last executing test programs: 9m59.630022184s ago: executing program 3 (id=249): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x2c8a4ed31704d5db, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a40)="ec32de2ca833b572025e95ce582885d13f18eddbdd1a1813363d96090100893c87be644cd78472fcee488a7b96a168657bab27d8a89dc55dfae7d85de5e4e6dd89e106389e092a559cf3231d9a4820368b60bc8e7fe356f076d4d4ca762f78a7f2698accb8a260e7c88bfe6b55d6d4f5c569f52a63ebda881be9f9d0c23d4da346f4e805c34c0175125f882b2bfd85673347590bd09629ec217b0c18203b182106edd1d5ca50e8d754d270f8025df2d10d743b13ce87301cded41e15962445f798d288a11ee479e33a6f66508616e331235f2a0ca10261133023d8a0cdd607865e72b2585841dffd69665eec358a2d2920d6638dc5a0c5f84f960f1ec1ad547d9913190b461005f293ba496d76285e83231f74f28908b1c339da6edb2e0a629df3745b0e2accc4807e99f59aec94f4d66cb8ba535c214e9baeec11390497a6f4a2e405abeba7c6b0e88fd0486e094ecb1eda933d0df84026029e40ec072b092d2da3831e00f3f08a5d4f5a2f9307fe8c5bc6cf2900eb1783fd1fed6d816255827d516feb95bcb80b1d7cafc4d800af404ff4908898192e62c0d6ee4a01fdbe3111c65a7e25df8ceebbef49aa277a0d30c6034ef211402abb2c8603a9d83767775b6ceb7e8971a4c3edb289ac9244653dd26ffddde6480fc026265e4776aa0a095c04432e19b28600dc00ab1cc8a80215670364f93b49e70a23c7c21842c1354b3ddbeaac09394e81340f6d82ae04e698fac8ef1166d3187911d9a569ce37b967a03dcfe9cbcf741da23d5cebb268ec88873beac6361138f0b463416f2395c3da46d437bd877581c2b93fb7bdc6a1843d7fd5e06e0256a35bcc8778459b14fe3bfdfc063b70c36a4385986c99158cfc48461a7f6139180727c8f3595c301c44864abf12a7ae73e706cb889b840eeac7d02da52918895b1ab2f2f5d995a9bfde3921562c2e92c36ecb55e3f3889322344991ce55da617cd003c28fb9bfda9f21ff9a51d007947227f3472af1597fad2c2de150974e6964f9bfade6824ce9dfe7ac32bb74c129e7be211faf528a45fc123e51b60f14c4429fa87be918cc58e1ca090338d92f4923203bdd93c0c475349243c078efb93339552c56522503a7f4fc7f6b836a0ef6dfb753e9782a2c80b269dcc7cb4970ec2ce3a4417bde2ac2baef4afa3a934207160fa157124f76fa51bee3b0a962fd5d4c6dd059c95d786b1b1e1e5099e0277f0748371515f4ef6ef998215a72ee90432187a31df4749ba3782af0bda128a92dfd9985c0bd8e45f024f3b03e05136fc9fc0e96f2ddc29f1cb5de6ab4325014c0500b0242c23e479ef78afc14b4943a26d2ea716995d0fbb49c4f61ed15ed55cd52062d531cbe4dc7d82b7cc66a7ad1f2acf52513359873bcd42faa7e503c2c0b216f163c5cab5b4c992037a0c3430dda574a7ff70efa5387042d2404ac3535f351305a98c49340466512910d522beb6f74df4cc1e03c98fcddacedafabf7782ad8fd42dfe0feb8480d32ceef68605056059fdd7a47bfa0d78abbc6e10af96323732dbfa5ed98a7d2c5d0564e5f33cf8cef2132691a2a9137309cfbbf9b566b36abcea2e0c64c0c7d52b419e740aa47fa97815a11bb7ec2272761385f2a5bba60b83f2ae17ae026048f00b22ba7685fbb66ee4de8022db2dbb4fe398576c29be54abfc8d6aa9b8841a1f25e4095a0536b63abd789bb08da5c9c3288f91bf004fe91166f09d52fe688b1e5967c6c76266ed479ce21ac78ef6a0b5f763cd9112944dab2c1adafbaa65d84a55c4fa769c58726d4620c15f1541b2ad2428eccf2d5d048239f62eb968e76bc4dbef2598696b1c355f3ea52846ddf6765ace2dd5abf5d97672677b33abb46290b8d3d46fa61dc2498ab28622ce89830b96589642989381527bf8dccd2059deac90d7cf01fbea5c21ba8a9beb9f0889dcfd38f288e7cf2ad2afec629dea0c6ca745d74ae5489a58cd824f406caf30179d11f9c514ea126b2eb6bd23be7fe7490032903a89a47e6435c81a6c0a4a2e1f3dafaecbfea6f76cb074660387827039998afe3e77420e8521b1891332206a460c043f720bc205ab49ac1ec7daa76d3f5be8dfae8ab3426863533637d71d25eb3a1a237a516a424075a398cb0f269135dbc9d7b5049da255371a59e6f4ed65c3cef598ea0bc2915922917244b5d904ca527e7f6230718a8bab98c3533e74b2bc61e3bd4dfaf54e8b8f1a810a99f4b460be42c175daf4d6c52bc7b5c1027f69075d389de797306834c3bd407d4be7881b8685928cd7104e182941ecd88205909ca0ecdbab2261210d61db36d3cfe00569a2edc26ba13fef0d2faecdf02c2db7e73b723096b277f62a3ceb804f3be13003447c088fca2a5a6c68f65b292dcbf893057e434fc0bbdbb1303026e3e677768b14a295a1f8e765e97fd71608bc9b058a095574a3a53aaccb7f5fcdfdd40a0595879a783a268b7b7dc0eab7c6b40d19d352d1db756a20cec65b017ae43a475625e65cc4a9f05d10a1355423cb962cd1e129741143eeb2e25e41c474f39f890784e9a2fef2ff3278cc16ab2d22d25ba2c7f2d2002e72705aabe2ac26264196ffc105c9aa74b061d296187125589980957a58220052886f3271f13692a16b6847a35d22331473ffa2c57ae47eaf928d9a354faf7261aa2424c0422f70a64169616578901274048d7d665c90706f2aade67bb4611ba807a709558f872a019be09048901f56a03cc04a3fa4ef71b30dc5743b999d124b286dabacd861d31849779a9523ed4d553bbb180d6bcacc1282eef143784d951e89c81248995c39b3f2c907accfd09069fc4f936a4dbea02a9d141192a7715f9d1438f69a347e0e7646ab562a15e30c6529e894f49e656d753e685683c59518b340f7b9c1259b67bb4e16666b6c27b29885ed48140fcae7b72409cf03892914fac4f4edb278257307ca3f9afeb0d2809ae1b4e8cdff28e40d33677239db3933fbeef2b24839b13c247f2ac671343fe704f03ac4799c4b2d979ed13c1698f61c3ed71558d556ed3924889757eca3bf11a2d334bfd0691572af1af415c34925de0d695318fc70ed9b0a53ef1ea4be85e6f69cde6c351d35482c70f4f7ed813df6fde0a4f51dece56cbd9a95d0fac12c29e96b6675c4fec54a551dea044b720f886fb65cb889d8a2ae8c02885894313ab9464e78c531e7574c65d1aaa0332f006752e1e269c055de0ddc1bcd17661eb00119b76ea55f908fa72c323f3e6b986922dd210599d524b55953eca4f36b365b3711aab6e129a83b94145643907fc0e0db57c332a8b763ddc8cbc1299f469e01534b763072ae9d3ffc3714e412edd09c47eacba07b43cf6a0d2e44899d6886afe334590fa3e7ac6d7cd251411bffe55583c5c7d289063e114ebd10965615b987f90b615fe16f8084000b803b6f4aceb3ed84233de0927c9f3bb4361ac52b8ce3aa8e7f3be9216da636248af95966d6cee86f65cf505d7bbfe6b394c898451fb4527afd836a7ff26b950f4b24cb20aa338dd40d8036c7f46f6b8bce8f4f7cdb84839ced33c3152a4911c939e9041d054ce2b0ed57de54c91158d85671f3404275a0a4233c120ebfc7811b918008a0f320fb2977531b8dc173a7f093dcd46248d5be5e88390305afe0d7dc42ddf86bb8cb79c0d9bd0f7a75e1ef96dd5df05050615ad79756acf67603f855dfe2cc36c7fd9e77847cdaa72c9ba632d27b1e38d0ecf171d3609509a93cdf3b96ab1d62fdaf53242c02d0c9730418cae8b7bc781797ee09a31ff698d115d862c6dfa9ef4ede82be004f026994f39bda4b1b2a101d5f4ecf490bfbdfbb609c6f2ba8449054c0ef8981218422e2a9caa55f416a9da6bdd3d8aa2a48fca899477584c0df314b2be329904668c16d2b901d9693116eefcbe66118cd509fdd670e768fe4428892a991fceff63043f2c54365b8489db292ec337f9f599cfb9a113dd9dd4e5f748e49738149284a0ef42c851ba1727ac9cd2d0a669ffd280a430bd8c5ea98184661d14574bb40c2dbb85e7cda549b6239a66201b849aefee6d1c257c1318d911f60c7c44cb9f126f2c483e00422e748daf6c90745e629cc7b36c3b7e87210d6b6a203ba22776d45c9cf0280bbe08a0653ce34c10deb1d2c890517286f1e89277d68f2ffa14c5bc75a6699d1999c562647e0922a08fe72fdaf99812ab0ce6e090abc653a1a6fb45fcb49c88ee0f8c900db4037f53899250930906f7c1bf67b314fe33a73abbb3320770de756581bdae698b93437448971a5e9557d371048f5ede022cd4009aef95fdd3f192b3481450fcf7c4d381128d927adea28f9de5f01bf64817b5b994effb708ab70c4d29265837f28d0c46114b3a84c6a992bc0407ca3250d5af117e6c6c52c69ae8797452a04e3daf56e22b88e55ed14ca27b6b368a877768922ff101803b8083aaaae3324dde385116be778dc0fd6ca459f81842b884c0be1e28ea8f1a79deeeec45bc546732f9c6062426b7a72f5ba96eed399e8f5cf1f3805aabaea87a26af4adf5cd0ee977eec3ca8707e9424d5e6effa17c589cee357f19ae75c92a1a4b4fc40d2bdca6e9e7bde71d8af4ce090818f4258c162c0e8a936c213b69fe8c34b92a64d3a2f358e7d13426bba1cc019cd65a1d37b5ba25673be237938bdb3aecf147823b73160b3f718c9915aad91b3dcb8856ecd5e564906bc6c932bd0c1a47b4ce591fc9af66125553f5c387ec6fa1e2e659a36196de9b0c0a54a78d850577faa6b26351eb92e0e3cc19d54766a2836825178b87b2a79d7ce25e28e8c248a2683fdfff512b4b53b9f8c258bd039dd9460477ec92a95c2d0892b51fc2db03f34f6140f40ef555690658827bd10bea99b7a4aee3dd9ce500d1d52d932e562b442761436efc129c3120f04f59a9d16964c2c5ef835e1e4a4fa30074882eec06c13e631298b53383a73cc4ffc8424460edf338461e028348ed91d05e7ac0ce9d0b98d4d4af9269ea434b91573e67e2f3a35d2838fe0b205c5bd782707282fc32ab6e7fe6735dfdaac79144e0ba813b74cc17a215e0347dd270798bec4d656612d3ccbc711feda125ac85946fee4bed9c79c3d0c4c45119929096010f28f3fefa47084af23489fa5002c25083d65d76da72af0affb841420e5030ed6b03351495bbbeaca65c8b572ef4d58e1b275086ac71ac368ed1aec5acc6bf5347b21fb5bf0e9e1896ed7011c22cf169b778b80f459d2f1fa1bda733f2b06a2e3f4940fd6599214ee9d8f8c167da7f048dabe91b6af56bde24ac17739915642010675d61d9940f6109145141a35bab9a89509805b65c50bff74e10f13f7599cb6de17fd0234fa25efd9c91321fa95fe43bd8fdb67933ea6c6ecd9551892248f65c31c60a5de85152e537e7830f10166e8a69b4c05aa19b1fec4f003c2319d13fbab9e4ab76b49014dde2872e5580578716e11b6e6e2bd7e238974bfc2bc918a6dfc9dcd822459428a467b7b9f163d4bcbcb0f4f58bd0a11572a7febf619bf509f41fa19853dbca214672de4c718fecda0305dc4052613405898c31ffe78abb9ec0c8336ace514ff556588114e8021aa516cfae7f67a1f4e7cc08845eacde27461144fdcd873043d17303a93a24d67c73f386bfe380ddbe38ca718ba05ed4bccd2d666e31cdd3253bdd85c762c7431e2688cd6aeb4b2f98875dabbdad6eabfe60aa4c3b9c0905bda1b3f633766a45ce1c474efd6a69dae44142cb297632e17e7d775a2f190a90a52ddb6ad02192ba12984006132f7f10be30d6435621c2b2209af6a945cb919914ada8a18293e36fdec107fcfe458979ecd622d075c01bf750b601d7afa879f700bc81db01363f776a6fe537acd07b7f6ddd26bf980405d8e6552f3fbd3790fa409798c0a59976f2d0d5b4854b16646b7dd0118af0a0bcfb0bd917687bff241f2db525772d679c7d2f1b7d1cb5cfd4822204b9b76213a57e0329de0ace98c66fece71c4602d4517f3eab1c7ebbd840264b3399c445b79a65c3d78738ab459f3f8a648555c8ba953462c7f48dfd1aa36a09b41d8c4b642986a655e8988319f9e9383f64ddbd8fda6015b5e9625b712928156f6f6b3a3626d4640d65884c52f38b29de1a3b8c9150a1f60c2960759a0e767ec9c9e2de6946f6da22ff9d77fcc38e71b7552784f98d7e4ca9eb8ebefc17f2590bfbc9a2c2097d2b4cb277dd11953bc8ea62b41295696beb9c8eff9e18dc54636f7a272c9a58886db6a1ab41fac8dcd253050e32a7242c4760bee40007d92c1a3ce6990cc8a358329b8fa920b1daf4705bc298a95631147222ca32d6ea2afc01564c71735920a523fee559e4d81578bad66c616153777a2acfdad3005a7967856f9f0b057470468922bace071fa40a5781a67810c737773fd6ed6388fdb6c34503e0c745b04550c3239027e8bb7be35f500c9e912376342bcd258707eacbeec0f437e92c6a6df1a6370ae73fd2a17d09986308955f1ca3586784156bcd30b1c3f44fa5ebeb760d7f13729792337d23a25c5f8145a5bc652d62f05a88b31c5c05df5312d4f3a58beef6f6172ab801d5941d023f400d07d799629bafd236ec798d0bb59c2a5586e7e952e6be08a8b971823eca4a58cf447b10adccb4dab10b771da8a66b3ff55954b73e1a04afa1a0fdd9b2de693ce02882193a987deeba2bc7caa32c3868b54d91ca73fa69db40e12ba883215da7b2c08b150936822a60578345e1860475773c6dcf5a0f880a9144c9ff1e3044947c67412c3db7f5e46b7b21ea690ca728cdb24340474f5952ad1cd4887a8b1e2ee23d647c403045f7cd4dade809076ea246a1896e09c7e42fce5aa8d5ed4a3acd7de99cacc2a5b6bf7008fca0a35cb8b02fb4e07adf902f6b0b0cbb26494a1860811fd8d563a16fa2459d76e7cfd89af57f2c52cb05fb7374729c548b6aad10a2af53bb41c869519853d01734f3783c6576d16bd4feead802d5c21657a747422d8b077ce402c36c58171f384b4c21a8a3afb62eae004b34b19e3f8d2e62d03b54cd73a5fea2bcc900c793f9f9d58c712b366d53cedba2659f83e5e4a23d574eddc221392e59739882b7a5449b22ba5de8003b3e41b6b4788ce33d39e65aefc8aba99373de8e3e0f9fe3cd5ef6d5b73d0d47d4a9ecabe6d8b7bf5ffb7dad01b5fd59e234660a8a16338da91e3ac4ebfe675f97516351aa252e0d360874547a78c229b0cc4948dcd83e9935d01864f84faf3dc462cf5780acd6637a607e571b6d8ff796e4b75843192d21de41cf17109fd8a5e1e30c659b8a2b1e28ecd6e45e79ce6ba3581fe08cf35e30516d58c353d97b00a109f24caf993449c0e9afa80c0d8b821a39d3691456a53387860a974d332d93887690669a559fc54ac1949add774e5004d3819e6ac3f7cdea355c8175b53f0a49529cf4c9d781029d3806fc04cc8e330df6b65a7b84ac8bfd62f057c9819454ba0a9c15078c414c392773656d031d2c8b5bec1e7b8f39986a4ae28cb62fce04fe4ab1e882edb130e1a711d54ee42d35c9edd47529c582d3872a9ea9e56a6b4aebacb86074656714a951a16c2293a137eaac6aa9e3c48585907bea0a68ffe00e87802648c0e769836334fe48b99ccc168ee0a0775d7518519554c98afe343b423ae73bf6b1a5c639f656bc4a254f82061a5e233cbb834778cc10f5ee4300c06fe51151e7c4bcc1b8e9275a930e114764ad4ddc98035f093d36618d0c60cc3d4062950963887f51a1feaddf54afadb44d7c5dea31c64c9b3d4c22817d35c2e67ab2dfd97d01ef36841275a009a2286492c58b1af646522b6119d22b8f387a436faee2f5a1328e5a6e92551a3799f70c9bc19e1d5f716f9350848473a50e10a2d35b395c27532d1d692598bdb2c81aed31aafcfd7eb193a5452adb7cae467a2a8a9998b986eac95978c82967f5e8b33c9c741a062bf9071d1c5934745bca0a93ec763c531f2270b7c2bf76c6d9c304998372661e645860db36e25a0ab585b6e490b06b9c87501524784d0301db30fb9e1d7690f1b61ce5236f58312b98489caf19678dbfcd61e9908d7140757057152a813c3e5a3eb003560799019c52e2ad5f1bc77ca55d44d9c2739db4c89869e0b3d43529fd5c8cb5912fe3cdc4ffe48853962078c385bbf16ac42a2316dfe7043e99c2d2b06670602f97e16b4903d32d29059cb7d7ba9f7a9bfc4ac97a378cc3fc5d99724c09f7d7b1e1f49cec676ac79a951251f4b7b50134ee12192f411c4c70b7a6dcc7c6fb4afb07ae822a3377f715268447e1b7564296427d31d7717ac4ad38814fe3350b874556ebc88131878d07e6a7002f0da83a435633dca9d15ee7372f38624ade9e5c19221d92038cf9811987ce344e91420991bcddf42f59a9a2fcae8e94d0c65ce2e8aba2ebbce735ac3689ca3ef1661b8409dcb0f9ad4e3bf9d489b5c237a391e77f20f96b4ade604713b20152772b262986b93c874a45ffbec3de0c67e402c25d2b57d8673fc6dca522eebb6120aef242ff9786a007ea3f768e6df453b58f09036a26e5100169e0a76423ab24ba8523421918bf4c0e47252a81c643695fdb1998b7c25dc7c5daf3ca046ee2a2d5d4895979b09fc3f19c052f1506f2fc83caf4503e711093865513f2b723878059d9a631cf1d7d5e8bcc5bdc89eab1af4e280981a3b014a8b10ffbbe344c1b76e125b365f5e7abf6002b288418d984c46f907d4b9ac7daa771a7f201ba925884999e0bbbc53ebacb54cb97d6c2b484bba30024e75ecc984aa275c3c42d8637481bbb8fa65bb0d50ae1a59a7238aa93c06afa6d3890531135456758dfd65ac618e15a2459ba3e97c0351de2f9ca96181fc6cf8c01506913474cd00cd45f8439a8ef4417f6d5786ada3270b26ab2a97fad273d9425a247d8a2485086ee8ff5fba4211768a980db675a80687f1b289051f5636a887949a21a5b9ef0f474364932f8c694a4ec1c458726603fcba79e3988dfff628a1a896d7e54b3d61468b5358fb6724fbc5f14589427736d59528c89f647f6da49c5c9b088c6626ee974e226929969dda2a57dee799ee04dc3e80bcdce5770e8fd7547ea74885d7af2b3292b2b897c14a1a239acd0f9f88df462b9617f205b84d8f6b373b0d4fedcb2bd0d570c6672f942cb39dc0e6fcc1d4a70fcaed62a8d2742d4fd3779664c6922a258dfbab2de0334b09ec43fbb16a44e9fff0ebd00e78fa63d7bd7c09b5d2e9efc8198ca66b108d92dbe2e6d3290e6730982ee191a6f3c26f0a2786427c1781cf8e48cd8611342c19df2633175f0744a6b6835b82357c30ee7ca8a46a238e0bf82dd39f2d92089841f32763964a18ebfb85242b126fb98e1d043e4bcb6ed3cd4fe9659aaa97ef1a589b2000d864ef34ca2d6b99945458b5326860978a5915414cd8627aeb0dd2a1c52ee890c970d87897b4b359fe26483765a77dbb64f79d407d856fe60a43c0a427725e7be6624629a07ca1c27bf447064d0135a40675f0c80bb9640e1c909f1b6a81430c24ca15aa94ca7cef64a9e7c7af67b4e84bf7fb7db7ecd1825c740308d38bc993d799164fd3b7bdd941a434b5ecf88697bb15308a5f922579346aef33b7b7c36932566f4f551b106547d76e5f027ea56691fb864aaa09fba2624d5fee282b1878345cd6bea5593885d336b808b51f1139886dd494410b62e5ea97d7c2cc916625a7bb02bea8a28e559b9a8ac8ae48845bd7634ae630f4c9beba07b039fc748beceff37afa797980606d1e7131757c18ab245d6c5d1dc98c25dca6cbe24e3f1ed64090e007f4d6dd82d122b55936604f8d49b8801fbcfb48e2e5687197f82affef2168f358ba601dfce5006b614cbd4943c724c38cb5f4d59d2a9ff00df8938b781c3c4b85f0d359c88e8a343c780689cf724ab8adf8b733a5860283111f8d4f4dd650d439fd73c8b6fa6b04db5d51331118ae494281666a757102ee4fd987c6963644f576b6f5a9177eedb77e9feef3d1b91f229b202a8bd7cc766c9a129f3e8b6352cf2e5a75f65e4a34c18d3dfca3aedcfbee00e43355e3b2b4690311a2620cebf3b1bd9332f633f462923b99890e70db79a5f286c12f35c0ac271da4902f5885e6ca7a7e5ed55a65aeca204323fbcd6807744989c2470771a14b8a119cb02f0a2ca21314a1250e5b58d7b95ff6e489f9cf9cd934c8760b14d9bbf74c5dc4e5d762a37ca5e0275b519ff78f9b3775cb5ef536424120fbc894d51ac4fd6dbe21a7b6598eba208e6af182542275582b15d1317e985d534e44d5602bfa6a609652404bc35062ac1032ccce39e8b99c49b444749151be6d59d2faba0f2b4dbbcc1a745fd8e9bf2229e66ab8093c510e2ccc0c270c00301a04c6a81e082200e2fb179bcfcab6659c1af080b43e1b01c6878a835ecf861a2bf753d34e3c9519068f7b48f34ac2b8a10d9688e76a55fb983a1e221b7d1150b9ab2b9de3964af25df340c64ac9fb0d9727760d2f0b2a9c49f7c0530b3175847a0137a8c59cf24c5c9b2f293ec61aa3c1471b3d29aa00a922d6399cdfc0e41e77860fa6321aa34ac61c8b45fb8d447bc31d12a69fa2693fd1b99c482248d4706e9fe16302d8f304262364bed9f0afbbc28068e706068f401518e27f1414775846466a10bc65a362932e6ba6b139736e3bd61f668bba625bbaeedf0ac06a804baa8ef69a3e663112b88b6b1c37cd4bb2dc6a3fd3651b5be897fe933f37ec8dde95c053865ac502d0dc87480957acfcd489e39350dc5b802889b26d62547cc36e9942a0f203c65da950145eda5797cdf9e3e2f1bed7299ae64c18a82a9136cc2823177e99773644ddc12e706218923407f9d12a1855623538e52ead60e8e5e926996ef4ed79c91dcadbd55a12223a8bea7bd84c6c6a52d9eeef0a782a173faa4df8a5f9d0a72dbba30c2fc12c4e9d541615aa7a71396eb42d5836f805eaed1406abf8debecebd47f96e293e82139dc63245c9048f2d231c16fff48c6c33227a7203caf2093290182cf144230f212829187d55a1c3e776c49a461c283a428b6d3be447ebf9218307c01f9fc642ae3c0f617306e09691cd01688883ea61527a0e6bada5fe15ed2919c9a6b9a64a99c6a6ae6cffb1d6db7c3a5bfcf2587a87ef0a5023ceb9f37cd7c5e1bfdcf2b826a4de6f7ecb0e6f2bec7ff9f20559d26ba8563b53b6dcabcd027755b3678c08027bf6ee52098137a3b38752098e3a976e18c24f0bc079492178621833fdc97c2b9f4a864089efa82b95cae4526558b8e2a855b7e1ceab9ba9ff6bdf7e6a536b75daf84c5a8f2de13afd2853dd2a51dcaa60ed0dc241485d088360112099fd42cee6fbac2d21050dcaf85990f12e7c4ab3882140347d71c92b1f6f78b22e1dcb324dc63cb91e081bb4333a3b022ae102cf0546a09e8dfbd4de8bc08bb6d16224c887073058f7ed8a9b8ac3d879bce8e88a82ac7e005469e26f84d1288ced41c3510236d1ec158c051c7d6a2ee18939bb5f101eedf4d7106e3b7edfce8a67980ab3fb5e4626423445aede337fcf9fe7b323a6f089fe75664dd55cff37855d21919fb75a33a5938942c729ea0f5447a6c4f490598bafa58fdcfca5", 0x2000, &(0x7f0000004600)={&(0x7f0000000340)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x2, 0xb5e529a2567d88b8, 0x4, 0xee, 0x4, 0x0, 0x0, 0x0, 0x1, 0xffffffff}}, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x9, {0x7}}, &(0x7f00000003c0)={0x18, 0x0, 0x9, {0x5}}, &(0x7f0000000400)={0x18, 0x0, 0x100000001, {0x5}}, &(0x7f0000000640)={0x18, 0x0, 0xffffffffffffff80, {0x8}}, &(0x7f0000000680)={0x28, 0x0, 0x1, {{0x8, 0x7, 0x2, r0}}}, &(0x7f0000000780)={0x60, 0x0, 0xab1, {{0x9, 0xa, 0x9, 0x2, 0x4, 0xffffff7f, 0xb, 0xa}}}, &(0x7f0000000800)={0x18, 0xfffffffffffffff5, 0x170, {0x4}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="15000000fefffffff9ffffffffffffff6375626963488efcf9ca6524cd4c5c9da5a08f9f6864d81c74e876ee7c74ec3d90db75061df033cb5b2de8f82e0c56b66ef3d7e26c05c769b3213e6ec2c6a28cbd586c25ab1383d0560812e59ab624f00c7e14"], &(0x7f0000000880)={0x20, 0x0, 0x1, {0x0, 0x2}}, &(0x7f0000003a40)={0x78, 0x0, 0x5, {0x3, 0x9, 0x0, {0x0, 0x6, 0x8, 0xffffffff00000001, 0x9, 0x5, 0x7, 0x5, 0x161, 0x1000, 0x7, 0x0, 0x0, 0x5}}}, &(0x7f0000003c00)={0x90, 0x0, 0x3, {0x5, 0x2, 0x5, 0x5, 0x4, 0xd, {0x2, 0x9, 0x8, 0x3ff, 0x2, 0x553c, 0x3, 0x8, 0x42, 0x6000, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0x1}}}, &(0x7f0000003cc0)=ANY=[@ANYBLOB="9800000000000000040000000000000006000000000000009a5c000000000000040000000600000047504c00000000000200000000000000930000000000000002000000fddcffff5d5b00000000000005000000000000008209000000000000030000002e0800002b2b2800000000000300000000000000a1070000000f00bcc4148130215fcbc3329ca0b80000010001002f6465762f76"], &(0x7f00000040c0)={0x1e8, 0x0, 0x8, [{{0x2, 0x1, 0x100000000, 0x0, 0x8, 0x2, {0x5, 0x7, 0x4, 0x3cdf, 0x2, 0x0, 0x4004, 0x3, 0x59, 0x4000, 0xf242, 0x0, 0x0, 0x6b, 0x5}}, {0x6, 0x6, 0x1, 0xfffffffd, '\x00'}}, {{0x1, 0x3, 0xb76c, 0x2, 0x3, 0x5, {0x0, 0x1, 0x4, 0x50d204ae, 0x7, 0x2, 0x7, 0x7, 0x9, 0x6000, 0xb607, 0x0, 0x0, 0x11, 0x4d}}, {0x5, 0x2, 0x0, 0x8}}, {{0x2, 0x1, 0xf5c8, 0xbf6, 0x56, 0x6, {0x0, 0x7, 0x9, 0x1000000000000, 0x18000000000000, 0x80000000, 0x7, 0xa, 0x10001, 0x8000, 0xb, 0x0, 0x0, 0x49, 0x1}}, {0x3, 0x4, 0x6, 0x0, '}\'{\xa3%!'}}]}, &(0x7f0000004300)={0xa0, 0x0, 0x3, {{0x2, 0x3, 0x8001, 0x3, 0x1, 0x2, {0x0, 0x100000000, 0x7, 0x1, 0x8000000000000001, 0x8, 0x0, 0xfff, 0x2, 0xc000, 0x1, 0x0, 0xffffffffffffffff, 0x8000, 0x8}}, {0x0, 0x3}}}, &(0x7f00000043c0)={0x20, 0x0, 0x10000, {0x1, 0x4, 0x5, 0xe}}, &(0x7f00000044c0)={0x130, 0xfffffffffffffff5, 0x7, {0x8, 0x8eae, 0x0, '\x00', {0x8, 0x5, 0xd, 0x4, r7, r8, 0xa000, '\x00', 0x84ce0000000000, 0x8, 0x1000, 0xfffffffffffffffa, {0x6800000000000, 0x1}, {0x5}, {0x80000000}, {0x200, 0x800200}, 0x2, 0x2, 0x3, 0xffff}}}}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001980)={0x3, 0x0, [{0x8186000, 0x9a, &(0x7f00000000c0)=""/154}, {0x5000, 0x33, &(0x7f0000000000)=""/51}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r9, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000, 0x0, 0x0, 0x0, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m55.985617125s ago: executing program 3 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x2, 0x17, 0x0, 0x0) 9m55.614866535s ago: executing program 1 (id=256): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r0, &(0x7f0000000600), 0xfec8) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) socket$alg(0x26, 0x5, 0x0) 9m55.29751959s ago: executing program 3 (id=257): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000880)=@multiplanar_mmap={0x6, 0x6, 0x4, 0xe000, 0x1000, {}, {0x1, 0x2, 0x4e, 0xc, 0xc, 0xf8, "d66bb72d"}, 0x4, 0x1, {0x0}, 0x889c}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000300)=0xffffffffffffff86) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x2a8, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x295, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="5caea6b5632cbdaeb803efb9c9e1daf5c4b73ad69ccfec1417b90e4f5754149da8393b98f8718558", @nested={0x18, 0xab, 0x0, 0x1, [@typed={0x12, 0x9d, 0x0, 0x0, @str='./cgroup/syz0\x00'}]}]}]}, 0x2a8}], 0x1}, 0x0) 9m49.129521281s ago: executing program 1 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x5c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) io_uring_setup(0x497c, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 9m48.813357522s ago: executing program 3 (id=261): mknod$loop(0x0, 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m48.691069592s ago: executing program 3 (id=263): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x0, r4, 0x4007) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000002c0)={0x8, 0x50, [0x2, 0x80000000, 0x0, 0x7], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sequencer(0xffffffffffffffff, 0x0, 0x10) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) 9m43.581487793s ago: executing program 1 (id=268): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8], 0x80}}], 0x1, 0x4000004) r0 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r1, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r4 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r2, 0xffffffffffffffff, 0x0) 9m43.579922608s ago: executing program 3 (id=269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x8400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$nl_rdma(0x10, 0x3, 0x14) 9m40.858262794s ago: executing program 1 (id=273): mknod$loop(0x0, 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m40.660726091s ago: executing program 1 (id=276): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x0, r3, 0x4007) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) 9m38.303812421s ago: executing program 1 (id=279): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x5c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) io_uring_setup(0x497c, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 9m27.395575214s ago: executing program 32 (id=269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x8400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$nl_rdma(0x10, 0x3, 0x14) 9m22.615232566s ago: executing program 33 (id=279): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x5c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) io_uring_setup(0x497c, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12.005354029s ago: executing program 2 (id=1325): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1820000000000000000a00000010000018", @ANYBLOB, @ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r1) 9.760147757s ago: executing program 2 (id=1329): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 8.353694404s ago: executing program 0 (id=1334): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000400)={@none, 0x2, 0x6800, 0x9, 0x7, 0x35, "6daea5fcb7105de94a8bc43362b531c4b695a8a4d29df6d009291fe8d771c06f171adf499c8a7949afef39e74ee6ce179279451a4b788c9a9ebe874c22ee5590b20acf7e546dcd6cc09d618bce1cdf069d4874ac934d72f198ece8ec19439b17f67f6cc48d305b2e67db1f4658901d4366d04454ce772ad4cdc183b96e14415a"}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffc00, 0x0) fadvise64(r7, 0xd, 0xfffffffffffff800, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 7.078919853s ago: executing program 4 (id=1335): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x80000000}, &(0x7f0000002780)={0x78, 0xfffffffffffffff5, 0x6, {0x10000, 0x0, 0x0, {0x0, 0x4, 0x9, 0x1ff, 0x5097, 0x9, 0x0, 0x80000001, 0x6, 0x8000, 0x7, 0x0, 0x0, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 6.96960298s ago: executing program 2 (id=1336): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) epoll_create1(0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x6, 0x8a, 0x80000, {r6}}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xae5, 0xff}]}}}}}}}}, 0x0) 6.821279949s ago: executing program 4 (id=1337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.755684715s ago: executing program 0 (id=1338): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x2, 0x80805, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x26, 0x2}}}}}}}, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0xa5, 0x2, 0x1ff, 0x9, 0x3, 0x4f8, 0xbc, 0x8}, &(0x7f0000000140)={0x11, 0x800, 0x848, 0x7, 0x1, 0x6, 0x1ff, 0x5}, 0x0, &(0x7f0000000240), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5.449939874s ago: executing program 2 (id=1339): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) sendto$inet6(r2, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5.342635819s ago: executing program 4 (id=1340): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2a, &(0x7f0000000040), 0xcf) socket(0x22, 0x3, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) r1 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) syz_open_dev$sg(0x0, 0x6f5e, 0xa0001) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf", 0xe7}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xf}], 0x3}, 0x4009800) 5.328511236s ago: executing program 0 (id=1341): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5.177048562s ago: executing program 6 (id=1342): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/114, 0x72}], 0x1) 5.098979581s ago: executing program 0 (id=1343): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 3.888110207s ago: executing program 6 (id=1346): syz_emit_ethernet(0x7e7, &(0x7f0000001ac0)={@random="b32db0619e9b", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@generic={0x8864, "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"}}}, 0x0) 3.753031442s ago: executing program 6 (id=1347): r0 = socket(0xa, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffff7f00000000e9ffffffffffffff0000000000000000000a00000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) 3.69028324s ago: executing program 5 (id=1348): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x80000000}, &(0x7f0000002780)={0x78, 0xfffffffffffffff5, 0x6, {0x10000, 0x0, 0x0, {0x0, 0x4, 0x9, 0x1ff, 0x5097, 0x9, 0x0, 0x80000001, 0x6, 0x8000, 0x7, 0x0, 0x0, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 3.493649328s ago: executing program 5 (id=1349): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180)=r3, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) 2.591245275s ago: executing program 6 (id=1350): getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 2.537118114s ago: executing program 5 (id=1351): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) epoll_create1(0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x6, 0x8a, 0x80000, {r6}}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xae5, 0xff}]}}}}}}}}, 0x0) 2.364585131s ago: executing program 4 (id=1352): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) io_destroy(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1.771707722s ago: executing program 0 (id=1353): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 1.768265732s ago: executing program 5 (id=1354): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.592888713s ago: executing program 4 (id=1355): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00"], 0x58}}, 0x0) 1.560537389s ago: executing program 5 (id=1356): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) read$qrtrtun(r0, 0x0, 0x500) connect$qrtr(r1, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x800000000976, 0x80, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.486854623s ago: executing program 0 (id=1357): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 1.485743889s ago: executing program 2 (id=1358): syz_emit_ethernet(0x0, 0x0, 0x0) 1.392316608s ago: executing program 6 (id=1359): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005300)={0x0, &(0x7f0000000040)={0x18, 0x0, 0xab9, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x78, 0xfffffffffffffff5, 0x6, {0x10000, 0x0, 0x0, {0x0, 0x4, 0x9, 0x1ff, 0x5097, 0x9, 0x0, 0x80000001, 0x6, 0x8000, 0x7, 0x0, 0x0, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 435.40834ms ago: executing program 4 (id=1360): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getpgrp(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000000) unshare(0x62000600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 325.347287ms ago: executing program 5 (id=1361): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0xffbffffb}, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 324.884305ms ago: executing program 2 (id=1362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 6 (id=1363): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0x6, 0x38, 0x37, 0x40, 0x424, 0x9d00, 0xebc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) kernel console output (not intermixed with test programs): g interface batadv_slave_1 (retrying later): interface not active [ 74.498169][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.498185][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.498215][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.520605][ T5807] hsr_slave_0: entered promiscuous mode [ 74.522103][ T5807] hsr_slave_1: entered promiscuous mode [ 74.534049][ T5810] hsr_slave_0: entered promiscuous mode [ 74.535247][ T5810] hsr_slave_1: entered promiscuous mode [ 74.536183][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 74.536294][ T5810] Cannot create hsr debugfs directory [ 74.711100][ T5798] hsr_slave_0: entered promiscuous mode [ 74.712351][ T5798] hsr_slave_1: entered promiscuous mode [ 74.713239][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 74.713260][ T5798] Cannot create hsr debugfs directory [ 75.003652][ T5800] hsr_slave_0: entered promiscuous mode [ 75.004570][ T5800] hsr_slave_1: entered promiscuous mode [ 75.005089][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 75.005111][ T5800] Cannot create hsr debugfs directory [ 75.077549][ T5813] hsr_slave_0: entered promiscuous mode [ 75.078254][ T5813] hsr_slave_1: entered promiscuous mode [ 75.078765][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 75.078783][ T5813] Cannot create hsr debugfs directory [ 75.634490][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.664291][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.703369][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.798026][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.901744][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.944601][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.963877][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.017028][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.104347][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.136562][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.138166][ T5119] Bluetooth: hci0: command tx timeout [ 76.147468][ T5119] Bluetooth: hci1: command tx timeout [ 76.147494][ T5119] Bluetooth: hci2: command tx timeout [ 76.164843][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.213092][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.217114][ T5806] Bluetooth: hci3: command tx timeout [ 76.297267][ T5806] Bluetooth: hci4: command tx timeout [ 76.314250][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.352836][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.399119][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.455159][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.509984][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.641087][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.684297][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.721980][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.732829][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.755265][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.812093][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.812749][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.850708][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.850829][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.903328][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.977671][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.004340][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.020497][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.020607][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.054858][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.054929][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.112552][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.136504][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.159855][ T1521] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.160042][ T1521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.210766][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.210884][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.256190][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.262254][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.290235][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.291029][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.352885][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.353421][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.385729][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.431926][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.432119][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.479211][ T1521] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.479419][ T1521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.512915][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.821745][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.045628][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.143817][ T5807] veth0_vlan: entered promiscuous mode [ 78.199282][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.202403][ T5807] veth1_vlan: entered promiscuous mode [ 78.217816][ T5805] Bluetooth: hci0: command tx timeout [ 78.217898][ T5119] Bluetooth: hci1: command tx timeout [ 78.217964][ T5806] Bluetooth: hci2: command tx timeout [ 78.245054][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.284798][ T5798] veth0_vlan: entered promiscuous mode [ 78.298879][ T5806] Bluetooth: hci3: command tx timeout [ 78.340819][ T5798] veth1_vlan: entered promiscuous mode [ 78.373092][ T5810] veth0_vlan: entered promiscuous mode [ 78.378391][ T5806] Bluetooth: hci4: command tx timeout [ 78.404287][ T5807] veth0_macvtap: entered promiscuous mode [ 78.424668][ T5800] veth0_vlan: entered promiscuous mode [ 78.435393][ T5810] veth1_vlan: entered promiscuous mode [ 78.448701][ T5807] veth1_macvtap: entered promiscuous mode [ 78.473134][ T5813] veth0_vlan: entered promiscuous mode [ 78.476632][ T5800] veth1_vlan: entered promiscuous mode [ 78.511440][ T5798] veth0_macvtap: entered promiscuous mode [ 78.512853][ T5813] veth1_vlan: entered promiscuous mode [ 78.535228][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.552769][ T5798] veth1_macvtap: entered promiscuous mode [ 78.569772][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.611615][ T5810] veth0_macvtap: entered promiscuous mode [ 78.615121][ T1357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.633816][ T1357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.649658][ T1357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.652445][ T1357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.654827][ T5810] veth1_macvtap: entered promiscuous mode [ 78.659405][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.680486][ T5800] veth0_macvtap: entered promiscuous mode [ 78.703071][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.743987][ T5800] veth1_macvtap: entered promiscuous mode [ 78.811089][ T5813] veth0_macvtap: entered promiscuous mode [ 78.812911][ T1426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.816008][ T1426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.840451][ T1426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.845768][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.871254][ T1426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.879535][ T5813] veth1_macvtap: entered promiscuous mode [ 78.942537][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.943972][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.013199][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.039475][ T1357] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.056048][ T1357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111757][ T1357] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.132786][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.132862][ T1357] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.142060][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.142082][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.159062][ T1357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.166192][ T1357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.192760][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.192844][ T1357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.223714][ T1357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.319874][ T1426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.319947][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.319960][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.325100][ T1345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.425567][ T1345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.445186][ T1345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.532543][ T1357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.532561][ T1357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.565282][ T1357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.565299][ T1357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.712043][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.712062][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.786812][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.786824][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.899489][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.899505][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.070360][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.070378][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.300485][ T5805] Bluetooth: hci0: command tx timeout [ 80.361992][ T5119] Bluetooth: hci1: command tx timeout [ 80.362037][ T5806] Bluetooth: hci2: command tx timeout [ 80.624517][ T5119] Bluetooth: hci4: command tx timeout [ 80.624742][ T5806] Bluetooth: hci3: command tx timeout [ 81.046759][ T1450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.046777][ T1450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.060500][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.554537][ T1521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.554556][ T1521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.604865][ T10] cfg80211: failed to load regulatory.db [ 81.807045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 81.807265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 81.807364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.436974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.556950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.557052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.557105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.557137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.557170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 82.557202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 83.661054][ T5963] ptrace attach of "./syz-executor exec"[5964] was attempted by "./syz-executor exec"[5963] [ 85.045600][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.355971][ T5978] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 87.743381][ T5987] Zero length message leads to an empty skb [ 91.808309][ T6013] ptrace attach of "./syz-executor exec"[6014] was attempted by "./syz-executor exec"[6013] [ 101.387170][ T809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.908151][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.908184][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.908230][ T809] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 101.908252][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.965122][ T809] usb 3-1: config 0 descriptor?? [ 102.543454][ T809] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 102.543603][ T809] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 102.589581][ T809] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input5 [ 102.658422][ T809] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 102.984157][ T809] usb 3-1: USB disconnect, device number 2 [ 103.217296][ T6133] fido_id[6133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 106.551092][ T6189] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 107.090365][ T6195] binder: 6194:6195 ioctl c0306201 0 returned -14 [ 109.866998][ T808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.021110][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.021142][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.021167][ T808] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 110.021178][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.080062][ T808] usb 1-1: config 0 descriptor?? [ 110.575983][ T808] cm6533_jd 0003:0D8C:0022.0002: item fetching failed at offset 1/5 [ 110.591788][ T808] cm6533_jd 0003:0D8C:0022.0002: parse failed [ 110.591892][ T808] cm6533_jd 0003:0D8C:0022.0002: probe with driver cm6533_jd failed with error -22 [ 110.779829][ T809] usb 1-1: USB disconnect, device number 2 [ 111.308144][ T6248] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 114.950158][ T6272] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 118.145760][ T6295] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 122.835470][ T6338] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 124.597006][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.807014][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.069698][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.128804][ T37] audit: type=1800 audit(1773715610.861:2): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.122" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 125.208011][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.318746][ T10] usb usb3-port1: attempt power cycle [ 125.877096][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.935908][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.219176][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.241249][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.350521][ T10] usb usb3-port1: unable to enumerate USB device [ 128.353452][ T6372] program syz.0.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.880189][ T6381] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 132.703542][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.703610][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887067][ T809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.364159][ T6427] netlink: 'syz.0.137': attribute type 1 has an invalid length. [ 133.885159][ T6430] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 134.209368][ T809] usb 3-1: device descriptor read/64, error -71 [ 134.597003][ T809] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.729691][ T809] usb 3-1: device descriptor read/64, error -71 [ 135.135303][ T809] usb usb3-port1: attempt power cycle [ 135.517189][ T809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.632577][ T809] usb 3-1: device descriptor read/8, error -71 [ 135.917222][ T809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.119434][ T809] usb 3-1: device descriptor read/8, error -71 [ 136.919255][ T809] usb usb3-port1: unable to enumerate USB device [ 138.374062][ T6475] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 139.007764][ T6470] syzkaller0: entered promiscuous mode [ 139.007787][ T6470] syzkaller0: entered allmulticast mode [ 143.454459][ T6519] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 179.665812][ T6807] netlink: 'syz.4.252': attribute type 1 has an invalid length. [ 180.212531][ T6807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.881155][ T6827] binder: BINDER_SET_CONTEXT_MGR already set [ 186.881169][ T6827] binder: 6826:6827 ioctl 4018620d 200000004a80 returned -16 [ 186.955877][ T6810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.956751][ T6810] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 186.967616][ T6810] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 194.168372][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.168441][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.123357][ T6875] ptrace attach of ""[6874] was attempted by "./syz-executor exec"[6875] [ 197.760257][ T6873] Bluetooth: hci0: command 0x0406 tx timeout [ 197.760293][ T6873] Bluetooth: hci1: command 0x0406 tx timeout [ 197.760323][ T6873] Bluetooth: hci3: command 0x0406 tx timeout [ 197.760346][ T6873] Bluetooth: hci4: command 0x0406 tx timeout [ 197.760367][ T6873] Bluetooth: hci2: command 0x0406 tx timeout [ 201.151269][ T6909] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 202.945762][ T6909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.465755][ T6913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.466024][ T6913] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 203.466679][ T6913] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 203.938030][ T6928] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 207.508582][ T6949] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 209.808331][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.812083][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.813074][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.815657][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.816381][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.008113][ T6971] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 211.896976][ T5809] Bluetooth: hci5: command tx timeout [ 212.332164][ T6986] fuse: Bad value for 'fd' [ 213.979027][ T5809] Bluetooth: hci5: command tx timeout [ 215.177548][ T7009] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 215.960236][ T6959] chnl_net:caif_netlink_parms(): no params data found [ 216.139111][ T5809] Bluetooth: hci5: command tx timeout [ 216.428727][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.429818][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.429994][ T6959] bridge_slave_0: entered allmulticast mode [ 216.434672][ T6959] bridge_slave_0: entered promiscuous mode [ 216.470611][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.470802][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.470986][ T6959] bridge_slave_1: entered allmulticast mode [ 216.497927][ T6959] bridge_slave_1: entered promiscuous mode [ 216.589773][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.594086][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.656527][ T6959] team0: Port device team_slave_0 added [ 216.667056][ T6959] team0: Port device team_slave_1 added [ 216.715561][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.715576][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.715611][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.763518][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.763532][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.763557][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.972541][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.999644][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.000846][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.001997][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.002958][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.417113][ T7027] fuse: Bad value for 'fd' [ 218.216974][ T5805] Bluetooth: hci5: command tx timeout [ 219.098864][ T5805] Bluetooth: hci6: command tx timeout [ 219.891089][ T6959] hsr_slave_0: entered promiscuous mode [ 219.891824][ T6959] hsr_slave_1: entered promiscuous mode [ 219.892361][ T6959] debugfs: 'hsr0' already exists in 'hsr' [ 219.892379][ T6959] Cannot create hsr debugfs directory [ 220.027846][ T7050] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 221.187476][ T5805] Bluetooth: hci6: command tx timeout [ 221.661549][ T7061] fuse: Bad value for 'fd' [ 222.303091][ T147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.258354][ T5805] Bluetooth: hci6: command tx timeout [ 224.100557][ T147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.743267][ T7091] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 225.421271][ T5805] Bluetooth: hci6: command tx timeout [ 225.480323][ T147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.839208][ T147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.683001][ T7122] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 228.605225][ T6959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.955132][ T7019] chnl_net:caif_netlink_parms(): no params data found [ 228.975153][ T147] bridge_slave_1: left allmulticast mode [ 228.975254][ T147] bridge_slave_1: left promiscuous mode [ 229.000506][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.248614][ T147] bridge_slave_0: left allmulticast mode [ 229.248640][ T147] bridge_slave_0: left promiscuous mode [ 229.249195][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.343852][ T7170] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 232.087693][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.168474][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.188726][ T147] bond0 (unregistering): Released all slaves [ 232.224270][ T6959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.349056][ T6959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.422273][ T6959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.683603][ T7207] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 239.435809][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.436091][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.436310][ T7019] bridge_slave_0: entered allmulticast mode [ 240.301275][ T7019] bridge_slave_0: entered promiscuous mode [ 240.320457][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.320590][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.320756][ T7019] bridge_slave_1: entered allmulticast mode [ 240.362849][ T7019] bridge_slave_1: entered promiscuous mode [ 240.774078][ T7019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.815961][ T7019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.741645][ T147] hsr_slave_0: left promiscuous mode [ 241.791778][ T147] hsr_slave_1: left promiscuous mode [ 241.793747][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.793830][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.981454][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.981480][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.096897][ T7246] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 243.195761][ T147] veth1_macvtap: left promiscuous mode [ 243.195994][ T147] veth0_macvtap: left promiscuous mode [ 243.196262][ T147] veth1_vlan: left promiscuous mode [ 243.196543][ T147] veth0_vlan: left promiscuous mode [ 246.376570][ T7280] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 249.628422][ T147] team0 (unregistering): Port device team_slave_1 removed [ 249.687630][ T147] team0 (unregistering): Port device team_slave_0 removed [ 250.210167][ T7019] team0: Port device team_slave_0 added [ 250.230422][ T7019] team0: Port device team_slave_1 added [ 250.349208][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.349236][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.349272][ T7019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.475809][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.476059][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.476167][ T7019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.103783][ T7325] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 251.773206][ T7019] hsr_slave_0: entered promiscuous mode [ 251.825378][ T7019] hsr_slave_1: entered promiscuous mode [ 251.906115][ T7019] debugfs: 'hsr0' already exists in 'hsr' [ 251.906175][ T7019] Cannot create hsr debugfs directory [ 254.659286][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.588344][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.588411][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.714646][ T6959] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.858951][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.859097][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.018386][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.018541][ T1426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.289967][ T7019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.374100][ T7019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.460770][ T7019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.535588][ T7019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 259.957989][ T147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.661967][ T147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.526633][ T7420] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 262.124198][ T147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.589073][ T147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.691592][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.764899][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.868305][ T7019] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.880977][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.881188][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.912993][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.923081][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.387915][ T147] bridge_slave_1: left allmulticast mode [ 264.387942][ T147] bridge_slave_1: left promiscuous mode [ 264.388172][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.870531][ T147] bridge_slave_0: left allmulticast mode [ 265.870667][ T147] bridge_slave_0: left promiscuous mode [ 265.870887][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.873118][ T7500] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 268.948234][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.127890][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.173420][ T147] bond0 (unregistering): Released all slaves [ 270.654725][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.662814][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.663905][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.665028][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.665786][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.886562][ T5809] Bluetooth: hci0: command tx timeout [ 274.937664][ T5809] Bluetooth: hci0: command tx timeout [ 276.108507][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.113161][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.114700][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.115693][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.116432][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.017353][ T5805] Bluetooth: hci0: command tx timeout [ 277.489819][ T7578] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 278.724522][ T5805] Bluetooth: hci1: command tx timeout [ 278.775279][ T147] hsr_slave_0: left promiscuous mode [ 278.871470][ T147] hsr_slave_1: left promiscuous mode [ 278.872478][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.872500][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.917992][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.918010][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.007990][ T147] veth1_macvtap: left promiscuous mode [ 279.008049][ T147] veth0_macvtap: left promiscuous mode [ 279.008181][ T147] veth1_vlan: left promiscuous mode [ 279.008278][ T147] veth0_vlan: left promiscuous mode [ 279.096888][ T5805] Bluetooth: hci0: command tx timeout [ 280.780611][ T5805] Bluetooth: hci1: command tx timeout [ 282.856949][ T5805] Bluetooth: hci1: command tx timeout [ 285.654744][ T5805] Bluetooth: hci1: command tx timeout [ 285.654821][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 285.863535][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.863569][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.863607][ T31] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 285.863630][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.926453][ T31] usb 3-1: config 0 descriptor?? [ 285.954252][ T147] team0 (unregistering): Port device team_slave_1 removed [ 286.055880][ T147] team0 (unregistering): Port device team_slave_0 removed [ 286.523953][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 286.524066][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 286.630639][ T31] usb 3-1: USB disconnect, device number 11 [ 288.277345][ T7565] chnl_net:caif_netlink_parms(): no params data found [ 288.338086][ T7518] chnl_net:caif_netlink_parms(): no params data found [ 288.647285][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'. [ 290.139518][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.139641][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.139861][ T7518] bridge_slave_0: entered allmulticast mode [ 290.154230][ T7518] bridge_slave_0: entered promiscuous mode [ 290.212535][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.212656][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.212860][ T7565] bridge_slave_0: entered allmulticast mode [ 290.215484][ T7565] bridge_slave_0: entered promiscuous mode [ 290.387085][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.387210][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.387433][ T7518] bridge_slave_1: entered allmulticast mode [ 290.419483][ T7518] bridge_slave_1: entered promiscuous mode [ 290.427651][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.427764][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.427955][ T7565] bridge_slave_1: entered allmulticast mode [ 290.469829][ T7565] bridge_slave_1: entered promiscuous mode [ 290.709597][ T7732] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 290.709619][ T7732] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.153961][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.578681][ T7565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.598349][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.603241][ T7565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.950868][ T7518] team0: Port device team_slave_0 added [ 295.076993][ T808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 295.084057][ T7565] team0: Port device team_slave_0 added [ 295.089362][ T7518] team0: Port device team_slave_1 added [ 295.114410][ T7565] team0: Port device team_slave_1 added [ 295.258813][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.258832][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.258853][ T808] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 295.258865][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.261790][ T808] usb 1-1: config 0 descriptor?? [ 295.369214][ T7753] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 295.673070][ T808] usbhid 1-1:0.0: can't add hid device: -71 [ 295.673145][ T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 295.679581][ T808] usb 1-1: USB disconnect, device number 3 [ 295.803197][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.803207][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.803221][ T7518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.804944][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.804953][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.804980][ T7565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.144627][ T7760] netlink: 'syz.2.472': attribute type 3 has an invalid length. [ 296.150426][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.150439][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.150463][ T7518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.152777][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.152790][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.152813][ T7565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.686277][ T7518] hsr_slave_0: entered promiscuous mode [ 297.688784][ T7518] hsr_slave_1: entered promiscuous mode [ 297.689671][ T7518] debugfs: 'hsr0' already exists in 'hsr' [ 297.689693][ T7518] Cannot create hsr debugfs directory [ 297.926050][ T7565] hsr_slave_0: entered promiscuous mode [ 297.928586][ T7565] hsr_slave_1: entered promiscuous mode [ 297.929551][ T7565] debugfs: 'hsr0' already exists in 'hsr' [ 297.929572][ T7565] Cannot create hsr debugfs directory [ 299.772667][ T7829] netlink: 'syz.2.481': attribute type 3 has an invalid length. [ 302.670676][ T7867] netlink: 'syz.2.490': attribute type 3 has an invalid length. [ 303.980466][ T37] audit: type=1800 audit(1773715789.741:3): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.493" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 306.866274][ T3524] bridge_slave_1: left allmulticast mode [ 306.866302][ T3524] bridge_slave_1: left promiscuous mode [ 306.866546][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.167055][ T7918] netlink: 'syz.0.499': attribute type 3 has an invalid length. [ 307.423287][ T3524] bridge_slave_0: left allmulticast mode [ 307.423313][ T3524] bridge_slave_0: left promiscuous mode [ 307.423533][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.353748][ T3524] bridge_slave_1: left allmulticast mode [ 308.353767][ T3524] bridge_slave_1: left promiscuous mode [ 308.353900][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.448499][ T3524] bridge_slave_0: left allmulticast mode [ 308.448525][ T3524] bridge_slave_0: left promiscuous mode [ 308.448757][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.568131][ T7929] 0xfffffffffffffffd-0x000000020000 : "" [ 308.568154][ T7929] mtd: partition "" is out of reach -- disabled [ 308.577776][ T7929] ftl_cs: FTL header not found. [ 310.603986][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.657394][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.682640][ T3524] bond0 (unregistering): Released all slaves [ 311.128897][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.278586][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.299945][ T3524] bond0 (unregistering): Released all slaves [ 311.973757][ T7948] fuse: Unknown parameter 'user_id00000000000000000000' [ 312.101479][ T3524] hsr_slave_0: left promiscuous mode [ 312.138216][ T3524] hsr_slave_1: left promiscuous mode [ 312.141424][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.318384][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.391996][ T3524] hsr_slave_0: left promiscuous mode [ 313.444044][ T3524] hsr_slave_1: left promiscuous mode [ 313.444667][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.495894][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.023722][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.023806][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.677586][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 318.807380][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 319.167314][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 319.210175][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 319.860679][ T7997] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.359549][ T7518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.474167][ T7518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.507884][ T7518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.795559][ T7518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.446954][ T7565] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.526256][ T7565] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.630100][ T7565] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 322.728192][ T7565] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.209677][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.288581][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.276648][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.276777][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.577779][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.577924][ T7636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.675435][ T8071] dns_resolver: Unsupported content type (152) [ 325.442259][ T8069] fuse: Unknown parameter 'user_id00000000000000000000' [ 325.534277][ T8071] uprobe: syz.2.524:8071 failed to unregister, leaking uprobe [ 325.534501][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.836557][ T7565] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.962149][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.962279][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.039099][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.042139][ T1426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.941530][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.442867][ T7565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.935551][ T8110] Bluetooth: MGMT ver 1.23 [ 328.231512][ T8119] fuse: Bad value for 'fd' [ 328.292495][ T7518] veth0_vlan: entered promiscuous mode [ 329.874091][ T7565] veth0_vlan: entered promiscuous mode [ 329.911197][ T7565] veth1_vlan: entered promiscuous mode [ 330.010983][ T7565] veth0_macvtap: entered promiscuous mode [ 330.055859][ T7565] veth1_macvtap: entered promiscuous mode [ 331.478834][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.538575][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.546142][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.558549][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.559964][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.567790][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.568503][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.656082][ T1155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.681472][ T1155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.701652][ T1155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.764520][ T1155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.739756][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.739769][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.657005][ T5809] Bluetooth: hci5: command tx timeout [ 334.470483][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.470503][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.623171][ T8175] fuse: Bad value for 'fd' [ 336.147208][ T5809] Bluetooth: hci5: command tx timeout [ 337.825165][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.837922][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.840628][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.842370][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.844030][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.216957][ T5805] Bluetooth: hci5: command tx timeout [ 339.520742][ T8137] chnl_net:caif_netlink_parms(): no params data found [ 340.856873][ T5805] Bluetooth: hci0: command tx timeout [ 340.857164][ T5809] Bluetooth: hci5: command tx timeout [ 341.547539][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 342.524703][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.526089][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.526218][ T8137] bridge_slave_0: entered allmulticast mode [ 342.551411][ T8137] bridge_slave_0: entered promiscuous mode [ 342.580339][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.580445][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.580597][ T8137] bridge_slave_1: entered allmulticast mode [ 342.582986][ T8137] bridge_slave_1: entered promiscuous mode [ 342.677050][ T1469] bridge_slave_1: left allmulticast mode [ 342.677074][ T1469] bridge_slave_1: left promiscuous mode [ 342.677223][ T1469] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.754095][ T1469] bridge_slave_0: left allmulticast mode [ 342.754113][ T1469] bridge_slave_0: left promiscuous mode [ 342.754596][ T1469] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.940334][ T5809] Bluetooth: hci0: command tx timeout [ 342.957625][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 343.234849][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 343.459290][ T31] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 343.459308][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.501799][ T31] usb 1-1: config 0 descriptor?? [ 343.524108][ T31] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 344.042551][ T31] gspca_sonixj: reg_w1 err -110 [ 344.044842][ T31] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 344.574249][ T1469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.647760][ T1469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.703280][ T1469] bond0 (unregistering): Released all slaves [ 344.798268][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.851794][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.143988][ T5809] Bluetooth: hci0: command tx timeout [ 345.163272][ T8137] team0: Port device team_slave_0 added [ 345.178171][ T8137] team0: Port device team_slave_1 added [ 345.270021][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 346.050069][ T31] usb 1-1: USB disconnect, device number 4 [ 346.395410][ T1469] hsr_slave_0: left promiscuous mode [ 346.427063][ T1469] hsr_slave_1: left promiscuous mode [ 346.428091][ T1469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.480910][ T1469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.588434][ T1469] veth0_vlan: left promiscuous mode [ 347.178070][ T5805] Bluetooth: hci0: command tx timeout [ 347.829395][ T1469] team0 (unregistering): Port device team_slave_1 removed [ 347.898788][ T1469] team0 (unregistering): Port device team_slave_0 removed [ 348.408795][ T8333] bridge0: port 3(syz_tun) entered blocking state [ 348.411323][ T8333] bridge0: port 3(syz_tun) entered disabled state [ 348.412827][ T8333] syz_tun: entered allmulticast mode [ 348.416028][ T8333] syz_tun: entered promiscuous mode [ 348.438277][ T8333] bridge0: port 3(syz_tun) entered blocking state [ 348.438426][ T8333] bridge0: port 3(syz_tun) entered forwarding state [ 348.682137][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.682152][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.682177][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.682991][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 348.817759][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.817774][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.817799][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.818507][ T8343] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 348.818531][ T8343] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 350.379610][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 350.526116][ T8137] hsr_slave_0: entered promiscuous mode [ 350.533416][ T8137] hsr_slave_1: entered promiscuous mode [ 350.533958][ T8137] debugfs: 'hsr0' already exists in 'hsr' [ 350.533975][ T8137] Cannot create hsr debugfs directory [ 350.679471][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.679629][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.679797][ T8201] bridge_slave_0: entered allmulticast mode [ 350.729665][ T8201] bridge_slave_0: entered promiscuous mode [ 350.796012][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.796079][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.796324][ T8201] bridge_slave_1: entered allmulticast mode [ 350.804787][ T8201] bridge_slave_1: entered promiscuous mode [ 351.080936][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.127587][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.279373][ T8377] bridge0: port 3(syz_tun) entered blocking state [ 351.279482][ T8377] bridge0: port 3(syz_tun) entered disabled state [ 351.279654][ T8377] syz_tun: entered allmulticast mode [ 351.289536][ T8377] syz_tun: entered promiscuous mode [ 351.292551][ T8377] bridge0: port 3(syz_tun) entered blocking state [ 351.341858][ T8377] bridge0: port 3(syz_tun) entered forwarding state [ 351.782777][ T8201] team0: Port device team_slave_0 added [ 351.861005][ T8201] team0: Port device team_slave_1 added [ 352.447783][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.447799][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.447820][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.520187][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.520202][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.520227][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.235618][ T7627] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.493782][ T8201] hsr_slave_0: entered promiscuous mode [ 354.513039][ T8201] hsr_slave_1: entered promiscuous mode [ 354.514190][ T8201] debugfs: 'hsr0' already exists in 'hsr' [ 354.514213][ T8201] Cannot create hsr debugfs directory [ 355.041594][ T7627] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.361304][ T7627] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.922098][ T7627] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.605617][ T8512] ptrace attach of "./syz-executor exec"[8513] was attempted by "./syz-executor exec"[8512] [ 360.155557][ T7627] bridge_slave_1: left allmulticast mode [ 360.155575][ T7627] bridge_slave_1: left promiscuous mode [ 360.155718][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.305415][ T7627] bridge_slave_0: left allmulticast mode [ 360.305435][ T7627] bridge_slave_0: left promiscuous mode [ 360.317734][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.061256][ T7627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.137627][ T7627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.181937][ T7627] bond0 (unregistering): Released all slaves [ 362.225717][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 362.532623][ T8137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.206229][ T8137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.799568][ T8553] ptrace attach of "./syz-executor exec"[8554] was attempted by "./syz-executor exec"[8553] [ 364.585860][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 364.776901][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 364.780282][ T5863] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 364.780307][ T5863] usb 5-1: config 0 has no interface number 0 [ 364.780431][ T5863] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 364.780485][ T5863] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 364.783843][ T5863] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 364.783865][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.783883][ T5863] usb 5-1: Product: syz [ 364.783895][ T5863] usb 5-1: Manufacturer: syz [ 364.783907][ T5863] usb 5-1: SerialNumber: syz [ 364.799393][ T8137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.808579][ T5863] usb 5-1: config 0 descriptor?? [ 364.811069][ T8547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 364.811276][ T8547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.070831][ T8561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.070929][ T8561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.404954][ T8137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.857147][ T7627] hsr_slave_0: left promiscuous mode [ 365.889450][ T7627] hsr_slave_1: left promiscuous mode [ 365.891591][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.891607][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.942008][ T7627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.942032][ T7627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.271221][ T7627] veth1_macvtap: left promiscuous mode [ 366.271328][ T7627] veth0_macvtap: left promiscuous mode [ 366.271572][ T7627] veth1_vlan: left promiscuous mode [ 366.271760][ T7627] veth0_vlan: left promiscuous mode [ 367.042785][ T5863] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 367.042815][ T5863] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 367.043437][ T5863] asix 5-1:0.251: probe with driver asix failed with error -5 [ 367.105163][ T5863] usb 5-1: USB disconnect, device number 2 [ 368.537851][ T8595] fuse: Unknown parameter 'grou00000000000000000000' [ 368.757506][ T7627] team0 (unregistering): Port device team_slave_1 removed [ 368.817321][ T7627] team0 (unregistering): Port device team_slave_0 removed [ 369.204362][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 370.239404][ T8608] ptrace attach of "./syz-executor exec"[8609] was attempted by "./syz-executor exec"[8608] [ 371.263236][ T8613] bridge0: port 3(syz_tun) entered blocking state [ 371.263357][ T8613] bridge0: port 3(syz_tun) entered disabled state [ 371.263521][ T8613] syz_tun: entered allmulticast mode [ 371.296933][ T8613] syz_tun: entered promiscuous mode [ 371.327355][ T8613] bridge0: port 3(syz_tun) entered blocking state [ 371.327474][ T8613] bridge0: port 3(syz_tun) entered forwarding state [ 371.375253][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.392138][ T8201] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 371.481396][ T8201] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.607402][ T8201] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.749347][ T8201] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.783682][ T8628] netlink: 192 bytes leftover after parsing attributes in process `syz.0.620'. [ 371.965882][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.039553][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.039752][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.100260][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.101989][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.757968][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 372.930091][ T8643] fuse: Unknown parameter 'grou00000000000000000000' [ 373.159377][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.327631][ T8201] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.344689][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.344811][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.374260][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.374332][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.158827][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.177375][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 375.888935][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.418171][ T8694] binder: 8691:8694 ioctl 4018620d 0 returned -22 [ 376.812163][ T8137] veth0_vlan: entered promiscuous mode [ 376.887289][ T8137] veth1_vlan: entered promiscuous mode [ 377.082910][ T8137] veth0_macvtap: entered promiscuous mode [ 377.121179][ T8137] veth1_macvtap: entered promiscuous mode [ 377.377156][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 377.608490][ T8715] netlink: 192 bytes leftover after parsing attributes in process `syz.4.629'. [ 377.708356][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.781819][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.782153][ T8201] veth0_vlan: entered promiscuous mode [ 377.830714][ T147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.858481][ T147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.860354][ T147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.896425][ T147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.897995][ T8201] veth1_vlan: entered promiscuous mode [ 378.017861][ T8723] fuse: Unknown parameter 'grou00000000000000000000' [ 378.472654][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.472721][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.722803][ T8201] veth0_macvtap: entered promiscuous mode [ 378.822319][ T8201] veth1_macvtap: entered promiscuous mode [ 378.898272][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.898291][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.962902][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.060332][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.317282][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.321313][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.324412][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.325425][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.325469][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.325477][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.398002][ T8741] dns_resolver: Unsupported content type (152) [ 380.818131][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.818150][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.182445][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.182464][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.466029][ T8770] fuse: Unknown parameter 'group_i00000000000000000000' [ 385.816849][ T5863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 385.978953][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 385.982689][ T5863] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 385.982714][ T5863] usb 3-1: config 0 has no interface number 0 [ 385.982755][ T5863] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.982782][ T5863] usb 3-1: config 0 interface 85 has no altsetting 0 [ 385.984787][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 385.984804][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.984814][ T5863] usb 3-1: Product: syz [ 385.984821][ T5863] usb 3-1: Manufacturer: syz [ 385.984832][ T5863] usb 3-1: SerialNumber: syz [ 386.138439][ T5863] usb 3-1: config 0 descriptor?? [ 386.214937][ T5863] appletouch 3-1:0.85: Could not find int-in endpoint [ 386.215811][ T5863] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 386.240604][ T5863] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 386.710833][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.644'. [ 386.887313][ T8785] overlayfs: failed to resolve './file1': -2 [ 388.935372][ T5970] usb 3-1: USB disconnect, device number 12 [ 392.398992][ T8815] overlayfs: failed to resolve './file1': -2 [ 392.601252][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.656'. [ 394.517665][ T8829] fuse: Unknown parameter 'fd0x0000000000000003' [ 394.543498][ T8827] fuse: Unknown parameter 'group_i00000000000000000000' [ 397.392272][ T8850] ======================================================= [ 397.392272][ T8850] WARNING: The mand mount option has been deprecated and [ 397.392272][ T8850] and is ignored by this kernel. Remove the mand [ 397.392272][ T8850] option from the mount to silence this warning. [ 397.392272][ T8850] ======================================================= [ 399.628626][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 402.098759][ T5970] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 402.354763][ T5970] usb 7-1: Using ep0 maxpacket: 32 [ 402.388221][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.388271][ T5970] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 402.388293][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.512686][ T5970] usb 7-1: config 0 descriptor?? [ 402.986305][ T8890] fuse: Unknown parameter 'fd0x0000000000000003' [ 403.768650][ T8895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.981942][ T31] usb 7-1: USB disconnect, device number 2 [ 407.615039][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 410.263846][ T8942] fuse: Unknown parameter 'fd0x0000000000000003' [ 410.745041][ T8952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.684'. [ 410.957364][ T8953] 9pnet_virtio: no channels available for device syz [ 410.988605][ T8953] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 410.988767][ T8953] overlayfs: overlapping lowerdir path [ 413.366849][ T5972] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 413.829576][ T5972] usb 5-1: Using ep0 maxpacket: 32 [ 413.843263][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.843313][ T5972] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.843341][ T5972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 413.843380][ T5972] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 413.843401][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.937613][ T5972] usb 5-1: config 0 descriptor?? [ 413.970482][ T5972] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 418.178144][ T5861] usb 5-1: USB disconnect, device number 3 [ 418.274910][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.6.703'. [ 418.279096][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.703'. [ 420.163609][ T9012] ptrace attach of "./syz-executor exec"[9013] was attempted by "./syz-executor exec"[9012] [ 422.554465][ T9021] bridge0: port 3(syz_tun) entered blocking state [ 422.566277][ T9021] bridge0: port 3(syz_tun) entered disabled state [ 422.566495][ T9021] syz_tun: entered allmulticast mode [ 422.613894][ T9021] syz_tun: entered promiscuous mode [ 422.614575][ T9021] bridge0: port 3(syz_tun) entered blocking state [ 422.614641][ T9021] bridge0: port 3(syz_tun) entered forwarding state [ 423.457297][ T9028] netlink: 'syz.5.712': attribute type 1 has an invalid length. [ 427.877410][ T9033] netlink: 68 bytes leftover after parsing attributes in process `syz.2.714'. [ 428.159009][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.716'. [ 428.179360][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 428.326862][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 428.331324][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.331373][ T31] usb 7-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.331400][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.331432][ T31] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 428.331454][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.398685][ T31] usb 7-1: config 0 descriptor?? [ 428.441712][ T31] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 431.456824][ T9081] ptrace attach of "./syz-executor exec"[9082] was attempted by "./syz-executor exec"[9081] [ 432.341059][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 432.631338][ T5970] usb 7-1: USB disconnect, device number 3 [ 433.586189][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz.6.723'. [ 433.599282][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.723'. [ 433.777421][ T9097] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.566303][ T9108] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 434.668470][ T9106] netlink: 68 bytes leftover after parsing attributes in process `syz.4.728'. [ 435.220736][ T9108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.567718][ T9136] 9p: Bad value for 'rfdno' [ 439.260616][ T9152] ptrace attach of "./syz-executor exec"[9153] was attempted by "./syz-executor exec"[9152] [ 440.039344][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.039383][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.245951][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.735'. [ 447.716879][ T5970] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 447.896962][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 447.932404][ T5970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.932462][ T5970] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.932504][ T5970] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.932527][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.988781][ T5970] usb 1-1: config 0 descriptor?? [ 448.107258][ T5970] hub 1-1:0.0: bad descriptor, ignoring hub [ 448.107280][ T5970] hub 1-1:0.0: probe with driver hub failed with error -5 [ 448.108941][ T5970] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 448.171760][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.745'. [ 448.182040][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.745'. [ 448.812327][ T9203] fuse: Bad value for 'fd' [ 449.032969][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 449.527221][ T5970] usb 1-1: USB disconnect, device number 5 [ 453.748297][ T9233] netlink: 192 bytes leftover after parsing attributes in process `syz.6.757'. [ 453.903501][ T9237] fuse: Bad value for 'fd' [ 453.996878][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 454.226864][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 454.229934][ T31] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 454.229959][ T31] usb 6-1: config 0 has no interface number 0 [ 454.230002][ T31] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.230028][ T31] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.230050][ T31] usb 6-1: config 0 interface 85 has no altsetting 0 [ 454.236689][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 454.236715][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.302109][ T31] usb 6-1: Product: syz [ 454.302128][ T31] usb 6-1: Manufacturer: syz [ 454.302141][ T31] usb 6-1: SerialNumber: syz [ 454.324402][ T31] usb 6-1: config 0 descriptor?? [ 456.769266][ T31] appletouch 6-1:0.85: Failed to request geyser raw mode [ 456.769494][ T31] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 457.329039][ T31] usb 6-1: USB disconnect, device number 2 [ 457.779020][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 458.287231][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.767'. [ 458.670748][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.767'. [ 458.711227][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 461.701436][ T9281] fuse: Bad value for 'fd' [ 464.480953][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 467.579110][ T9322] fuse: Bad value for 'fd' [ 468.348957][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.787'. [ 471.518786][ T9357] fuse: Bad value for 'fd' [ 475.396926][ T9378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.838688][ T9395] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 482.350107][ T5805] Bluetooth: hci4: hardware error 0x07 [ 484.240017][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.821'. [ 484.456949][ T5805] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 490.289311][ T9473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.232107][ T9471] delete_channel: no stack [ 491.440519][ T9489] overlayfs: failed to resolve './file0': -2 [ 491.917161][ T9307] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 492.107155][ T9307] usb 5-1: device descriptor read/64, error -71 [ 492.356846][ T9307] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 493.456877][ T9307] usb 5-1: device descriptor read/64, error -71 [ 493.567159][ T9307] usb usb5-port1: attempt power cycle [ 494.058949][ T9307] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 494.159720][ T9307] usb 5-1: device descriptor read/8, error -71 [ 494.268210][ T9509] overlayfs: failed to resolve './file1': -2 [ 494.437252][ T9307] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 495.445278][ T9307] usb 5-1: device descriptor read/8, error -71 [ 495.548308][ T9307] usb usb5-port1: unable to enumerate USB device [ 501.597329][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.597393][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.156854][ T5861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 502.411050][ T5861] usb 3-1: device descriptor read/64, error -71 [ 502.686437][ T5861] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 502.998813][ T5861] usb 3-1: device descriptor read/64, error -71 [ 503.107387][ T5861] usb usb3-port1: attempt power cycle [ 503.446930][ T5861] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 503.467644][ T5861] usb 3-1: device descriptor read/8, error -71 [ 503.706993][ T5861] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 503.727348][ T5861] usb 3-1: device descriptor read/8, error -71 [ 503.847163][ T5861] usb usb3-port1: unable to enumerate USB device [ 504.137262][ T36] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 504.306998][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 504.390837][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.392163][ T36] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.392405][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.639088][ T36] usb 7-1: config 0 descriptor?? [ 505.938471][ T36] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 506.116835][ T36] usb 7-1: USB disconnect, device number 4 [ 506.366816][ T808] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 506.476831][ T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 506.516807][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 506.519011][ T808] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 506.519035][ T808] usb 3-1: config 0 has no interface number 0 [ 506.519079][ T808] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.519106][ T808] usb 3-1: config 0 interface 85 has no altsetting 0 [ 506.521510][ T808] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 506.521537][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.521556][ T808] usb 3-1: Product: syz [ 506.521569][ T808] usb 3-1: Manufacturer: syz [ 506.521583][ T808] usb 3-1: SerialNumber: syz [ 506.539242][ T808] usb 3-1: config 0 descriptor?? [ 506.676831][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 506.682956][ T36] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 506.682981][ T36] usb 1-1: config 0 has no interface number 0 [ 506.683025][ T36] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 506.683050][ T36] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 506.685756][ T36] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 506.685782][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.685809][ T36] usb 1-1: Product: syz [ 506.685822][ T36] usb 1-1: Manufacturer: syz [ 506.685835][ T36] usb 1-1: SerialNumber: syz [ 506.768714][ T36] usb 1-1: config 0 descriptor?? [ 506.771417][ T9584] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 506.771607][ T9584] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 506.799143][ T808] appletouch 3-1:0.85: Failed to read mode from device. [ 506.799373][ T808] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 506.901398][ T9588] netlink: 68 bytes leftover after parsing attributes in process `syz.6.868'. [ 507.042577][ T9591] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 507.042872][ T9591] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 507.047144][ T808] usb 3-1: USB disconnect, device number 17 [ 507.296538][ T9591] overlayfs: failed to resolve './file1': -2 [ 508.646940][ T5972] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 508.796871][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 508.799286][ T5972] usb 3-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 508.799311][ T5972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 508.799343][ T5972] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 508.799366][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.846361][ T5972] usb 3-1: config 0 descriptor?? [ 509.333008][ T36] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 509.333037][ T36] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 509.333260][ T36] asix 1-1:0.251: probe with driver asix failed with error -5 [ 509.380814][ T36] usb 1-1: USB disconnect, device number 6 [ 509.602638][ T5972] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 509.626421][ T9623] delete_channel: no stack [ 509.763166][ T5972] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -38 [ 509.788911][ T5972] usb 3-1: USB disconnect, device number 18 [ 509.968789][ T9627] fido_id[9627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 510.963814][ T5970] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 511.206995][ T5970] usb 5-1: device descriptor read/64, error -71 [ 512.286787][ T5970] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 512.416863][ T5970] usb 5-1: device descriptor read/64, error -71 [ 512.796958][ T5970] usb usb5-port1: attempt power cycle [ 513.126626][ T9659] netlink: 68 bytes leftover after parsing attributes in process `syz.5.880'. [ 513.146821][ T5970] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 513.356792][ T5970] usb 5-1: device not accepting address 10, error -71 [ 513.816993][ T808] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 513.966970][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 513.978710][ T808] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 513.978737][ T808] usb 3-1: config 0 has no interface number 0 [ 513.978780][ T808] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.978807][ T808] usb 3-1: config 0 interface 85 has no altsetting 0 [ 513.982241][ T808] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 513.982267][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.982287][ T808] usb 3-1: Product: syz [ 513.982301][ T808] usb 3-1: Manufacturer: syz [ 513.982315][ T808] usb 3-1: SerialNumber: syz [ 514.055502][ T808] usb 3-1: config 0 descriptor?? [ 514.596959][ T808] appletouch 3-1:0.85: Failed to read mode from device. [ 514.597172][ T808] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 514.844495][ T808] usb 3-1: USB disconnect, device number 19 [ 516.099627][ T9691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.674445][ T9705] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 519.447345][ T9720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.893'. [ 519.566809][ T5972] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 519.704353][ T5972] usb 7-1: device descriptor read/64, error -71 [ 519.936802][ T5972] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 520.066987][ T5972] usb 7-1: device descriptor read/64, error -71 [ 520.177348][ T5972] usb usb7-port1: attempt power cycle [ 522.339576][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 525.307144][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 525.386031][ T9779] netlink: 68 bytes leftover after parsing attributes in process `syz.2.907'. [ 525.476778][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 525.479642][ T5871] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 525.479666][ T5871] usb 5-1: config 0 has no interface number 0 [ 525.479712][ T5871] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.479738][ T5871] usb 5-1: config 0 interface 85 has no altsetting 0 [ 525.482172][ T5871] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 525.482197][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.482215][ T5871] usb 5-1: Product: syz [ 525.482228][ T5871] usb 5-1: Manufacturer: syz [ 525.482241][ T5871] usb 5-1: SerialNumber: syz [ 525.570126][ T5871] usb 5-1: config 0 descriptor?? [ 525.785138][ T5871] appletouch 5-1:0.85: Failed to read mode from device. [ 525.785364][ T5871] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 525.816997][ T5863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 525.970977][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 525.973078][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.973102][ T5863] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.973138][ T5863] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 525.973159][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.989097][ T5863] usb 1-1: config 0 descriptor?? [ 527.428364][ T5871] usb 5-1: USB disconnect, device number 12 [ 530.049426][ T9822] netlink: 192 bytes leftover after parsing attributes in process `syz.6.914'. [ 530.520196][ T5972] usb 1-1: USB disconnect, device number 7 [ 532.684867][ T9840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.072499][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 535.243860][ T9853] netlink: 68 bytes leftover after parsing attributes in process `syz.2.922'. [ 536.448021][ T5805] Bluetooth: hci5: hardware error 0x07 [ 540.464495][ T9898] netlink: 192 bytes leftover after parsing attributes in process `syz.4.929'. [ 540.519363][ T9902] overlayfs: conflicting lowerdir path [ 540.576870][ T5863] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 540.634335][ T9908] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 540.887602][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 540.917377][ T5863] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 540.917446][ T5863] usb 7-1: config 0 interface 0 has no altsetting 0 [ 540.917506][ T5863] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 540.917558][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.147823][ T5863] usb 7-1: config 0 descriptor?? [ 541.339846][ T5805] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 541.983829][ T5863] usbhid 7-1:0.0: can't add hid device: -71 [ 541.983964][ T5863] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 541.993727][ T5863] usb 7-1: USB disconnect, device number 8 [ 542.215181][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'. [ 542.366905][ T9922] netlink: 68 bytes leftover after parsing attributes in process `syz.4.938'. [ 548.497081][ T5861] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 548.716812][ T5861] usb 7-1: Using ep0 maxpacket: 32 [ 548.720464][ T5861] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 548.720483][ T5861] usb 7-1: config 0 has no interface number 0 [ 548.720508][ T5861] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.720521][ T5861] usb 7-1: config 0 interface 85 has no altsetting 0 [ 548.722558][ T5861] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 548.722573][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.722583][ T5861] usb 7-1: Product: syz [ 548.722590][ T5861] usb 7-1: Manufacturer: syz [ 548.722597][ T5861] usb 7-1: SerialNumber: syz [ 548.821705][ T5861] usb 7-1: config 0 descriptor?? [ 549.309111][ T5861] appletouch 7-1:0.85: Failed to read mode from device. [ 549.309328][ T5861] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 549.463951][ T9987] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 549.962791][ T5861] usb 7-1: USB disconnect, device number 9 [ 551.009170][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.956'. [ 551.248973][ T9999] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 552.665471][T10018] netlink: 192 bytes leftover after parsing attributes in process `syz.5.959'. [ 553.486436][T10026] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 554.887081][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 555.097404][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 555.099682][ T5871] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 555.099705][ T5871] usb 5-1: config 0 has no interface number 0 [ 555.099748][ T5871] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 555.099773][ T5871] usb 5-1: config 0 interface 85 has no altsetting 0 [ 555.102217][ T5871] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 555.102242][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.102260][ T5871] usb 5-1: Product: syz [ 555.102275][ T5871] usb 5-1: Manufacturer: syz [ 555.102288][ T5871] usb 5-1: SerialNumber: syz [ 555.200677][ T5871] usb 5-1: config 0 descriptor?? [ 555.905781][ T5871] appletouch 5-1:0.85: Failed to read mode from device. [ 555.906008][ T5871] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 556.182868][ T5871] usb 5-1: USB disconnect, device number 13 [ 556.273173][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 559.415206][T10054] delete_channel: no stack [ 564.013811][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.013896][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.606615][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.987'. [ 571.487527][T10108] netlink: 192 bytes leftover after parsing attributes in process `syz.2.988'. [ 571.860940][T10115] overlayfs: failed to resolve './file1': -2 [ 579.785851][T10162] binder: 10161:10162 ioctl c0306201 0 returned -14 [ 580.183497][T10167] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1008'. [ 583.517296][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1015'. [ 586.120973][ T9885] Bluetooth: hci2: hardware error 0x07 [ 586.177803][T10204] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1019'. [ 586.932066][T10225] binder: 10223:10225 ioctl c0306201 0 returned -14 [ 587.606817][ T5970] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 587.786880][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 587.794182][ T5970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.794297][ T5970] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.794370][ T5970] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 587.794393][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.969933][ T5970] usb 6-1: config 0 descriptor?? [ 588.132388][ T5970] hub 6-1:0.0: bad descriptor, ignoring hub [ 588.132427][ T5970] hub 6-1:0.0: probe with driver hub failed with error -5 [ 588.238565][ T9885] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 588.273893][ T5970] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 589.081942][ T36] usb 6-1: USB disconnect, device number 3 [ 589.156856][ T5970] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 589.416788][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 589.419899][ T5970] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 589.419936][ T5970] usb 1-1: config 0 has no interface number 0 [ 589.419979][ T5970] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.420004][ T5970] usb 1-1: config 0 interface 85 has no altsetting 0 [ 589.424141][ T5970] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 589.424166][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.424185][ T5970] usb 1-1: Product: syz [ 589.424198][ T5970] usb 1-1: Manufacturer: syz [ 589.424213][ T5970] usb 1-1: SerialNumber: syz [ 590.983659][ T5970] usb 1-1: config 0 descriptor?? [ 591.311565][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 591.610031][T10263] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1031'. [ 592.370930][T10257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.601746][ T5970] appletouch 1-1:0.85: Failed to read mode from device. [ 592.601975][ T5970] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 594.189581][ T5970] usb 1-1: USB disconnect, device number 8 [ 596.536819][ T5970] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 597.158256][ T5805] Bluetooth: hci3: hardware error 0x07 [ 597.530701][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 597.536543][ T5970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.536592][ T5970] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.536631][ T5970] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 597.537224][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.544311][ T5970] usb 1-1: config 0 descriptor?? [ 597.550741][ T5970] hub 1-1:0.0: bad descriptor, ignoring hub [ 597.550774][ T5970] hub 1-1:0.0: probe with driver hub failed with error -5 [ 597.557568][ T5970] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 598.097629][ T5871] usb 1-1: USB disconnect, device number 9 [ 598.127237][ T809] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 598.297639][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 598.301849][ T809] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 598.301873][ T809] usb 5-1: config 0 has no interface number 0 [ 598.301918][ T809] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.301944][ T809] usb 5-1: config 0 interface 85 has no altsetting 0 [ 598.343827][ T809] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 598.343928][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.343948][ T809] usb 5-1: Product: syz [ 598.343962][ T809] usb 5-1: Manufacturer: syz [ 598.343975][ T809] usb 5-1: SerialNumber: syz [ 598.543777][ T809] usb 5-1: config 0 descriptor?? [ 598.904723][T10326] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1046'. [ 598.973230][ T809] appletouch 5-1:0.85: Geyser mode initialized. [ 599.009675][ T809] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input21 [ 599.021684][T10329] binder_alloc: 10328: binder_alloc_buf, no vma [ 599.176810][ T809] usb 5-1: USB disconnect, device number 14 [ 599.176843][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 599.257534][ T5805] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 599.620379][ T809] appletouch 5-1:0.85: input: appletouch disconnected [ 599.961616][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 600.807718][ T5871] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 600.957001][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 600.964771][ T5871] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 600.964798][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 600.964899][ T5871] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 600.964965][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.146275][ T5871] usb 1-1: config 0 descriptor?? [ 602.178658][T10348] delete_channel: no stack [ 602.572103][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 602.572222][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 602.596830][ T5871] usb 1-1: USB disconnect, device number 10 [ 604.831622][T10370] overlayfs: failed to resolve './file1': -2 [ 607.461535][T10374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.956984][ T5871] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 608.106953][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 608.109146][ T5871] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 608.109171][ T5871] usb 7-1: config 0 has no interface number 0 [ 608.109214][ T5871] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.109241][ T5871] usb 7-1: config 0 interface 85 has no altsetting 0 [ 608.112982][ T5871] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 608.113010][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.113030][ T5871] usb 7-1: Product: syz [ 608.113043][ T5871] usb 7-1: Manufacturer: syz [ 608.113057][ T5871] usb 7-1: SerialNumber: syz [ 608.191506][ T5871] usb 7-1: config 0 descriptor?? [ 609.607497][ T5871] appletouch 7-1:0.85: Geyser mode initialized. [ 612.786906][ T5871] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input22 [ 613.048451][ T36] usb 7-1: USB disconnect, device number 10 [ 613.048449][ C0] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 613.265698][ T36] appletouch 7-1:0.85: input: appletouch disconnected [ 613.391557][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1070'. [ 614.061484][T10424] overlayfs: failed to resolve './file1': -2 [ 615.530773][T10423] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 615.531057][T10423] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 615.531206][T10423] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 615.533476][T10423] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 615.534292][T10423] kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 615.534440][T10423] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 615.534583][T10423] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 615.534807][T10423] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 615.535038][T10423] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 615.535180][T10423] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 616.496837][ T5871] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 616.646988][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 616.709039][ T5871] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 616.709070][ T5871] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.709104][ T5871] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 616.709127][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.542679][ T5871] usb 5-1: config 0 descriptor?? [ 617.606849][T10441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.133901][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 619.134019][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 619.194911][ T5871] usb 5-1: USB disconnect, device number 15 [ 621.534812][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 621.686764][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 621.688882][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 621.688906][ T10] usb 5-1: config 0 has no interface number 0 [ 621.688949][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.688974][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 621.692547][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 621.692562][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.692572][ T10] usb 5-1: Product: syz [ 621.692579][ T10] usb 5-1: Manufacturer: syz [ 621.692586][ T10] usb 5-1: SerialNumber: syz [ 621.768832][ T10] usb 5-1: config 0 descriptor?? [ 623.043695][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 623.067592][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input23 [ 623.271492][ T10] usb 5-1: USB disconnect, device number 16 [ 623.434796][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 624.249943][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.250013][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.337105][T10465] delete_channel: no stack [ 624.908262][T10477] overlayfs: failed to resolve './file1': -2 [ 625.378686][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 627.397353][T10485] create_pit_timer: 26 callbacks suppressed [ 627.397372][T10485] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 627.397612][T10485] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 627.397757][T10485] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 627.405783][T10485] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 627.406093][T10485] kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 627.406224][T10485] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 627.406327][T10485] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 627.406494][T10485] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 627.414322][T10485] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 627.414612][T10485] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 628.156800][ T5970] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 628.416749][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 628.418804][ T5970] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 628.418819][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 628.418837][ T5970] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 628.418849][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.421770][ T5970] usb 3-1: config 0 descriptor?? [ 629.034521][ T5970] usbhid 3-1:0.0: can't add hid device: -71 [ 629.034624][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 629.042671][ T5970] usb 3-1: USB disconnect, device number 20 [ 629.495670][T10517] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 635.353579][T10548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1102'. [ 635.451726][T10551] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 637.308429][T10567] create_pit_timer: 50 callbacks suppressed [ 637.308507][T10567] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 637.308905][T10567] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 637.309061][T10567] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 637.311608][T10567] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 637.311849][T10567] kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 637.311994][T10567] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 637.312136][T10567] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 637.312417][T10567] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 637.312717][T10567] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 637.312862][T10567] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 637.314871][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 637.462884][T10565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.466989][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 637.469230][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.469261][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.469292][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 637.469312][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.476519][ T10] usb 1-1: config 0 descriptor?? [ 638.090003][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 638.090112][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 638.097606][ T10] usb 1-1: USB disconnect, device number 11 [ 640.559685][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 640.718088][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 640.720265][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.720313][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.720355][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 640.720377][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.732330][ T10] usb 1-1: config 0 descriptor?? [ 640.745748][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 640.745783][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 640.764791][T10598] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1116'. [ 640.771958][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 641.836926][ T9307] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 641.863531][T10604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.006785][ T9307] usb 6-1: Using ep0 maxpacket: 32 [ 642.012286][ T9307] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.012334][ T9307] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.012374][ T9307] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 642.012397][ T9307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.099329][ T9307] usb 6-1: config 0 descriptor?? [ 642.117768][ T9307] hub 6-1:0.0: bad descriptor, ignoring hub [ 642.117805][ T9307] hub 6-1:0.0: probe with driver hub failed with error -5 [ 642.121063][ T9307] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 642.358832][ T9307] usb 1-1: USB disconnect, device number 12 [ 642.616446][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1121'. [ 644.878331][ T5861] usb 6-1: USB disconnect, device number 4 [ 646.656016][T10644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.505040][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1135'. [ 649.296071][T10694] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1138'. [ 651.267592][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1140'. [ 651.328484][T10701] IPv6: sit1: Disabled Multicast RS [ 651.343664][T10701] sit1: entered allmulticast mode [ 653.808984][T10719] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 656.406258][T10730] overlayfs: failed to resolve './file1': -2 [ 659.956136][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'. [ 660.086825][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 660.876749][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 661.414262][T10742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1152'. [ 661.419784][T10742] IPv6: sit1: Disabled Multicast RS [ 661.420736][T10742] sit1: entered allmulticast mode [ 661.487541][ T10] usb 1-1: device descriptor read/all, error -71 [ 661.774444][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 664.014739][T10754] delete_channel: no stack [ 664.738482][T10770] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 666.127594][ T5861] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 666.136349][T10770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.256009][T10773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.256290][T10773] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 666.277238][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 666.279067][ T5861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.279115][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.279155][ T5861] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 666.279173][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.280532][T10773] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 666.352948][ T5861] usb 1-1: config 0 descriptor?? [ 666.378394][ T5861] hub 1-1:0.0: bad descriptor, ignoring hub [ 666.378430][ T5861] hub 1-1:0.0: probe with driver hub failed with error -5 [ 666.412545][ T5861] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 666.446852][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 666.596832][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 666.598987][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.599038][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.599078][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 666.599101][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.621723][ T10] usb 6-1: config 0 descriptor?? [ 666.687459][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 666.687498][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 666.707644][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 667.130240][ T5871] usb 1-1: USB disconnect, device number 15 [ 667.187115][ T5861] usb 6-1: USB disconnect, device number 5 [ 667.942119][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1166'. [ 671.457502][T10820] netlink: 'syz.6.1172': attribute type 1 has an invalid length. [ 671.587980][T10820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 672.168541][T10822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 672.169521][T10822] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 672.175352][T10822] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 673.625466][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'. [ 675.009500][ T5871] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 675.156736][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 675.180573][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 675.182335][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.182383][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.182424][ T5871] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 675.182444][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.185173][ T5871] usb 6-1: config 0 descriptor?? [ 675.275475][ T5871] hub 6-1:0.0: bad descriptor, ignoring hub [ 675.275512][ T5871] hub 6-1:0.0: probe with driver hub failed with error -5 [ 675.307910][ T5871] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 675.316981][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 675.319485][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 675.319509][ T10] usb 5-1: config 0 has no interface number 0 [ 675.319550][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 675.319578][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 675.379646][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 675.379665][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.379675][ T10] usb 5-1: Product: syz [ 675.379682][ T10] usb 5-1: Manufacturer: syz [ 675.379690][ T10] usb 5-1: SerialNumber: syz [ 675.469349][ T10] usb 5-1: config 0 descriptor?? [ 675.812487][T10858] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 675.935619][ T5871] usb 6-1: USB disconnect, device number 6 [ 676.111876][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 676.148209][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input24 [ 676.947254][ T10] usb 5-1: USB disconnect, device number 17 [ 676.947349][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 677.417916][T10866] 9pnet_virtio: no channels available for device syz [ 678.242975][T10866] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 678.243012][T10866] overlayfs: overlapping lowerdir path [ 679.811216][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 679.905849][T10876] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 680.581646][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1189'. [ 680.915358][T10876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 680.920693][T10883] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1190'. [ 680.923795][T10882] IPv6: sit1: Disabled Multicast RS [ 680.924909][T10882] sit1: entered allmulticast mode [ 681.466419][T10881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.682413][T10881] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 683.557141][T10881] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 683.847901][T10902] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 684.827034][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 685.356784][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 685.361060][ T5863] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.361112][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.361155][ T5863] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 685.361177][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.374104][ T5863] usb 6-1: config 0 descriptor?? [ 685.379106][ T5863] hub 6-1:0.0: bad descriptor, ignoring hub [ 685.379139][ T5863] hub 6-1:0.0: probe with driver hub failed with error -5 [ 685.382142][ T5863] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 685.549485][ T9885] Bluetooth: hci0: hardware error 0x07 [ 686.158423][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.158506][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.395465][T10907] delete_channel: no stack [ 686.818579][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 687.077592][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 687.137054][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'. [ 687.210207][T10931] IPv6: sit1: Disabled Multicast RS [ 687.221760][T10931] sit1: entered allmulticast mode [ 687.404465][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 687.404493][ T10] usb 5-1: config 0 has no interface number 0 [ 687.404537][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.404565][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 687.450127][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 687.450157][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.450177][ T10] usb 5-1: Product: syz [ 687.450191][ T10] usb 5-1: Manufacturer: syz [ 687.450205][ T10] usb 5-1: SerialNumber: syz [ 687.489261][ T10] usb 5-1: config 0 descriptor?? [ 688.319971][ T5861] usb 6-1: USB disconnect, device number 7 [ 688.546436][ T9885] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 688.608224][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 688.807792][T10926] delete_channel: no stack [ 690.607554][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input25 [ 690.685013][ T10] usb 5-1: USB disconnect, device number 18 [ 690.685128][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 691.071114][T10948] netlink: 'syz.5.1206': attribute type 1 has an invalid length. [ 695.902051][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 696.107276][T10958] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 697.649753][T10958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 697.967023][T10960] 8021q: adding VLAN 0 to HW filter on device bond3 [ 697.967785][T10960] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 697.968994][T10960] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 698.068103][T10982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 698.762130][T10984] fuse: Bad value for 'fd' [ 700.678941][T10997] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 700.681396][T10997] overlayfs: overlapping lowerdir path [ 704.011263][T11011] netlink: 'syz.6.1220': attribute type 1 has an invalid length. [ 706.426134][T11038] fuse: Bad value for 'fd' [ 706.980502][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1228'. [ 708.486943][T11053] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 708.487443][T11053] overlayfs: overlapping lowerdir path [ 710.417557][T11067] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 711.211911][T11068] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1234'. [ 711.669819][T11070] delete_channel: no stack [ 713.702870][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1239'. [ 713.902989][T11092] IPv6: sit1: Disabled Multicast RS [ 713.904133][T11092] sit1: entered allmulticast mode [ 715.605360][T11108] netlink: 'syz.5.1246': attribute type 1 has an invalid length. [ 716.871322][T11115] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1248'. [ 718.106860][T11109] delete_channel: no stack [ 718.316483][T11128] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 719.519091][T11134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 719.676756][ T5970] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 719.826709][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 719.828761][ T5970] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 719.828790][ T5970] usb 6-1: config 0 interface 0 has no altsetting 0 [ 719.828822][ T5970] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 719.828838][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.831905][ T5970] usb 6-1: config 0 descriptor?? [ 720.621661][ T5970] usbhid 6-1:0.0: can't add hid device: -71 [ 720.621738][ T5970] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 720.625016][ T5970] usb 6-1: USB disconnect, device number 8 [ 721.038233][T11146] delete_channel: no stack [ 721.294759][T11159] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 724.704620][T11176] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 724.768478][T11172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.898670][ T809] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 729.236702][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 729.238607][ T809] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 729.238631][ T809] usb 1-1: config 0 has no interface number 0 [ 729.238681][ T809] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 729.238708][ T809] usb 1-1: config 0 interface 85 has no altsetting 0 [ 729.241534][ T809] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 729.241686][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.241784][ T809] usb 1-1: Product: syz [ 729.241832][ T809] usb 1-1: Manufacturer: syz [ 729.241846][ T809] usb 1-1: SerialNumber: syz [ 729.342528][ T809] usb 1-1: config 0 descriptor?? [ 731.162141][ T809] appletouch 1-1:0.85: Geyser mode initialized. [ 731.165800][ T809] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input26 [ 731.390108][ T5970] usb 1-1: USB disconnect, device number 16 [ 731.390214][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 732.117055][ T5970] appletouch 1-1:0.85: input: appletouch disconnected [ 740.610079][T11264] delete_channel: no stack [ 740.943404][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1288'. [ 743.886692][ T5861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 744.046676][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 744.049314][ T5861] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 744.049331][ T5861] usb 3-1: config 0 has no interface number 0 [ 744.049357][ T5861] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.049372][ T5861] usb 3-1: config 0 interface 85 has no altsetting 0 [ 744.051224][ T5861] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 744.051240][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.051250][ T5861] usb 3-1: Product: syz [ 744.051258][ T5861] usb 3-1: Manufacturer: syz [ 744.051269][ T5861] usb 3-1: SerialNumber: syz [ 744.055526][ T5861] usb 3-1: config 0 descriptor?? [ 744.670855][ T5861] appletouch 3-1:0.85: Geyser mode initialized. [ 744.674152][ T5861] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input27 [ 745.713386][ T5861] usb 3-1: USB disconnect, device number 21 [ 746.007263][ T5861] appletouch 3-1:0.85: input: appletouch disconnected [ 747.013265][T11320] delete_channel: no stack [ 747.110790][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.110830][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.806786][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'. [ 753.618768][T11355] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 754.579085][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1312'. [ 755.943823][T11368] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 759.652747][ T5970] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 761.307618][ T5970] usb 6-1: device descriptor read/64, error -71 [ 761.576688][ T5970] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 761.706742][ T5970] usb 6-1: device descriptor read/64, error -71 [ 762.544330][ T5970] usb usb6-port1: attempt power cycle [ 763.184277][T11415] 9p: Bad value for 'rfdno' [ 767.990946][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 769.439942][T11470] 9p: Bad value for 'rfdno' [ 769.457375][T11471] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 771.266760][ T5861] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 771.420877][ T5861] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 771.420904][ T5861] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 771.423674][ T5861] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 771.423700][ T5861] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 771.423719][ T5861] usb 1-1: Manufacturer: syz [ 771.423727][ T5861] usb 1-1: SerialNumber: syz [ 771.975169][ T5861] usb 1-1: USB disconnect, device number 17 [ 772.316261][T11496] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1345'. [ 772.463526][ T5861] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 772.699738][ T5861] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 772.699765][ T5861] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 772.701427][ T5861] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 772.701454][ T5861] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 772.701471][ T5861] usb 1-1: Manufacturer: syz [ 772.701479][ T5861] usb 1-1: SerialNumber: syz [ 773.187961][ T5861] usb 1-1: USB disconnect, device number 18 [ 773.774455][T11525] 9p: Bad value for 'rfdno' [ 774.922617][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1355'. [ 777.016899][ T5970] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 777.218675][ T5970] usb 7-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 777.218740][ T5970] usb 7-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 7[ 777.236155][ T5970] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 777.236214][ T5970] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 777.236264][ T5970] usb 7-1: Manufacturer: syz [ 777.236279][ T5970] usb 7-1: SerialNumber: syz [ 777.557770][ T1498] ------------[ cut here ]------------ [ 777.557783][ T1498] in_task() && kcov_mode_enabled(mode) [ 777.557799][ T1498] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:15/1498 [ 777.558012][ T1498] Modules linked in: [ 777.558049][ T1498] CPU: 0 UID: 0 PID: 1498 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 777.558074][ T1498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.558087][ T1498] Workqueue: events_unbound cfg80211_wiphy_work [ 777.558215][ T1498] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 777.558245][ T1498] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 777.558264][ T1498] RSP: 0000:ffffc90005eef9d8 EFLAGS: 00010202 [ 777.558281][ T1498] RAX: 0000000000000002 RBX: ffff888029a08000 RCX: 0000000000000000 [ 777.558295][ T1498] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 777.558310][ T1498] RBP: ffff8880328c48c0 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 777.558326][ T1498] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff88805f72dd08 [ 777.558342][ T1498] R13: ffff88805f7407c0 R14: 0000000000000000 R15: ffff88805f72dd20 [ 777.558357][ T1498] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 777.558375][ T1498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.558388][ T1498] CR2: 0000200000062030 CR3: 000000007972e000 CR4: 00000000003526f0 [ 777.558411][ T1498] Call Trace: [ 777.558419][ T1498] [ 777.558433][ T1498] ieee80211_iface_work+0x211/0x1340 [ 777.558516][ T1498] cfg80211_wiphy_work+0x2ab/0x4a0 [ 777.558541][ T1498] ? process_scheduled_works+0xa8d/0x18c0 [ 777.558593][ T1498] process_scheduled_works+0xb6e/0x18c0 [ 777.558657][ T1498] ? __pfx_process_scheduled_works+0x10/0x10 [ 777.558693][ T1498] ? assign_work+0x3d5/0x5e0 [ 777.558727][ T1498] worker_thread+0xa53/0xfc0 [ 777.558787][ T1498] kthread+0x388/0x470 [ 777.558810][ T1498] ? __pfx_worker_thread+0x10/0x10 [ 777.558837][ T1498] ? __pfx_kthread+0x10/0x10 [ 777.558860][ T1498] ret_from_fork+0x51e/0xb90 [ 777.558913][ T1498] ? __pfx_ret_from_fork+0x10/0x10 [ 777.558939][ T1498] ? __switch_to+0xc7d/0x1450 [ 777.558989][ T1498] ? __pfx_kthread+0x10/0x10 [ 777.559012][ T1498] ret_from_fork_asm+0x1a/0x30 [ 777.559063][ T1498] [ 777.559081][ T1498] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 777.559096][ T1498] CPU: 0 UID: 0 PID: 1498 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 777.559120][ T1498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.559133][ T1498] Workqueue: events_unbound cfg80211_wiphy_work [ 777.559156][ T1498] Call Trace: [ 777.559165][ T1498] [ 777.559173][ T1498] vpanic+0x56c/0xa60 [ 777.559215][ T1498] ? __pfx__printk+0x10/0x10 [ 777.559238][ T1498] ? __pfx_vpanic+0x10/0x10 [ 777.559265][ T1498] ? is_bpf_text_address+0x292/0x2b0 [ 777.559304][ T1498] ? is_bpf_text_address+0x26/0x2b0 [ 777.559341][ T1498] panic+0xc5/0xd0 [ 777.559370][ T1498] ? __pfx_panic+0x10/0x10 [ 777.559410][ T1498] ? ret_from_fork_asm+0x1a/0x30 [ 777.559436][ T1498] __warn+0x315/0x4f0 [ 777.559465][ T1498] ? kcov_remote_start+0x5d8/0x710 [ 777.559491][ T1498] ? kcov_remote_start+0x5d8/0x710 [ 777.559517][ T1498] __report_bug+0x29a/0x540 [ 777.559638][ T1498] ? kcov_remote_start+0x5d8/0x710 [ 777.559664][ T1498] ? __pfx___report_bug+0x10/0x10 [ 777.559692][ T1498] ? irqentry_exit+0x59e/0x620 [ 777.559776][ T1498] ? trace_irq_disable+0x3b/0x150 [ 777.559815][ T1498] ? kcov_remote_start+0x5da/0x710 [ 777.559838][ T1498] ? kcov_remote_start+0x5d8/0x710 [ 777.559867][ T1498] ? kcov_remote_start+0x5d8/0x710 [ 777.559897][ T1498] report_bug+0x16a/0x220 [ 777.559926][ T1498] ? kcov_remote_start+0x5d8/0x710 [ 777.559948][ T1498] ? kcov_remote_start+0x5da/0x710 [ 777.559971][ T1498] handle_bug+0x9c/0x200 [ 777.559994][ T1498] exc_invalid_op+0x1a/0x50 [ 777.560016][ T1498] asm_exc_invalid_op+0x1a/0x20 [ 777.560056][ T1498] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 777.560081][ T1498] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 777.560100][ T1498] RSP: 0000:ffffc90005eef9d8 EFLAGS: 00010202 [ 777.560118][ T1498] RAX: 0000000000000002 RBX: ffff888029a08000 RCX: 0000000000000000 [ 777.560132][ T1498] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 777.560147][ T1498] RBP: ffff8880328c48c0 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 777.560163][ T1498] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff88805f72dd08 [ 777.560179][ T1498] R13: ffff88805f7407c0 R14: 0000000000000000 R15: ffff88805f72dd20 [ 777.560202][ T1498] ? rt_spin_lock+0x1e0/0x400 [ 777.560271][ T1498] ? kcov_remote_start+0xe0/0x710 [ 777.560298][ T1498] ieee80211_iface_work+0x211/0x1340 [ 777.560334][ T1498] cfg80211_wiphy_work+0x2ab/0x4a0 [ 777.560359][ T1498] ? process_scheduled_works+0xa8d/0x18c0 [ 777.560389][ T1498] process_scheduled_works+0xb6e/0x18c0 [ 777.560452][ T1498] ? __pfx_process_scheduled_works+0x10/0x10 [ 777.560489][ T1498] ? assign_work+0x3d5/0x5e0 [ 777.560523][ T1498] worker_thread+0xa53/0xfc0 [ 777.560582][ T1498] kthread+0x388/0x470 [ 777.560604][ T1498] ? __pfx_worker_thread+0x10/0x10 [ 777.560631][ T1498] ? __pfx_kthread+0x10/0x10 [ 777.560655][ T1498] ret_from_fork+0x51e/0xb90 [ 777.560687][ T1498] ? __pfx_ret_from_fork+0x10/0x10 [ 777.560714][ T1498] ? __switch_to+0xc7d/0x1450 [ 777.560745][ T1498] ? __pfx_kthread+0x10/0x10 [ 777.560769][ T1498] ret_from_fork_asm+0x1a/0x30 [ 777.560808][ T1498] [ 777.561075][ T1498] Kernel Offset: disabled