last executing test programs: 13m4.919910242s ago: executing program 32 (id=139): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r2, &(0x7f00000005c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x4, 0x400008, 0xfff7, 0x80, 0xca, 0x9, 0x0, 0x0, 0x4, 0x5}}, 0x50) sendfile(r0, r2, &(0x7f0000000040), 0x10) (fail_nth: 2) 8m16.754335853s ago: executing program 4 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000", @ANYRES32=r0], 0x50) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x177) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000003c0)={0x9, @output={0x1000, 0x0, {0xc47, 0x80000000}, 0x4, 0xfffff800}}) r6 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0xd) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 8m13.612054248s ago: executing program 4 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="d80000", @ANYRES16=r1, @ANYBLOB="010028bd70000000000001000000a8000880a400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b7c00098028000080060001000a00000014000200fe880000000000000000000000000101050002000000000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000140002007767300000000000000000000000000008000500"], 0xd8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 8m13.358322918s ago: executing program 4 (id=1531): openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_wait(r1, &(0x7f0000000340)=[{}], 0x1, 0x80000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) wait4(r2, 0x0, 0x8, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 8m11.109277279s ago: executing program 4 (id=1543): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 8m10.960265777s ago: executing program 4 (id=1544): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) 8m10.431566803s ago: executing program 4 (id=1546): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000001300)='7', 0x1) write$char_usb(r2, &(0x7f00000000c0)='V', 0x1) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000031c0)=""/251) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) syz_usb_disconnect(r1) read$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) sendmmsg(r0, 0x0, 0x0, 0x44040050) 8m9.751778781s ago: executing program 33 (id=1546): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000001300)='7', 0x1) write$char_usb(r2, &(0x7f00000000c0)='V', 0x1) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000031c0)=""/251) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) syz_usb_disconnect(r1) read$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) sendmmsg(r0, 0x0, 0x0, 0x44040050) 8m5.076494105s ago: executing program 2 (id=1567): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_setup(0x8, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m2.893598898s ago: executing program 2 (id=1578): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) write(r0, &(0x7f0000000300)="240000001a005f03e494d9ecfd8900a9c4244b4b0a150c000800e6331d8ddcccfe66", 0x22) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000340)=""/4096}, {&(0x7f0000000080)=""/27}, {&(0x7f0000000100)=""/40}, {&(0x7f0000000140)=""/121}, {&(0x7f00000001c0)=""/205}, {&(0x7f0000001340)=""/92}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001780)=""/4096}], 0x0, &(0x7f00000002c0)}, 0x7}, {{&(0x7f00000014c0)=@phonet, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001540)=""/12}, {&(0x7f0000001580)=""/191}, {&(0x7f0000001640)=""/77}, {&(0x7f00000016c0)=""/63}, {&(0x7f0000002780)=""/184}, {&(0x7f0000002840)=""/109}, {&(0x7f00000028c0)=""/159}, {&(0x7f0000002980)=""/237}], 0x0, &(0x7f0000001700)=""/1}, 0x4}, {{&(0x7f0000002b00)=@un=@abs, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002b80)=""/92}, {&(0x7f0000002c00)=""/98}, {&(0x7f0000002c80)=""/4}, {&(0x7f0000002cc0)=""/40}, {&(0x7f0000002d00)=""/16}, {&(0x7f0000002d40)=""/175}, {&(0x7f0000002e00)=""/186}, {&(0x7f0000002ec0)=""/4096}, {&(0x7f0000003ec0)=""/174}], 0x0, &(0x7f0000004040)=""/168}, 0x6}], 0x3fffffffffffcf0, 0xe2, 0x0) 8m2.755577049s ago: executing program 2 (id=1579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 7m56.497947383s ago: executing program 2 (id=1590): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 7m56.152871353s ago: executing program 2 (id=1591): fanotify_init(0x200, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r2 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x641f, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2}) 7m54.967750126s ago: executing program 2 (id=1595): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 7m54.047399651s ago: executing program 34 (id=1595): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 6m51.650406646s ago: executing program 6 (id=1890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9eebe75c5", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x140f, 0x1}, 0x10}}, 0x4040880) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8402) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, &(0x7f00000000c0)=0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9965}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}]}, 0x5c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f0000000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x4008800, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m50.915848099s ago: executing program 5 (id=1898): pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3d14fae85cdb29f7e218c19eff6236ad4833e9083046c08d08ef91ecaf7b7885032ab0bc621d8cf7dbc450805ea7790f4bbeb4dcd650f88b86afb7643e", 0x3d, 0x2a9d) r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600"], 0x50}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6m50.637095242s ago: executing program 5 (id=1899): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6m50.288823715s ago: executing program 5 (id=1900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m48.400277522s ago: executing program 6 (id=1908): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x80000, 0x0, 0x3, 0x1, 0x0, 0x200000, 0x1000, 0x7, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 6m47.837780444s ago: executing program 5 (id=1910): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6m47.55203429s ago: executing program 5 (id=1913): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xf00) 6m47.419700135s ago: executing program 6 (id=1914): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400002, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r3, &(0x7f0000000140)=""/108, 0xffffffa0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0xba}, 0x2) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0xc56d6d1c59985f37, 0x8, 0x21, 0x81}}]}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x3}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000004c0)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000740)="e81618952ab130700698138171a56e4b4835e276669a836a16e81e32a7424f0a88779619f89ef24ef3b44c8f3a52315ef11c596ca9f4ac32efba95ce0930cef4b1b317d2ededdc7b15d55ceb36cd3b2f", 0x50}, {&(0x7f0000001680)="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", 0x13b}], 0x2}], 0x1, 0xc050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0x5}, {0x8}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 6m46.675601094s ago: executing program 5 (id=1915): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2000000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0xfe, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 6m46.14923357s ago: executing program 35 (id=1915): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2000000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0xfe, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 6m44.08389714s ago: executing program 6 (id=1923): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 6m43.704461328s ago: executing program 6 (id=1924): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0x0) 6m42.208401856s ago: executing program 6 (id=1932): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m40.992022035s ago: executing program 36 (id=1932): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m57.99949046s ago: executing program 8 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5m57.719322625s ago: executing program 8 (id=2060): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x6093, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5m56.793428938s ago: executing program 8 (id=2064): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0xb}, 0x20) 5m56.487657089s ago: executing program 8 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 5m56.183770706s ago: executing program 8 (id=2067): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x2c, 0x3, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r2, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c1", 0xb9, 0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000380)="c751", 0x2) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 5m55.811652886s ago: executing program 8 (id=2071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x43, 0x359f35d7abcd234}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, @info_reply={0x10, 0x0, 0x0, 0x6764, 0xf}}}}}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0xb56, &(0x7f00000000c0)=0x5) io_setup(0x3ff, 0x0) set_mempolicy(0x6, 0x0, 0xe0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(0x0, 0x7, 0x88600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r5, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}}, 0x0) 5m55.052882568s ago: executing program 37 (id=2071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x43, 0x359f35d7abcd234}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, @info_reply={0x10, 0x0, 0x0, 0x6764, 0xf}}}}}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0xb56, &(0x7f00000000c0)=0x5) io_setup(0x3ff, 0x0) set_mempolicy(0x6, 0x0, 0xe0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(0x0, 0x7, 0x88600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r5, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x24}}, 0x0) 11.598281131s ago: executing program 1 (id=3229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0x2, 0xffffffff}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4000) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r8 = syz_open_dev$video4linux(0x0, 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 10.849451903s ago: executing program 0 (id=3230): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 10.510590026s ago: executing program 7 (id=3231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 10.505782279s ago: executing program 0 (id=3232): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000240)={0x12, {{0x29, 0x0, 0x36000000, @local}}}, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) setpgid(0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) socket(0x25, 0x1, 0x0) 9.133436463s ago: executing program 0 (id=3234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5df6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r9, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 9.052875337s ago: executing program 7 (id=3235): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1618c2, 0x85) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000040)=""/49, 0x31) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="2c59fb40", @ANYRES16, @ANYBLOB="010028bd7000ffdbdf252e00000008000300", @ANYRES32=0x0, @ANYBLOB="0400e2000a00c80081c3a11a1c130000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x4001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a0000080002"], 0x28}, 0x1, 0x0, 0x0, 0xb1336115b0c49362}, 0xc060) 7.494266716s ago: executing program 0 (id=3237): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x80000, 0x0, 0x3, 0x1, 0x0, 0x200000, 0x1000, 0x7, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{&(0x7f0000000380)="11", 0x1}], 0x1, 0x3, 0x6b0, 0x17) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 7.492469171s ago: executing program 7 (id=3238): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 7.392326453s ago: executing program 9 (id=3239): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x83, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, 0x0, 0x20044014) r2 = socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7000, 0x16, 0x19) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaa193aaaaffffffffffff86dd604dd31800180600fe800000000000000001000100000029fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022020000"], 0x0) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x2010, r6, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0xf0, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 6.468862184s ago: executing program 7 (id=3241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020a0003070000000000ffffffff000005001a00ff10a88376efec29c632e9ccdd5510e94c3128aae88c"], 0x38}}, 0x20008040) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6.347832581s ago: executing program 0 (id=3242): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000010d804dd0000e5ff00000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="060036002b000000060036000700000006003600220000000600360036000000"], 0x3c}}, 0x8004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x80, 0x2}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[r4], 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d4786682467", 0x1e}], 0x2}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r5, r6) fanotify_mark(0xffffffffffffffff, 0x1, 0x3, r5, &(0x7f0000000000)='./file0\x00') r9 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KDSKBENT(r9, 0x4b47, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000240)={&(0x7f00000002c0)=[{0x3f, 0x1000, 0x0, 0x0}, {0x8, 0x4800, 0x0, 0x0}], 0x2}) 6.241943556s ago: executing program 9 (id=3243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="7106c3604b3896c24ad23870642fef06", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1}, 0xb}], 0x1, 0x50, 0x0) 6.123474555s ago: executing program 1 (id=3244): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000240)={0x12, {{0x29, 0x0, 0x36000000, @local}}}, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) setpgid(0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) socket(0x25, 0x1, 0x0) 5.469507216s ago: executing program 1 (id=3245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.469098026s ago: executing program 3 (id=3246): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x80005, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 4.920354732s ago: executing program 1 (id=3247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x490, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) 4.472534291s ago: executing program 3 (id=3248): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1618c2, 0x85) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000040)=""/49, 0x31) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="2c59fb40", @ANYRES16, @ANYBLOB="010028bd7000ffdbdf252e00000008000300", @ANYRES32=0x0, @ANYBLOB="0400e2000a00c80081c3a11a1c130000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x4001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a0000080002"], 0x28}, 0x1, 0x0, 0x0, 0xb1336115b0c49362}, 0xc060) 3.297925219s ago: executing program 3 (id=3249): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000240), &(0x7f0000000440)=0x4) 3.015958709s ago: executing program 3 (id=3250): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5df6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 1.94066337s ago: executing program 3 (id=3251): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 1.794119104s ago: executing program 7 (id=3252): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x80000, 0x0, 0x3, 0x1, 0x0, 0x200000, 0x1000, 0x7, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{&(0x7f0000000380)="11", 0x1}], 0x1, 0x3, 0x6b0, 0x17) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 1.769012103s ago: executing program 3 (id=3253): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r2, 0x84, 0x83, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r3, 0x0, 0x20044014) r4 = socket(0x1d, 0x2, 0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7000, 0x16, 0x19) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaa193aaaaffffffffffff86dd604dd31800180600fe800000000000000001000100000029fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022020000"], 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x2010, r8, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x191, 0xf0, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 1.62769661s ago: executing program 7 (id=3254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0x2, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r5, 0x2, 0x6, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r8 = syz_open_dev$video4linux(0x0, 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.627241392s ago: executing program 9 (id=3255): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@private2, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2000000, 0x0, 0x6d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 1.499607866s ago: executing program 1 (id=3256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)='\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death], 0x0, 0x0, 0x0}) 1.335054496s ago: executing program 9 (id=3257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.231462502s ago: executing program 0 (id=3258): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 828.29483ms ago: executing program 9 (id=3259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a000000050004000000000009000200"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 706.916178ms ago: executing program 9 (id=3260): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x80005, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 0s ago: executing program 1 (id=3261): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) readv(r0, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/183, 0xb7}], 0x1) kernel console output (not intermixed with test programs): alized and connected. [ 546.202302][ T6186] usb 8-1: USB disconnect, device number 8 [ 546.518100][ T6186] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 546.648034][T12431] veth0_vlan: entered promiscuous mode [ 546.689065][ T5957] usb 4-1: USB disconnect, device number 38 [ 546.759185][T12431] veth1_vlan: entered promiscuous mode [ 546.926157][T12431] veth0_macvtap: entered promiscuous mode [ 546.946148][T12431] veth1_macvtap: entered promiscuous mode [ 546.988543][T12431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.043922][T12431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.333859][ T6838] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.402163][ T6838] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.714056][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1981'. [ 547.728416][T12781] program syz.7.1981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.749314][ T6838] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.777343][ T6838] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.806478][T12503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.961418][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.979477][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.240325][ T6838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.396957][ T6838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.607873][T12822] bond1: option arp_interval: invalid value (18446744073709551615) [ 549.633088][T12822] bond1: option arp_interval: allowed values 0 - 2147483647 [ 549.724734][T12822] bond1 (unregistering): Released all slaves [ 550.066043][T12503] veth0_vlan: entered promiscuous mode [ 550.089104][T12503] veth1_vlan: entered promiscuous mode [ 550.193213][T12503] veth0_macvtap: entered promiscuous mode [ 550.331302][T12503] veth1_macvtap: entered promiscuous mode [ 550.448244][T12503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.532108][T12503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.613347][ T6838] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.693171][ T6838] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.738721][ T6838] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.791713][ T6838] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.211325][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1991'. [ 551.232225][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.243300][T12845] misc userio: The device must be registered before sending interrupts [ 551.262789][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.321412][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1991'. [ 551.451698][ T7042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.552145][ T7042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.602613][ T129] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 551.796451][ T129] usb 4-1: No LPM exit latency info found, disabling LPM. [ 551.840624][ T129] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 551.895977][ T129] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 551.970612][ T129] usb 4-1: config 1 interface 0 has no altsetting 0 [ 552.165717][ T129] usb 4-1: string descriptor 0 read error: -22 [ 552.172088][ T129] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 552.235497][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.260058][T12845] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.267790][T12845] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.386913][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 552.386986][ T30] audit: type=1800 audit(1764420827.809:97): pid=12863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1993" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 553.657726][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1997'. [ 554.278367][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1999'. [ 554.294476][T12891] netlink: 320 bytes leftover after parsing attributes in process `syz.9.1999'. [ 554.563032][T12883] program syz.7.1997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.891361][ T39] usb 4-1: USB disconnect, device number 39 [ 555.853768][T12913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2002'. [ 556.882016][ T30] audit: type=1800 audit(1764420832.299:98): pid=12932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2008" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 557.449285][T12944] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 558.061354][T12953] IPVS: set_ctl: invalid protocol: 59 172.20.20.23:20002 [ 559.347295][T12974] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2021'. [ 561.107178][T13001] misc userio: The device must be registered before sending interrupts [ 561.562627][ T39] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 561.804371][ T39] usb 9-1: No LPM exit latency info found, disabling LPM. [ 561.812858][ T39] usb 9-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 561.863510][ T39] usb 9-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 561.956141][ T39] usb 9-1: config 1 interface 0 has no altsetting 0 [ 561.986095][ T39] usb 9-1: string descriptor 0 read error: -22 [ 562.047320][ T39] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 562.069572][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.103804][T13003] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 562.150483][T13015] netlink: 47 bytes leftover after parsing attributes in process `syz.9.2033'. [ 562.201256][T13003] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 562.375052][T13019] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 564.034935][ T9] usb 9-1: USB disconnect, device number 2 [ 564.213660][T13044] netlink: 'syz.8.2039': attribute type 4 has an invalid length. [ 564.577585][T13046] net_ratelimit: 30 callbacks suppressed [ 564.577601][T13046] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 564.662974][T12552] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 564.842576][T12552] usb 4-1: Using ep0 maxpacket: 16 [ 564.850067][T12552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.871583][T12552] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 564.951957][T12552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.000707][T12552] usb 4-1: config 0 descriptor?? [ 565.654004][T12552] usbhid 4-1:0.0: can't add hid device: -71 [ 565.667668][T12552] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 565.715229][T12552] usb 4-1: USB disconnect, device number 40 [ 567.068239][T13105] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 568.242815][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.249678][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.612634][T12777] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 568.812632][T12777] usb 4-1: Using ep0 maxpacket: 16 [ 568.820873][T12777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.857215][T12777] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 568.902306][T12777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.953782][T12777] usb 4-1: config 0 descriptor?? [ 569.650416][T12777] usbhid 4-1:0.0: can't add hid device: -71 [ 569.669237][T12777] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 569.726216][T12777] usb 4-1: USB disconnect, device number 41 [ 572.211327][ T3827] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.581245][ T3827] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.000602][ T3827] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.117080][T10959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 573.128191][T10959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 573.185221][T10959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 573.220806][T10959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 573.230079][T10959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.349955][ T3827] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.943059][ T3827] bridge_slave_1: left allmulticast mode [ 573.948885][ T3827] bridge_slave_1: left promiscuous mode [ 573.988461][ T3827] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.015681][ T3827] bridge_slave_0: left allmulticast mode [ 574.021404][ T3827] bridge_slave_0: left promiscuous mode [ 574.040487][ T3827] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.714718][ T30] audit: type=1326 audit(1764420850.119:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.9.2082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c678f749 code=0x0 [ 575.277567][ T5838] Bluetooth: hci2: command tx timeout [ 575.699814][ T3827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.738900][ T3827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.774521][ T3827] bond0 (unregistering): Released all slaves [ 576.428246][T13268] veth1_to_bond: entered allmulticast mode [ 576.689178][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 577.012302][T13215] chnl_net:caif_netlink_parms(): no params data found [ 577.231403][ T3827] hsr_slave_0: left promiscuous mode [ 577.264092][ T3827] hsr_slave_1: left promiscuous mode [ 577.284203][ T3827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.315434][ T3827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.341780][ T3827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.354823][ T5838] Bluetooth: hci2: command tx timeout [ 577.375147][ T3827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.427682][ T3827] veth1_macvtap: left promiscuous mode [ 577.440542][ T3827] veth0_macvtap: left promiscuous mode [ 577.450671][ T3827] veth1_vlan: left promiscuous mode [ 577.462929][ T3827] veth0_vlan: left promiscuous mode [ 577.813239][T13294] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 578.281260][ T30] audit: type=1326 audit(1764420853.699:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.9.2094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c678f749 code=0x0 [ 579.506864][ T5838] Bluetooth: hci2: command tx timeout [ 580.575923][ T3827] team0 (unregistering): Port device team_slave_1 removed [ 580.677551][ T3827] team0 (unregistering): Port device team_slave_0 removed [ 581.526642][ T5838] Bluetooth: hci2: command tx timeout [ 581.757301][T13267] veth1_to_bond: left allmulticast mode [ 582.189226][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.217826][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.249416][T13215] bridge_slave_0: entered allmulticast mode [ 582.267761][T13215] bridge_slave_0: entered promiscuous mode [ 582.287346][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.303468][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.349871][T13215] bridge_slave_1: entered allmulticast mode [ 582.421898][T13215] bridge_slave_1: entered promiscuous mode [ 582.542518][ T30] audit: type=1326 audit(1764420857.939:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe535b8f749 code=0x0 [ 582.730600][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.794331][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.127462][T13215] team0: Port device team_slave_0 added [ 583.177214][T13215] team0: Port device team_slave_1 added [ 583.355499][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.385275][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.465029][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.639969][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.668169][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.782690][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.077562][T13215] hsr_slave_0: entered promiscuous mode [ 584.132075][T13215] hsr_slave_1: entered promiscuous mode [ 584.165117][T13215] debugfs: 'hsr0' already exists in 'hsr' [ 584.171140][T13215] Cannot create hsr debugfs directory [ 586.214978][T13410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2118'. [ 587.154931][T13419] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 587.764581][T13215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 587.841787][T13215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 587.906671][T13215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 587.971599][T13215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 588.419513][T13215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.520368][T13215] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.581766][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.588980][ T6425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.696808][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.704031][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.328289][T13215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.554382][T13479] fuse: Bad value for 'fd' [ 590.651592][T13215] veth0_vlan: entered promiscuous mode [ 590.767023][T13215] veth1_vlan: entered promiscuous mode [ 590.980265][T13215] veth0_macvtap: entered promiscuous mode [ 591.048905][T13215] veth1_macvtap: entered promiscuous mode [ 591.418887][T13215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.490857][T13215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.572953][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.604614][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.660939][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.863436][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.090527][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.182944][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.368333][ T4562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.378705][ T4562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.316407][T13529] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2139'. [ 594.099223][T13540] fuse: Bad value for 'fd' [ 594.740148][T13554] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2149'. [ 596.222694][ T39] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 596.532564][ T39] usb 4-1: device descriptor read/64, error -71 [ 596.842961][ T39] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 597.202608][ T39] usb 4-1: device descriptor read/64, error -71 [ 597.324311][ T39] usb usb4-port1: attempt power cycle [ 597.514640][T13594] fuse: Bad value for 'fd' [ 597.712761][ T39] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 597.734024][ T39] usb 4-1: device descriptor read/8, error -71 [ 597.982595][ T39] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 598.023353][ T39] usb 4-1: device descriptor read/8, error -71 [ 598.133054][ T39] usb usb4-port1: unable to enumerate USB device [ 598.964212][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 599.152985][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 599.160093][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.242592][ T5889] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 599.272618][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.383325][ T5889] usb 1-1: config 0 descriptor?? [ 599.454301][T13625] bridge0: entered promiscuous mode [ 599.512245][T13625] macvlan2: entered promiscuous mode [ 599.534372][T13625] bridge0: port 3(macvlan2) entered blocking state [ 599.561535][T13625] bridge0: port 3(macvlan2) entered disabled state [ 599.599835][T13625] macvlan2: entered allmulticast mode [ 599.611304][T13625] bridge0: entered allmulticast mode [ 599.626936][T13625] macvlan2: left allmulticast mode [ 599.636539][T13625] bridge0: left allmulticast mode [ 599.646242][T13625] bridge0: left promiscuous mode [ 599.819031][ T5889] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 599.903142][T13635] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2167'. [ 600.020009][ T5889] usb 1-1: USB disconnect, device number 3 [ 600.326877][T13642] kAFS: unable to lookup cell '(/c¾ûL' [ 603.546204][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2174'. [ 603.557523][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2174'. [ 603.891545][T13680] netlink: 752 bytes leftover after parsing attributes in process `syz.9.2174'. [ 605.949022][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 606.162674][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 606.323335][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 606.331291][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.352268][ T9] usb 4-1: config 0 has no interfaces? [ 606.374833][ T9] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 606.419684][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.443256][ T9] usb 4-1: config 0 descriptor?? [ 607.015029][T12123] usb 4-1: USB disconnect, device number 46 [ 607.572581][T12123] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 607.742541][T12123] usb 1-1: Using ep0 maxpacket: 32 [ 607.751415][T12123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.778028][T12123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.788382][T12123] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 607.799113][T12123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.855464][T13737] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2187'. [ 607.968059][T13733] fuse: root generation should be zero [ 608.006288][T12123] usb 1-1: config 0 descriptor?? [ 608.501464][T12123] usbhid 1-1:0.0: can't add hid device: -71 [ 608.521860][T12123] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 608.556045][T12123] usb 1-1: USB disconnect, device number 4 [ 608.563830][ T129] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 608.792664][ T129] usb 10-1: Using ep0 maxpacket: 16 [ 608.801306][ T129] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.813423][ T129] usb 10-1: config 0 has no interfaces? [ 608.831268][ T129] usb 10-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 608.850554][ T129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.867585][ T129] usb 10-1: Product: syz [ 608.872112][ T129] usb 10-1: Manufacturer: syz [ 608.880126][ T129] usb 10-1: SerialNumber: syz [ 608.893534][ T129] usb 10-1: config 0 descriptor?? [ 609.244242][ T129] usb 10-1: USB disconnect, device number 2 [ 610.293841][T13777] syzkaller1: entered promiscuous mode [ 610.300833][T13777] syzkaller1: entered allmulticast mode [ 611.202557][T13158] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 611.393120][T13158] usb 1-1: Using ep0 maxpacket: 16 [ 611.409279][T13158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.423775][T13158] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 611.433300][T13158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.454745][T13158] usb 1-1: config 0 descriptor?? [ 611.910548][T13821] syzkaller1: entered promiscuous mode [ 611.917286][T13821] syzkaller1: entered allmulticast mode [ 611.935061][T13158] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 611.963256][ T6186] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 612.132852][ T6186] usb 10-1: Using ep0 maxpacket: 16 [ 612.151233][ T6186] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.163266][T13158] usb 1-1: USB disconnect, device number 5 [ 612.177678][ T6186] usb 10-1: config 0 has no interfaces? [ 612.191401][ T6186] usb 10-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 612.257223][ T6186] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.271128][ T6186] usb 10-1: Product: syz [ 612.277067][ T6186] usb 10-1: Manufacturer: syz [ 612.281847][ T6186] usb 10-1: SerialNumber: syz [ 612.311621][ T6186] usb 10-1: config 0 descriptor?? [ 612.539555][T13158] usb 10-1: USB disconnect, device number 3 [ 612.955896][T13842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2214'. [ 613.252681][T13158] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 613.392578][T13158] usb 1-1: device descriptor read/64, error -71 [ 613.756611][T13158] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 613.912810][T13158] usb 1-1: device descriptor read/64, error -71 [ 614.032901][T13158] usb usb1-port1: attempt power cycle [ 614.272581][ T129] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 614.382561][T13158] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 614.403425][T13158] usb 1-1: device descriptor read/8, error -71 [ 614.439562][ T129] usb 4-1: Using ep0 maxpacket: 32 [ 614.448000][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.461479][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.473469][ T129] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 614.489855][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.507688][ T129] usb 4-1: config 0 descriptor?? [ 614.662679][T13158] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 614.701536][T13158] usb 1-1: device descriptor read/8, error -71 [ 614.813088][T13158] usb usb1-port1: unable to enumerate USB device [ 614.931122][ T129] usbhid 4-1:0.0: can't add hid device: -71 [ 614.939737][ T129] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 614.985807][ T129] usb 4-1: USB disconnect, device number 47 [ 616.003877][ T129] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 616.172760][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 616.180019][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.200499][ T129] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 616.223133][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.267089][ T129] usb 4-1: config 0 descriptor?? [ 616.626387][T13914] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 616.697069][ T129] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 616.863123][T12777] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 617.016130][ T129] usb 4-1: USB disconnect, device number 48 [ 617.022709][T12777] usb 10-1: Using ep0 maxpacket: 32 [ 617.030402][T12777] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.053115][T12777] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.101624][T12777] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 617.137860][T12777] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.175120][T12777] usb 10-1: config 0 descriptor?? [ 617.596395][T12777] usbhid 10-1:0.0: can't add hid device: -71 [ 617.609714][T12777] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 617.668457][T12777] usb 10-1: USB disconnect, device number 4 [ 618.944491][T13961] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2243'. [ 619.844231][ T5915] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 620.025318][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.061439][ T5915] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.102570][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.146764][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.197521][ T5915] usb 4-1: config 0 descriptor?? [ 620.415687][ T129] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 620.642607][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 620.657165][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.671972][ T5915] usb 4-1: string descriptor 0 read error: -71 [ 620.704217][ T5915] usb 4-1: USB disconnect, device number 49 [ 620.711679][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.734955][ T129] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 620.791266][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.822125][ T129] usb 1-1: config 0 descriptor?? [ 620.894587][T14008] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 621.252319][ T129] usbhid 1-1:0.0: can't add hid device: -71 [ 621.266905][ T129] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 621.419775][ T129] usb 1-1: USB disconnect, device number 10 [ 622.821502][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2261'. [ 623.082970][ T39] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 623.317997][ T39] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 623.329599][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.341650][ T39] usb 10-1: Product: syz [ 623.347019][ T39] usb 10-1: Manufacturer: syz [ 623.352369][ T39] usb 10-1: SerialNumber: syz [ 623.368102][ T39] usb 10-1: config 0 descriptor?? [ 624.977186][T14076] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2271'. [ 625.287754][T14082] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 625.981502][T12777] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 626.157538][T12777] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 626.167532][T12777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.191186][T12777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 626.256477][T12777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.287219][T12777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.386619][T12777] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 626.418801][T12777] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 626.461089][T12777] usb 1-1: Product: syz [ 626.481725][T12777] usb 1-1: Manufacturer: syz [ 626.522777][T12777] cdc_wdm 1-1:1.0: skipping garbage [ 626.537834][T12777] cdc_wdm 1-1:1.0: skipping garbage [ 626.568571][T12777] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 626.592526][T12777] cdc_wdm 1-1:1.0: Unknown control protocol [ 626.607846][ T6186] usb 10-1: USB disconnect, device number 5 [ 626.727665][ T5889] usb 1-1: USB disconnect, device number 11 [ 627.642549][ T5889] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 627.817629][ T5889] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.918225][ T5889] usb 10-1: config 0 has no interface number 0 [ 627.936964][ T5889] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 627.963401][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.011057][ T5889] usb 10-1: config 0 descriptor?? [ 628.085961][ T5889] usb 10-1: selecting invalid altsetting 1 [ 628.103508][ T5889] dvb_ttusb_budget: ttusb_init_controller: error [ 628.110167][ T5889] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 628.258223][ T5889] DVB: Unable to find symbol cx22700_attach() [ 628.349417][ T5889] DVB: Unable to find symbol tda10046_attach() [ 628.377237][ T5889] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 628.413070][ T5889] usb 10-1: USB disconnect, device number 6 [ 629.683103][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.689700][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.327495][T14153] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2294'. [ 632.442564][T12123] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 632.653792][T12123] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.670723][T12123] usb 1-1: config 0 has no interface number 0 [ 632.687195][T12123] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 632.717875][T12123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.755522][T12123] usb 1-1: config 0 descriptor?? [ 632.788456][T12123] usb 1-1: selecting invalid altsetting 1 [ 632.804903][T12123] dvb_ttusb_budget: ttusb_init_controller: error [ 632.819564][T12123] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 633.740655][T14194] macvlan2: entered promiscuous mode [ 633.892160][T12123] DVB: Unable to find symbol cx22700_attach() [ 634.371836][T12123] DVB: Unable to find symbol tda10046_attach() [ 634.483434][T12123] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 634.512726][T12123] usb 1-1: USB disconnect, device number 12 [ 634.532165][T14201] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 636.551385][ T5957] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 636.777554][ T5957] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 636.811018][ T5957] usb 10-1: config 0 has no interface number 0 [ 636.854298][ T5957] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 636.934280][ T5957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.001819][ T5957] usb 10-1: config 0 descriptor?? [ 637.023751][ T5957] usb 10-1: selecting invalid altsetting 1 [ 637.029773][ T5957] dvb_ttusb_budget: ttusb_init_controller: error [ 637.049910][ T5957] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 637.271205][ T5957] DVB: Unable to find symbol cx22700_attach() [ 637.411135][ T5957] DVB: Unable to find symbol tda10046_attach() [ 637.436522][ T5957] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 637.487372][ T5957] usb 10-1: USB disconnect, device number 7 [ 638.153931][ T5957] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 638.203714][T14270] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 638.422292][ T5957] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 638.435499][ T5957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.444874][ T5957] usb 10-1: Product: syz [ 638.449242][ T5957] usb 10-1: Manufacturer: syz [ 638.454709][ T5957] usb 10-1: SerialNumber: syz [ 638.485828][ T5957] usb 10-1: config 0 descriptor?? [ 639.337869][ T5957] usb 10-1: Firmware version (0.0) predates our first public release. [ 639.380695][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 639.393981][T14299] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2333'. [ 639.435289][ T5957] usb 10-1: Please update to version 0.2 or newer [ 639.525324][ T5957] usb 10-1: USB disconnect, device number 8 [ 643.337991][T14364] tipc: Started in network mode [ 643.572943][T14364] tipc: Node identity 4, cluster identity 4711 [ 643.595169][T14364] tipc: Node number set to 4 [ 644.762711][ T6186] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 644.995088][ T6186] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 645.022618][ T6186] usb 1-1: config 0 has no interface number 0 [ 645.037996][ T6186] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 645.066298][ T6186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.117035][ T6186] usb 1-1: config 0 descriptor?? [ 645.144477][ T6186] usb 1-1: selecting invalid altsetting 1 [ 645.180077][ T6186] dvb_ttusb_budget: ttusb_init_controller: error [ 645.313168][ T6186] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 645.700334][ T6186] DVB: Unable to find symbol cx22700_attach() [ 645.843295][ T6186] DVB: Unable to find symbol tda10046_attach() [ 645.956549][ T6186] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 645.977062][ T6186] usb 1-1: USB disconnect, device number 13 [ 647.403743][T12123] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 647.575154][T12123] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 647.584137][T12123] usb 4-1: config 0 has no interface number 0 [ 647.593930][T12123] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 647.621905][T12123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.674318][T12123] usb 4-1: config 0 descriptor?? [ 647.695799][T12123] usb 4-1: selecting invalid altsetting 1 [ 647.777880][T12123] dvb_ttusb_budget: ttusb_init_controller: error [ 647.795590][T12123] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 648.036859][T12123] DVB: Unable to find symbol cx22700_attach() [ 648.196131][T12123] DVB: Unable to find symbol tda10046_attach() [ 648.202385][T12123] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 648.419787][T12123] usb 4-1: USB disconnect, device number 50 [ 649.299935][T14453] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 651.712695][ T39] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 651.874428][T14484] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 651.874500][ T39] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 651.905657][ T39] usb 4-1: config 0 has no interface number 0 [ 651.939485][ T39] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 651.976624][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.016726][ T39] usb 4-1: config 0 descriptor?? [ 652.050667][ T39] usb 4-1: selecting invalid altsetting 1 [ 652.083810][ T39] dvb_ttusb_budget: ttusb_init_controller: error [ 652.129159][ T39] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 652.232839][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 652.812791][ T39] DVB: Unable to find symbol cx22700_attach() [ 653.062601][ T39] DVB: Unable to find symbol tda10046_attach() [ 653.198490][ T39] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 653.299882][ T39] usb 4-1: USB disconnect, device number 51 [ 653.653051][ T5957] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 653.850806][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.866881][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 653.898749][ T5957] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.950219][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.991830][ T5957] usb 1-1: config 0 descriptor?? [ 654.011844][ T5957] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 656.245083][T12123] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 656.415659][T12123] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 656.435210][T12123] usb 10-1: config 0 has no interface number 0 [ 656.452260][ T5957] usb 1-1: USB disconnect, device number 14 [ 656.484220][T12123] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 656.500274][T12123] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.512743][T12123] usb 10-1: config 0 descriptor?? [ 656.979272][T12123] usb 10-1: selecting invalid altsetting 1 [ 657.000429][T12123] dvb_ttusb_budget: ttusb_init_controller: error [ 657.022093][T12123] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 657.303102][T12123] DVB: Unable to find symbol cx22700_attach() [ 657.703047][T12123] DVB: Unable to find symbol tda10046_attach() [ 657.761846][T12123] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 657.820682][T12123] usb 10-1: USB disconnect, device number 9 [ 658.072681][T10959] Bluetooth: hci0: command 0x0c1a tx timeout [ 658.565630][T14585] netlink: 'syz.1.2413': attribute type 27 has an invalid length. [ 661.302623][ T6186] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 661.343796][T14624] team0: Cannot enslave team device to itself [ 661.452248][ T30] audit: type=1804 audit(1764420936.849:102): pid=14625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2424" name="file0" dev="hugetlbfs" ino=47280 res=1 errno=0 [ 661.476925][ T6186] usb 1-1: device descriptor read/64, error -71 [ 661.491950][ T30] audit: type=1804 audit(1764420936.859:103): pid=14625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2424" name="file0" dev="hugetlbfs" ino=47280 res=1 errno=0 [ 661.722818][ T6186] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 661.903412][ T6186] usb 1-1: device descriptor read/64, error -71 [ 662.064076][ T6186] usb usb1-port1: attempt power cycle [ 662.422629][ T6186] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 662.474702][ T6186] usb 1-1: device descriptor read/8, error -71 [ 662.752676][ T6186] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 662.818813][ T6186] usb 1-1: device descriptor read/8, error -71 [ 662.943528][ T6186] usb usb1-port1: unable to enumerate USB device [ 663.575434][T14659] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2437'. [ 665.069007][T14678] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2441'. [ 665.144084][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2445'. [ 665.423010][ T39] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 665.609641][ T39] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 665.619703][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.649884][ T39] usb 4-1: Product: syz [ 665.671026][ T39] usb 4-1: Manufacturer: syz [ 665.687642][ T39] usb 4-1: SerialNumber: syz [ 665.705672][ T39] usb 4-1: config 0 descriptor?? [ 666.940700][T14703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2451'. [ 667.642085][T14709] ecryptfs: Unknown parameter ']{:%' [ 668.593399][T12123] usb 4-1: USB disconnect, device number 52 [ 669.249622][T14735] : entered promiscuous mode [ 669.678944][T14741] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 669.765372][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2465'. [ 669.860448][T14745] fuse: Bad value for 'group_id' [ 669.872856][T14745] fuse: Bad value for 'group_id' [ 671.301745][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 671.503456][T14766] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2473'. [ 672.673320][T14778] Cannot find set identified by id 65534 to match [ 674.563229][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2480'. [ 676.342614][T12123] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 676.494252][T12123] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 676.507043][T12123] usb 4-1: config 0 has no interface number 0 [ 676.662925][T12123] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 676.704505][T12123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.076958][T12123] usb 4-1: config 0 descriptor?? [ 677.095286][T12123] usb 4-1: selecting invalid altsetting 1 [ 677.111638][T12123] dvb_ttusb_budget: ttusb_init_controller: error [ 677.128081][T12123] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 677.500182][T12123] DVB: Unable to find symbol cx22700_attach() [ 677.617699][T12123] DVB: Unable to find symbol tda10046_attach() [ 677.636002][T12123] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 677.667268][T12123] usb 4-1: USB disconnect, device number 53 [ 678.170543][T14831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2492'. [ 678.541946][T14835] trusted_key: encrypted_key: insufficient parameters specified [ 678.550994][T14835] trusted_key: encrypted_key: insufficient parameters specified [ 679.621173][T14846] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2498'. [ 681.610787][ T6186] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 682.571924][ T6186] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.652004][ T6186] usb 4-1: config 0 has no interface number 0 [ 682.658645][ T6186] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 682.699889][ T6186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.748493][ T6186] usb 4-1: config 0 descriptor?? [ 682.758954][T10959] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 682.960051][ T6186] usb 4-1: selecting invalid altsetting 1 [ 682.965981][ T6186] dvb_ttusb_budget: ttusb_init_controller: error [ 682.977100][ T6186] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 683.213971][ T6186] DVB: Unable to find symbol cx22700_attach() [ 683.342161][ T6186] DVB: Unable to find symbol tda10046_attach() [ 683.366771][ T6186] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 683.413231][ T6186] usb 4-1: USB disconnect, device number 54 [ 684.030432][T14900] trusted_key: encrypted_key: insufficient parameters specified [ 684.039484][T14900] trusted_key: encrypted_key: insufficient parameters specified [ 684.144015][T14902] warning: `syz.9.2516' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 685.182659][T14914] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2519'. [ 686.791871][T10959] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 686.801991][T10959] Bluetooth: hci1: Injecting HCI hardware error event [ 687.362739][T10959] Bluetooth: hci1: hardware error 0x00 [ 688.205491][T14946] trusted_key: encrypted_key: insufficient parameters specified [ 688.214133][T14946] trusted_key: encrypted_key: insufficient parameters specified [ 689.430485][T10959] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 689.504537][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2538'. [ 689.649237][ T6707] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 689.816331][ T6707] usb 4-1: Using ep0 maxpacket: 8 [ 689.911774][ T6707] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 689.939990][ T6707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 689.971010][ T6707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 690.002717][ T6707] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.045256][ T6707] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 690.069287][ T6707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.303611][ T6707] usb 4-1: usb_control_msg returned -32 [ 690.457292][ T6707] usbtmc 4-1:16.0: can't read capabilities [ 690.673327][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 691.203705][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.217667][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.503384][ T39] usb 4-1: USB disconnect, device number 55 [ 693.148932][ T39] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 693.255785][T14999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2553'. [ 693.346262][ T39] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.359723][ T39] usb 4-1: config 0 has no interface number 0 [ 693.377272][ T39] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 693.394765][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.410244][ T39] usb 4-1: config 0 descriptor?? [ 693.429563][ T39] usb 4-1: selecting invalid altsetting 1 [ 693.441650][ T39] dvb_ttusb_budget: ttusb_init_controller: error [ 693.451601][ T39] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 693.547917][ T39] DVB: Unable to find symbol cx22700_attach() [ 693.684348][T15006] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 693.758470][ T39] DVB: Unable to find symbol tda10046_attach() [ 693.766884][ T39] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 694.042991][ T39] usb 4-1: USB disconnect, device number 56 [ 695.602575][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2566'. [ 696.820935][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.832543][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.847598][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.857802][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.866519][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.025260][T15061] fuse: Unknown parameter 'grou00000000000000000000' [ 697.442547][ T39] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 697.498592][ T6158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.597466][ T6158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.613074][ T39] usb 1-1: device descriptor read/64, error -71 [ 697.744193][ T6158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.902546][ T39] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 697.910659][ T6158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.947822][T15054] chnl_net:caif_netlink_parms(): no params data found [ 698.083359][ T39] usb 1-1: device descriptor read/64, error -71 [ 698.216720][ T39] usb usb1-port1: attempt power cycle [ 698.240591][T15054] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.240793][T15054] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.240985][T15054] bridge_slave_0: entered allmulticast mode [ 698.245566][T15054] bridge_slave_0: entered promiscuous mode [ 698.267897][T15054] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.268250][T15054] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.268450][T15054] bridge_slave_1: entered allmulticast mode [ 698.271792][T15054] bridge_slave_1: entered promiscuous mode [ 698.314454][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 698.412985][ T6158] bridge_slave_1: left allmulticast mode [ 698.413052][ T6158] bridge_slave_1: left promiscuous mode [ 698.413268][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.418124][ T6158] bridge_slave_0: left allmulticast mode [ 698.418151][ T6158] bridge_slave_0: left promiscuous mode [ 698.418383][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.446310][T15089] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2579'. [ 698.669375][ T39] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 698.708281][ T39] usb 1-1: device descriptor read/8, error -71 [ 698.942834][ T5838] Bluetooth: hci5: command tx timeout [ 698.951764][ T39] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 698.982573][ T39] usb 1-1: device descriptor read/8, error -71 [ 699.091914][ T39] usb usb1-port1: unable to enumerate USB device [ 699.561267][ T6158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.573632][ T6158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.588441][ T6158] bond0 (unregistering): Released all slaves [ 699.635592][T15054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.682082][T15054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.704989][ T6158] : left promiscuous mode [ 699.805807][ T6158] tipc: Left network mode [ 699.938878][T15054] team0: Port device team_slave_0 added [ 699.955480][T15104] fuse: Unknown parameter 'grou00000000000000000000' [ 699.972723][T15054] team0: Port device team_slave_1 added [ 700.264022][T15054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.278564][T15054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.330262][T15113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2586'. [ 700.349571][T15054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.391753][T15054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.428188][T15054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.458493][T15054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.474104][ T6158] hsr_slave_0: left promiscuous mode [ 700.487477][ T6158] hsr_slave_1: left promiscuous mode [ 700.495213][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.505856][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.523922][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.534268][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.589892][ T6158] veth1_macvtap: left promiscuous mode [ 700.596722][ T6158] veth0_macvtap: left promiscuous mode [ 701.028350][ T5838] Bluetooth: hci5: command tx timeout [ 702.234350][ T6158] team0 (unregistering): Port device team_slave_1 removed [ 702.400026][T12123] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 702.584047][ T6158] team0 (unregistering): Port device team_slave_0 removed [ 702.587926][T12123] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 702.626041][T12123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.679329][T12123] usb 10-1: Product: syz [ 702.696270][T12123] usb 10-1: Manufacturer: syz [ 702.712181][T12123] usb 10-1: SerialNumber: syz [ 702.732036][T15151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2593'. [ 702.776442][T12123] usb 10-1: config 0 descriptor?? [ 703.099786][ T5838] Bluetooth: hci5: command tx timeout [ 703.257306][T15153] fuse: Unknown parameter 'group_i00000000000000000000' [ 704.750711][T15054] hsr_slave_0: entered promiscuous mode [ 704.784385][T15054] hsr_slave_1: entered promiscuous mode [ 704.817809][T15054] debugfs: 'hsr0' already exists in 'hsr' [ 704.825948][T15054] Cannot create hsr debugfs directory [ 705.178831][ T5842] Bluetooth: hci5: command tx timeout [ 705.213268][ T6158] IPVS: stop unused estimator thread 0... [ 705.345218][T12123] usb 10-1: USB disconnect, device number 10 [ 706.326878][ T5842] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 706.425546][T15189] fuse: Unknown parameter 'group_i00000000000000000000' [ 706.548043][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 707.844091][T15054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.871075][T15054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.874496][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2608'. [ 707.914461][T15054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.940853][T15054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.169393][T15054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.255674][T15054] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.296183][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.303450][T13670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.355773][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.363050][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.848763][T15228] openvswitch: netlink: Message has 2712 unknown bytes. [ 709.457234][T15054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.337155][T15054] veth0_vlan: entered promiscuous mode [ 710.364198][T15253] fuse: Unknown parameter 'group_i00000000000000000000' [ 710.373000][T15054] veth1_vlan: entered promiscuous mode [ 710.459440][T15054] veth0_macvtap: entered promiscuous mode [ 710.479581][T15054] veth1_macvtap: entered promiscuous mode [ 711.544868][T15054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.667692][T15054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.766331][ T6050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.365231][ T6050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.365285][ T6050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.365311][ T6050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.940787][ T6838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.964879][ T6838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.082518][ T6268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.118227][ T6268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.614493][ T5915] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 714.535518][ T5915] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 714.576951][ T5915] usb 2-1: config 0 has no interface number 0 [ 714.600498][ T5915] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 714.650910][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.687713][ T5915] usb 2-1: config 0 descriptor?? [ 714.863763][ T5915] usb 2-1: selecting invalid altsetting 1 [ 714.869702][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 714.896498][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 715.823906][ T5915] DVB: Unable to find symbol cx22700_attach() [ 716.069287][ T5915] DVB: Unable to find symbol tda10046_attach() [ 716.122785][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 716.152989][ T5915] usb 2-1: USB disconnect, device number 2 [ 716.528031][T15325] fuse: Unknown parameter 'group_id00000000000000000000' [ 717.183215][ T5915] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 717.200658][T15341] capability: warning: `syz.9.2632' uses 32-bit capabilities (legacy support in use) [ 717.360004][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 717.557156][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 717.609434][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 717.666043][ T5915] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 717.699509][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.809002][ T5915] usb 4-1: config 0 descriptor?? [ 718.892900][ T5915] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 718.901033][ T5915] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 718.951801][ T5915] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 718.972591][ T5915] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 718.989843][ T5915] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 719.035016][ T5915] holtek 0003:1241:5015.0019: hidraw0: USB HID vfb.c7 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 719.109467][ T5915] holtek 0003:1241:5015.0019: no inputs found [ 719.182281][ T5915] usb 4-1: USB disconnect, device number 57 [ 719.251115][T15367] fido_id[15367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 720.058160][T15382] overlayfs: statfs failed on './file0' [ 720.395697][T15394] fuse: Unknown parameter 'group_id00000000000000000000' [ 722.602275][ T5957] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 722.706976][T15420] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 723.140693][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.161428][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 723.202611][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 723.251477][ T5957] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.272265][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.304865][ T5957] usb 2-1: config 0 descriptor?? [ 723.324475][T15411] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 723.752941][T15441] fuse: Unknown parameter 'group_id00000000000000000000' [ 724.514904][ T5957] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 725.833772][T15407] usb 2-1: string descriptor 0 read error: -71 [ 726.735798][ T5999] usb 2-1: USB disconnect, device number 3 [ 729.409719][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 729.569794][ T6186] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 729.750904][ T6186] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.792458][ T6186] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 729.837733][ T6186] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.885184][ T6186] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.902930][ T6186] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.924561][ T6186] usb 10-1: config 0 descriptor?? [ 729.934438][T15504] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 730.251588][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 730.273082][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 730.295689][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 730.893050][T15527] infiniband syz2: set active [ 730.898069][T15527] infiniband syz2: added ip6_vti0 [ 730.908271][T15527] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 730.911906][T15527] infiniband syz2: Couldn't open port 1 [ 730.948055][T15527] RDS/IB: syz2: added [ 730.952432][T15527] smc: adding ib device syz2 with port count 1 [ 730.958887][T15527] smc: ib device syz2 port 1 has no pnetid [ 730.968415][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.117625][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.145265][ T5957] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.156567][T13158] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.164434][ T6186] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 731.318971][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.468769][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.617144][T15527] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.838751][ T6186] usb 10-1: USB disconnect, device number 11 [ 732.814831][T15531] fido_id[15531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 734.064230][ T5957] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 734.364070][ T5957] usb 1-1: device descriptor read/64, error -71 [ 735.073847][ T5957] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 735.304105][ T5957] usb 1-1: device descriptor read/64, error -71 [ 735.430581][ T5957] usb usb1-port1: attempt power cycle [ 735.853267][ T6707] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 735.883617][ T5957] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 736.383515][ T5957] usb 1-1: device descriptor read/8, error -71 [ 736.435119][ T6707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.472320][ T6707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 736.483861][ T6707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 736.497376][ T6707] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 736.508219][ T6707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.519230][ T6707] usb 4-1: config 0 descriptor?? [ 736.543499][T15573] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 737.108360][ T6707] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 738.622276][ T6707] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 738.793659][ T6707] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 738.813226][ T6707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.865885][ T6707] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 738.904313][T15569] usb 4-1: string descriptor 0 read error: -2 [ 738.915411][ T6707] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 738.938551][ T6707] usb 1-1: Manufacturer: syz [ 738.983757][ T6707] usb 1-1: config 0 descriptor?? [ 739.031785][ T10] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 739.211887][ T6707] rc_core: IR keymap rc-hauppauge not found [ 739.229568][ T6707] Registered IR keymap rc-empty [ 739.247435][ T6707] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 739.290074][ T6707] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 739.717442][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2710'. [ 740.275642][T12123] usb 4-1: USB disconnect, device number 58 [ 741.044876][T13158] usb 1-1: USB disconnect, device number 27 [ 741.607628][T15662] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 741.620652][T15403] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 742.246930][T15403] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.263335][T15403] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 742.297487][T15403] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 742.320768][T15403] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 742.342843][T15403] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.538693][T15403] usb 10-1: config 0 descriptor?? [ 742.551293][T15659] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 743.012880][T15403] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 743.157463][T15681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2724'. [ 744.521283][T15656] usb 10-1: string descriptor 0 read error: -71 [ 746.159303][T15403] usb 10-1: USB disconnect, device number 12 [ 746.232312][T15707] fuse: Unknown parameter 'user_i00000000000000000000' [ 746.640359][T15712] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2737'. [ 746.985774][T15718] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20002 [ 749.419703][ T5986] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 749.908992][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.156363][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 750.172101][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.185323][ T5986] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.194789][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.209410][ T5986] usb 1-1: config 0 descriptor?? [ 750.215297][T15730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 750.432937][T15752] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 750.549162][T15754] fuse: Unknown parameter 'user_i00000000000000000000' [ 750.677538][ T5986] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 751.074735][T15760] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.305537][T15403] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 751.462912][T15403] usb 2-1: device descriptor read/64, error -71 [ 751.725333][T15403] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 751.733200][T15763] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2753'. [ 751.885659][T15403] usb 2-1: device descriptor read/64, error -71 [ 752.026224][T15403] usb usb2-port1: attempt power cycle [ 752.117118][T15724] usb 1-1: string descriptor 0 read error: -71 [ 752.523488][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.530147][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.880584][T15403] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 752.925285][T15403] usb 2-1: device descriptor read/8, error -71 [ 753.184707][T15403] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 753.285336][T15403] usb 2-1: device descriptor read/8, error -71 [ 753.440316][T15780] fuse: Bad value for 'fd' [ 753.517280][ T5986] usb 1-1: USB disconnect, device number 28 [ 753.935067][T15403] usb usb2-port1: unable to enumerate USB device [ 755.073938][ T6425] wlan0: Trigger new scan to find an IBSS to join [ 755.177651][T15789] fuse: Unknown parameter 'user_i00000000000000000000' [ 756.286796][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2765'. [ 758.377195][T15817] ecryptfs: Unknown parameter ']{:%' [ 758.796010][T15819] fuse: Bad value for 'fd' [ 759.215516][T15830] fuse: Unknown parameter 'user_id00000000000000000000' [ 759.484694][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2776'. [ 759.663390][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2776'. [ 760.052037][ T7042] wlan0: Trigger new scan to find an IBSS to join [ 760.137571][T12777] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 760.733281][T12777] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 760.755830][T12777] usb 2-1: config 0 has no interface number 0 [ 760.785392][T12777] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 760.815552][T12777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.939977][T12777] usb 2-1: config 0 descriptor?? [ 761.001266][T12777] usb 2-1: selecting invalid altsetting 1 [ 761.011772][T12777] dvb_ttusb_budget: ttusb_init_controller: error [ 761.029647][T12777] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 761.049310][T15849] tipc: Started in network mode [ 761.060010][T15849] tipc: Node identity ee328153129d, cluster identity 4711 [ 761.078411][T15849] tipc: Enabled bearer , priority 0 [ 761.134558][T15853] syzkaller0: entered promiscuous mode [ 761.195960][T15853] syzkaller0: entered allmulticast mode [ 761.244516][T15849] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 761.264568][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.319524][T15857] fuse: Bad value for 'fd' [ 761.325595][T12777] DVB: Unable to find symbol cx22700_attach() [ 761.370818][T15849] tipc: Resetting bearer [ 761.398938][T15849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.426293][T15848] tipc: Resetting bearer [ 761.496678][T12777] DVB: Unable to find symbol tda10046_attach() [ 761.514599][T12777] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 761.524071][T15848] tipc: Disabling bearer [ 761.560760][T12777] usb 2-1: USB disconnect, device number 8 [ 761.565773][T15861] fuse: Bad value for 'fd' [ 761.597777][T15861] fuse: Bad value for 'fd' [ 761.765833][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.775204][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.785814][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.806289][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.819495][T15864] fuse: Unknown parameter 'user_id00000000000000000000' [ 761.830914][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.959039][T15863] ip6_vti0 speed is unknown, defaulting to 1000 [ 763.926872][T15890] fuse: Invalid rootmode [ 763.949806][ T5842] Bluetooth: hci0: command tx timeout [ 764.182897][T13670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.479274][ T5957] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 764.988486][T15905] fuse: Unknown parameter 'user_id00000000000000000000' [ 765.074653][T15903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 765.180375][ T5957] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 765.198092][ T5957] usb 2-1: config 0 has no interface number 0 [ 765.204639][ T5957] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 765.215082][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.253324][T13670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.368927][ T5957] usb 2-1: config 0 descriptor?? [ 765.382638][ T5957] usb 2-1: selecting invalid altsetting 1 [ 765.448055][ T5957] dvb_ttusb_budget: ttusb_init_controller: error [ 765.509166][ T5957] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 765.520519][T13670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.983612][ T5957] DVB: Unable to find symbol cx22700_attach() [ 766.028440][ T5842] Bluetooth: hci0: command tx timeout [ 766.093168][ T5957] DVB: Unable to find symbol tda10046_attach() [ 766.105374][T13670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.127238][ T5957] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 766.183270][ T5957] usb 2-1: USB disconnect, device number 9 [ 766.542658][T15920] ecryptfs: Unknown parameter ']{:%' [ 767.411106][T15863] chnl_net:caif_netlink_parms(): no params data found [ 768.120768][ T6707] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 768.146974][ T5842] Bluetooth: hci0: command tx timeout [ 768.278635][T15863] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.293466][T15945] fuse: Bad value for 'fd' [ 768.300437][T15863] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.322005][ T6707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 768.339438][ T6707] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 768.354417][ T6707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.404763][T15863] bridge_slave_0: entered allmulticast mode [ 768.412163][ T6707] usb 2-1: Product: syz [ 768.433550][ T6707] usb 2-1: Manufacturer: syz [ 768.441030][T15863] bridge_slave_0: entered promiscuous mode [ 768.475254][ T6707] usb 2-1: SerialNumber: syz [ 768.565977][T15863] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.579429][ T6707] usb 2-1: config 0 descriptor?? [ 768.599427][ T5957] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 768.806261][T15863] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.822595][T15863] bridge_slave_1: entered allmulticast mode [ 768.957222][ T5957] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.032914][ T5957] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 769.231725][T15863] bridge_slave_1: entered promiscuous mode [ 769.251254][ T5957] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 769.314530][ T5957] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 769.423724][ T5957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.471910][ T5957] usb 10-1: config 0 descriptor?? [ 769.497064][T15949] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 769.693508][T15863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.763421][T15863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.943255][T13670] bridge_slave_1: left allmulticast mode [ 769.962182][T13670] bridge_slave_1: left promiscuous mode [ 769.969057][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.981528][ T5957] usbhid 10-1:0.0: can't add hid device: -71 [ 770.001861][T13670] bridge_slave_0: left allmulticast mode [ 770.010327][ T5957] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 770.029009][T13670] bridge_slave_0: left promiscuous mode [ 770.034029][ T5957] usb 10-1: USB disconnect, device number 13 [ 770.056539][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.186329][ T5842] Bluetooth: hci0: command tx timeout [ 770.490928][ T2997] smc: removing ib device syz2 [ 771.702854][T12777] usb 2-1: USB disconnect, device number 10 [ 771.892852][T15966] ecryptfs: Unknown parameter ']{:%' [ 772.561706][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.608180][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.645418][T13670] bond0 (unregistering): Released all slaves [ 773.040693][T15863] team0: Port device team_slave_0 added [ 773.241543][ T6707] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.250577][ T6707] syz2: Port: 1 Link DOWN [ 773.409853][T15982] fuse: Bad value for 'fd' [ 773.443554][T15863] team0: Port device team_slave_1 added [ 773.684380][ T5915] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 773.732457][T15991] fuse: Bad value for 'rootmode' [ 773.791155][T15863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.837266][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.915515][T15863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.930170][ T5915] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 773.984273][T12777] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 773.984475][ T5915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.042928][T15863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.063072][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.093646][ T5915] usb 10-1: Product: syz [ 774.103795][ T5915] usb 10-1: Manufacturer: syz [ 774.113930][ T5915] usb 10-1: SerialNumber: syz [ 774.258865][T15863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.305257][ T5915] usb 10-1: config 0 descriptor?? [ 774.316528][T12777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.591469][T12777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 774.637509][T12777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 774.680693][T12777] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.709039][T12777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.786610][T12777] usb 1-1: config 0 descriptor?? [ 774.798050][ T5915] usb 10-1: USB disconnect, device number 14 [ 774.820310][T15988] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 775.073223][T16000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2826'. [ 775.090670][T15863] hsr_slave_0: entered promiscuous mode [ 775.141320][T15863] hsr_slave_1: entered promiscuous mode [ 775.171716][T15863] debugfs: 'hsr0' already exists in 'hsr' [ 775.201660][T15863] Cannot create hsr debugfs directory [ 775.352291][T12777] usbhid 1-1:0.0: can't add hid device: -71 [ 775.368713][T12777] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 775.380887][T15997] nbd: couldn't find device at index 101 [ 775.443775][T12777] usb 1-1: USB disconnect, device number 29 [ 775.832367][T16009] ecryptfs: Unknown parameter ']{:%' [ 776.116822][ T5842] block nbd7: Receive control failed (result -32) [ 776.165144][T14793] block nbd7: shutting down sockets [ 776.858884][ T5915] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 777.060110][T16033] fuse: Bad value for 'fd' [ 777.263944][ T5915] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.285606][ T5915] usb 10-1: config 0 has no interface number 0 [ 777.291871][ T5915] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 777.356148][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.415474][ T5915] usb 10-1: config 0 descriptor?? [ 777.449497][ T5915] usb 10-1: selecting invalid altsetting 1 [ 777.462538][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 777.479234][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 777.689046][ T5915] DVB: Unable to find symbol cx22700_attach() [ 777.896507][T13670] dummy0: left promiscuous mode [ 778.142156][T13670] team0: left promiscuous mode [ 778.148074][T13670] team_slave_0: left promiscuous mode [ 778.233872][T13670] team_slave_1: left promiscuous mode [ 778.306555][T13670] hsr_slave_0: left promiscuous mode [ 778.315818][ T5915] DVB: Unable to find symbol tda10046_attach() [ 778.326368][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 778.389373][T13670] hsr_slave_1: left promiscuous mode [ 778.412910][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.430730][T13670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.434801][ T5915] usb 10-1: USB disconnect, device number 15 [ 778.494648][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.532027][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.604181][T13670] veth1_macvtap: left promiscuous mode [ 778.609774][T13670] veth0_macvtap: left promiscuous mode [ 778.647684][T13670] veth1_vlan: left promiscuous mode [ 778.667927][T13670] veth0_vlan: left promiscuous mode [ 779.241704][ T5986] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 779.407499][T16065] ecryptfs: Unknown parameter ']{:%' [ 779.585653][ T5986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.612506][ T5986] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 779.632073][ T5986] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.658854][ T5986] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.677124][ T5986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.716495][ T5986] usb 10-1: config 0 descriptor?? [ 779.724038][T16061] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 780.155519][T16077] fuse: Unknown parameter '0x0000000000000005' [ 780.306171][T13670] team0 (unregistering): Port device team_slave_1 removed [ 780.363897][T13670] team0 (unregistering): Port device team_slave_0 removed [ 780.531116][ T5915] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 780.715148][ T5915] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.724795][ T5915] usb 1-1: config 0 has no interface number 0 [ 780.735254][ T5915] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 780.744853][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.765622][ T5915] usb 1-1: config 0 descriptor?? [ 780.787704][ T5915] usb 1-1: selecting invalid altsetting 1 [ 780.793841][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 780.800381][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 781.151797][ T5915] DVB: Unable to find symbol cx22700_attach() [ 781.186108][ T30] audit: type=1326 audit(1764421056.661:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.1.2849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84338f749 code=0x0 [ 781.268194][ T5915] DVB: Unable to find symbol tda10046_attach() [ 781.996534][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 782.050632][ T5915] usb 1-1: USB disconnect, device number 30 [ 782.131767][ T5986] usbhid 10-1:0.0: can't add hid device: -71 [ 782.137919][ T5986] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 782.163786][ T5986] usb 10-1: USB disconnect, device number 16 [ 783.520904][T16106] SQUASHFS error: Failed to read block 0x0: -5 [ 783.730480][T16113] fuse: Unknown parameter '0x0000000000000005' [ 783.890006][T15863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 783.896147][T13670] IPVS: stop unused estimator thread 0... [ 783.945015][T15863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 784.106320][T15863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 784.150609][T15863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 784.289356][T12123] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 785.111215][T12123] usb 1-1: Using ep0 maxpacket: 16 [ 785.144277][T12123] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.174990][T12123] usb 1-1: config 0 interface 0 has no altsetting 0 [ 785.189371][T12123] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 785.207719][T12123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.246868][T12123] usb 1-1: config 0 descriptor?? [ 785.374511][T15863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.518662][T15863] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.537114][ T30] audit: type=1326 audit(1764421061.013:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.9.2861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c678f749 code=0x0 [ 785.590269][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.597440][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.608570][T13158] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 785.657545][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.664832][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.714576][T12123] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 785.740228][T12123] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 785.747930][T12123] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 785.758112][T12123] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 785.791859][T13158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.824886][T13158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 785.824899][T12123] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 785.824921][T13158] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 785.916371][T13158] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.946199][T12123] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 785.947059][T13158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.025268][T13158] usb 2-1: config 0 descriptor?? [ 786.048340][T16144] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 786.091288][T12123] usb 1-1: USB disconnect, device number 31 [ 786.170257][T16155] fido_id[16155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 786.488303][T13158] usbhid 2-1:0.0: can't add hid device: -71 [ 786.506369][T13158] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 786.547639][T13158] usb 2-1: USB disconnect, device number 11 [ 786.745344][T15863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.902701][T15863] veth0_vlan: entered promiscuous mode [ 786.920053][T15863] veth1_vlan: entered promiscuous mode [ 786.982915][T15863] veth0_macvtap: entered promiscuous mode [ 787.006234][T15863] veth1_macvtap: entered promiscuous mode [ 787.032490][T15863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.051542][T15863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.864442][ T4562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.914440][ T4562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.932710][T16180] fuse: Unknown parameter '0x0000000000000005' [ 787.943352][ T4562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.964808][ T4562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.386608][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.365851][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.454942][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.942120][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.445957][ T30] audit: type=1326 audit(1764421065.925:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16202 comm="syz.9.2872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c678f749 code=0x0 [ 791.163137][ T5915] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 791.245376][T16214] netlink: 'syz.3.2875': attribute type 1 has an invalid length. [ 791.345568][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 791.353402][ T5915] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.367938][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 791.374610][ T5915] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 792.179117][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.244572][ T5915] usb 2-1: config 0 descriptor?? [ 792.878879][ T5915] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 794.094575][ T4562] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 794.184422][T16237] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2878'. [ 794.759280][ T5842] Bluetooth: hci0: command tx timeout [ 794.910187][ T5915] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 794.924688][ T5915] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 794.944365][ T5915] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 794.952551][ T5915] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 794.964245][ T5915] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 795.063952][ T5915] usb 2-1: USB disconnect, device number 12 [ 795.242306][T16238] fido_id[16238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 797.395010][T16262] netlink: 'syz.7.2886': attribute type 1 has an invalid length. [ 797.513065][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2889'. [ 797.573537][ T5915] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 797.900376][ T5915] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.908679][ T5915] usb 10-1: config 0 has no interface number 0 [ 797.915877][ T5915] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 797.926215][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.939237][ T5915] usb 10-1: config 0 descriptor?? [ 798.000907][ T5915] usb 10-1: selecting invalid altsetting 1 [ 798.011703][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 798.046987][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 798.311482][ T5915] DVB: Unable to find symbol cx22700_attach() [ 798.349757][ T5915] DVB: Unable to find symbol tda10046_attach() [ 798.358187][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 798.381850][ T5915] usb 10-1: USB disconnect, device number 17 [ 799.571392][T12123] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 799.731518][T12123] usb 1-1: Using ep0 maxpacket: 16 [ 799.743743][T12123] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.375756][T12123] usb 1-1: config 0 interface 0 has no altsetting 0 [ 800.382542][T12123] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 800.393227][T12123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.514007][T12123] usb 1-1: config 0 descriptor?? [ 801.145070][T16300] netlink: 'syz.7.2899': attribute type 1 has an invalid length. [ 801.654903][T12123] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 801.708016][T12123] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 801.747217][T12123] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 801.758125][T12123] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 801.778666][T12123] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 801.940893][T12123] usb 1-1: USB disconnect, device number 32 [ 801.977186][T16310] fido_id[16310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 805.318532][ T6707] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 805.375645][T16345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'. [ 805.500727][ T6707] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.513577][T16347] netlink: 'syz.3.2911': attribute type 1 has an invalid length. [ 805.525939][ T6707] usb 10-1: config 0 has no interface number 0 [ 805.543174][ T6707] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 805.565169][ T6707] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.594136][ T6707] usb 10-1: config 0 descriptor?? [ 805.613784][ T6707] usb 10-1: selecting invalid altsetting 1 [ 805.631688][ T6707] dvb_ttusb_budget: ttusb_init_controller: error [ 805.645979][ T6707] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 805.908392][ T6707] DVB: Unable to find symbol cx22700_attach() [ 806.138121][ T5957] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 806.198572][ T6707] DVB: Unable to find symbol tda10046_attach() [ 806.206185][ T6707] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 806.219701][ T6707] usb 10-1: USB disconnect, device number 18 [ 806.871617][ T5986] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 806.901625][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 806.924860][ T5957] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 806.954188][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.969690][T16366] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 807.003466][ T5957] usb 4-1: config 0 descriptor?? [ 807.042454][ T5957] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 807.283510][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 807.299131][ T5986] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.326674][ T5986] usb 2-1: config 0 interface 0 has no altsetting 0 [ 807.871914][ T5986] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 808.017150][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.056606][ T5986] usb 2-1: config 0 descriptor?? [ 808.524489][ T5986] nzxt-smart2 0003:1E71:2009.0022: unknown main item tag 0x0 [ 808.538291][ T5986] nzxt-smart2 0003:1E71:2009.0022: unknown main item tag 0x0 [ 808.546536][ T5986] nzxt-smart2 0003:1E71:2009.0022: unknown main item tag 0x0 [ 808.558246][ T5986] nzxt-smart2 0003:1E71:2009.0022: unknown main item tag 0x0 [ 808.573333][ T5986] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 808.769044][ T5986] usb 2-1: USB disconnect, device number 13 [ 808.853736][T16390] fido_id[16390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 809.212269][ T5986] usb 4-1: USB disconnect, device number 59 [ 809.371725][T16398] netlink: 'syz.7.2924': attribute type 1 has an invalid length. [ 813.544372][ T6707] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 813.564389][ T5915] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 813.844265][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 813.853091][ T5915] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.865138][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 813.873555][ T6707] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 814.088952][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.096155][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.593924][ T6707] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.604127][ T5915] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 814.613207][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.694488][ T6707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.746949][ T5915] usb 2-1: config 0 descriptor?? [ 814.754379][ T6707] usb 1-1: config 0 descriptor?? [ 814.801415][ T6707] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 815.164786][ T5915] nzxt-smart2 0003:1E71:2009.0023: unknown main item tag 0x0 [ 815.244849][ T5915] nzxt-smart2 0003:1E71:2009.0023: unknown main item tag 0x0 [ 815.283006][ T5915] nzxt-smart2 0003:1E71:2009.0023: unknown main item tag 0x0 [ 815.312064][ T5915] nzxt-smart2 0003:1E71:2009.0023: unknown main item tag 0x0 [ 815.370225][ T5915] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 815.666840][ T5915] usb 2-1: USB disconnect, device number 14 [ 815.891066][T16458] fido_id[16458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 817.642665][T12552] usb 1-1: USB disconnect, device number 33 [ 818.040846][ T30] audit: type=1326 audit(1764421093.519:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 818.241278][ T30] audit: type=1326 audit(1764421093.529:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 818.301231][ T30] audit: type=1326 audit(1764421093.529:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 818.378655][ T30] audit: type=1326 audit(1764421093.529:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 818.433758][ T30] audit: type=1326 audit(1764421093.829:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbf878df90 code=0x7ffc0000 [ 818.503838][ T30] audit: type=1326 audit(1764421093.829:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 818.672178][ T30] audit: type=1326 audit(1764421093.829:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 818.845438][ T30] audit: type=1326 audit(1764421094.079:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 818.955815][ T30] audit: type=1326 audit(1764421094.089:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 819.052337][ T30] audit: type=1326 audit(1764421094.089:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.7.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf878f749 code=0x7ffc0000 [ 819.131636][ T5915] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 819.463410][ T5915] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.471843][ T5915] usb 10-1: config 0 has no interface number 0 [ 819.491487][ T5915] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 819.514317][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.559526][ T5915] usb 10-1: config 0 descriptor?? [ 819.596009][ T5915] usb 10-1: selecting invalid altsetting 1 [ 819.619724][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 819.637931][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 819.942873][ T5915] DVB: Unable to find symbol cx22700_attach() [ 820.068700][ T5915] DVB: Unable to find symbol tda10046_attach() [ 820.084339][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 820.111398][ T5915] usb 10-1: USB disconnect, device number 19 [ 820.121174][T16445] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 820.341083][T16445] usb 1-1: Using ep0 maxpacket: 16 [ 820.356509][T16445] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.367833][T16445] usb 1-1: config 0 interface 0 has no altsetting 0 [ 820.591958][T16445] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 821.259289][T16445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.346607][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 821.414437][T16445] usb 1-1: config 0 descriptor?? [ 821.822459][ T5915] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 821.848666][T16445] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 821.857463][T16445] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 821.868377][T16445] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 822.072377][ T5915] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 822.091236][T16445] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 822.111482][ T5915] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 822.128704][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.172868][ T5915] usb 10-1: config 0 descriptor?? [ 822.216601][T16445] usb 1-1: USB disconnect, device number 34 [ 822.228018][ T5915] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 822.319264][T16533] fido_id[16533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 822.762439][T16537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2958'. [ 822.779808][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 825.853897][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 826.140450][T15403] usb 10-1: USB disconnect, device number 20 [ 827.284358][ T129] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 827.997928][T16576] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 828.007356][ T129] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 828.027279][ T129] usb 4-1: config 0 has no interface number 0 [ 828.033421][ T129] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 828.103872][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.147671][ T129] usb 4-1: config 0 descriptor?? [ 828.200386][ T129] usb 4-1: selecting invalid altsetting 1 [ 828.220047][ T129] dvb_ttusb_budget: ttusb_init_controller: error [ 828.273839][ T129] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 828.613315][ T129] DVB: Unable to find symbol cx22700_attach() [ 828.657807][ T129] DVB: Unable to find symbol tda10046_attach() [ 828.664048][ T129] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 828.702282][ T129] usb 4-1: USB disconnect, device number 60 [ 831.838872][T16610] delete_channel: no stack [ 831.889390][T16612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 831.950293][T16612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 831.972009][T16612] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 832.367193][T16612] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 832.421322][T16612] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 832.625324][T16612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 832.784918][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 832.791254][T16612] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 832.860345][T16632] ecryptfs: Unknown parameter ']{:%' [ 833.165349][T16612] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 833.564200][T16628] orangefs_mount: mount request failed with -4 [ 833.945940][T12552] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 834.034649][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 834.397005][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 834.585890][T12552] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 834.639529][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 834.737178][T12552] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 834.748514][T12552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.841237][T12552] usb 2-1: config 0 descriptor?? [ 834.988405][T12552] usb 2-1: can't set config #0, error -71 [ 835.017172][T12552] usb 2-1: USB disconnect, device number 15 [ 835.173567][ T129] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 835.389335][ T129] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 835.397748][ T129] usb 10-1: config 0 has no interface number 0 [ 835.408973][ T129] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 835.447666][ T129] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.535828][ T129] usb 10-1: config 0 descriptor?? [ 835.558378][ T129] usb 10-1: selecting invalid altsetting 1 [ 835.564572][ T129] dvb_ttusb_budget: ttusb_init_controller: error [ 835.573772][ T129] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 835.669745][ T129] DVB: Unable to find symbol cx22700_attach() [ 835.942593][ T129] DVB: Unable to find symbol tda10046_attach() [ 835.951691][ T129] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 836.017351][ T129] usb 10-1: USB disconnect, device number 21 [ 836.073428][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 836.473010][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 836.722923][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 838.162119][T16684] fuse: Bad value for 'fd' [ 838.175636][T16684] ecryptfs: Unknown parameter ']{:%' [ 838.791833][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 838.915705][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 838.915720][ T30] audit: type=1326 audit(1764421114.420:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16687 comm="syz.9.2994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c678f749 code=0x0 [ 839.861240][T16445] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 840.021276][T16445] usb 10-1: Using ep0 maxpacket: 8 [ 840.032495][T16445] usb 10-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 840.061357][T16445] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 840.101362][T16445] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 840.125589][T16445] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 840.152727][T16445] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.186792][T16445] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 840.201167][T16445] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.220701][T16445] usb 10-1: config 0 descriptor?? [ 841.425725][T16445] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 841.594194][T16445] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 841.609614][T16445] usb 4-1: config 0 has no interface number 0 [ 841.623684][T16445] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 841.639923][T16445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.657808][T16445] usb 4-1: config 0 descriptor?? [ 841.680515][T16445] usb 4-1: selecting invalid altsetting 1 [ 841.690489][T16445] dvb_ttusb_budget: ttusb_init_controller: error [ 841.702867][T16445] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 841.713585][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 841.825047][T16445] DVB: Unable to find symbol cx22700_attach() [ 841.880196][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 841.903249][ T9] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 841.918436][ T9] usb 1-1: config 0 has no interface number 0 [ 841.934313][ T9] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16 [ 841.953415][ T9] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 841.965696][T16445] DVB: Unable to find symbol tda10046_attach() [ 841.972414][ T9] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 841.982607][T16445] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 841.995708][T16445] usb 4-1: USB disconnect, device number 61 [ 842.006046][ T9] usb 1-1: New USB device found, idVendor=0dcd, idProduct=0001, bcdDevice=f8.43 [ 842.031530][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.039816][ T9] usb 1-1: Product: syz [ 842.054749][ T9] usb 1-1: Manufacturer: syz [ 842.059385][ T9] usb 1-1: SerialNumber: syz [ 842.068407][ T9] usb 1-1: config 0 descriptor?? [ 842.078404][T16715] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 842.094019][T16715] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 843.343728][T16445] usb 10-1: USB disconnect, device number 22 [ 843.945339][T16733] fuse: Bad value for 'fd' [ 844.159682][T16733] ecryptfs: Unknown parameter ']{:%' [ 845.124235][ T9] ftdi_sio 1-1:0.72: FTDI USB Serial Device converter detected [ 845.146788][ T9] ftdi_sio ttyUSB0: unknown device type: 0xf843 [ 845.176417][ T9] usb 1-1: USB disconnect, device number 35 [ 845.396548][ T9] ftdi_sio 1-1:0.72: device disconnected [ 846.224545][T16753] sit0: entered allmulticast mode [ 846.565344][T16766] fuse: Bad value for 'user_id' [ 846.587634][T16766] fuse: Bad value for 'user_id' [ 846.697897][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 846.883895][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 846.927185][T16769] netlink: 'syz.9.3016': attribute type 1 has an invalid length. [ 846.928178][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 847.025228][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.064774][ T9] usb 1-1: config 0 descriptor?? [ 847.127478][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 850.047581][ T5957] usb 1-1: USB disconnect, device number 36 [ 851.249896][T16811] fuse: Bad value for 'user_id' [ 851.254940][T16811] fuse: Bad value for 'user_id' [ 858.381261][T16871] fuse: Bad value for 'fd' [ 858.713498][T16884] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 861.628125][T16925] fuse: Bad value for 'group_id' [ 861.793413][T16925] fuse: Bad value for 'group_id' [ 861.814805][T16925] fuse: Bad value for 'group_id' [ 861.819778][T16925] fuse: Bad value for 'group_id' [ 862.793981][T16932] fuse: Bad value for 'fd' [ 865.263153][T16964] overlayfs: overlapping lowerdir path [ 865.314010][T16965] /dev/nullb0: Can't lookup blockdev [ 865.925917][T16967] syzkaller0: entered promiscuous mode [ 865.931686][T16967] syzkaller0: entered allmulticast mode [ 867.810258][T16994] fuse: Bad value for 'fd' [ 869.185865][T17013] syz.7.3070 (17013) used greatest stack depth: 16576 bytes left [ 870.478894][T17022] overlayfs: unescaped trailing colons in lowerdir mount option. [ 872.328773][T17055] fuse: Bad value for 'fd' [ 874.303227][T17082] overlayfs: unescaped trailing colons in lowerdir mount option. [ 875.354947][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.361333][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.179728][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 876.484307][T17106] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 877.522480][ T5999] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 877.703367][ T5999] usb 1-1: Using ep0 maxpacket: 16 [ 877.741611][ T5999] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.761398][ T5999] usb 1-1: config 0 interface 0 has no altsetting 0 [ 877.774543][ T5999] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 877.792533][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.823100][ T5999] usb 1-1: config 0 descriptor?? [ 878.553241][T17131] overlayfs: unescaped trailing colons in lowerdir mount option. [ 878.591188][ T5999] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 878.778677][ T5999] usb 1-1: USB disconnect, device number 37 [ 879.298917][T17144] netlink: 'syz.7.3109': attribute type 1 has an invalid length. [ 882.310336][T17182] netlink: 'syz.9.3121': attribute type 1 has an invalid length. [ 883.182531][ T24] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 883.390693][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 883.796442][ T24] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.816622][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 883.834719][ T24] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 883.845797][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.377152][ T24] usb 10-1: config 0 descriptor?? [ 885.843911][ T24] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 885.870504][T17219] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 886.051134][T17223] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3132'. [ 886.527901][T12552] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 886.758777][T12552] usb 2-1: device descriptor read/64, error -71 [ 886.790263][ T24] usb 10-1: USB disconnect, device number 23 [ 887.014858][T12552] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 887.187585][T12552] usb 2-1: device descriptor read/64, error -71 [ 887.750752][T12552] usb usb2-port1: attempt power cycle [ 889.157896][T17261] netlink: 'syz.1.3144': attribute type 1 has an invalid length. [ 890.297132][T17272] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3146'. [ 891.493278][T17278] SET target dimension over the limit! [ 894.670083][T17300] ecryptfs: Unknown parameter ']{:%' [ 895.845410][T17308] netlink: 'syz.7.3156': attribute type 1 has an invalid length. [ 895.863434][ T5942] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 896.482883][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 896.490277][ T5942] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 896.534658][ T5942] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 896.578272][T17327] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3161'. [ 896.607795][ T5942] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 896.635070][ T5942] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 896.753223][ T5942] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 896.762938][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.770948][ T5942] usb 2-1: Product: syz [ 896.776318][ T5942] usb 2-1: Manufacturer: syz [ 896.783183][ T5942] usb 2-1: SerialNumber: syz [ 896.936561][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 897.072313][ T5942] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input36 [ 897.193373][ T5942] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 897.412832][ T5942] (id 0x00) [ 897.702485][ T5942] rc_core: IR keymap rc-imon-pad not found [ 897.708548][ T5942] Registered IR keymap rc-empty [ 897.723906][ T5942] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 897.751475][ T5942] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 897.945955][ T5942] imon:send_packet: packet tx failed (-71) [ 897.994955][ T5942] imon 2-1:155.0: remote input dev register failed [ 898.099759][ T5942] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 898.512476][ T5942] imon 2-1:155.0: unable to initialize intf0, err 0 [ 898.531419][ T5942] imon:imon_probe: failed to initialize context! [ 898.560069][ T5942] imon 2-1:155.0: unable to register, err -19 [ 899.085726][ T5942] usb 2-1: USB disconnect, device number 19 [ 899.283418][T17347] fuse: Unknown parameter 'grou00000000000000000000' [ 899.309744][T17347] fuse: Unknown parameter 'grou00000000000000000000' [ 900.421777][T17356] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 900.880700][T17316] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 901.070591][T17316] usb 4-1: Using ep0 maxpacket: 16 [ 901.081665][T17316] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.110863][T17316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 901.118099][T17316] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 901.127759][T17316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.171686][T17316] usb 4-1: config 0 descriptor?? [ 901.485489][T17372] netlink: 'syz.1.3177': attribute type 2 has an invalid length. [ 901.608026][T17316] nzxt-smart2 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 901.809778][T17316] usb 4-1: USB disconnect, device number 62 [ 902.990606][T17388] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3181'. [ 903.099840][T16561] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 903.369454][T16561] usb 4-1: Using ep0 maxpacket: 16 [ 903.427424][T16561] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 903.468665][T16561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 903.504469][T16561] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 903.531889][T16561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.558358][T16561] usb 4-1: Product: syz [ 903.585418][T16561] usb 4-1: Manufacturer: syz [ 903.595591][T16561] usb 4-1: SerialNumber: syz [ 903.618888][T16561] usb 4-1: config 0 descriptor?? [ 903.645137][T16561] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 903.665347][T16561] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 903.709771][T17394] fuse: Unknown parameter 'grou00000000000000000000' [ 903.764219][T17394] fuse: Unknown parameter 'grou00000000000000000000' [ 905.150355][T16561] em28xx 4-1:0.0: chip ID is em2860 [ 905.358313][T16561] em28xx 4-1:0.0: Config register raw data: 0xd8 [ 905.570601][T16561] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 905.579016][T16561] em28xx 4-1:0.0: No AC97 audio processor [ 905.597208][T16561] usb 4-1: USB disconnect, device number 63 [ 905.605134][T16561] em28xx 4-1:0.0: Disconnecting em28xx [ 905.629871][T16561] em28xx 4-1:0.0: Freeing device [ 907.329793][T17422] netlink: 'syz.3.3194': attribute type 1 has an invalid length. [ 907.677812][T17424] syzkaller0: entered promiscuous mode [ 907.683357][T17424] syzkaller0: entered allmulticast mode [ 907.701367][T17432] fuse: Unknown parameter 'grou00000000000000000000' [ 907.711802][T17432] fuse: Unknown parameter 'grou00000000000000000000' [ 909.118312][T17445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.492091][T17445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.740570][T17445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.950717][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 910.939040][T17474] netlink: 'syz.1.3207': attribute type 1 has an invalid length. [ 912.914369][T17445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.114679][T17508] netlink: 'syz.9.3215': attribute type 2 has an invalid length. [ 913.298228][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.379246][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.519934][ T6268] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.529265][ T6268] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.897666][T17536] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 916.658581][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3229'. [ 919.017347][T17584] Cannot find set identified by id 65534 to match [ 919.682584][T17586] netlink: 'syz.7.3235': attribute type 1 has an invalid length. [ 919.717239][T17584] kthread_run failed with err -4 [ 921.610363][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 921.770458][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 922.110707][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.131454][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.162446][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 922.178147][ T24] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 922.212342][ T24] usb 1-1: Manufacturer: syz [ 922.231862][ T24] usb 1-1: config 0 descriptor?? [ 922.716817][ T24] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 922.750664][ T24] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 922.772287][ T24] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 922.796673][ T24] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 922.811143][ T24] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 922.971386][ T24] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [syz] on usb-dummy_hcd.0-1/input0 [ 923.600526][T17622] netlink: 'syz.0.3242': attribute type 10 has an invalid length. [ 923.714780][T17619] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.724630][T17619] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.829341][T17627] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 924.409809][T13158] usb 1-1: reset high-speed USB device number 38 using dummy_hcd [ 924.505503][T17625] i2c i2c-1: unsupported multi-msg i2c transaction [ 924.573297][T17619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.636939][T17619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.035436][T17633] Cannot find set identified by id 65534 to match [ 926.133708][T17622] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.169169][T17622] bond0: (slave team0): Enslaving as an active interface with an up link [ 926.194414][T17604] bridge0: entered promiscuous mode [ 926.200559][T16576] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.313700][T16576] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.356941][T16576] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.387015][T17623] bridge0: left promiscuous mode [ 926.403682][T16576] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.539479][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3254'. [ 926.944776][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3259'. [ 927.242822][ T24] usb 1-1: USB disconnect, device number 38 [ 927.749039][T17655] ================================================================== [ 927.757149][T17655] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 927.764640][T17655] Read of size 1 at addr ffff88801df23618 by task syz.0.3258/17655 [ 927.772524][T17655] [ 927.774859][T17655] CPU: 0 UID: 0 PID: 17655 Comm: syz.0.3258 Not tainted syzkaller #0 PREEMPT(full) [ 927.774879][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.774896][T17655] Call Trace: [ 927.774904][T17655] [ 927.774912][T17655] dump_stack_lvl+0x189/0x250 [ 927.774933][T17655] ? __virt_addr_valid+0x1c8/0x5c0 [ 927.774954][T17655] ? rcu_is_watching+0x15/0xb0 [ 927.774972][T17655] ? __kasan_check_byte+0x12/0x40 [ 927.774990][T17655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.775007][T17655] ? rcu_is_watching+0x15/0xb0 [ 927.775025][T17655] ? lock_release+0x4b/0x3b0 [ 927.775042][T17655] ? __virt_addr_valid+0x1c8/0x5c0 [ 927.775062][T17655] ? __virt_addr_valid+0x4a5/0x5c0 [ 927.775083][T17655] print_report+0xca/0x240 [ 927.775099][T17655] ? _raw_spin_lock+0x2e/0x40 [ 927.775113][T17655] kasan_report+0x118/0x150 [ 927.775132][T17655] ? _raw_spin_lock+0x2e/0x40 [ 927.775148][T17655] ? mqueue_flush_file+0x49/0x270 [ 927.775167][T17655] __kasan_check_byte+0x2a/0x40 [ 927.775184][T17655] lock_acquire+0x84/0x340 [ 927.775203][T17655] ? __pfx_mqueue_flush_file+0x10/0x10 [ 927.775220][T17655] _raw_spin_lock+0x2e/0x40 [ 927.775234][T17655] ? mqueue_flush_file+0x49/0x270 [ 927.775252][T17655] mqueue_flush_file+0x49/0x270 [ 927.775269][T17655] ? filp_flush+0xae/0x190 [ 927.775291][T17655] ? __pfx_mqueue_flush_file+0x10/0x10 [ 927.775309][T17655] filp_flush+0xbd/0x190 [ 927.775331][T17655] filp_close+0x1d/0x40 [ 927.775356][T17655] __se_sys_close_range+0x359/0x650 [ 927.775380][T17655] ? __pfx___se_sys_close_range+0x10/0x10 [ 927.775402][T17655] ? do_syscall_64+0xbe/0xf80 [ 927.775422][T17655] do_syscall_64+0xfa/0xf80 [ 927.775440][T17655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.775455][T17655] ? clear_bhb_loop+0x60/0xb0 [ 927.775472][T17655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.775491][T17655] RIP: 0033:0x7fac9138f749 [ 927.775505][T17655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.775520][T17655] RSP: 002b:00007fff1fb76228 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 927.775537][T17655] RAX: ffffffffffffffda RBX: 00007fac915e7da0 RCX: 00007fac9138f749 [ 927.775549][T17655] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 927.775559][T17655] RBP: 00007fac915e7da0 R08: 00000000000001a0 R09: 000000141fb7651f [ 927.775570][T17655] R10: 00007fac915e7cb0 R11: 0000000000000246 R12: 00000000000e27e3 [ 927.775581][T17655] R13: 00007fac915e6360 R14: ffffffffffffffff R15: 00007fff1fb76340 [ 927.775601][T17655] [ 927.775606][T17655] [ 928.030356][T17655] Allocated by task 17657: [ 928.034769][T17655] kasan_save_track+0x3e/0x80 [ 928.039473][T17655] __kasan_slab_alloc+0x6c/0x80 [ 928.044337][T17655] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 928.050168][T17655] mqueue_alloc_inode+0x28/0x40 [ 928.055044][T17655] alloc_inode+0x6a/0x1b0 [ 928.059378][T17655] new_inode+0x22/0x170 [ 928.063553][T17655] mqueue_get_inode+0x27/0xb50 [ 928.068320][T17655] mqueue_create_attr+0x1ac/0x2e0 [ 928.073356][T17655] vfs_mkobj+0xcf/0x290 [ 928.077522][T17655] do_mq_open+0x60d/0x7c0 [ 928.081873][T17655] __x64_sys_mq_open+0x16a/0x1c0 [ 928.086814][T17655] do_syscall_64+0xfa/0xf80 [ 928.091322][T17655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.097226][T17655] [ 928.099551][T17655] Freed by task 17650: [ 928.103650][T17655] kasan_save_track+0x3e/0x80 [ 928.108353][T17655] kasan_save_free_info+0x46/0x50 [ 928.113388][T17655] __kasan_slab_free+0x5c/0x80 [ 928.118157][T17655] kmem_cache_free+0x197/0x620 [ 928.122921][T17655] rcu_core+0xd70/0x1870 [ 928.127167][T17655] handle_softirqs+0x27d/0x850 [ 928.131933][T17655] __irq_exit_rcu+0xca/0x1f0 [ 928.136526][T17655] irq_exit_rcu+0x9/0x30 [ 928.140771][T17655] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 928.146408][T17655] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 928.152424][T17655] [ 928.154751][T17655] Last potentially related work creation: [ 928.160466][T17655] kasan_save_stack+0x3e/0x60 [ 928.165144][T17655] kasan_record_aux_stack+0xbd/0xd0 [ 928.170356][T17655] call_rcu+0x157/0x9c0 [ 928.174530][T17655] evict+0x931/0xae0 [ 928.178426][T17655] __se_sys_mq_unlink+0x2c5/0x360 [ 928.183465][T17655] do_syscall_64+0xfa/0xf80 [ 928.187970][T17655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.193863][T17655] [ 928.196184][T17655] The buggy address belongs to the object at ffff88801df23600 [ 928.196184][T17655] which belongs to the cache mqueue_inode_cache of size 1576 [ 928.210956][T17655] The buggy address is located 24 bytes inside of [ 928.210956][T17655] freed 1576-byte region [ffff88801df23600, ffff88801df23c28) [ 928.224757][T17655] [ 928.227084][T17655] The buggy address belongs to the physical page: [ 928.233509][T17655] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801df206c0 pfn:0x1df20 [ 928.243584][T17655] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 928.252084][T17655] memcg:ffff888030330001 [ 928.256323][T17655] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 928.263871][T17655] page_type: f5(slab) [ 928.267860][T17655] raw: 00fff00000000040 ffff88801e3d2000 dead000000000122 0000000000000000 [ 928.276471][T17655] raw: ffff88801df206c0 000000008012000c 00000000f5000000 ffff888030330001 [ 928.285066][T17655] head: 00fff00000000040 ffff88801e3d2000 dead000000000122 0000000000000000 [ 928.293738][T17655] head: ffff88801df206c0 000000008012000c 00000000f5000000 ffff888030330001 [ 928.302420][T17655] head: 00fff00000000003 ffffea000077c801 00000000ffffffff 00000000ffffffff [ 928.311092][T17655] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 928.319760][T17655] page dumped because: kasan: bad access detected [ 928.326179][T17655] page_owner tracks the page as allocated [ 928.331891][T17655] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8566311174, free_ts 0 [ 928.351689][T17655] post_alloc_hook+0x234/0x290 [ 928.356459][T17655] get_page_from_freelist+0x2365/0x2440 [ 928.362009][T17655] __alloc_frozen_pages_noprof+0x181/0x370 [ 928.367819][T17655] alloc_pages_mpol+0x232/0x4a0 [ 928.372685][T17655] allocate_slab+0x86/0x3b0 [ 928.377193][T17655] ___slab_alloc+0xf2b/0x1960 [ 928.381876][T17655] __slab_alloc+0x65/0x100 [ 928.386295][T17655] kmem_cache_alloc_lru_noprof+0x3fe/0x6e0 [ 928.392118][T17655] mqueue_alloc_inode+0x28/0x40 [ 928.396992][T17655] alloc_inode+0x6a/0x1b0 [ 928.401410][T17655] new_inode+0x22/0x170 [ 928.405575][T17655] mqueue_fill_super+0xdc/0x380 [ 928.410434][T17655] get_tree_nodev+0xbb/0x150 [ 928.415024][T17655] vfs_get_tree+0x92/0x2a0 [ 928.419438][T17655] fc_mount_longterm+0x1c/0x100 [ 928.424290][T17655] mq_init_ns+0x275/0x360 [ 928.428626][T17655] page_owner free stack trace missing [ 928.433989][T17655] [ 928.436318][T17655] Memory state around the buggy address: [ 928.441945][T17655] ffff88801df23500: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 928.450008][T17655] ffff88801df23580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 928.458073][T17655] >ffff88801df23600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 928.466129][T17655] ^ [ 928.470977][T17655] ffff88801df23680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 928.479043][T17655] ffff88801df23700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 928.487100][T17655] ================================================================== [ 928.495830][T17655] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 928.503049][T17655] CPU: 0 UID: 0 PID: 17655 Comm: syz.0.3258 Not tainted syzkaller #0 PREEMPT(full) [ 928.512443][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 928.522502][T17655] Call Trace: [ 928.525792][T17655] [ 928.528724][T17655] dump_stack_lvl+0x99/0x250 [ 928.533339][T17655] ? __asan_memcpy+0x40/0x70 [ 928.537941][T17655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.543136][T17655] ? __pfx__printk+0x10/0x10 [ 928.548521][T17655] vpanic+0x237/0x6d0 [ 928.552506][T17655] ? __pfx_vpanic+0x10/0x10 [ 928.557026][T17655] ? irqentry_exit+0x5dd/0x660 [ 928.561788][T17655] ? trace_irq_disable+0x37/0x100 [ 928.566818][T17655] panic+0xb9/0xc0 [ 928.570562][T17655] ? __pfx_panic+0x10/0x10 [ 928.575153][T17655] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 928.581044][T17655] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 928.587370][T17655] ? _raw_spin_lock+0x2e/0x40 [ 928.592054][T17655] check_panic_on_warn+0x89/0xb0 [ 928.597019][T17655] ? _raw_spin_lock+0x2e/0x40 [ 928.601690][T17655] end_report+0x6f/0x140 [ 928.605935][T17655] kasan_report+0x129/0x150 [ 928.610460][T17655] ? _raw_spin_lock+0x2e/0x40 [ 928.615137][T17655] ? mqueue_flush_file+0x49/0x270 [ 928.620160][T17655] __kasan_check_byte+0x2a/0x40 [ 928.625010][T17655] lock_acquire+0x84/0x340 [ 928.629428][T17655] ? __pfx_mqueue_flush_file+0x10/0x10 [ 928.634908][T17655] _raw_spin_lock+0x2e/0x40 [ 928.639411][T17655] ? mqueue_flush_file+0x49/0x270 [ 928.644435][T17655] mqueue_flush_file+0x49/0x270 [ 928.649290][T17655] ? filp_flush+0xae/0x190 [ 928.653709][T17655] ? __pfx_mqueue_flush_file+0x10/0x10 [ 928.659169][T17655] filp_flush+0xbd/0x190 [ 928.663414][T17655] filp_close+0x1d/0x40 [ 928.667574][T17655] __se_sys_close_range+0x359/0x650 [ 928.672780][T17655] ? __pfx___se_sys_close_range+0x10/0x10 [ 928.678504][T17655] ? do_syscall_64+0xbe/0xf80 [ 928.683184][T17655] do_syscall_64+0xfa/0xf80 [ 928.687694][T17655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.693801][T17655] ? clear_bhb_loop+0x60/0xb0 [ 928.698510][T17655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.704448][T17655] RIP: 0033:0x7fac9138f749 [ 928.708861][T17655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.728554][T17655] RSP: 002b:00007fff1fb76228 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 928.736992][T17655] RAX: ffffffffffffffda RBX: 00007fac915e7da0 RCX: 00007fac9138f749 [ 928.744968][T17655] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 928.752941][T17655] RBP: 00007fac915e7da0 R08: 00000000000001a0 R09: 000000141fb7651f [ 928.760931][T17655] R10: 00007fac915e7cb0 R11: 0000000000000246 R12: 00000000000e27e3 [ 928.768909][T17655] R13: 00007fac915e6360 R14: ffffffffffffffff R15: 00007fff1fb76340 [ 928.776932][T17655] [ 928.780338][T17655] Kernel Offset: disabled [ 928.784682][T17655] Rebooting in 86400 seconds..