000000)={0x55, 0x6, 0x6, 0x873e, 0x200}) write(r5, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) syz_usb_disconnect(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) 5m44.002706765s ago: executing program 2 (id=1147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) close_range(r0, 0xffffffffffffffff, 0x0) 5m42.94823215s ago: executing program 2 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x74}}, 0x24005000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m41.856321065s ago: executing program 2 (id=1151): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x34014c40, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 5m26.386629622s ago: executing program 35 (id=1151): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe, 0x34014c40, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 16.871177406s ago: executing program 4 (id=1752): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='1\n', 0x2) 16.517638823s ago: executing program 4 (id=1757): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea", 0x2e) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0, @ANYBLOB="1400120003002c16d39f4eced36e537b22ff900f080001042e37d3cad7a80d0eee08dab5c10000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 15.574351155s ago: executing program 4 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 10.07000325s ago: executing program 5 (id=1766): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea", 0x2e) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0, @ANYBLOB="1400120003002c16d39f4eced36e537b22ff900f080001042e37d3cad7a80d0eee08dab5c10000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 8.850816158s ago: executing program 5 (id=1770): ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) 7.8795425s ago: executing program 4 (id=1771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xbe, 0x0, 0x1}) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0x53b, 0x4}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x80000000000}]}) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa09040000"], 0x0) 7.274644754s ago: executing program 7 (id=1773): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x67ac, 0x8, 0x3, 0x87}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d0c, 0x10000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3fd0, 0x2000, 0x2, 0x29c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe46d, 0x8000, 0x0, 0x2c3}}], 0x4, &(0x7f0000001500)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x2, 0x492, 0x0, &(0x7f0000000500)=@buf_max_buf="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"}}, &(0x7f0000001580)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xfffffffffffffff9, 0x50ff, 0x9, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) 6.880987233s ago: executing program 7 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x2d, 0x1001, r1, 0x0) fanotify_mark(r2, 0x22, 0x40001017, r1, 0x0) 6.637276668s ago: executing program 7 (id=1776): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80240, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000000053c1def4cf2b440000", 0x1d, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000530000000000080004004400000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) 5.548999823s ago: executing program 5 (id=1779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) close_range(r0, 0xffffffffffffffff, 0x0) 5.496945994s ago: executing program 7 (id=1780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.755875931s ago: executing program 6 (id=1781): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') 4.37160509s ago: executing program 5 (id=1782): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONCOUNT(r2, 0x80044d07, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000340)={0x20000, "2a123b200000000000010000000000000000000000040000000000008000", 0x0, 0xfffffffd, 0x1, 0xe0, 0xba994d21c8ea99c7, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) 3.863536782s ago: executing program 6 (id=1783): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000400)={0x0, 0x3e49, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 3.427172541s ago: executing program 7 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x2d, 0x1001, r1, 0x0) fanotify_mark(r2, 0x22, 0x40001017, r1, 0x0) 2.961371103s ago: executing program 4 (id=1785): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='1\n', 0x2) 2.939833713s ago: executing program 6 (id=1786): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) 2.877117414s ago: executing program 6 (id=1787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2.534796212s ago: executing program 7 (id=1788): ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) 1.979484125s ago: executing program 6 (id=1789): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec11", 0x45) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0, @ANYBLOB="1400120003002c16d39f4eced36e537b22ff900f080001042e37d3cad7a80d0eee08dab5c10000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 1.890626296s ago: executing program 4 (id=1790): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0xacac, 0x4000, 0x1, 0x2d1}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcdfc, 0x80, 0x1, 0x268}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6296, 0x200, 0x2, 0x4d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6f4, 0x1, 0x1, 0x39c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2fb, 0x100, 0x0, 0x35c}}], 0x4, &(0x7f00000023c0)={0x2e, 0x82c5e174d1c7d74e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xb6f, 0x0, &(0x7f00000013c0)=@buf_4k="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"}}, &(0x7f0000002440)) syz_io_uring_setup(0x400, &(0x7f0000002480)={0x0, 0xe7cc, 0x80, 0x3, 0xab, 0x0, r0}, 0x0, &(0x7f0000002580), &(0x7f00000025c0)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r3, &(0x7f0000002540)=[{&(0x7f00000012c0)=""/226, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x400d0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) setns(0xc9, 0x0) r4 = syz_usb_connect(0x3, 0x4b, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x12, 0x1, '\x00'}, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x1}, &(0x7f0000000000)={0x20, 0x0, 0x4}, &(0x7f0000000000)={0x20, 0x0, 0x4}, &(0x7f0000000000)={0x40, 0x7, 0x2}, &(0x7f0000000000)={0x40, 0x9, 0x1}, &(0x7f0000000000)={0x40, 0xb, 0x2}, &(0x7f0000000000)={0x40, 0xf, 0x2}, &(0x7f0000000000)={0x40, 0x13, 0x6}, &(0x7f0000000000)={0x40, 0x17, 0x6}, &(0x7f0000000000)={0x40, 0x19, 0x2}, &(0x7f0000000000)={0x40, 0x1a, 0x2}, &(0x7f0000000000)={0x40, 0x1c, 0x1}, &(0x7f0000000000)={0x40, 0x1e, 0x1}, &(0x7f0000000000)={0x40, 0x21, 0x1}}) r5 = socket(0x8, 0x2, 0x0) setsockopt(r5, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r5, &(0x7f0000000300)=@generic={0x8, "ffff00002000"}, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x101122, 0x0) write(r6, &(0x7f0000000200)='bfq', 0x3) fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000001c0)={0x0, 0x7fffffffffffffff, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 1.871431927s ago: executing program 5 (id=1791): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(&(0x7f0000000000)='./bus\x00') 939.141288ms ago: executing program 6 (id=1792): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 5 (id=1793): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xe9d6, 0x80, 0x2, 0x1ba}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d2c11947fe9151f}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x463}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4044094) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000011000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000016000/0x1000)=nil, &(0x7f0000000100)="98ec895b151fbcbb1a902d77ec2e55ec778253764500df06d09d6bf059ae9089505a7bda50fccfd125a4019a0313edb07bca0db6ea61f57ea5e81ab7", 0x3c}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x4, 0x181}) syz_open_dev$dri(&(0x7f0000000000), 0x1000000000000000, 0x410000) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x5, 0x7, 0x4, 0x8, 0x16, "ad82f944bd8da7c5"}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) kernel console output (not intermixed with test programs): with an up link [ 421.882421][ T8303] team0: Port device team_slave_0 added [ 421.883800][ T5830] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 421.924907][ T8303] team0: Port device team_slave_1 added [ 422.047761][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.065585][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.142066][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.248321][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.307571][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.381926][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.537031][ T8303] hsr_slave_0: entered promiscuous mode [ 422.544328][ T8303] hsr_slave_1: entered promiscuous mode [ 422.832061][ T7649] usb 6-1: USB disconnect, device number 27 [ 422.849249][ T7649] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 423.439584][ T8327] netlink: 84 bytes leftover after parsing attributes in process `syz.2.515'. [ 424.186283][ T8304] Bluetooth: hci4: command tx timeout [ 424.253400][ T8303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.373219][ T8303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.425459][ T8303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.478022][ T8303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.931930][ T8333] Process accounting resumed [ 425.998235][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.116149][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.186011][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.193202][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.222153][ T8304] Bluetooth: hci4: command tx timeout [ 426.311210][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.318403][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.849123][ T8341] can0: slcan on ptm0. [ 427.455304][ T8340] can0 (unregistered): slcan off ptm0. [ 427.552485][ T8303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.571948][ T8303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.386745][ T8304] Bluetooth: hci4: command tx timeout [ 428.494118][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 428.502994][ T8345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.522'. [ 429.521685][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.882026][ T5833] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 430.081921][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 430.099652][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 430.125800][ T5833] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 430.145719][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.177623][ T5833] usb 3-1: Product: syz [ 430.192391][ T5833] usb 3-1: Manufacturer: syz [ 430.197045][ T5833] usb 3-1: SerialNumber: syz [ 430.205007][ T8303] veth0_vlan: entered promiscuous mode [ 430.228512][ T5833] usb 3-1: config 0 descriptor?? [ 431.458900][ T5833] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 431.482511][ T5833] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 431.512895][ T8303] veth1_vlan: entered promiscuous mode [ 431.595408][ T8303] veth0_macvtap: entered promiscuous mode [ 431.636606][ T8303] veth1_macvtap: entered promiscuous mode [ 431.684434][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.725690][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.752392][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.782121][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.803600][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.831863][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 157 (since boot) is 1032 jiffies old. [ 431.842419][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.873441][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.949049][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.991939][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.018988][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.060170][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.062707][ T5833] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 432.090541][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.121652][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.153709][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.185015][ T8303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.221898][ T8303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.250984][ T8303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.281343][ T8303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.478846][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.508939][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.631799][ T5833] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 432.640345][ T5833] em28xx 3-1:0.0: board has no eeprom [ 432.694805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.758681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.026419][ T8378] binder: 8376:8378 ioctl c0306201 0 returned -14 [ 433.052888][ T5833] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 433.069730][ T5833] em28xx 3-1:0.0: dvb set to bulk mode. [ 433.099354][ T7660] em28xx 3-1:0.0: Binding DVB extension [ 433.194723][ T8380] netlink: 36 bytes leftover after parsing attributes in process `syz.4.529'. [ 433.228511][ T8380] netlink: 36 bytes leftover after parsing attributes in process `syz.4.529'. [ 434.019448][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.389947][ T8357] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 434.411689][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.664283][ T7660] em28xx 3-1:0.0: Registering input extension [ 434.719751][ T7660] usb 3-1: USB disconnect, device number 40 [ 434.762737][ T7660] em28xx 3-1:0.0: Disconnecting em28xx [ 434.768570][ T7660] em28xx 3-1:0.0: Closing input extension [ 434.878506][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.689532][ T7660] em28xx 3-1:0.0: Freeing device [ 438.074533][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.195825][ T8407] binder: 8406:8407 ioctl c0306201 0 returned -14 [ 438.393028][ T7660] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 438.603706][ T7660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.624916][ T7660] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.658311][ T7660] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 438.667840][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.6.538'. [ 438.677882][ T7660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.701371][ T7660] usb 3-1: Product: syz [ 438.721809][ T7660] usb 3-1: Manufacturer: syz [ 438.731239][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.6.538'. [ 438.749666][ T7660] usb 3-1: SerialNumber: syz [ 439.659702][ T7660] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 440.225833][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.240977][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.219152][ T7660] usb 3-1: USB disconnect, device number 41 [ 441.288252][ T7660] usblp0: removed [ 444.952273][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.6.548'. [ 444.996393][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.6.548'. [ 446.312347][ T7649] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 446.360590][ T42] hsr_slave_0: left promiscuous mode [ 446.412275][ T42] hsr_slave_1: left promiscuous mode [ 446.453250][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.471534][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.521661][ T7649] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 446.543867][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.556773][ T7649] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 446.569471][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.590950][ T7649] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 446.601962][ T42] bridge_slave_1: left allmulticast mode [ 446.609577][ T7649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.617829][ T7649] usb 7-1: Product: syz [ 446.622280][ T7649] usb 7-1: Manufacturer: syz [ 446.627206][ T7649] usb 7-1: SerialNumber: syz [ 446.633171][ T42] bridge_slave_1: left promiscuous mode [ 446.639181][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.666807][ T42] bridge_slave_0: left allmulticast mode [ 446.677392][ T42] bridge_slave_0: left promiscuous mode [ 446.684099][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.805088][ T42] veth1_macvtap: left promiscuous mode [ 446.810689][ T42] veth0_macvtap: left promiscuous mode [ 446.832352][ T42] veth1_vlan: left promiscuous mode [ 446.837743][ T42] veth0_vlan: left promiscuous mode [ 446.844854][ T8489] binder: BINDER_SET_CONTEXT_MGR already set [ 446.871065][ T7649] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 446.871607][ T8489] binder: 8488:8489 ioctl 4018620d 200000004a80 returned -16 [ 446.921449][ T8489] binder: 8488:8489 ioctl c0306201 0 returned -14 [ 448.976549][ T7648] usb 7-1: USB disconnect, device number 2 [ 449.026270][ T7648] usblp0: removed [ 449.232565][ T8515] kernel profiling enabled (shift: 63) [ 449.269634][ T8515] profiling shift: 63 too large [ 451.989870][ T5759] infiniband syz2: ib_query_port failed (-19) [ 454.124607][ T7645] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 454.347843][ T7645] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.431455][ T7645] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.590017][ T7645] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 454.679049][ T7645] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.768496][ T7645] usb 6-1: Product: syz [ 454.813535][ T7645] usb 6-1: Manufacturer: syz [ 454.870683][ T7645] usb 6-1: SerialNumber: syz [ 455.254154][ T7645] ttusb_dec_send_command: result bulk message failed: error -22 [ 455.273023][ T7645] ttusb-dec: probe of 6-1:1.0 failed with error -22 [ 455.291867][ T5759] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 455.295522][ T7645] usb 6-1: USB disconnect, device number 28 [ 455.528803][ T5759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.538838][ T5759] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 455.552552][ T5759] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 455.578223][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.586488][ T5759] usb 5-1: Product: syz [ 455.597622][ T5759] usb 5-1: Manufacturer: syz [ 455.616243][ T5759] usb 5-1: SerialNumber: syz [ 455.641072][ T42] team0 (unregistering): Port device team_slave_1 removed [ 455.706596][ T42] team0 (unregistering): Port device team_slave_0 removed [ 455.806169][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.054647][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.252897][ T5759] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 458.881164][ T7642] usb 5-1: USB disconnect, device number 14 [ 458.900380][ T7642] usblp0: removed [ 461.535555][ T42] bond0 (unregistering): Released all slaves [ 461.918282][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.5.573'. [ 462.061904][ T5759] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 462.303663][ T5759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.460616][ T42] IPVS: stop unused estimator thread 0... [ 463.612983][ T5759] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 465.350505][ T5759] usb 5-1: string descriptor 0 read error: -71 [ 465.356912][ T5759] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 465.391764][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.450487][ T5759] usb 5-1: can't set config #1, error -71 [ 465.468256][ T5759] usb 5-1: USB disconnect, device number 15 [ 465.588925][ T7646] Process accounting resumed [ 466.731777][ T8629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.591'. [ 467.889962][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.595'. [ 467.898886][ T8639] netlink: 48 bytes leftover after parsing attributes in process `syz.5.595'. [ 468.673390][ T7646] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 469.098484][ T7646] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.115203][ T7646] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.160509][ T7646] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 469.202340][ T7646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.231296][ T7646] usb 5-1: Product: syz [ 469.236360][ T7646] usb 5-1: Manufacturer: syz [ 469.243048][ T7646] usb 5-1: SerialNumber: syz [ 469.522719][ T7648] Process accounting resumed [ 469.591112][ T7646] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 470.232186][ T7648] usb 5-1: USB disconnect, device number 16 [ 470.302146][ T7648] usblp0: removed [ 470.461791][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.602'. [ 472.152430][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 472.161818][ T8676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.606'. [ 472.452019][ T7639] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 472.681840][ T7639] usb 6-1: Using ep0 maxpacket: 32 [ 472.716303][ T7639] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.750538][ T7639] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.800975][ T7639] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.806147][ T8696] netlink: 80 bytes leftover after parsing attributes in process `syz.6.609'. [ 472.830292][ T7639] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 472.860003][ T7639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.877457][ T7639] usb 6-1: Product: syz [ 472.881666][ T7639] usb 6-1: Manufacturer: syz [ 472.886808][ T7639] usb 6-1: SerialNumber: syz [ 472.902282][ T7639] usb 6-1: config 0 descriptor?? [ 473.792211][ T7639] gs_usb 6-1:0.0: Configuring for 16 interfaces [ 473.901763][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.609'. [ 473.911981][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.939842][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.004455][ T7639] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 474.054613][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.076485][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.100435][ T7639] gs_usb: probe of 6-1:0.0 failed with error -22 [ 474.289116][ T7639] usb 6-1: USB disconnect, device number 29 [ 474.444708][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.611'. [ 476.745376][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 476.754389][ T8732] netlink: 48 bytes leftover after parsing attributes in process `syz.4.616'. [ 477.541845][ T7648] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 477.564119][ T8734] binder: BINDER_SET_CONTEXT_MGR already set [ 477.615888][ T8734] binder: 8731:8734 ioctl 4018620d 200000004a80 returned -16 [ 477.738762][ T7648] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 477.777604][ T7648] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 477.807455][ T7648] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 477.827103][ T7648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.838816][ T7648] usb 6-1: Product: syz [ 477.857021][ T7648] usb 6-1: Manufacturer: syz [ 477.862044][ T7648] usb 6-1: SerialNumber: syz [ 477.937325][ T8743] Bluetooth: ISO socket layer initialized [ 479.665128][ T7648] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 479.739852][ T7648] usb 6-1: USB disconnect, device number 30 [ 479.774529][ T7648] usblp0: removed [ 480.372858][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.5.621'. [ 481.667700][ T8774] kAFS: No cell specified [ 481.716725][ T8775] fuse: Unknown parameter '0x0000000000000005' [ 482.482984][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.626'. [ 482.492105][ T8785] netlink: 48 bytes leftover after parsing attributes in process `syz.6.626'. [ 482.532655][ T8785] geneve2: entered promiscuous mode [ 482.538039][ T8785] geneve2: entered allmulticast mode [ 483.670465][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 483.679298][ T8791] netlink: 48 bytes leftover after parsing attributes in process `syz.2.630'. [ 485.630637][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 485.725501][ T8815] bridge0: entered promiscuous mode [ 485.947770][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.631'. [ 487.894587][ T8836] Process accounting resumed [ 488.120422][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.639'. [ 488.129262][ T8840] netlink: 48 bytes leftover after parsing attributes in process `syz.5.639'. [ 488.977649][ T8847] fuse: Unknown parameter '0x0000000000000005' [ 489.157075][ T7639] Process accounting resumed [ 489.540516][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 489.599428][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 490.052837][ T7649] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 490.209996][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 490.218863][ T8877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.649'. [ 491.016829][ T7649] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.114989][ T8873] Process accounting resumed [ 491.132041][ T7649] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 491.187784][ T7649] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 491.236928][ T7649] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 491.278162][ T8882] fuse: Unknown parameter '0x0000000000000005' [ 491.285310][ T7649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.309150][ T7649] usb 6-1: Product: syz [ 491.325199][ T7649] usb 6-1: Manufacturer: syz [ 491.329857][ T7649] usb 6-1: SerialNumber: syz [ 491.553024][ T7639] Process accounting resumed [ 491.603283][ T7649] ttusb_dec_send_command: result bulk message failed: error -90 [ 491.613509][ T7649] ttusb-dec: probe of 6-1:1.0 failed with error -90 [ 491.633372][ T7649] usb 6-1: USB disconnect, device number 31 [ 492.268335][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 492.298453][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.655'. [ 492.335998][ T8906] netlink: 80 bytes leftover after parsing attributes in process `syz.6.656'. [ 492.435958][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.656'. [ 492.612397][ T7649] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 492.674357][ T8920] fuse: Unknown parameter '0x0000000000000005' [ 492.860194][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 492.869069][ T8923] netlink: 48 bytes leftover after parsing attributes in process `syz.2.659'. [ 493.581906][ T7649] usb 5-1: Using ep0 maxpacket: 8 [ 493.590202][ T7649] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 493.598680][ T7649] usb 5-1: config 0 has no interface number 0 [ 493.605414][ T7649] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 493.622854][ T7649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.657450][ T7649] usb 5-1: config 0 descriptor?? [ 493.701820][ T7660] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 493.782413][ T7649] viperboard 5-1:0.143: version 0.00 found at bus 005 address 017 [ 493.894053][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.920113][ T7660] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.003532][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.055214][ T7660] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.185478][ T7660] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 494.333173][ T7660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.450959][ T7660] usb 6-1: Product: syz [ 494.514952][ T7660] usb 6-1: Manufacturer: syz [ 494.584246][ T7660] usb 6-1: SerialNumber: syz [ 495.489534][ T7660] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 495.874171][ T7660] usb 6-1: USB disconnect, device number 32 [ 496.186583][ T7660] usblp0: removed [ 496.728076][ T7649] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 496.748044][ T7649] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 496.762508][ T7649] usb 5-1: USB disconnect, device number 17 [ 496.846101][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.665'. [ 496.860752][ T8937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.665'. [ 498.254243][ T7649] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 499.980430][ T7649] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.092434][ T7649] usb 5-1: string descriptor 0 read error: -71 [ 500.101339][ T7649] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 500.121458][ T7649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.158817][ T7649] usb 5-1: can't set config #1, error -71 [ 500.202025][ T7649] usb 5-1: USB disconnect, device number 18 [ 500.356472][ T7642] Process accounting resumed [ 500.560889][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 500.569711][ T8971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.669'. [ 501.353475][ T8976] fuse: Unknown parameter 'fd0x0000000000000005' [ 501.576620][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.583118][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.811982][ T7639] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 503.112867][ T7639] usb 3-1: Using ep0 maxpacket: 8 [ 503.178081][ T7639] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 503.293220][ T7639] usb 3-1: config 0 has no interface number 0 [ 503.382136][ T7639] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 503.506950][ T7639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.802576][ T7639] usb 3-1: config 0 descriptor?? [ 504.086550][ T7639] viperboard 3-1:0.143: version 0.00 found at bus 003 address 042 [ 504.220686][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.418093][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.695739][ T7639] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 504.958982][ T7639] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 505.652214][ T5830] usb 3-1: USB disconnect, device number 42 [ 505.772402][ T9004] lo speed is unknown, defaulting to 1000 [ 505.778496][ T9004] lo speed is unknown, defaulting to 1000 [ 505.797947][ T9004] lo speed is unknown, defaulting to 1000 [ 505.810698][ T9004] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 505.829066][ T9004] lo speed is unknown, defaulting to 1000 [ 505.836274][ T9004] lo speed is unknown, defaulting to 1000 [ 505.842914][ T9004] lo speed is unknown, defaulting to 1000 [ 505.849450][ T9004] lo speed is unknown, defaulting to 1000 [ 505.981511][ T7639] Process accounting resumed [ 505.985251][ T9014] syz.4.671(9014): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 506.200362][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 506.209197][ T9017] netlink: 48 bytes leftover after parsing attributes in process `syz.5.679'. [ 506.977274][ T9023] fuse: Unknown parameter 'fd0x0000000000000005' [ 509.473453][ T9046] siw: device registration error -23 [ 509.511297][ T5830] lo speed is unknown, defaulting to 1000 [ 511.964395][ T9061] FAULT_INJECTION: forcing a failure. [ 511.964395][ T9061] name failslab, interval 1, probability 0, space 0, times 1 [ 512.035295][ T9061] CPU: 0 PID: 9061 Comm: syz.2.689 Not tainted syzkaller #0 [ 512.042650][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.052737][ T9061] Call Trace: [ 512.056034][ T9061] [ 512.058980][ T9061] dump_stack_lvl+0x18c/0x250 [ 512.063794][ T9061] ? show_regs_print_info+0x20/0x20 [ 512.069026][ T9061] ? load_image+0x420/0x420 [ 512.073564][ T9061] ? __might_sleep+0xe0/0xe0 [ 512.078193][ T9061] ? __lock_acquire+0x7d80/0x7d80 [ 512.083249][ T9061] should_fail_ex+0x394/0x4c0 [ 512.087963][ T9061] should_failslab+0x9/0x20 [ 512.092496][ T9061] slab_pre_alloc_hook+0x59/0x300 [ 512.097558][ T9061] ? _iommufd_object_alloc+0x26/0x1c0 [ 512.102960][ T9061] ? _iommufd_object_alloc+0x26/0x1c0 [ 512.108363][ T9061] __kmem_cache_alloc_node+0x53/0x250 [ 512.113775][ T9061] ? _iommufd_object_alloc+0x26/0x1c0 [ 512.119170][ T9061] __kmalloc+0xa7/0x240 [ 512.123372][ T9061] _iommufd_object_alloc+0x26/0x1c0 [ 512.128605][ T9061] iommufd_ioas_alloc_ioctl+0xa0/0x2e0 [ 512.134096][ T9061] iommufd_fops_ioctl+0x48b/0x540 [ 512.139153][ T9061] ? iommufd_ctx_put+0x40/0x40 [ 512.143945][ T9061] ? __fget_files+0x28/0x460 [ 512.148583][ T9061] ? bpf_lsm_file_ioctl+0x9/0x10 [ 512.153548][ T9061] ? security_file_ioctl+0x80/0xa0 [ 512.158699][ T9061] ? iommufd_ctx_put+0x40/0x40 [ 512.163496][ T9061] __se_sys_ioctl+0xfd/0x170 [ 512.168129][ T9061] do_syscall_64+0x55/0xb0 [ 512.172574][ T9061] ? clear_bhb_loop+0x40/0x90 [ 512.177278][ T9061] ? clear_bhb_loop+0x40/0x90 [ 512.181993][ T9061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.187933][ T9061] RIP: 0033:0x7fcf5dd9e159 [ 512.192377][ T9061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.212009][ T9061] RSP: 002b:00007fcf5ebd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.220451][ T9061] RAX: ffffffffffffffda RBX: 00007fcf5e025fa0 RCX: 00007fcf5dd9e159 [ 512.228453][ T9061] RDX: 0000200000000400 RSI: 0000000000003b81 RDI: 0000000000000005 [ 512.236500][ T9061] RBP: 00007fcf5de35024 R08: 0000000000000000 R09: 0000000000000000 [ 512.244502][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.252496][ T9061] R13: 00007fcf5e026038 R14: 00007fcf5e025fa0 R15: 00007ffdc5934788 [ 512.260502][ T9061] [ 512.380800][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 512.412004][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 512.462184][ T7645] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 512.585095][ T5830] Process accounting resumed [ 512.665613][ T7645] usb 5-1: Using ep0 maxpacket: 8 [ 512.673032][ T7645] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 512.699927][ T7645] usb 5-1: config 0 has no interface number 0 [ 512.731921][ T7645] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 512.754030][ T7645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.776544][ T7645] usb 5-1: config 0 descriptor?? [ 512.810118][ T9081] siw: device registration error -23 [ 512.913159][ T7645] viperboard 5-1:0.143: version 0.00 found at bus 005 address 019 [ 512.969648][ T7645] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 512.999246][ T7645] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 513.011101][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.052445][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.104484][ T7645] usb 5-1: USB disconnect, device number 19 [ 517.332915][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.702'. [ 518.794549][ T9134] siw: device registration error -23 [ 519.012411][ T9140] netlink: 80 bytes leftover after parsing attributes in process `syz.5.701'. [ 519.041821][ T7648] Process accounting resumed [ 520.431775][ T7639] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 521.780705][ T9155] Process accounting resumed [ 521.932215][ T7639] usb 3-1: Using ep0 maxpacket: 8 [ 521.949010][ T7639] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 521.960932][ T7639] usb 3-1: config 0 has no interface number 0 [ 521.971814][ T7639] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 522.019573][ T7639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.045717][ T7639] usb 3-1: config 0 descriptor?? [ 522.182685][ T7639] viperboard 3-1:0.143: version 0.00 found at bus 003 address 043 [ 522.240849][ T7639] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 522.272547][ T9175] siw: device registration error -23 [ 522.280106][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.353439][ T7639] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 522.363685][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.512048][ T9183] netlink: 80 bytes leftover after parsing attributes in process `syz.5.716'. [ 522.579532][ T7645] usb 3-1: USB disconnect, device number 43 [ 522.685329][ T9171] Bluetooth: MGMT ver 1.22 [ 524.250536][ T7660] Process accounting resumed [ 525.919394][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.722'. [ 525.988900][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.722'. [ 526.311829][ T5759] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 527.724840][ T9221] Process accounting resumed [ 527.761853][ T9228] netlink: 80 bytes leftover after parsing attributes in process `syz.2.725'. [ 527.804198][ T5759] usb 6-1: unable to get BOS descriptor or descriptor too short [ 527.822456][ T5759] usb 6-1: config 9 has an invalid interface number: 3 but max is 2 [ 527.839831][ T5759] usb 6-1: config 9 has an invalid interface number: 235 but max is 2 [ 527.927375][ T9234] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 527.938395][ T9234] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 527.947299][ T9234] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 528.698682][ T5759] usb 6-1: config 9 has no interface number 1 [ 528.705341][ T5759] usb 6-1: config 9 has no interface number 2 [ 528.711440][ T5759] usb 6-1: config 9 interface 0 has no altsetting 0 [ 528.718145][ T5759] usb 6-1: config 9 interface 3 has no altsetting 0 [ 528.725055][ T5759] usb 6-1: config 9 interface 235 has no altsetting 0 [ 528.746214][ T5759] usb 6-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=17.50 [ 528.755877][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.785752][ T5759] usb 6-1: Product: syz [ 528.801753][ T5759] usb 6-1: Manufacturer: syz [ 528.823533][ T5759] usb 6-1: SerialNumber: syz [ 529.211216][ T9247] netlink: 36 bytes leftover after parsing attributes in process `syz.6.728'. [ 529.246251][ T5759] usb 6-1: selecting invalid altsetting 0 [ 529.252232][ T5759] usb 6-1: Could not set interface, error -22 [ 529.289729][ T5759] usb 6-1: USB disconnect, device number 33 [ 532.686641][ T7639] Process accounting resumed [ 534.397345][ T9275] Process accounting resumed [ 534.609430][ T9285] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 534.618053][ T9285] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 534.626635][ T9285] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 535.585654][ T9282] siw: device registration error -23 [ 535.808387][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 535.848293][ T9294] bridge0: entered promiscuous mode [ 535.886296][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 536.204915][ T7645] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 536.404324][ T7645] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.424509][ T7645] usb 3-1: config 9 has an invalid interface number: 3 but max is 2 [ 536.460428][ T7645] usb 3-1: config 9 has an invalid interface number: 235 but max is 2 [ 536.506327][ T7645] usb 3-1: config 9 has no interface number 1 [ 536.552605][ T7645] usb 3-1: config 9 has no interface number 2 [ 536.586781][ T7645] usb 3-1: config 9 interface 0 has no altsetting 0 [ 536.626481][ T7645] usb 3-1: config 9 interface 3 has no altsetting 0 [ 536.657839][ T7645] usb 3-1: config 9 interface 235 has no altsetting 0 [ 536.691517][ T7645] usb 3-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=17.50 [ 536.717560][ T7645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.770661][ T7645] usb 3-1: Product: syz [ 536.786180][ T7645] usb 3-1: Manufacturer: syz [ 536.810224][ T7645] usb 3-1: SerialNumber: syz [ 537.148907][ T7645] usb 3-1: selecting invalid altsetting 0 [ 537.184861][ T7645] usb 3-1: Could not set interface, error -22 [ 537.230983][ T7645] usb 3-1: USB disconnect, device number 44 [ 538.659788][ T5759] Process accounting resumed [ 538.951542][ T9333] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 538.960095][ T9333] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 538.968685][ T9333] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 539.870297][ T9335] Process accounting resumed [ 541.358345][ T7645] Process accounting resumed [ 541.382724][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.753'. [ 541.522336][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.753'. [ 541.791935][ T7639] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 542.023863][ T7639] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.050176][ T7639] usb 5-1: config 9 has an invalid interface number: 3 but max is 2 [ 542.076677][ T7639] usb 5-1: config 9 has an invalid interface number: 235 but max is 2 [ 543.316196][ T7639] usb 5-1: config 9 has no interface number 1 [ 543.477821][ T7639] usb 5-1: config 9 has no interface number 2 [ 543.537815][ T7639] usb 5-1: config 9 interface 0 has no altsetting 0 [ 543.632673][ T7639] usb 5-1: config 9 interface 3 has no altsetting 0 [ 543.639320][ T7639] usb 5-1: config 9 interface 235 has no altsetting 0 [ 543.789498][ T7639] usb 5-1: string descriptor 0 read error: -71 [ 543.809462][ T7639] usb 5-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=17.50 [ 543.881896][ T7639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.894227][ T7639] usb 5-1: can't set config #9, error -71 [ 543.901373][ T7639] usb 5-1: USB disconnect, device number 20 [ 543.994204][ T9383] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 544.002657][ T9383] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 544.011170][ T9383] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 544.729012][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 545.711489][ T9387] Process accounting resumed [ 545.947716][ T9391] siw: device registration error -23 [ 546.122189][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.765'. [ 546.273088][ T7639] Process accounting resumed [ 547.750004][ T9419] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 547.758794][ T9419] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 547.767735][ T9419] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 549.205875][ T9425] Process accounting resumed [ 549.213234][ T9428] siw: device registration error -23 [ 549.685253][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 549.990507][ T7649] Process accounting resumed [ 551.606622][ T7649] Process accounting resumed [ 551.784761][ T9455] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 551.793186][ T9455] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 551.802793][ T9455] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 554.950201][ T9478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 554.956771][ T9478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 554.982796][ T9478] vhci_hcd vhci_hcd.0: Device attached [ 555.068132][ T7649] Process accounting resumed [ 555.281764][ T7660] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 555.366107][ T7639] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 556.055572][ T7660] usb 5-1: config 0 has no interfaces? [ 556.061112][ T7660] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 556.103174][ T7660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.121841][ T7660] usb 5-1: config 0 descriptor?? [ 556.267529][ T9491] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 556.276136][ T9491] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 556.284743][ T9491] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 556.416498][ T7660] usb 5-1: USB disconnect, device number 21 [ 556.446471][ T9479] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 556.605487][ T2889] vhci_hcd: stop threads [ 557.072283][ T2889] vhci_hcd: release socket [ 557.081795][ T2889] vhci_hcd: disconnect device [ 557.727678][ T7660] Process accounting resumed [ 561.972144][ T7639] vhci_hcd: vhci_device speed not set [ 563.016811][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.095024][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.194468][ T7639] Process accounting resumed [ 572.482396][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.490145][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.002923][ T9575] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.011996][ T9575] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.020880][ T9575] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.031912][ T9575] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.078032][ T9593] bridge0: entered promiscuous mode [ 574.309338][ T8] Process accounting resumed [ 581.639646][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.647108][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.817828][ T8] Process accounting resumed [ 584.062947][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.116426][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.565596][ T9627] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.588578][ T9627] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.607240][ T9627] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.632994][ T9627] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.001766][ T7648] Process accounting resumed [ 597.273378][ T9737] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 597.279952][ T9737] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 597.303590][ T9737] vhci_hcd vhci_hcd.0: Device attached [ 597.581760][ T8] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 597.826147][ T7661] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 598.388806][ T7649] Process accounting resumed [ 598.455382][ T8] usb 6-1: config 0 has no interfaces? [ 599.119695][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 599.129993][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.144528][ T8] usb 6-1: config 0 descriptor?? [ 601.697549][ T7649] usb 6-1: USB disconnect, device number 34 [ 601.712886][ T9738] vhci_hcd: connection reset by peer [ 601.754474][ T42] vhci_hcd: stop threads [ 601.759040][ T42] vhci_hcd: release socket [ 601.791788][ T42] vhci_hcd: disconnect device [ 603.398375][ T7661] vhci_hcd: vhci_device speed not set [ 606.168000][ T7646] Process accounting resumed [ 610.800489][ T9801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 610.807063][ T9801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 610.822605][ T9801] vhci_hcd vhci_hcd.0: Device attached [ 611.092087][ T7646] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 611.112196][ T7648] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 611.398502][ T7648] usb 3-1: config 0 has no interfaces? [ 611.449162][ T7648] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 611.542164][ T7648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.725098][ T7648] usb 3-1: config 0 descriptor?? [ 613.176089][ T9804] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 10 [ 613.193077][ T7648] usb 3-1: USB disconnect, device number 45 [ 613.217802][ T1154] vhci_hcd: stop threads [ 613.409731][ T1154] vhci_hcd: release socket [ 613.432320][ T1154] vhci_hcd: disconnect device [ 615.371985][ T6325] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 616.023592][ T6325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.050208][ T6325] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 616.061875][ T6325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.069927][ T6325] usb 5-1: Product: syz [ 616.091806][ T6325] usb 5-1: Manufacturer: syz [ 616.096577][ T6325] usb 5-1: SerialNumber: syz [ 616.292086][ T7646] vhci_hcd: vhci_device speed not set [ 616.330305][ T6325] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 616.342592][ T6325] ttusb-dec: probe of 5-1:1.0 failed with error -2 [ 616.538428][ T6325] usb 5-1: USB disconnect, device number 22 [ 616.727695][ T8] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 616.976546][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 617.050205][ T8] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 617.168238][ T8] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 617.259856][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.331577][ T8] usb 6-1: Product: syz [ 617.376767][ T8] usb 6-1: Manufacturer: syz [ 617.426656][ T8] usb 6-1: SerialNumber: syz [ 617.962703][ T8] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 618.864784][ T7646] usb 6-1: USB disconnect, device number 35 [ 618.902720][ T7646] usblp0: removed [ 619.822992][ T8] Process accounting resumed [ 620.126049][ T9874] siw: device registration error -23 [ 620.806019][ T9875] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 620.814304][ T9875] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 620.822774][ T9875] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 624.455518][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.061390][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.309143][ T7646] Process accounting resumed [ 627.512470][ T7646] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 628.437703][ T9922] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 628.446121][ T9922] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 628.459594][ T9922] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 628.594504][ T7646] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 628.647260][ T7646] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 628.658402][ T7648] Process accounting resumed [ 628.717224][ T7646] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 628.723990][ T9927] syz.4.908: attempt to access beyond end of device [ 628.723990][ T9927] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 628.739461][ T9927] hpfs: hpfs_map_sector(): read error [ 628.763059][ T7646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.291808][ T7646] usb 7-1: Product: syz [ 629.631224][ T7646] usb 7-1: Manufacturer: syz [ 629.639931][ T7646] usb 7-1: SerialNumber: syz [ 629.769386][ T7646] usb 7-1: can't set config #1, error -71 [ 629.781950][ T7646] usb 7-1: USB disconnect, device number 3 [ 632.848752][ T9948] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 632.857640][ T9948] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 632.866243][ T9948] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 637.274467][ T9966] syz.5.919: attempt to access beyond end of device [ 637.274467][ T9966] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 637.331335][ T9966] hpfs: hpfs_map_sector(): read error [ 637.411765][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 638.399612][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.425433][ T8] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 638.451470][ T8] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 638.474870][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.491933][ T8] usb 7-1: Product: syz [ 638.492855][ T9978] netlink: 80 bytes leftover after parsing attributes in process `syz.5.923'. [ 638.500721][ T8] usb 7-1: Manufacturer: syz [ 638.509901][ T8] usb 7-1: SerialNumber: syz [ 638.740426][ T8] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 638.992804][ T8] usb 7-1: USB disconnect, device number 4 [ 639.183535][ T8] usblp0: removed [ 641.563828][ T9991] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 641.572318][ T9991] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 641.580935][ T9991] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 642.497851][ T7649] IPVS: starting estimator thread 0... [ 642.591925][ T9995] IPVS: using max 24 ests per chain, 57600 per kthread [ 645.675974][T10009] syz.5.931: attempt to access beyond end of device [ 645.675974][T10009] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 645.692885][T10009] hpfs: hpfs_map_sector(): read error [ 647.416022][T10030] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 647.424733][T10030] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 647.433592][T10030] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 651.073136][T10052] syz.4.943: attempt to access beyond end of device [ 651.073136][T10052] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 651.114196][T10052] hpfs: hpfs_map_sector(): read error [ 651.162274][ T7650] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 651.411741][ T7650] usb 6-1: Using ep0 maxpacket: 8 [ 652.422760][ T7650] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 652.472482][ T7650] usb 6-1: config 0 has no interface number 0 [ 652.619091][ T7650] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 652.679953][ T7650] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.757354][ T7650] usb 6-1: config 0 descriptor?? [ 652.945963][ T7650] viperboard 6-1:0.143: version 0.00 found at bus 006 address 036 [ 653.057140][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.174797][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.230588][ T7650] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 653.310746][ T7650] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 653.964240][ T7650] usb 6-1: USB disconnect, device number 36 [ 654.994947][T10066] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 659.750505][T10101] kvm: pic: non byte write [ 660.307880][T10107] syz.6.953: attempt to access beyond end of device [ 660.307880][T10107] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 660.351913][T10107] hpfs: hpfs_map_sector(): read error [ 662.076324][T10117] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 668.229508][T10149] syz.2.964: attempt to access beyond end of device [ 668.229508][T10149] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 668.269364][T10149] hpfs: hpfs_map_sector(): read error [ 669.861809][ T7650] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 669.873059][T10164] FAULT_INJECTION: forcing a failure. [ 669.873059][T10164] name failslab, interval 1, probability 0, space 0, times 0 [ 671.167003][T10164] CPU: 0 PID: 10164 Comm: syz.6.967 Not tainted syzkaller #0 [ 671.174423][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.184504][T10164] Call Trace: [ 671.187803][T10164] [ 671.190739][T10164] dump_stack_lvl+0x18c/0x250 [ 671.195414][T10164] ? show_regs_print_info+0x20/0x20 [ 671.200601][T10164] ? load_image+0x420/0x420 [ 671.205113][T10164] ? __might_sleep+0xe0/0xe0 [ 671.209738][T10164] ? __lock_acquire+0x7d80/0x7d80 [ 671.214792][T10164] should_fail_ex+0x394/0x4c0 [ 671.219498][T10164] should_failslab+0x9/0x20 [ 671.224027][T10164] slab_pre_alloc_hook+0x59/0x300 [ 671.229095][T10164] kmem_cache_alloc+0x5a/0x2c0 [ 671.233894][T10164] ? locks_get_lock_context+0x116/0x370 [ 671.239475][T10164] locks_get_lock_context+0x116/0x370 [ 671.244881][T10164] posix_lock_inode+0x114/0x3270 [ 671.249847][T10164] ? __asan_memset+0x22/0x40 [ 671.254465][T10164] ? aa_path_link+0xf80/0xf80 [ 671.259166][T10164] ? lockdep_init_map_type+0x9c/0x8e0 [ 671.264570][T10164] ? lockdep_softirqs_off+0x440/0x440 [ 671.266771][ T7650] usb 3-1: not running at top speed; connect to a high speed hub [ 671.269949][T10164] ? slab_post_alloc_hook+0x86/0x4d0 [ 671.282960][T10164] ? end_current_label_crit_section+0x149/0x170 [ 671.289225][T10164] ? posix_lock_file+0x50/0x50 [ 671.294025][T10164] ? bpf_lsm_file_lock+0x9/0x10 [ 671.296858][ T7650] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 671.298889][T10164] fcntl_setlk+0x9c0/0x1070 [ 671.314364][T10164] ? vfs_lock_file+0x110/0x110 [ 671.319162][T10164] ? __might_fault+0xaa/0x120 [ 671.323858][T10164] ? __might_fault+0xc6/0x120 [ 671.328557][T10164] ? __might_fault+0xaa/0x120 [ 671.333261][T10164] do_fcntl+0x88e/0x14a0 [ 671.333783][ T7650] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 671.337512][T10164] ? kill_fasync+0x4b0/0x4b0 [ 671.351151][T10164] ? __fget_files+0x28/0x460 [ 671.355787][T10164] ? __fget_files+0x3fc/0x460 [ 671.360502][T10164] ? tomoyo_file_fcntl+0x7b/0x220 [ 671.361735][ T7650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.365548][T10164] ? bpf_lsm_file_fcntl+0x9/0x10 [ 671.378469][T10164] ? security_file_fcntl+0x80/0xa0 [ 671.383616][T10164] __se_sys_fcntl+0xc9/0x1a0 [ 671.388237][T10164] do_syscall_64+0x55/0xb0 [ 671.392678][T10164] ? clear_bhb_loop+0x40/0x90 [ 671.396891][ T7650] usb 3-1: Product: syz [ 671.397358][T10164] ? clear_bhb_loop+0x40/0x90 [ 671.406204][T10164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.407052][ T7650] usb 3-1: Manufacturer: syz [ 671.412106][T10164] RIP: 0033:0x7f52c9f9e159 [ 671.412128][T10164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.412144][T10164] RSP: 002b:00007f52cae66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 671.412166][T10164] RAX: ffffffffffffffda RBX: 00007f52ca225fa0 RCX: 00007f52c9f9e159 [ 671.412181][T10164] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 671.412193][T10164] RBP: 00007f52ca035024 R08: 0000000000000000 R09: 0000000000000000 [ 671.412206][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.412218][T10164] R13: 00007f52ca226038 R14: 00007f52ca225fa0 R15: 00007ffd2f3c8d78 [ 671.412246][T10164] [ 671.501927][ T7650] usb 3-1: SerialNumber: syz [ 671.600523][ T7650] oti6858 3-1:1.0: oti6858 converter detected [ 671.723190][ T7650] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 672.367271][ T7661] usb 3-1: USB disconnect, device number 46 [ 672.572247][ T7661] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 672.753190][ T7661] oti6858 3-1:1.0: device disconnected [ 673.246598][T10182] syz.2.974: attempt to access beyond end of device [ 673.246598][T10182] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 673.267258][T10182] hpfs: hpfs_map_sector(): read error [ 677.857438][T10208] netlink: 80 bytes leftover after parsing attributes in process `syz.6.980'. [ 680.647037][T10223] syz.2.985: attempt to access beyond end of device [ 680.647037][T10223] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 680.672239][T10223] hpfs: hpfs_map_sector(): read error [ 682.664589][T10236] syzkaller0: entered promiscuous mode [ 682.685875][T10236] syzkaller0: entered allmulticast mode [ 684.298083][T10245] netlink: 80 bytes leftover after parsing attributes in process `syz.6.991'. [ 685.531886][T10254] syz.4.994: attempt to access beyond end of device [ 685.531886][T10254] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 685.896918][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.903396][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.735651][T10254] hpfs: hpfs_map_sector(): read error [ 689.841757][ T7661] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 690.052408][ T7661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 690.079449][ T7661] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 690.097524][ T7661] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 690.117211][ T7661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.128201][ T7661] usb 3-1: Product: syz [ 690.141690][ T7661] usb 3-1: Manufacturer: syz [ 690.161668][ T7661] usb 3-1: SerialNumber: syz [ 690.398770][ T7661] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 691.740825][T10299] syz.4.1006: attempt to access beyond end of device [ 691.740825][T10299] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 692.082485][T10299] hpfs: hpfs_map_sector(): read error [ 693.629133][ T8] usb 3-1: USB disconnect, device number 47 [ 694.845832][ T8] usblp0: removed [ 695.173333][ T6325] Process accounting resumed [ 698.115710][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 698.432016][ T7646] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 698.656473][ T7646] usb 3-1: unable to get BOS descriptor or descriptor too short [ 698.667367][ T7646] usb 3-1: config 9 has an invalid interface number: 3 but max is 2 [ 698.691850][ T7646] usb 3-1: config 9 has an invalid interface number: 235 but max is 2 [ 698.701891][ T7646] usb 3-1: config 9 has no interface number 1 [ 698.708005][ T7646] usb 3-1: config 9 has no interface number 2 [ 698.732045][ T7646] usb 3-1: config 9 interface 0 has no altsetting 0 [ 698.738696][ T7646] usb 3-1: config 9 interface 3 has no altsetting 0 [ 698.763206][ T7646] usb 3-1: config 9 interface 235 has no altsetting 0 [ 698.778274][ T7646] usb 3-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=17.50 [ 698.795833][ T7646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.804457][ T7646] usb 3-1: Product: syz [ 698.808726][ T7646] usb 3-1: Manufacturer: syz [ 698.814356][ T7646] usb 3-1: SerialNumber: syz [ 698.968818][T10339] syz.6.1019: attempt to access beyond end of device [ 698.968818][T10339] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 698.985578][T10339] hpfs: hpfs_map_sector(): read error [ 699.078344][ T7646] usb 3-1: selecting invalid altsetting 0 [ 699.084461][ T7646] usb 3-1: Could not set interface, error -22 [ 699.184910][ T7646] usb 3-1: USB disconnect, device number 48 [ 700.090300][T10345] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1018'. [ 700.337329][T10348] syzkaller0: entered promiscuous mode [ 700.423488][T10348] syzkaller0: entered allmulticast mode [ 704.125967][T10367] syz.2.1028: attempt to access beyond end of device [ 704.125967][T10367] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 704.158343][T10367] hpfs: hpfs_map_sector(): read error [ 705.283357][T10373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1030'. [ 705.671775][ T7650] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 705.884222][ T7650] usb 3-1: unable to get BOS descriptor or descriptor too short [ 705.912599][ T7650] usb 3-1: config 9 has an invalid interface number: 3 but max is 2 [ 705.926826][ T7650] usb 3-1: config 9 has an invalid interface number: 235 but max is 2 [ 705.955505][ T7650] usb 3-1: config 9 has no interface number 1 [ 705.969777][ T7650] usb 3-1: config 9 has no interface number 2 [ 705.985568][ T7650] usb 3-1: config 9 interface 0 has no altsetting 0 [ 705.992875][ T7650] usb 3-1: config 9 interface 3 has no altsetting 0 [ 705.999588][ T7650] usb 3-1: config 9 interface 235 has no altsetting 0 [ 706.019196][ T7650] usb 3-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=17.50 [ 706.028570][ T7650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.045390][ T7650] usb 3-1: Product: syz [ 706.060884][ T7650] usb 3-1: Manufacturer: syz [ 706.067737][ T7650] usb 3-1: SerialNumber: syz [ 706.333533][ T7650] usb 3-1: selecting invalid altsetting 0 [ 707.185768][ T7650] usb 3-1: Could not set interface, error -22 [ 707.201430][ T7650] usb 3-1: USB disconnect, device number 49 [ 707.220878][ T7661] Process accounting resumed [ 707.381831][ T7661] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 707.908067][T10394] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1036'. [ 708.659770][T10397] syz.2.1038: attempt to access beyond end of device [ 708.659770][T10397] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 708.676755][T10397] hpfs: hpfs_map_sector(): read error [ 708.797646][ T7661] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.878333][ T7661] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.978852][ T7661] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 709.081439][ T7661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.267488][ T7661] usb 7-1: config 0 descriptor?? [ 709.589011][ T7661] usb 7-1: can't set config #0, error -71 [ 709.619481][ T7661] usb 7-1: USB disconnect, device number 5 [ 715.096618][T10419] bridge1: port 1(erspan0) entered disabled state [ 715.943493][T10440] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1045'. [ 716.693076][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1046'. [ 716.954707][T10449] syz.2.1048: attempt to access beyond end of device [ 716.954707][T10449] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 716.971128][T10449] hpfs: hpfs_map_sector(): read error [ 717.024923][ T5830] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 717.249831][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 717.337967][ T5830] usb 6-1: config 9 has an invalid interface number: 3 but max is 2 [ 717.431088][ T5830] usb 6-1: config 9 has an invalid interface number: 235 but max is 2 [ 717.540803][ T5830] usb 6-1: config 9 has no interface number 1 [ 717.615658][ T5830] usb 6-1: config 9 has no interface number 2 [ 717.700546][ T5830] usb 6-1: config 9 interface 0 has no altsetting 0 [ 717.771372][ T5830] usb 6-1: config 9 interface 3 has no altsetting 0 [ 717.844923][ T5830] usb 6-1: config 9 interface 235 has no altsetting 0 [ 717.877020][ T5830] usb 6-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=17.50 [ 717.907726][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.966807][ T5830] usb 6-1: Product: syz [ 717.971547][ T5830] usb 6-1: Manufacturer: syz [ 718.002382][ T5830] usb 6-1: SerialNumber: syz [ 718.130026][T10455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 718.263315][ T5830] usb 6-1: selecting invalid altsetting 0 [ 718.269111][ T5830] usb 6-1: Could not set interface, error -22 [ 718.304220][ T5830] usb 6-1: USB disconnect, device number 37 [ 718.382411][ T7646] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 718.459263][ T9658] Process accounting resumed [ 718.719612][ T7646] usb 3-1: Using ep0 maxpacket: 16 [ 718.727634][ T7646] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 718.745049][ T7646] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 718.754669][ T7646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.840434][ T7646] usb 3-1: Product: syz [ 718.844788][ T7646] usb 3-1: Manufacturer: syz [ 718.849410][ T7646] usb 3-1: SerialNumber: syz [ 718.856654][ T7646] usb 3-1: config 0 descriptor?? [ 719.394098][ T2966] Bluetooth: hci1: Frame reassembly failed (-84) [ 720.990442][T10460] Bluetooth: hci1: Frame reassembly failed (-84) [ 721.011115][T10481] Bluetooth: hci1: Frame reassembly failed (-84) [ 721.411742][ T5775] Bluetooth: hci1: command 0x1003 tx timeout [ 722.821754][ T8304] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 722.908231][ T7650] usb 3-1: USB disconnect, device number 50 [ 723.156285][T10508] syz.2.1057: attempt to access beyond end of device [ 723.156285][T10508] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 723.181221][T10508] hpfs: hpfs_map_sector(): read error [ 724.188895][ T7646] Process accounting resumed [ 724.492020][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 724.885061][ T7660] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 725.092732][ T7660] usb 3-1: unable to get BOS descriptor or descriptor too short [ 725.131942][ T7660] usb 3-1: config 9 has an invalid interface number: 3 but max is 2 [ 725.177631][ T7660] usb 3-1: config 9 has an invalid interface number: 235 but max is 2 [ 725.187719][ T7660] usb 3-1: config 9 has no interface number 1 [ 725.196829][ T7660] usb 3-1: config 9 has no interface number 2 [ 725.204492][ T7660] usb 3-1: config 9 interface 0 has no altsetting 0 [ 725.211251][ T7660] usb 3-1: config 9 interface 3 has no altsetting 0 [ 725.220785][ T7660] usb 3-1: config 9 interface 235 has no altsetting 0 [ 725.232043][ T7660] usb 3-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=17.50 [ 725.247227][ T7660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.264727][ T7660] usb 3-1: Product: syz [ 725.269997][ T7660] usb 3-1: Manufacturer: syz [ 725.276763][ T7660] usb 3-1: SerialNumber: syz [ 725.277124][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 725.579324][ T7660] usb 3-1: selecting invalid altsetting 0 [ 725.588139][ T7660] usb 3-1: Could not set interface, error -22 [ 725.607158][ T7660] usb 3-1: USB disconnect, device number 51 [ 727.026003][T10549] 9pnet_fd: Insufficient options for proto=fd [ 728.234657][T10552] syz.2.1067: attempt to access beyond end of device [ 728.234657][T10552] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 728.248041][T10552] hpfs: hpfs_map_sector(): read error [ 732.353679][T10599] syzkaller0: entered promiscuous mode [ 732.361065][T10599] syzkaller0: entered allmulticast mode [ 733.450990][T10605] syz.2.1079: attempt to access beyond end of device [ 733.450990][T10605] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 733.505997][T10605] hpfs: hpfs_map_sector(): read error [ 734.019619][ T27] audit: type=1800 audit(1788816537.946:4): pid=10610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1081" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 734.043858][T10610] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 735.436393][T10623] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 736.277547][T10623] team0: Port device netdevsim0 added [ 738.890068][T10648] syz.2.1089: attempt to access beyond end of device [ 738.890068][T10648] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 738.928070][T10648] hpfs: hpfs_map_sector(): read error [ 746.220132][T10701] syz.2.1099: attempt to access beyond end of device [ 746.220132][T10701] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 746.260073][T10701] hpfs: hpfs_map_sector(): read error [ 747.377656][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.385299][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.860544][T10728] Process accounting resumed [ 754.652111][T10765] Process accounting resumed [ 755.672427][ T9658] Process accounting resumed [ 755.757794][T10783] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 758.183953][T10807] syzkaller0: entered promiscuous mode [ 758.189564][T10807] syzkaller0: entered allmulticast mode [ 758.609424][T10813] Process accounting resumed [ 758.661742][ T7660] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 758.820219][ T7641] Process accounting resumed [ 758.872992][ T7660] usb 5-1: Using ep0 maxpacket: 8 [ 758.903888][ T7660] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 758.947744][ T7660] usb 5-1: config 0 has no interface number 0 [ 758.992483][ T7660] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 759.053274][ T7660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.160132][ T7660] usb 5-1: config 0 descriptor?? [ 759.626645][ T7660] viperboard 5-1:0.143: version 0.00 found at bus 005 address 023 [ 759.636424][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.682063][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.697145][ T7660] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 759.706309][ T7660] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 761.761990][ T7660] usb 5-1: USB disconnect, device number 23 [ 763.452208][T10848] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1138'. [ 764.861018][T10855] Process accounting resumed [ 769.739445][T10888] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1149'. [ 775.190726][T10910] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 776.367793][T10921] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1159'. [ 779.805359][T10941] Process accounting resumed [ 784.242515][T10956] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 785.194633][T10962] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1168'. [ 786.125186][T10965] gadgetfs: bound to dummy_udc driver [ 786.404823][ T7646] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 786.441864][ C1] gadgetfs: connected [ 786.451736][ T7646] gadgetfs: disconnected [ 788.393515][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 788.407309][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 788.416263][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 788.427386][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 788.441025][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 788.448738][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 788.511307][T10988] lo speed is unknown, defaulting to 1000 [ 790.531857][ T8304] Bluetooth: hci1: command tx timeout [ 790.772135][T10988] chnl_net:caif_netlink_parms(): no params data found [ 790.925100][T11008] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 793.099452][ T8304] Bluetooth: hci1: command tx timeout [ 793.185616][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 793.194572][T11016] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1180'. [ 793.332387][T10988] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.385538][T10988] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.451882][T10988] bridge_slave_0: entered allmulticast mode [ 793.497786][T10988] bridge_slave_0: entered promiscuous mode [ 793.602948][T10988] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.623318][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.644550][T11020] gadgetfs: bound to dummy_udc driver [ 793.652252][T10988] bridge_slave_1: entered allmulticast mode [ 793.694241][T10988] bridge_slave_1: entered promiscuous mode [ 793.898788][T10988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.922512][T11019] gadgetfs: suspended from state 2 [ 793.935014][T10988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.936851][ T7646] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 794.181388][T10988] team0: Port device team_slave_0 added [ 794.290832][T10988] team0: Port device team_slave_1 added [ 794.470091][ T79] team0: Port device netdevsim0 removed [ 796.074064][ T8304] Bluetooth: hci1: command tx timeout [ 796.113143][T10988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.120125][T10988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.196374][T10988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.253617][T10988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.265441][T10988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.317972][T10988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.142938][ T8304] Bluetooth: hci1: command tx timeout [ 798.204734][ T27] audit: type=1800 audit(1788816602.136:5): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1186" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 798.216642][T10988] hsr_slave_0: entered promiscuous mode [ 798.226181][T11037] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 798.243425][T10988] hsr_slave_1: entered promiscuous mode [ 798.250003][T10988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.258886][T10988] Cannot create hsr debugfs directory [ 800.716324][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 800.725300][T11048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1188'. [ 801.705435][T10988] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 801.797716][T10988] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 801.851377][T10988] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 802.013084][T10988] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 802.688807][T11077] syzkaller0: entered promiscuous mode [ 802.829344][T11077] syzkaller0: entered allmulticast mode [ 803.110740][ T79] hsr_slave_0: left promiscuous mode [ 803.182960][ T79] hsr_slave_1: left promiscuous mode [ 803.267861][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.320465][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.335389][ T79] bridge_slave_1: left allmulticast mode [ 803.341503][ T79] bridge_slave_1: left promiscuous mode [ 803.354700][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.378032][ T79] bridge_slave_0: left allmulticast mode [ 803.410226][ T79] bridge_slave_0: left promiscuous mode [ 803.446229][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.140365][ T79] bond1 (unregistering): Released all slaves [ 807.134088][ T79] team0 (unregistering): Port device team_slave_1 removed [ 807.308041][ T79] team0 (unregistering): Port device team_slave_0 removed [ 807.351159][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.400171][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.736270][ T79] bond0 (unregistering): Released all slaves [ 808.044974][T10988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.124797][T10988] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.226813][T10988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.278444][T10988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.363253][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.370468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.931265][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.937727][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.310859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.318107][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.628159][ T79] IPVS: stop unused estimator thread 0... [ 810.522840][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 810.531825][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1196'. [ 810.748421][T10988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.003969][T10988] veth0_vlan: entered promiscuous mode [ 815.022653][T10988] veth1_vlan: entered promiscuous mode [ 815.106139][T10988] veth0_macvtap: entered promiscuous mode [ 815.137942][T10988] veth1_macvtap: entered promiscuous mode [ 815.159076][T11149] syz.4.1203: attempt to access beyond end of device [ 815.159076][T11149] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 815.213333][T10988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.224262][T11149] hpfs: hpfs_map_sector(): read error [ 815.240674][T10988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.010948][T10988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.151266][T10988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.181386][T10988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.258160][T10988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.477421][T10988] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.488646][T10988] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.501502][T10988] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.511506][T10988] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.920750][T11172] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 817.983355][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1206'. [ 817.992330][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1206'. [ 818.017373][T11175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.026198][T11175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.035000][T11175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.044127][T11175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.052941][T11175] geneve3: entered promiscuous mode [ 818.058153][T11175] geneve3: entered allmulticast mode [ 818.472156][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.480014][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.377559][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 819.386644][T11183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1208'. [ 819.566865][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.602108][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.736790][T11189] Process accounting resumed [ 820.979458][T11195] lo speed is unknown, defaulting to 1000 [ 821.301841][ T6325] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 822.347941][T11217] syz.4.1212: attempt to access beyond end of device [ 822.347941][T11217] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 822.360953][T11217] hpfs: hpfs_map_sector(): read error [ 823.404451][T11195] IPv6: sit1: Disabled Multicast RS [ 823.421131][T11195] sit1: entered allmulticast mode [ 825.818280][ T6325] usb 6-1: unable to get BOS descriptor or descriptor too short [ 825.832576][ T6325] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 825.840198][ T6325] usb 6-1: can't read configurations, error -71 [ 828.509118][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1216'. [ 828.518308][T11236] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1216'. [ 829.520843][T11249] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 829.736175][T11247] Process accounting resumed [ 830.052865][T11256] syz.4.1222: attempt to access beyond end of device [ 830.052865][T11256] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 830.084406][T11256] hpfs: hpfs_map_sector(): read error [ 831.442208][ T7660] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 831.662193][ T7660] usb 7-1: Using ep0 maxpacket: 8 [ 832.522605][ T7660] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 832.541641][ T7660] usb 7-1: config 0 has no interface number 0 [ 832.547800][ T7660] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 832.577215][ T7660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.594619][ T7660] usb 7-1: config 0 descriptor?? [ 832.712103][ T7660] viperboard 7-1:0.143: version 0.00 found at bus 007 address 006 [ 832.776145][ T7660] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 832.824562][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.832992][ T7660] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 832.875628][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.139168][ T7660] usb 7-1: USB disconnect, device number 6 [ 833.533311][T11300] nvmet: adding nsid 1 to subsystem testsubsys [ 834.362239][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 834.371167][T11305] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1228'. [ 835.568832][T11310] Process accounting resumed [ 835.795199][T11315] syz.6.1231: attempt to access beyond end of device [ 835.795199][T11315] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 835.828668][T11315] hpfs: hpfs_map_sector(): read error [ 837.441823][ T8] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 838.108467][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.231708][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.241504][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.369635][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.393702][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.440014][ T8] usb 6-1: config 0 descriptor?? [ 838.543097][T11340] syzkaller0: entered promiscuous mode [ 838.560296][T11340] syzkaller0: entered allmulticast mode [ 838.920543][ T8] input: HID 047f:ffff as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:047F:FFFF.0001/input/input19 [ 839.241686][ T6325] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 839.248779][ T8] plantronics 0003:047F:FFFF.0001: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 839.754988][ T8] usb 6-1: USB disconnect, device number 40 [ 839.880616][T11353] Process accounting resumed [ 840.071872][ T6325] usb 5-1: Using ep0 maxpacket: 8 [ 840.092404][ T6325] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 840.120884][ T6325] usb 5-1: config 0 has no interface number 0 [ 840.142720][ T6325] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 840.166217][ T6325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.207757][T11358] fido_id[11358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 840.225776][ T6325] usb 5-1: config 0 descriptor?? [ 840.352437][ T6325] viperboard 5-1:0.143: version 0.00 found at bus 005 address 024 [ 840.404594][ T6325] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 840.431823][ T6325] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 840.450882][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.482444][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.685199][ T6325] usb 5-1: USB disconnect, device number 24 [ 840.726201][T11376] syz.6.1243: attempt to access beyond end of device [ 840.726201][T11376] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 840.765350][T11376] hpfs: hpfs_map_sector(): read error [ 841.625370][T11390] syzkaller0: entered promiscuous mode [ 841.649491][T11390] syzkaller0: entered allmulticast mode [ 841.974966][T11397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.943431][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1249'. [ 842.952929][T11404] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1249'. [ 843.078167][T11401] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 843.258820][ T6325] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 843.453860][ T6325] usb 5-1: Using ep0 maxpacket: 16 [ 843.479227][ T6325] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 843.519817][ T6325] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 843.668448][ T6325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.041213][ T6325] usb 5-1: Product: syz [ 844.082445][ T6325] usb 5-1: Manufacturer: syz [ 844.087500][ T6325] usb 5-1: SerialNumber: syz [ 844.138635][ T6325] usb 5-1: config 0 descriptor?? [ 844.454879][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 844.516524][ T7660] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 844.548605][T11428] Bluetooth: hci0: Frame reassembly failed (-84) [ 846.742033][ T8304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 846.965139][ T5830] usb 5-1: USB disconnect, device number 25 [ 847.012125][ T7660] usb 8-1: Using ep0 maxpacket: 8 [ 847.046943][ T7660] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 847.079878][ T7660] usb 8-1: config 0 has no interface number 0 [ 847.104289][ T7660] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 847.164535][ T7660] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.196251][T11434] syz.4.1254: attempt to access beyond end of device [ 847.196251][T11434] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 847.210394][ T7660] usb 8-1: config 0 descriptor?? [ 847.263393][T11434] hpfs: hpfs_map_sector(): read error [ 847.282955][ T7660] usb 8-1: can't set config #0, error -71 [ 847.312189][ T7660] usb 8-1: USB disconnect, device number 2 [ 851.438862][ T7646] Process accounting resumed [ 851.828500][T11475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.855076][ T7646] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 851.971972][ T5830] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 852.077667][ T7646] usb 5-1: Using ep0 maxpacket: 8 [ 852.100750][ T7646] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 852.126714][ T7646] usb 5-1: config 0 has no interface number 0 [ 852.148705][ T7646] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 852.178235][ T7646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.191711][ T5830] usb 6-1: Using ep0 maxpacket: 16 [ 852.208274][ T7646] usb 5-1: config 0 descriptor?? [ 852.230753][ T5830] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 852.311713][ T5830] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 852.344857][ T7646] viperboard 5-1:0.143: version 0.00 found at bus 005 address 026 [ 852.371820][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.379867][ T5830] usb 6-1: Product: syz [ 852.410832][ T7646] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 852.419281][ T5830] usb 6-1: Manufacturer: syz [ 852.437997][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.451300][ T5830] usb 6-1: SerialNumber: syz [ 852.462283][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.471446][ T7646] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 852.481059][ T5830] usb 6-1: config 0 descriptor?? [ 852.663975][ T5830] usb 5-1: USB disconnect, device number 26 [ 852.859908][T11468] Bluetooth: hci0: Frame reassembly failed (-84) [ 852.980300][T11481] Bluetooth: hci0: Frame reassembly failed (-84) [ 854.931700][ T8304] Bluetooth: hci0: command 0x1003 tx timeout [ 854.931808][ T5775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 855.554454][ T5830] usb 6-1: USB disconnect, device number 41 [ 856.788943][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1260'. [ 856.797877][T11517] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1260'. [ 856.809827][T11517] geneve2: entered promiscuous mode [ 856.815960][T11517] geneve2: entered allmulticast mode [ 857.611239][T11519] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 857.621989][ T27] audit: type=1800 audit(1788816661.536:6): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1268" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 858.848578][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1271'. [ 858.879343][ T7646] Process accounting resumed [ 859.281839][ T7646] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 859.484352][ T7646] usb 5-1: Using ep0 maxpacket: 8 [ 859.492345][ T7646] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 859.500715][ T7646] usb 5-1: config 0 has no interface number 0 [ 859.507573][ T7646] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 859.517706][ T7646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.538114][ T7646] usb 5-1: config 0 descriptor?? [ 859.655870][ T7646] viperboard 5-1:0.143: version 0.00 found at bus 005 address 027 [ 859.689692][ T7646] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 859.721801][ T7646] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 859.752534][T11538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.794149][T11538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.900130][T11554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 860.002909][ T7649] usb 5-1: USB disconnect, device number 27 [ 860.251852][ T7646] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 860.552347][ T7646] usb 7-1: Using ep0 maxpacket: 16 [ 860.714871][ T7646] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 861.061582][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1279'. [ 861.071144][T11568] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1279'. [ 862.037343][ T7646] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 862.063139][ T7646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.074803][ T7646] usb 7-1: Product: syz [ 862.079014][ T7646] usb 7-1: Manufacturer: syz [ 862.096188][ T7646] usb 7-1: SerialNumber: syz [ 862.122812][ T7646] usb 7-1: config 0 descriptor?? [ 862.220953][ T7649] Process accounting resumed [ 865.093090][ T7660] usb 7-1: USB disconnect, device number 7 [ 866.220474][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1289'. [ 866.229492][T11616] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1289'. [ 867.343395][ T7646] Process accounting resumed [ 870.217736][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.224247][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.311853][T11634] syzkaller0: entered promiscuous mode [ 870.317553][T11634] syzkaller0: entered allmulticast mode [ 873.091731][ T8] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 873.365821][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1299'. [ 873.374888][T11671] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1299'. [ 874.411825][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 874.465129][ T8] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 874.487255][ T8] usb 6-1: config 0 has no interface number 0 [ 874.501868][ T8] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 874.510950][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.549746][T11676] bridge0: port 3(erspan0) entered blocking state [ 874.565913][ T8] usb 6-1: config 0 descriptor?? [ 874.580569][T11676] bridge0: port 3(erspan0) entered disabled state [ 874.593655][T11676] erspan0: entered allmulticast mode [ 874.628545][T11676] erspan0: entered promiscuous mode [ 874.723386][ T8] viperboard 6-1:0.143: version 0.00 found at bus 006 address 042 [ 874.814163][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.854163][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.017239][T11677] erspan0: left allmulticast mode [ 875.239787][T11677] erspan0: left promiscuous mode [ 875.250590][ T8] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 875.291656][ T8] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 875.294208][T11677] bridge0: port 3(erspan0) entered disabled state [ 875.392645][ T8] usb 6-1: USB disconnect, device number 42 [ 880.184342][ T8] Process accounting resumed [ 882.676471][T11735] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1314'. [ 887.924190][T11773] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 888.856008][T11785] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1324'. [ 889.611719][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 889.822112][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 889.843388][ T8] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 889.871688][ T8] usb 8-1: config 0 has no interface number 0 [ 889.881939][ T8] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 889.925708][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.962757][ T8] usb 8-1: config 0 descriptor?? [ 890.132435][ T8] viperboard 8-1:0.143: version 0.00 found at bus 008 address 003 [ 890.191662][ T8] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 890.200668][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.216052][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.251603][ T8] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 890.465775][ T8] usb 8-1: USB disconnect, device number 3 [ 891.617833][T11805] syz.5.1326: attempt to access beyond end of device [ 891.617833][T11805] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 891.631424][T11805] MINIX-fs: unable to read superblock [ 893.572002][ T5775] Bluetooth: hci1: command tx timeout [ 893.881761][ T7646] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 895.295722][ T7646] usb 5-1: device descriptor read/all, error -71 [ 895.976724][T11844] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1333'. [ 903.024632][T11906] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1345'. [ 905.765256][T11925] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 907.979473][T11937] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1355'. [ 908.995658][ T5830] Process accounting resumed [ 909.171978][ T5830] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 909.387600][ T5830] usb 8-1: Using ep0 maxpacket: 8 [ 909.401231][ T5830] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 909.413832][ T5830] usb 8-1: config 0 has no interface number 0 [ 909.420005][ T5830] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 909.480647][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.512308][ T5830] usb 8-1: config 0 descriptor?? [ 909.635812][ T5830] viperboard 8-1:0.143: version 0.00 found at bus 008 address 004 [ 909.706289][ T5830] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 909.728513][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.738021][ T5830] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 909.852705][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.386285][ T5830] usb 8-1: USB disconnect, device number 4 [ 911.822190][ T7648] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 912.241623][ T7648] usb 7-1: Using ep0 maxpacket: 8 [ 912.249854][ T7648] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 912.258755][ T7648] usb 7-1: config 179 has no interface number 0 [ 912.265333][ T7648] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 912.278609][ T7648] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 912.290391][ T7648] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 912.302872][ T9658] Process accounting resumed [ 912.317936][ T7648] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 912.397834][ T7648] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 912.439662][ T7648] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 912.472951][ T7648] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.534949][T11967] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 915.581450][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 915.589796][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 915.661625][ T6325] usb 7-1: USB disconnect, device number 8 [ 915.975972][T12003] siw: device registration error -23 [ 915.982225][ T9658] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 916.942173][ T9658] usb 8-1: Using ep0 maxpacket: 8 [ 916.949143][ T9658] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 916.967232][ T9658] usb 8-1: config 0 has no interface number 0 [ 916.981714][ T9658] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 916.999757][ T9658] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.011120][ T9658] usb 8-1: config 0 descriptor?? [ 917.139916][ T9658] viperboard 8-1:0.143: version 0.00 found at bus 008 address 005 [ 917.204840][ T9658] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 917.226969][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.256439][ T9658] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 917.262163][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.871300][ T6325] usb 8-1: USB disconnect, device number 5 [ 926.221211][T12067] syz.6.1391: attempt to access beyond end of device [ 926.221211][T12067] loop6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 926.234331][T12067] MINIX-fs: unable to read superblock [ 929.011608][ T8304] Bluetooth: hci1: command tx timeout [ 930.887556][T12078] syz.7.1383 (12078): drop_caches: 2 [ 931.555158][ T7648] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 931.658702][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.665380][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.909316][ T7648] usb 5-1: Using ep0 maxpacket: 16 [ 931.918378][T12097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 931.954233][ T7648] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 931.995252][ T7648] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 932.041301][ T7648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.096714][ T7648] usb 5-1: Product: syz [ 932.139435][ T7648] usb 5-1: Manufacturer: syz [ 932.193252][ T7648] usb 5-1: SerialNumber: syz [ 932.327924][ T7648] usb 5-1: config 0 descriptor?? [ 935.028839][ T5830] usb 5-1: USB disconnect, device number 30 [ 937.944549][ T5830] Process accounting resumed [ 938.977341][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 939.258175][T12164] syz.7.1416: attempt to access beyond end of device [ 939.258175][T12164] loop7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 939.272003][T12164] MINIX-fs: unable to read superblock [ 941.252219][ T8304] Bluetooth: hci1: command tx timeout [ 941.928600][ T8] Process accounting resumed [ 942.815027][ T8] Process accounting resumed [ 947.259941][T12206] lo speed is unknown, defaulting to 1000 [ 947.879337][ T7648] Process accounting resumed [ 948.085404][ T7648] Process accounting resumed [ 952.961411][ T6325] Process accounting resumed [ 953.069782][ T5830] Process accounting resumed [ 954.961063][ T5830] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 955.172566][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 955.562027][ T5830] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 955.570805][ T5830] usb 6-1: config 0 has no interface number 0 [ 955.578581][ T5830] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 955.622144][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.646302][ T5830] usb 6-1: config 0 descriptor?? [ 955.773382][ T5830] viperboard 6-1:0.143: version 0.00 found at bus 006 address 043 [ 956.583143][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.623350][T12272] siw: device registration error -23 [ 956.632562][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.643112][ T5830] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 956.664950][ T5830] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 956.827668][ T6325] usb 6-1: USB disconnect, device number 43 [ 956.863273][ T5830] Process accounting resumed [ 957.845688][ T5830] Process accounting resumed [ 962.695912][ T7646] Process accounting resumed [ 968.228564][ T6325] Process accounting resumed [ 969.421518][T12367] Process accounting resumed [ 971.400740][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1483'. [ 971.412132][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1483'. [ 971.521726][T12387] geneve3: entered promiscuous mode [ 971.527171][T12387] geneve3: entered allmulticast mode [ 973.091106][ T5830] Process accounting resumed [ 976.617829][T12406] Process accounting resumed [ 977.485790][ T6325] Process accounting resumed [ 979.735989][ T5830] Process accounting resumed [ 981.862829][T12461] Process accounting resumed [ 982.885364][ T7641] Process accounting resumed [ 983.700244][ T6325] Process accounting resumed [ 984.737206][T12491] Process accounting resumed [ 986.042369][ T7646] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 986.223978][ T7646] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 986.232961][ T7646] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.243916][ T7646] usb 8-1: config 0 has no interface number 0 [ 986.250049][ T7646] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 986.262181][ T7641] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 986.262364][ T7646] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 986.280432][ T7646] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.297242][ T7646] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 986.307075][ T7646] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.315971][ T7646] usb 8-1: Product: syz [ 986.320447][ T7646] usb 8-1: Manufacturer: syz [ 986.327543][ T7646] usb 8-1: SerialNumber: syz [ 986.344576][ T7646] usb 8-1: config 0 descriptor?? [ 986.442193][ T7641] usb 7-1: Using ep0 maxpacket: 8 [ 986.452518][ T7641] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 986.461264][ T7641] usb 7-1: config 0 has no interface number 0 [ 986.468370][ T7641] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 986.478074][ T7641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.492387][ T7641] usb 7-1: config 0 descriptor?? [ 986.612744][ T7641] viperboard 7-1:0.143: version 0.00 found at bus 007 address 009 [ 986.641421][ T7641] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 986.663887][ T7641] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 986.762518][T12512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.792756][T12512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.919177][ T6325] usb 7-1: USB disconnect, device number 9 [ 987.027449][ T7642] Process accounting resumed [ 987.354288][ T7646] usbtouchscreen: probe of 8-1:0.117 failed with error -71 [ 987.751438][ T7646] usb 8-1: USB disconnect, device number 6 [ 987.942441][ T7641] Process accounting resumed [ 988.129108][T12533] Process accounting resumed [ 990.559005][ T7642] Process accounting resumed [ 990.576137][ T5830] Process accounting resumed [ 991.306429][ T7641] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 991.426319][T12561] Process accounting resumed [ 991.562945][T12567] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 992.343986][ T7641] usb 5-1: Using ep0 maxpacket: 8 [ 992.396760][ T7641] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 992.427102][ T7641] usb 5-1: config 0 has no interface number 0 [ 992.507972][ T7641] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 992.618158][ T7641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.105266][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.117900][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.154732][ T7641] usb 5-1: config 0 descriptor?? [ 993.340782][ T7641] viperboard 5-1:0.143: version 0.00 found at bus 005 address 031 [ 993.404595][ T7641] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 993.428397][ T7641] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 993.569762][ T7641] usb 5-1: USB disconnect, device number 31 [ 993.579120][ T8304] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 993.589609][ T8304] Bluetooth: hci4: Injecting HCI hardware error event [ 993.599404][ T5775] Bluetooth: hci4: hardware error 0x00 [ 993.881261][ T7646] Process accounting resumed [ 994.809589][ T8] Process accounting resumed [ 995.872155][ T5775] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 997.813951][T12598] Process accounting resumed [ 998.334859][T12611] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 998.358697][ T27] audit: type=1800 audit(1788816802.266:7): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1547" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 1001.725181][T12627] Process accounting resumed [ 1004.223113][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1004.538288][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1004.569704][ T8] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1004.595093][ T8] usb 5-1: config 0 has no interface number 0 [ 1004.621295][ T8] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1004.662051][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.693458][ T8] usb 5-1: config 0 descriptor?? [ 1004.820274][ T8] viperboard 5-1:0.143: version 0.00 found at bus 005 address 032 [ 1004.854488][ T8] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1004.874112][ T8] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 1004.942095][ T8] usb 5-1: USB disconnect, device number 32 [ 1005.890822][ T8] Process accounting resumed [ 1006.229113][ T27] audit: type=1800 audit(1788816810.156:8): pid=12649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1557" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 1006.272690][T12649] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1006.437204][T12647] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1556'. [ 1006.622158][ T8] Process accounting resumed [ 1008.719684][ T8] Process accounting resumed [ 1008.925457][ T27] audit: type=1800 audit(1788816812.856:9): pid=12683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1567" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 1008.932012][T12683] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1009.062211][ T7642] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1009.261945][ T7642] usb 8-1: Using ep0 maxpacket: 8 [ 1009.273583][ T7642] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 1009.302652][ T7642] usb 8-1: config 0 has no interface number 0 [ 1009.382602][ T8] Process accounting resumed [ 1009.416628][ T7642] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1009.432271][ T7642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.472880][ T7642] usb 8-1: config 0 descriptor?? [ 1009.592909][ T7642] viperboard 8-1:0.143: version 0.00 found at bus 008 address 007 [ 1009.710414][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.725047][ T7642] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1009.752498][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.777363][ T7642] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 1011.180361][ T7646] usb 8-1: USB disconnect, device number 7 [ 1011.743604][T12703] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1573'. [ 1016.678135][ T8] Process accounting resumed [ 1016.812140][ T6325] Process accounting resumed [ 1018.842641][T12733] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1580'. [ 1022.615030][T12753] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1022.624425][T12753] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1022.633667][T12753] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1023.474131][ T6325] IPVS: starting estimator thread 0... [ 1023.602333][T12755] IPVS: using max 35 ests per chain, 84000 per kthread [ 1023.876147][T12759] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1024.212531][ T7646] Process accounting resumed [ 1024.514284][ T7641] Process accounting resumed [ 1024.705492][T12774] syzkaller0: entered promiscuous mode [ 1024.712946][T12774] syzkaller0: entered allmulticast mode [ 1025.536100][T12775] Process accounting resumed [ 1026.188100][T12790] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1026.384472][ T7641] Process accounting resumed [ 1026.412093][ T7642] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1026.639026][ T7642] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.545517][ T6325] Process accounting resumed [ 1028.659859][ T7642] usb 6-1: string descriptor 0 read error: -71 [ 1028.694429][ T7642] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1028.741131][ T7642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.785975][ T7642] usb 6-1: can't set config #1, error -71 [ 1028.808783][ T7642] usb 6-1: USB disconnect, device number 44 [ 1029.827193][T12813] Process accounting resumed [ 1030.118763][T12818] syzkaller0: entered promiscuous mode [ 1030.127404][T12818] syzkaller0: entered allmulticast mode [ 1031.792376][ T7642] Process accounting resumed [ 1033.242772][T12835] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1034.360038][T12841] Process accounting resumed [ 1035.576909][T12850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1035.670924][ T7642] Process accounting resumed [ 1035.882011][ T7641] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1035.909593][T12859] syzkaller0: entered promiscuous mode [ 1035.920879][T12859] syzkaller0: entered allmulticast mode [ 1036.269500][ T7641] usb 7-1: Using ep0 maxpacket: 16 [ 1036.313234][ T7641] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1036.363261][ T7641] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1036.373421][ T7641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.401582][ T7641] usb 7-1: Product: syz [ 1036.426953][ T7641] usb 7-1: Manufacturer: syz [ 1036.437055][ T7641] usb 7-1: SerialNumber: syz [ 1036.448376][ T7641] usb 7-1: config 0 descriptor?? [ 1037.608981][ T6325] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1037.618038][T12868] Bluetooth: hci0: Frame reassembly failed (-84) [ 1037.625791][T12868] Bluetooth: hci0: Frame reassembly failed (-84) [ 1039.329638][ T7642] Process accounting resumed [ 1040.730136][ T5775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1040.809280][ T7642] usb 7-1: USB disconnect, device number 10 [ 1040.879287][T12873] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1041.077748][T12880] bridge0: port 3(erspan0) entered blocking state [ 1041.104437][T12880] bridge0: port 3(erspan0) entered disabled state [ 1041.111110][T12880] erspan0: entered allmulticast mode [ 1041.133412][T12880] erspan0: entered promiscuous mode [ 1041.161095][ T7642] Process accounting resumed [ 1041.333582][T12884] syzkaller0: entered promiscuous mode [ 1041.339098][T12884] syzkaller0: entered allmulticast mode [ 1042.720796][T12895] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1045.762775][ T7642] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1046.135701][ T6325] Process accounting resumed [ 1046.162352][ T7642] usb 6-1: device not accepting address 45, error -71 [ 1047.637335][T12930] syzkaller0: entered promiscuous mode [ 1047.969465][T12930] syzkaller0: entered allmulticast mode [ 1048.034516][ T7641] Process accounting resumed [ 1049.133860][T12948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1050.552236][ T7642] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1050.762438][ T7642] usb 5-1: Using ep0 maxpacket: 16 [ 1050.780348][ T7642] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1050.817860][ T7642] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1050.828195][ T7642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.858550][ T7642] usb 5-1: Product: syz [ 1050.881189][ T7642] usb 5-1: Manufacturer: syz [ 1050.899098][ T7642] usb 5-1: SerialNumber: syz [ 1050.913179][ T7642] usb 5-1: config 0 descriptor?? [ 1051.116837][ T8] Process accounting resumed [ 1051.322284][ T7641] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1051.342683][T12965] Bluetooth: hci0: Frame reassembly failed (-84) [ 1051.351035][T12965] Bluetooth: hci0: Frame reassembly failed (-84) [ 1051.379686][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1051.852031][ T7641] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.965593][ T7641] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1052.106542][ T7641] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.297523][ T7641] usb 8-1: Product: syz [ 1052.409885][ T7641] usb 8-1: Manufacturer: syz [ 1052.497006][ T7641] usb 8-1: SerialNumber: syz [ 1053.411870][T12869] Bluetooth: hci0: command 0x1003 tx timeout [ 1053.478636][ T5775] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1053.537105][ T7641] usb 8-1: can't set config #1, error -71 [ 1053.546603][ T7641] usb 8-1: USB disconnect, device number 8 [ 1054.822762][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.829100][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.997197][ T8] usb 5-1: USB disconnect, device number 34 [ 1056.429762][T12976] syzkaller0: entered promiscuous mode [ 1056.452571][T12976] syzkaller0: entered allmulticast mode [ 1057.719329][ T6325] Process accounting resumed [ 1060.278987][T13006] syz.5.1652: attempt to access beyond end of device [ 1060.278987][T13006] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1060.292703][T13006] MINIX-fs: unable to read superblock [ 1062.922340][T12869] Bluetooth: hci1: command tx timeout [ 1062.942765][T13000] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1063.078326][ T6325] Process accounting resumed [ 1068.726542][ T6325] Process accounting resumed [ 1068.924374][ T6325] Process accounting resumed [ 1068.994033][T13052] syzkaller0: entered promiscuous mode [ 1068.999584][T13052] syzkaller0: entered allmulticast mode [ 1069.142119][T13058] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1069.559002][ T27] audit: type=1800 audit(1788816873.486:10): pid=13061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1674" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 1069.595302][T13061] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1071.391138][T13077] syz.5.1677: attempt to access beyond end of device [ 1071.391138][T13077] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1071.404696][T13077] MINIX-fs: unable to read superblock [ 1073.027514][ T6325] Process accounting resumed [ 1073.079257][T13087] syzkaller0: entered promiscuous mode [ 1073.088989][T13087] syzkaller0: entered allmulticast mode [ 1073.270062][T13089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1073.374573][ T27] audit: type=1800 audit(1788816877.306:11): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1685" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 1073.397756][T13096] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1073.414850][T13014] Bluetooth: hci1: command tx timeout [ 1073.844417][ T8] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1074.057759][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1074.133139][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1074.287606][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1074.398381][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.472008][ T8] usb 6-1: Product: syz [ 1074.476388][ T8] usb 6-1: Manufacturer: syz [ 1074.486732][ T8] usb 6-1: SerialNumber: syz [ 1074.545680][ T8] usb 6-1: config 0 descriptor?? [ 1075.076411][T13094] Bluetooth: hci0: Frame reassembly failed (-84) [ 1075.085115][T13094] Bluetooth: hci0: Frame reassembly failed (-84) [ 1075.149942][ T1088] Bluetooth: hci0: Frame reassembly failed (-84) [ 1077.172314][ T5775] Bluetooth: hci0: command 0x1003 tx timeout [ 1077.180267][T13014] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1077.246130][ T8] Process accounting resumed [ 1077.394712][ T8] usb 6-1: USB disconnect, device number 47 [ 1077.417833][T13128] syzkaller0: entered promiscuous mode [ 1077.433240][T13128] syzkaller0: entered allmulticast mode [ 1079.493170][ T8] Process accounting resumed [ 1079.566542][ T8] Process accounting resumed [ 1080.466737][T13165] syzkaller0: entered promiscuous mode [ 1080.473277][T13165] syzkaller0: entered allmulticast mode [ 1081.551921][ T8] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1081.837887][ T7641] Process accounting resumed [ 1081.897508][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.932744][ T8] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1081.949182][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.975874][ T8] usb 5-1: Product: syz [ 1082.023432][ T7641] Process accounting resumed [ 1082.043904][ T8] usb 5-1: Manufacturer: syz [ 1082.103049][ T8] usb 5-1: SerialNumber: syz [ 1082.523402][ T8] usb 5-1: Cannot retrieve CPort count: -71 [ 1082.605004][ T8] usb 5-1: Cannot retrieve CPort count: -71 [ 1083.145491][ T8] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 1083.545140][ T8] usb 5-1: USB disconnect, device number 35 [ 1083.844860][T13202] syzkaller0: entered promiscuous mode [ 1083.850389][T13202] syzkaller0: entered allmulticast mode [ 1086.377267][ T5830] Process accounting resumed [ 1088.614173][T13246] syzkaller0: entered promiscuous mode [ 1088.619700][T13246] syzkaller0: entered allmulticast mode [ 1089.352378][ T7641] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1090.109551][ T7642] Process accounting resumed [ 1090.592673][ T7641] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.632796][ T7641] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1090.642446][ T7641] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.650607][ T7641] usb 8-1: Product: syz [ 1090.660694][ T7641] usb 8-1: Manufacturer: syz [ 1090.702066][ T7641] usb 8-1: SerialNumber: syz [ 1090.938743][ T7641] usb 8-1: Cannot retrieve CPort count: -71 [ 1091.524890][ T7641] usb 8-1: Cannot retrieve CPort count: -71 [ 1091.530938][ T7641] es2_ap_driver: probe of 8-1:1.0 failed with error -71 [ 1091.546385][ T7641] usb 8-1: USB disconnect, device number 9 [ 1092.024348][T13282] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1092.384103][T13291] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1093.200574][ T6325] Process accounting resumed [ 1094.323180][T13300] syzkaller0: entered promiscuous mode [ 1094.444144][T13300] syzkaller0: entered allmulticast mode [ 1095.976081][T13331] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1096.061017][ T5830] Process accounting resumed [ 1099.893681][ T7641] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1100.666752][ T7641] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.800927][ T7641] usb 8-1: string descriptor 0 read error: -71 [ 1100.823798][ T7641] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1100.878619][ T7641] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.883253][T13348] syzkaller0: entered promiscuous mode [ 1100.899004][ T7641] usb 8-1: can't set config #1, error -71 [ 1100.914240][ T7641] usb 8-1: USB disconnect, device number 10 [ 1100.921821][T13348] syzkaller0: entered allmulticast mode [ 1101.655491][T13358] syz.6.1761: attempt to access beyond end of device [ 1101.655491][T13358] loop6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1101.669151][T13358] MINIX-fs: unable to read superblock [ 1103.412194][ T6325] Process accounting resumed [ 1103.663198][ T5775] Bluetooth: hci1: command tx timeout [ 1104.576074][T13372] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1105.021372][T13384] syzkaller0: entered promiscuous mode [ 1105.049811][T13384] syzkaller0: entered allmulticast mode [ 1105.324373][ T27] audit: type=1800 audit(1788816909.246:12): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1773" name=8006 dev="sda1" ino=2050 res=0 errno=0 [ 1105.355604][T13389] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1105.655544][ T7642] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1106.633609][ T7642] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.697203][ T7642] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1106.727370][ T7642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.748581][ T7642] usb 5-1: Product: syz [ 1106.765170][ T7642] usb 5-1: Manufacturer: syz [ 1106.777369][ T7642] usb 5-1: SerialNumber: syz [ 1106.815885][ T7646] Process accounting resumed [ 1107.135708][ T7642] usb 5-1: Cannot retrieve CPort count: -71 [ 1107.218478][ T7642] usb 5-1: Cannot retrieve CPort count: -71 [ 1107.463826][ T7642] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 1107.935543][ T7642] usb 5-1: USB disconnect, device number 36 [ 1108.033704][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1781'. [ 1108.433243][T13413] Process accounting resumed [ 1110.714617][ T7641] Process accounting resumed [ 1111.295099][T13461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1791'. [ 1111.644789][ T7641] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1111.942284][ T7641] usb 5-1: Using ep0 maxpacket: 8 [ 1111.991198][ T7641] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1112.068703][T13458] Process accounting resumed [ 1112.075598][ T7641] usb 5-1: config 0 has no interface number 0 [ 1112.090025][ T7641] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1112.102314][ T7641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.270800][ T7641] usb 5-1: config 0 descriptor?? [ 1112.534844][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.982023][ C1] ------------[ cut here ]------------ [ 1243.988846][ C1] WARNING: CPU: 1 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 1243.999178][ C1] Modules linked in: [ 1244.003061][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1244.010065][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1244.020117][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.026437][ C1] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 ea 24 6e 00 48 89 df b8 01 00 00 00 87 05 ac a3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 6c c2 8c 8e 48 c1 e8 03 [ 1244.046025][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 1244.052092][ C1] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e0e6 [ 1244.060055][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 1244.068027][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 1244.075982][ C1] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 1244.083951][ C1] R13: 1ffff9200003e194 R14: 0000000000000a02 R15: dffffc0000000000 [ 1244.091917][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1244.100829][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1244.107394][ C1] CR2: 00007ff1f69b4059 CR3: 000000007833e000 CR4: 00000000003526e0 [ 1244.115354][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1244.123306][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1244.131259][ C1] Call Trace: [ 1244.134523][ C1] [ 1244.137350][ C1] rcu_core+0x5ec/0x17f0 [ 1244.141578][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1244.146587][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1244.152113][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1244.157292][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1244.162469][ C1] ? __run_timers+0x7b3/0x810 [ 1244.167173][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1244.172371][ C1] ? __run_timers+0x780/0x810 [ 1244.177034][ C1] ? detach_timer+0x2b0/0x2b0 [ 1244.181696][ C1] ? detach_timer+0x2b0/0x2b0 [ 1244.186355][ C1] ? lock_chain_count+0x20/0x20 [ 1244.191195][ C1] handle_softirqs+0x27d/0x820 [ 1244.195981][ C1] ? read_tsc+0x9/0x20 [ 1244.200058][ C1] ? ktime_get+0x24b/0x280 [ 1244.204459][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1244.209208][ C1] ? do_softirq+0x1a0/0x1a0 [ 1244.213694][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1244.218875][ C1] __irq_exit_rcu+0xd3/0x190 [ 1244.223449][ C1] ? irq_exit_rcu+0x20/0x20 [ 1244.227941][ C1] irq_exit_rcu+0x9/0x20 [ 1244.232173][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1244.237797][ C1] [ 1244.240731][ C1] [ 1244.243658][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.249658][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1244.255299][ C1] Code: b9 19 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 76 38 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 1244.274897][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 1244.280949][ C1] RAX: ccaf8a8574814000 RBX: ffffffff81631c41 RCX: ccaf8a8574814000 [ 1244.288915][ C1] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 1244.296870][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b6b R09: 1ffff110171e6d6d [ 1244.304833][ C1] R10: dffffc0000000000 R11: ffffed10171e6d6e R12: 1ffff92000030fc8 [ 1244.312785][ C1] R13: dffffc0000000000 R14: 1ffff110037ce780 R15: 0000000000000000 [ 1244.320743][ C1] ? do_idle+0x221/0x5c0 [ 1244.324982][ C1] default_idle+0x13/0x20 [ 1244.329308][ C1] default_idle_call+0x6c/0xa0 [ 1244.334051][ C1] do_idle+0x221/0x5c0 [ 1244.338107][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1244.343739][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1244.348928][ C1] ? do_idle+0xa/0x5c0 [ 1244.352978][ C1] cpu_startup_entry+0x43/0x60 [ 1244.357730][ C1] start_secondary+0xee/0xf0 [ 1244.362303][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1244.368363][ C1] [ 1244.371365][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1244.378634][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1244.385637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1244.395686][ C1] Call Trace: [ 1244.398947][ C1] [ 1244.401778][ C1] dump_stack_lvl+0x18c/0x250 [ 1244.406445][ C1] ? show_regs_print_info+0x20/0x20 [ 1244.411625][ C1] ? load_image+0x420/0x420 [ 1244.416130][ C1] panic+0x2ca/0x720 [ 1244.420013][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1244.424529][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 1244.430815][ C1] __warn+0x2e0/0x470 [ 1244.434826][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.440546][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.446258][ C1] report_bug+0x2be/0x4f0 [ 1244.450574][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.456299][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.462006][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 1244.467708][ C1] handle_bug+0xcf/0x120 [ 1244.471936][ C1] exc_invalid_op+0x1a/0x50 [ 1244.476423][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1244.481252][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1244.487566][ C1] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 ea 24 6e 00 48 89 df b8 01 00 00 00 87 05 ac a3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 6c c2 8c 8e 48 c1 e8 03 [ 1244.507156][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 1244.513222][ C1] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e0e6 [ 1244.521177][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 1244.529129][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 1244.537081][ C1] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 1244.545033][ C1] R13: 1ffff9200003e194 R14: 0000000000000a02 R15: dffffc0000000000 [ 1244.552986][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1244.558693][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1244.564407][ C1] rcu_core+0x5ec/0x17f0 [ 1244.568628][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1244.573633][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1244.579158][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1244.584345][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1244.589524][ C1] ? __run_timers+0x7b3/0x810 [ 1244.594180][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1244.599353][ C1] ? __run_timers+0x780/0x810 [ 1244.604016][ C1] ? detach_timer+0x2b0/0x2b0 [ 1244.608672][ C1] ? detach_timer+0x2b0/0x2b0 [ 1244.613332][ C1] ? lock_chain_count+0x20/0x20 [ 1244.618167][ C1] handle_softirqs+0x27d/0x820 [ 1244.622909][ C1] ? read_tsc+0x9/0x20 [ 1244.626963][ C1] ? ktime_get+0x24b/0x280 [ 1244.631359][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1244.636107][ C1] ? do_softirq+0x1a0/0x1a0 [ 1244.640603][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1244.645786][ C1] __irq_exit_rcu+0xd3/0x190 [ 1244.650356][ C1] ? irq_exit_rcu+0x20/0x20 [ 1244.654844][ C1] irq_exit_rcu+0x9/0x20 [ 1244.659062][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1244.664679][ C1] [ 1244.667608][ C1] [ 1244.670519][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.676498][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1244.682116][ C1] Code: b9 19 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 76 38 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 1244.701702][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 1244.707755][ C1] RAX: ccaf8a8574814000 RBX: ffffffff81631c41 RCX: ccaf8a8574814000 [ 1244.715712][ C1] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 1244.723666][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b6b R09: 1ffff110171e6d6d [ 1244.731618][ C1] R10: dffffc0000000000 R11: ffffed10171e6d6e R12: 1ffff92000030fc8 [ 1244.739567][ C1] R13: dffffc0000000000 R14: 1ffff110037ce780 R15: 0000000000000000 [ 1244.747521][ C1] ? do_idle+0x221/0x5c0 [ 1244.751754][ C1] default_idle+0x13/0x20 [ 1244.756062][ C1] default_idle_call+0x6c/0xa0 [ 1244.760802][ C1] do_idle+0x221/0x5c0 [ 1244.764854][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1244.770466][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1244.775665][ C1] ? do_idle+0xa/0x5c0 [ 1244.779716][ C1] cpu_startup_entry+0x43/0x60 [ 1244.784459][ C1] start_secondary+0xee/0xf0 [ 1244.789031][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1244.795107][ C1] [ 1245.896388][ C1] Shutting down cpus with NMI [ 1245.901296][ C1] Kernel Offset: disabled [ 1245.906151][ C1] Rebooting in 86400 seconds..