last executing test programs: 10m18.052834006s ago: executing program 32 (id=363): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{0x0, 0x2a}, {&(0x7f0000000240)=""/128, 0x80}], 0x2) 8m58.148037987s ago: executing program 5 (id=1161): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) 8m57.700261115s ago: executing program 5 (id=1166): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 8m57.295982209s ago: executing program 5 (id=1173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m56.137303954s ago: executing program 5 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 8m55.56787672s ago: executing program 5 (id=1195): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8m53.939930128s ago: executing program 5 (id=1211): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8m53.358912818s ago: executing program 33 (id=1211): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m37.732122735s ago: executing program 6 (id=1737): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7m35.339922176s ago: executing program 6 (id=1754): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) writev(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) 7m33.031169956s ago: executing program 6 (id=1769): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 7m32.816705445s ago: executing program 6 (id=1772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000000)='source') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 7m32.447771495s ago: executing program 6 (id=1775): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) open(&(0x7f0000000280)='.\x00', 0x20080, 0x0) 7m30.791695078s ago: executing program 6 (id=1791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 7m30.04872966s ago: executing program 34 (id=1791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 7m7.433272444s ago: executing program 4 (id=1918): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xdeb6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7m7.080853783s ago: executing program 4 (id=1921): unshare(0x20000400) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000a00)=[{0x0, 0x47}, {&(0x7f0000000080)="9d", 0x1}], 0x2, 0x9) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$RTC_WIE_OFF(r2, 0x7010) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m6.851287792s ago: executing program 4 (id=1923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x19}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/229, 0xe5}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 7m6.440321227s ago: executing program 4 (id=1925): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x40800, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xee8c0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0xc0, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) 7m6.031623314s ago: executing program 4 (id=1930): ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2) 6m59.359516272s ago: executing program 4 (id=1970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x1}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x40}}, 0x0) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 6m58.83901487s ago: executing program 35 (id=1970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x1}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x40}}, 0x0) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4m2.039631218s ago: executing program 7 (id=2449): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0xa, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0x7}, {0x41000, 0x54000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x100000, 0x2d}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000000, 0x3, 0xef6, 0xff]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000040)={0xc000, 0x4, 0x5, 0x7, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x800}, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) 4m0.171682592s ago: executing program 7 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x6, @private0, 0x80000001}, @in={0x2, 0x4e20, @multicast2}], 0xff95) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8040) clock_gettime(0xa, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x89101) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 3m57.782351538s ago: executing program 7 (id=2461): openat(0xffffffffffffff9c, 0x0, 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) shutdown(0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = timerfd_create(0x0, 0x80000) read(r4, &(0x7f0000000080)=""/149, 0x95) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000140)=0x8004) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000600)=ANY=[]) 3m56.237220092s ago: executing program 7 (id=2463): connect(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$security_ima(&(0x7f0000000480)='./file7\x00', 0x0, 0x0, 0x0, 0x1) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x400, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x7, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x1000, 0x80000001, 0xffff0000, 0x3f92, 0x9000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x8, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 3m54.327856342s ago: executing program 1 (id=2470): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b) 3m51.903719649s ago: executing program 1 (id=2474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) request_key(&(0x7f0000000280)='ceph\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='devtmpfs\x00', 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 3m49.339925284s ago: executing program 1 (id=2477): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r5], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) socket$kcm(0x29, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) sendmmsg$sock(r0, &(0x7f00000002c0), 0x0, 0x0) shutdown(r0, 0x1) 3m48.25982993s ago: executing program 7 (id=2480): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) fallocate(0xffffffffffffffff, 0x71, 0x80000001, 0xcfc9) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) 3m45.628118953s ago: executing program 7 (id=2483): syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f028, 0x1}) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0xba6014ce6fcc36e9, 0x0, 0x4e20}, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x800000, 0x200, &(0x7f00003ae000/0x800000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000000c0)=""/153) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r6 = dup(r5) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) 3m44.74331999s ago: executing program 1 (id=2488): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x119d, &(0x7f00000007c0)={0x0, 0xb649, 0x0, 0x40002, 0x23f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000100)) r3 = socket(0x2b, 0x80801, 0x1) statx(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0) geteuid() statx(0xffffffffffffff9c, &(0x7f00000098c0)='./file0\x00', 0x100, 0x40, &(0x7f0000009900)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) recvfrom$inet6(r3, 0x0, 0x0, 0x21, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ptrace$cont(0x20, 0xffffffffffffffff, 0x1000, 0x8) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) 3m41.066117616s ago: executing program 1 (id=2492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x4008030) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x2f, 0x2034}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r6, 0x0, 0x18) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3bb, 0xe4, 0x0, 0x0, 0x2a4, 0x2a4, 0x2a4, 0x4, 0x0, {[{{@uncond, 0xbc, 0xc6}, @unspec=@MARK={0x0, 'MARK\x00', 0x2, {0xe0, 0x9a}}}, {{@arp={@multicast2, @private=0xa010100, 0xffffff00, 0xffffffff, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0x0, 0xff]}}, 0x2, 0x4, 0xff, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x8001}}}], {{'\x00', 0xbc, 0xfffffffffffffe06}, {0x24}}}}, 0xffbb) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000040) 3m40.341318833s ago: executing program 1 (id=2495): memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x4000000000009) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x4008000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 3m29.225055124s ago: executing program 36 (id=2483): syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f028, 0x1}) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0xba6014ce6fcc36e9, 0x0, 0x4e20}, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x800000, 0x200, &(0x7f00003ae000/0x800000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000000c0)=""/153) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r6 = dup(r5) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) 3m22.596467331s ago: executing program 37 (id=2495): memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x4000000000009) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x4008000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 9.390142624s ago: executing program 3 (id=3596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 8.584943986s ago: executing program 3 (id=3606): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0) 7.925052387s ago: executing program 3 (id=3615): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x30, 0x5, "d6c151dd75"}, 0x0, 0x0, 0x0, 0x0}) 7.867545723s ago: executing program 9 (id=3616): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b90, &(0x7f0000000600)="2800000000000000efbeadde0300000005") 7.317535293s ago: executing program 8 (id=3621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read \\Xtc/passwd exec argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 6.687182168s ago: executing program 8 (id=3625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000700)=0xdfffffff, 0x4) 6.57770827s ago: executing program 0 (id=3626): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 6.552293595s ago: executing program 9 (id=3627): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) 6.317618065s ago: executing program 8 (id=3629): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x450402, 0x0) 6.178581757s ago: executing program 9 (id=3630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x20008004) 5.98721544s ago: executing program 8 (id=3632): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x28}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 5.834420405s ago: executing program 0 (id=3634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioprio_set$pid(0x3, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7000, 0x0, 0x1e) 5.796448299s ago: executing program 9 (id=3635): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 5.632887355s ago: executing program 8 (id=3636): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', 'dev/ttyUSB0', [], 0xa, "313b81dae7450c24c1ec0f9350305e8cd80d780266b64f5500fa4aeb74bbefc6efbef2ea7f6921e52a2533d021b3ea6307a8484cb0d5b0b318b645114051934baad036b7fcea35fd280022fb8ecf9927b5c6bc388cf743bf7155123969b859784f0aeb3a6c6a2e591950f585f26ae6f5155ff961decdc8460a4a215d1af3dd353cd76c1c510b76a4e6d2c0a323e5217ac3c29447838022569d53585d508b31f6d854c781217b13170e7d09154eaf1d8f3681c6ab5d81a2679f8fe6c2a80c54"}, 0xce) 5.523464038s ago: executing program 0 (id=3638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="0100") ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.432425338s ago: executing program 9 (id=3639): sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0x2, 0x90c, 0x0, 0x0) 3.71467743s ago: executing program 9 (id=3641): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) 3.400720807s ago: executing program 2 (id=3642): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000480)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0xffffffff, 0x6}]}) 3.232846397s ago: executing program 0 (id=3643): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x101c80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) close(r0) 3.12519055s ago: executing program 2 (id=3644): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.124118879s ago: executing program 3 (id=3645): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x7, 0x9, 0x1, 0x9, 0x5, 0x1, 0x1, 0x0, 0x6, 0xbe, 0x8b, 0x4, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, &(0x7f0000000340)=""/61, 0x3d}, 0xd}], 0x1, 0x10140, 0x0) 2.57890748s ago: executing program 2 (id=3646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.13341671s ago: executing program 3 (id=3647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x1af940, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1.099053146s ago: executing program 0 (id=3648): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 885.737067ms ago: executing program 2 (id=3649): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000600)='r:s/p ./file0:0\f_', 0x11) 402.260752ms ago: executing program 2 (id=3650): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000440), &(0x7f0000000480)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r2, 0x0, 0xf, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 354.6453ms ago: executing program 8 (id=3651): syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv4=@dccp={{0x5, 0x4, 0x3, 0x1, 0x24, 0x64, 0x0, 0x7, 0x21, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}}, {{0x4e20, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1, "b5f269", 0x55, "d1beb0"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01010000000000000000010000002c000000030a01020000000000000000010000000900030073"], 0xb4}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), 0x0}, 0x20) 175.263173ms ago: executing program 0 (id=3652): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) shutdown(r0, 0x1) 173.395402ms ago: executing program 3 (id=3653): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty, 0x4}, 0x1c) 0s ago: executing program 2 (id=3654): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f4, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b8, 0x1, [@m_tunnel_key={0x1b4, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}]}, {0x13e, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 33699][ T5696] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 270.491392][ T2381] pvrusb2: Invalid read control endpoint [ 270.495724][ T5696] usb 2-1: USB disconnect, device number 13 [ 270.501489][ T5698] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 270.708076][ T2381] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 270.708096][ T2381] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 270.720009][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 270.732950][ T5698] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 270.773960][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.773986][ T5698] usb 5-1: Product: syz [ 270.774000][ T5698] usb 5-1: Manufacturer: syz [ 270.774014][ T5698] usb 5-1: SerialNumber: syz [ 270.820919][ T5698] usb 5-1: config 0 descriptor?? [ 270.853498][ T5698] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 272.781601][ T5698] gspca_sonixj: reg_r err -71 [ 272.828391][ T5698] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 272.870647][ T5698] usb 5-1: USB disconnect, device number 12 [ 273.958683][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1495'. [ 275.518530][ T5697] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 275.681605][ T5697] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.683147][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.725320][ T5697] usb 4-1: config 0 descriptor?? [ 275.797641][ T5697] cp210x 4-1:0.0: cp210x converter detected [ 276.209058][ T5697] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 276.436513][ T9678] loop4: detected capacity change from 0 to 7 [ 276.499231][ T9678] loop4: [ 276.499255][ T9678] loop4: partition table partially beyond EOD, truncated [ 276.982379][ T5697] usb 4-1: cp210x converter now attached to ttyUSB0 [ 277.025434][ T5697] usb 4-1: USB disconnect, device number 10 [ 277.240539][ T5697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 277.405764][ T9667] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.628168][ T5697] cp210x 4-1:0.0: device disconnected [ 278.713044][ T36] audit: type=1804 audit(1787230442.930:200): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1530" name="/newroot/12/file0" dev="tmpfs" ino=81 res=1 errno=0 [ 280.966948][ T36] audit: type=1800 audit(1787230445.250:201): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1549" name="file0" dev="overlay" ino=1155 res=0 errno=0 [ 281.481078][ T9798] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1553'. [ 282.331105][ T5697] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 282.523081][ T5697] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 282.524745][ T5697] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.524774][ T5697] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 282.524816][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.727190][ T5697] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 282.845995][ T5697] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 283.108638][ T9778] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 283.109040][ T9778] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 283.109375][ T9778] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 283.221793][ T9778] SPCP8x5 ttyUSB0: Set UART format 0x107 failed (error = -32) [ 283.380446][ T31] usb 4-1: USB disconnect, device number 11 [ 283.680462][ T31] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 283.683891][ T31] spcp8x5 4-1:1.0: device disconnected [ 283.967187][ T9841] bond1: (slave vlan2): making interface the new active one [ 284.021037][ T9841] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 284.225737][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 285.646813][ T9887] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1587'. [ 285.793246][ T9892] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1587'. [ 285.978739][ T5604] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 286.128351][ T5604] usb 7-1: Using ep0 maxpacket: 32 [ 286.129523][ T5604] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 286.138051][ T5604] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.138073][ T5604] usb 7-1: config 0 has no interfaces? [ 286.138099][ T5604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.214494][ T5604] usb 7-1: config 0 descriptor?? [ 286.451087][ T9891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.451751][ T9891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.516099][ T31] usb 7-1: USB disconnect, device number 2 [ 287.921237][ T9953] lo speed is unknown, defaulting to 1000 [ 287.921342][ T9953] lo speed is unknown, defaulting to 1000 [ 287.925496][ T9953] lo speed is unknown, defaulting to 1000 [ 287.932082][ T9953] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 287.932115][ T9953] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 287.932154][ T9953] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 287.937436][ T9953] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 287.951832][ T9953] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 288.014770][ T9953] lo speed is unknown, defaulting to 1000 [ 288.022688][ T9953] lo speed is unknown, defaulting to 1000 [ 288.028362][ T9953] lo speed is unknown, defaulting to 1000 [ 288.034364][ T9953] lo speed is unknown, defaulting to 1000 [ 288.053078][ T9953] lo speed is unknown, defaulting to 1000 [ 288.063120][ T9953] lo speed is unknown, defaulting to 1000 [ 288.699231][ T9966] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1620'. [ 288.813140][ T9969] syzkaller1: entered promiscuous mode [ 288.813167][ T9969] syzkaller1: entered allmulticast mode [ 289.999999][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 290.240618][ T43] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.243919][ T43] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.243944][ T43] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.243961][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.244485][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.244513][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.248095][ T43] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.248119][ T43] usb 4-1: Product: syz [ 290.248134][ T43] usb 4-1: Manufacturer: syz [ 290.504883][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 290.504905][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 290.582256][ T43] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 290.582279][ T43] cdc_wdm 4-1:1.0: Unknown control protocol [ 291.066729][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 291.521187][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'. [ 291.941388][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 293.011045][ T5697] usb 4-1: USB disconnect, device number 12 [ 307.238613][T10120] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 307.573113][T10135] io-wq is not configured for unbound workers [ 308.108633][T10150] binder: 10149:10150 ioctl c0306201 200000000080 returned -14 [ 308.165188][T10150] binder: 10149:10150 ioctl c0306201 2000000003c0 returned -14 [ 308.421845][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1693'. [ 308.421870][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1693'. [ 308.920084][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 310.139725][T10206] overlayfs: overlapping lowerdir path [ 312.649399][ T5604] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 312.808525][ T5604] usb 4-1: Using ep0 maxpacket: 32 [ 312.809537][ T5604] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 312.810843][ T5604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.810859][ T5604] usb 4-1: config 0 has no interfaces? [ 312.810879][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.867237][ T5604] usb 4-1: config 0 descriptor?? [ 313.122265][T10247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.175751][T10247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.324082][ T5697] usb 4-1: USB disconnect, device number 13 [ 314.172842][T10272] binder: 10271:10272 ioctl c0306201 200000000680 returned -14 [ 317.323733][ T31] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 317.730283][ T31] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 317.733054][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.738094][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.738116][ T31] usb 7-1: Product: syz [ 317.738130][ T31] usb 7-1: Manufacturer: syz [ 317.738144][ T31] usb 7-1: SerialNumber: syz [ 317.768385][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.768457][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.820348][ T31] usb 7-1: config 0 descriptor?? [ 318.033492][T10339] 1n_policy: renamed from lo (while UP) [ 318.079859][ T10] usb 7-1: USB disconnect, device number 3 [ 319.065176][T10365] cgroup: Unknown subsys name 'sourceg' [ 321.774806][ T9328] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.365985][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.447391][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.468521][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.480579][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.515557][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.975811][ T9328] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.721225][ T9328] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.556021][ T9328] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.268924][ T5596] Bluetooth: hci2: command tx timeout [ 325.678413][ T5697] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 325.854938][ T5697] usb 5-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 325.858425][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.858488][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 325.858512][ T5697] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 325.858555][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.960257][ T5697] usb 5-1: config 0 descriptor?? [ 326.034544][ T5697] appledisplay 5-1:0.0: Could not find int-in endpoint [ 326.039809][ T5697] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 327.325994][ T5604] usb 5-1: USB disconnect, device number 13 [ 327.331255][ T5596] Bluetooth: hci2: command tx timeout [ 327.641759][T10419] lo speed is unknown, defaulting to 1000 [ 329.398544][ T5596] Bluetooth: hci2: command tx timeout [ 329.508682][ T9328] bridge_slave_1: left allmulticast mode [ 329.508720][ T9328] bridge_slave_1: left promiscuous mode [ 329.508999][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.702858][ T9328] bridge_slave_0: left allmulticast mode [ 329.702892][ T9328] bridge_slave_0: left promiscuous mode [ 329.703140][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.484638][ T5596] Bluetooth: hci2: command tx timeout [ 332.259691][ T9328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.359336][ T9328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.405234][ T9328] bond0 (unregistering): Released all slaves [ 333.520249][ T2381] pvrusb2: request_firmware fatal error with code=-110 [ 333.520274][ T2381] pvrusb2: Failure uploading firmware1 [ 333.520283][ T2381] pvrusb2: Device initialization was not successful. [ 333.520291][ T2381] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 333.520302][ T2381] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 333.520710][ T5696] pvrusb2: Device being rendered inoperable [ 333.656817][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 337.992857][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 338.011128][T10419] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.011267][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.011514][T10419] bridge_slave_0: entered allmulticast mode [ 338.151109][T10419] bridge_slave_0: entered promiscuous mode [ 338.194113][T10419] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.194238][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.194481][T10419] bridge_slave_1: entered allmulticast mode [ 338.260545][T10419] bridge_slave_1: entered promiscuous mode [ 338.542212][T10682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.263325][T10419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.281574][T10419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.470798][T10419] team0: Port device team_slave_0 added [ 342.449501][T10419] team0: Port device team_slave_1 added [ 343.897767][T10419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.897786][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.897814][T10419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.901157][T10419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.901173][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.901198][T10419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.382791][ T9328] hsr_slave_0: left promiscuous mode [ 344.419322][ T9328] hsr_slave_1: left promiscuous mode [ 344.421577][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.421604][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.941485][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.941514][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.076026][ T9328] veth1_macvtap: left promiscuous mode [ 345.076137][ T9328] veth0_macvtap: left promiscuous mode [ 345.076419][ T9328] veth1_vlan: left promiscuous mode [ 345.076609][ T9328] veth0_vlan: left promiscuous mode [ 345.210735][T10793] binder: 10792:10793 unknown command 0 [ 345.210756][T10793] binder: 10792:10793 ioctl c0306201 2000000001c0 returned -22 [ 347.570905][ T9328] team0 (unregistering): Port device team_slave_1 removed [ 347.719417][ T9328] team0 (unregistering): Port device team_slave_0 removed [ 348.540486][ T5243] 8021q: adding VLAN 0 to HW filter on device eth7 [ 348.996498][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'. [ 349.069722][T10419] hsr_slave_0: entered promiscuous mode [ 349.073007][T10419] hsr_slave_1: entered promiscuous mode [ 349.076667][T10419] debugfs: 'hsr0' already exists in 'hsr' [ 349.076693][T10419] Cannot create hsr debugfs directory [ 349.487633][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 352.163830][T10901] genirq: Flags mismatch irq 7. 00202000 (das16m1) vs. 00202080 (ttyS3) [ 352.705859][ T5243] 8021q: adding VLAN 0 to HW filter on device eth8 [ 353.167456][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.219309][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.223573][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.388057][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.396853][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.614416][T10419] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 353.978679][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'. [ 353.978844][T10419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.851139][T10419] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 354.953480][T10419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.034670][T10419] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 355.143172][T10419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.147191][T10419] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 355.316664][T10419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.558443][ T5596] Bluetooth: hci0: command tx timeout [ 355.961259][T10930] lo speed is unknown, defaulting to 1000 [ 356.275486][T10986] syzkaller0: entered promiscuous mode [ 356.275512][T10986] syzkaller0: entered allmulticast mode [ 356.351393][T10419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.638277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.648573][ T5596] Bluetooth: hci0: command tx timeout [ 359.718345][ T5596] Bluetooth: hci0: command tx timeout [ 359.830952][T10419] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.861677][T11018] netlink: 'syz.1.2003': attribute type 4 has an invalid length. [ 359.939335][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.939759][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.030970][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.031163][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.820370][ T5596] Bluetooth: hci0: command tx timeout [ 362.596480][T10930] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.596670][T10930] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.596916][T10930] bridge_slave_0: entered allmulticast mode [ 362.624637][T10930] bridge_slave_0: entered promiscuous mode [ 362.691703][T10930] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.691830][T10930] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.692092][T10930] bridge_slave_1: entered allmulticast mode [ 362.701165][T10930] bridge_slave_1: entered promiscuous mode [ 362.891724][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.911855][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.854666][T10930] team0: Port device team_slave_0 added [ 363.865326][T10930] team0: Port device team_slave_1 added [ 363.989936][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.989955][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.989986][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.093933][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.093968][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.094001][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.544106][T10930] hsr_slave_0: entered promiscuous mode [ 365.546532][T10930] hsr_slave_1: entered promiscuous mode [ 365.551310][T10930] debugfs: 'hsr0' already exists in 'hsr' [ 365.551338][T10930] Cannot create hsr debugfs directory [ 365.587398][T10419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.065621][T10419] veth0_vlan: entered promiscuous mode [ 367.094713][T10419] veth1_vlan: entered promiscuous mode [ 367.233891][T10419] veth0_macvtap: entered promiscuous mode [ 367.254772][T10419] veth1_macvtap: entered promiscuous mode [ 367.428726][T10419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.486789][T10419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.497247][T10930] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.533182][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 367.536509][T10930] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 367.586132][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.607661][T10930] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 367.643860][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 367.647982][T10930] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 367.695542][T10930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.256854][ T9426] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.257217][ T9426] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.257646][ T9426] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.547182][ T9323] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.896471][ T9323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.896496][ T9323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.996495][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.043925][ T9327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.043949][ T9327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.112636][T10930] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.177607][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.177839][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.234272][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.234477][ T9327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.957404][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2026'. [ 372.858304][ T197] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 373.092553][ T197] usb 8-1: Using ep0 maxpacket: 32 [ 373.093846][ T197] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 373.124103][ T197] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 373.144951][ T197] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 373.144982][ T197] usb 8-1: Product: syz [ 373.144998][ T197] usb 8-1: Manufacturer: syz [ 373.145014][ T197] usb 8-1: SerialNumber: syz [ 373.214059][ T197] usb 8-1: config 0 descriptor?? [ 373.215429][T11196] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 373.619049][ T5940] usb 8-1: USB disconnect, device number 2 [ 374.007108][T11236] binder: 11234:11236 ioctl c0306201 200000000080 returned -14 [ 374.035178][T11236] binder: 11234:11236 ioctl c0306201 2000000003c0 returned -14 [ 374.378983][T10930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.568353][ T997] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 374.738341][ T997] usb 2-1: Using ep0 maxpacket: 16 [ 374.746694][ T997] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 374.773738][ T997] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.773810][ T997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.773841][ T997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 374.773864][ T997] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 374.773888][ T997] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.809636][ T997] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 374.809667][ T997] usb 2-1: Manufacturer: syz [ 374.862506][ T997] usb 2-1: config 0 descriptor?? [ 376.948492][ T997] rc_core: IR keymap rc-hauppauge not found [ 376.948516][ T997] Registered IR keymap rc-empty [ 376.949274][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 376.981451][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.137005][ T997] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 377.324045][ T997] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 377.386121][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.441943][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.468014][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.498563][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.518675][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.539925][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.577730][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.599583][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.641686][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.669926][ T997] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 377.928254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.126766][ T997] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 378.126795][ T997] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 378.221781][ T997] usb 2-1: USB disconnect, device number 14 [ 378.548514][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.548588][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.538767][T10930] veth0_vlan: entered promiscuous mode [ 380.567915][T10930] veth1_vlan: entered promiscuous mode [ 380.659201][T10930] veth0_macvtap: entered promiscuous mode [ 380.704149][T10930] veth1_macvtap: entered promiscuous mode [ 380.735355][T10930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.751680][T10930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.832882][ T9327] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.887313][T11327] binder_alloc: 11323: binder_alloc_buf, no vma [ 381.984181][ T197] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 382.053998][ T9328] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.128327][ T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.152131][ T197] usb 8-1: Using ep0 maxpacket: 16 [ 382.152365][ T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.217901][ T197] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 382.234163][ T197] usb 8-1: config 0 has no interfaces? [ 382.292548][ T197] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.292580][ T197] usb 8-1: Product: syz [ 382.292596][ T197] usb 8-1: Manufacturer: syz [ 382.292612][ T197] usb 8-1: SerialNumber: syz [ 382.405112][ T197] usb 8-1: config 0 descriptor?? [ 382.920003][ T9328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.920029][ T9328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.065008][ T9325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.065032][ T9325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.333257][ T997] usb 8-1: USB disconnect, device number 3 [ 385.810406][T11380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.049092][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 386.209737][ T31] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 386.211301][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.211327][ T31] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.211372][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.301582][ T31] usb 9-1: config 0 descriptor?? [ 387.668241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.688251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.698243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.708234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.718225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.728216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.758213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.768210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 389.816323][ T5711] usb 9-1: USB disconnect, device number 2 [ 396.179655][ T6845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.179696][ T6845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.650765][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 396.844202][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 396.857864][ T31] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 396.876300][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.876359][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.876386][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 396.876406][ T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 396.876437][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.880480][ T31] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 396.880515][ T31] usb 8-1: Manufacturer: syz [ 396.961793][ T31] usb 8-1: config 0 descriptor?? [ 397.348421][ T31] rc_core: IR keymap rc-hauppauge not found [ 397.348441][ T31] Registered IR keymap rc-empty [ 397.348598][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.369097][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.397291][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 397.418272][ T5711] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 397.427704][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 397.505275][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.518580][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.538751][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.568908][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.573713][ T5711] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.581570][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.581627][ T5711] usb 4-1: Product: syz [ 397.581675][ T5711] usb 4-1: Manufacturer: syz [ 397.581697][ T5711] usb 4-1: SerialNumber: syz [ 397.634347][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.663055][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.688320][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.708369][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.729000][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.734001][ T5711] usb 4-1: config 0 descriptor?? [ 397.768106][ T31] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 397.814686][ T6845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.814722][ T6845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.920514][ T31] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 397.920539][ T31] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 397.959036][ T31] usb 8-1: USB disconnect, device number 4 [ 398.086880][ T5711] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 401.262416][ T5711] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 401.400446][ T5697] usb 4-1: USB disconnect, device number 14 [ 401.484642][ T6845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.484678][ T6845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.362188][T11572] netlink: 'syz.1.2137': attribute type 1 has an invalid length. [ 407.383926][ T6845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.383968][ T6845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.489265][ T5697] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 407.638373][ T5697] usb 9-1: Using ep0 maxpacket: 16 [ 407.639378][ T5697] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 407.640839][ T5697] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.640887][ T5697] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.640916][ T5697] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.640937][ T5697] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 407.640958][ T5697] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.642925][ T5697] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 407.642949][ T5697] usb 9-1: Manufacturer: syz [ 407.659710][ T5697] usb 9-1: config 0 descriptor?? [ 407.933307][T11573] bond2: (slave veth0_to_bond): making interface the new active one [ 407.950761][ T5697] rc_core: IR keymap rc-hauppauge not found [ 407.950782][ T5697] Registered IR keymap rc-empty [ 407.950943][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 407.970805][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 407.992294][ T5697] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 407.996653][ T5697] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input19 [ 408.045340][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.058439][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.081605][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.098590][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.110886][T11573] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 408.137003][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.148568][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.172131][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.188382][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.218547][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.238388][ T5697] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 408.298753][ T5697] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 408.299026][ T5697] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 408.395979][ T5697] usb 9-1: USB disconnect, device number 3 [ 412.120469][T11613] Invalid ELF header magic: != ELF [ 414.898461][ T6845] bridge_slave_1: left allmulticast mode [ 414.898611][ T6845] bridge_slave_1: left promiscuous mode [ 414.898919][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.349190][T11649] capability: warning: `syz.1.2159' uses 32-bit capabilities (legacy support in use) [ 416.336042][ T6845] bridge_slave_0: left allmulticast mode [ 416.336080][ T6845] bridge_slave_0: left promiscuous mode [ 416.336409][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.749784][ T5718] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 418.103261][ T5696] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 418.118290][ T5718] usb 9-1: Using ep0 maxpacket: 8 [ 418.133045][ T5718] usb 9-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 418.137316][ T5718] usb 9-1: config 5 has an invalid interface number: 52 but max is 1 [ 418.137345][ T5718] usb 9-1: config 5 has an invalid interface number: 4 but max is 1 [ 418.137368][ T5718] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 418.137382][ T5718] usb 9-1: config 5 has no interface number 0 [ 418.137394][ T5718] usb 9-1: config 5 has no interface number 1 [ 418.137433][ T5718] usb 9-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.137462][ T5718] usb 9-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 418.137481][ T5718] usb 9-1: config 5 interface 52 has no altsetting 0 [ 418.137494][ T5718] usb 9-1: config 5 interface 4 has no altsetting 0 [ 418.215469][ T5940] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 418.252328][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.252359][ T5718] usb 9-1: Product: syz [ 418.252376][ T5718] usb 9-1: Manufacturer: syz [ 418.252393][ T5718] usb 9-1: SerialNumber: syz [ 418.338354][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 418.339368][ T5696] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 418.340873][ T5696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.340923][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.340951][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 418.340973][ T5696] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 418.340996][ T5696] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.342442][ T5696] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 418.342467][ T5696] usb 4-1: Manufacturer: syz [ 418.525580][ T5696] usb 4-1: config 0 descriptor?? [ 418.539124][ T5940] usb 2-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40 [ 418.540721][ T5940] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 418.540754][ T5940] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.540784][ T5940] usb 2-1: config 1 interface 0 has no altsetting 0 [ 418.544928][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.544954][ T5940] usb 2-1: Product: syz [ 418.544986][ T5940] usb 2-1: Manufacturer: syz [ 418.545002][ T5940] usb 2-1: SerialNumber: syz [ 418.858351][ T5696] rc_core: IR keymap rc-hauppauge not found [ 418.858375][ T5696] Registered IR keymap rc-empty [ 418.858695][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 418.888412][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 418.947718][ T5696] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 418.990107][ T5696] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 419.042677][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.061557][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.078644][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.108007][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.138475][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.149399][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.188479][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.208346][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.228861][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.248358][ T5696] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 419.270271][T11680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.341523][T11680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.709645][ T5696] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 419.709673][ T5696] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 420.587036][ T5940] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 420.630014][ T5696] usb 4-1: USB disconnect, device number 15 [ 420.810360][ T5940] usb 2-1: USB disconnect, device number 15 [ 423.658860][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 423.687099][ T5940] appletouch 2-1:1.0: input: appletouch disconnected [ 424.693097][ T5718] cytherm 9-1:5.52: Cypress thermometer device now attached [ 424.798999][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 424.799856][ T10] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 424.803361][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.952201][ T5718] cytherm 9-1:5.4: Cypress thermometer device now attached [ 425.178358][ T10] usb 8-1: config 0 descriptor?? [ 425.473724][ T10] as10x_usb: device has been detected [ 425.474719][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 425.617893][T11743] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7336] was attempted by "\x09 \x0a ./binderfs/binder0"[11743] [ 425.663740][ T10] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 425.965122][ T6845] bond1 (unregistering): (slave vlan2): Releasing active interface [ 426.304240][ T6845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.391485][ T6845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.433925][ T6845] bond0 (unregistering): Released all slaves [ 426.494106][ T6845] bond1 (unregistering): Released all slaves [ 426.579437][ T10] as10x_usb: error during firmware upload part1 [ 426.580030][ T10] Registered device nBox DVB-T Dongle [ 426.608107][ T10] usb 8-1: USB disconnect, device number 5 [ 426.728309][T11673] syz_tun: entered allmulticast mode [ 426.880068][T11674] dvmrp6: entered allmulticast mode [ 426.881445][ T5243] 8021q: adding VLAN 0 to HW filter on device eth9 [ 427.031190][ T10] Unregistered device nBox DVB-T Dongle [ 427.033604][ T10] as10x_usb: device has been disconnected [ 427.186683][ T5940] usb 9-1: USB disconnect, device number 4 [ 427.188455][ T5940] cytherm 9-1:5.52: Cypress thermometer now disconnected [ 427.192710][ T5940] cytherm 9-1:5.4: Cypress thermometer now disconnected [ 428.544859][ T10] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 428.995376][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 428.995433][ T10] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 428.999140][ T10] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 428.999167][ T10] usb 8-1: config 100 has no interface number 0 [ 428.999211][ T10] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 428.999239][ T10] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 428.999270][ T10] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 428.999296][ T10] usb 8-1: config 100 interface 173 has no altsetting 0 [ 429.177238][T11691] syz_tun: left allmulticast mode [ 429.191186][ T10] usb 8-1: string descriptor 0 read error: -22 [ 429.191377][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.470764][ T10] usb 8-1: can't set config #100, error -71 [ 429.598782][ T10] usb 8-1: USB disconnect, device number 6 [ 431.252210][ T5940] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 431.742493][ T5596] Bluetooth: hci0: failed to read key size for handle 200 [ 432.432948][ T5940] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.434387][ T5940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.434409][ T5940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.435886][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.435910][ T5940] usb 4-1: SerialNumber: syz [ 432.971827][ T5940] usb 4-1: 0:2 : does not exist [ 433.209147][T11839] overlayfs: failed to clone lowerpath [ 434.748950][T11853] loop5: detected capacity change from 0 to 6 [ 434.765783][T11853] Dev loop5: unable to read RDB block 6 [ 434.765886][T11853] loop5: unable to read partition table [ 434.769443][T11853] loop5: partition table beyond EOD, truncated [ 434.769503][T11853] loop_reread_partitions: partition scan of loop5 (~h"+x|Q` ) failed (rc=-5) [ 440.010443][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.037355][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.610511][ T5940] usb 4-1: USB disconnect, device number 16 [ 441.735494][ T5243] 8021q: adding VLAN 0 to HW filter on device eth10 [ 443.881939][T11565] udevd[11565]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.347220][ T6845] hsr_slave_0: left promiscuous mode [ 446.454506][ T6845] hsr_slave_1: left promiscuous mode [ 446.471709][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.471739][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.776391][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.776418][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.875752][ T6845] veth1_vlan: left promiscuous mode [ 446.875965][ T6845] veth0_vlan: left promiscuous mode [ 448.049928][ T5609] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 449.699394][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 459.077106][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2275'. [ 461.119995][ T6845] team0 (unregistering): Port device team_slave_1 removed [ 461.501748][ T6845] team0 (unregistering): Port device team_slave_0 removed [ 462.522803][ T997] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 462.708744][ T5243] 8021q: adding VLAN 0 to HW filter on device eth11 [ 462.709569][ T997] usb 9-1: Using ep0 maxpacket: 16 [ 462.728247][ T997] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 462.860376][ T997] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 462.860406][ T997] usb 9-1: config 0 descriptor has 1 excess byte, ignoring [ 462.860426][ T997] usb 9-1: config 0 has no interface number 0 [ 462.899498][ T997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.899529][ T997] usb 9-1: Product: syz [ 462.899544][ T997] usb 9-1: Manufacturer: syz [ 462.899561][ T997] usb 9-1: SerialNumber: syz [ 462.952982][ T997] usb 9-1: config 0 descriptor?? [ 463.213540][ T997] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 463.213578][ T997] uvcvideo 9-1:0.105: No valid video chain found. [ 463.261580][ T997] usb 9-1: USB disconnect, device number 5 [ 467.653397][T12069] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2293'. [ 467.880508][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2298'. [ 467.880637][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2298'. [ 467.906217][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2293'. [ 468.458079][T12097] futex_wake_op: syz.8.2300 tries to shift op by 144; fix this program [ 469.490062][ T5243] 8021q: adding VLAN 0 to HW filter on device eth12 [ 478.589557][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 478.792745][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2333'. [ 481.308645][T12252] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10419] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12252] [ 483.952370][T12281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2352'. [ 485.045779][ T5243] veth1_vlan: left promiscuous mode [ 485.284747][T12298] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2358'. [ 485.298003][T12298] unsupported nlmsg_type 40 [ 488.653789][T12306] jffs2: notice: (12306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 493.575916][T12355] netlink: 'syz.8.2368': attribute type 1 has an invalid length. [ 493.575935][T12355] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2368'. [ 493.576020][T12355] netlink: 'syz.8.2368': attribute type 1 has an invalid length. [ 497.185471][ T5243] veth1_vlan: entered promiscuous mode [ 499.985179][ T5940] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 500.149801][ T5940] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 500.151434][ T5940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.151464][ T5940] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 500.151507][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.336623][ T5940] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 501.687978][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.688046][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.255971][ T5940] usb 4-1: USB disconnect, device number 17 [ 503.310355][ T5940] idmouse 4-1:1.0: disconnected [ 503.408463][T12472] input: syz1 as /devices/virtual/input/input22 [ 503.863993][ T5940] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 504.050275][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 504.051133][ T5940] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 504.202554][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.202588][ T5940] usb 4-1: Product: syz [ 504.202605][ T5940] usb 4-1: Manufacturer: syz [ 504.202620][ T5940] usb 4-1: SerialNumber: syz [ 504.522236][ T5940] usb 4-1: config 0 descriptor?? [ 504.571065][T12488] netlink: 'syz.1.2407': attribute type 1 has an invalid length. [ 504.788605][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 504.947399][ T5940] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 505.014520][ T5940] usb 4-1: USB disconnect, device number 18 [ 505.155293][T12488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.247818][T12493] macvlan1: entered promiscuous mode [ 505.247836][T12493] macvlan1: entered allmulticast mode [ 505.248148][T12493] bond3: entered allmulticast mode [ 505.331906][T12493] bond3: entered promiscuous mode [ 505.421292][T12493] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 505.448846][T12493] team0: Port device macvlan1 added [ 505.716609][T12495] bond3: (slave ip6gretap1): making interface the new active one [ 505.716648][T12495] ip6gretap1: entered promiscuous mode [ 505.716793][T12495] ip6gretap1: entered allmulticast mode [ 505.800963][T12495] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 508.456954][T12521] Bluetooth: MGMT ver 1.23 [ 508.470126][T12521] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 510.679579][T12530] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2417'. [ 515.683805][T12549] 9pnet_fd: p9_fd_create_unix (12549): problem connecting socket: ./file0: -111 [ 516.022141][T12546] syz.1.2421 (12546) used greatest stack depth: 18184 bytes left [ 525.031650][T12636] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 525.031781][T12636] overlayfs: failed to set xattr on upper [ 525.031793][T12636] overlayfs: ...falling back to redirect_dir=nofollow. [ 525.031802][T12636] overlayfs: ...falling back to index=off. [ 525.031811][T12636] overlayfs: ...falling back to uuid=null. [ 526.955003][T12646] lo speed is unknown, defaulting to 1000 [ 529.030121][T12663] 9pnet_fd: p9_fd_create_tcp (12663): problem connecting socket to 127.0.0.1 [ 530.047043][ T997] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 531.521403][ T997] usb 2-1: device descriptor read/64, error -71 [ 533.606811][T12692] netlink: 'syz.7.2454': attribute type 2 has an invalid length. [ 537.900213][ T5940] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 538.067825][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 538.376621][ T5940] usb 9-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 538.932943][ T5940] usb 9-1: config 251 has an invalid interface number: 16 but max is 0 [ 538.932974][ T5940] usb 9-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 538.933009][ T5940] usb 9-1: config 251 has no interface number 0 [ 538.933061][ T5940] usb 9-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.933086][ T5940] usb 9-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 538.933113][ T5940] usb 9-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 538.933141][ T5940] usb 9-1: config 251 interface 16 has no altsetting 0 [ 538.967633][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.967660][ T5940] usb 9-1: Product: syz [ 538.967878][ T5940] usb 9-1: Manufacturer: syz [ 538.967896][ T5940] usb 9-1: SerialNumber: syz [ 539.347411][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.356085][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.591890][ T5940] usb 9-1: USB disconnect, device number 6 [ 542.686248][T12767] smpboot: CPU 1 is now offline [ 544.191491][T12791] file system registered [ 550.827515][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 550.977695][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.980570][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.980606][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.031619][ T9] usb 9-1: config 0 descriptor?? [ 551.059547][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 551.502117][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 551.503859][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 551.523830][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 553.568945][T12851] syz.3.2479 (12851): drop_caches: 2 [ 556.596315][ T9] pwc: recv_control_msg error -110 req 04 val 1000 [ 556.596751][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 556.599997][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 556.603656][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 556.628947][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 556.633511][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 556.651376][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 556.653647][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 556.654025][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 556.683483][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 556.710749][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 556.727510][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 556.731154][ T9] pwc: recv_control_msg error -32 req 04 val 1200 [ 556.880264][ T9] pwc: Registered as video103. [ 556.944042][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input23 [ 557.305148][ T5609] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 557.367638][ T5718] usb 9-1: USB disconnect, device number 7 [ 557.873524][T12867] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 557.873524][T12867] [ 560.263673][T12883] Trying to write to read-only block-device nullb0 [ 562.684388][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.684452][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.102465][T12900] syz.8.2508 (12900): drop_caches: 2 [ 567.705004][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.700839][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.705181][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 568.707204][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 568.708798][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.912261][ T5609] Bluetooth: hci5: command tx timeout [ 574.531075][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 574.580996][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 574.602553][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 574.638100][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 574.668291][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 579.016833][ T5596] Bluetooth: hci5: command tx timeout [ 579.016876][ T5596] Bluetooth: hci6: command tx timeout [ 581.090718][ T5597] Bluetooth: hci5: command tx timeout [ 581.090782][T12937] Bluetooth: hci6: command tx timeout [ 583.170196][T12937] Bluetooth: hci6: command tx timeout [ 583.170222][T12937] Bluetooth: hci5: command tx timeout [ 583.706175][T12970] bridge_slave_0: left allmulticast mode [ 583.706200][T12970] bridge_slave_0: left promiscuous mode [ 583.706358][T12970] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.849848][T12970] bridge_slave_1: left allmulticast mode [ 583.849873][T12970] bridge_slave_1: left promiscuous mode [ 583.850041][T12970] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.926979][T12970] bond0: (slave bond_slave_0): Releasing backup interface [ 583.973100][T12970] bond0: (slave bond_slave_1): Releasing backup interface [ 584.003209][T12970] team0: Port device team_slave_0 removed [ 584.032142][T12970] team0: Port device team_slave_1 removed [ 584.032838][T12970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.032879][T12970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.071196][T12970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.071216][T12970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.096200][T12970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 584.574494][ T5604] lo speed is unknown, defaulting to 1000 [ 584.810333][T12987] 9pnet_fd: Insufficient options for proto=fd [ 585.243689][ T5597] Bluetooth: hci6: command tx timeout [ 585.824491][T12910] lo speed is unknown, defaulting to 1000 [ 586.339787][T12998] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2530'. [ 587.226757][ T9321] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.523091][T12999] ip6erspan0: entered allmulticast mode [ 588.497231][ T5604] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 588.575028][ T9321] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.649445][ T5604] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 588.650534][ T5604] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 588.650550][ T5604] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.650562][ T5604] usb 9-1: config 0 has no interface number 0 [ 588.657725][ T5604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.657741][ T5604] usb 9-1: Product: syz [ 588.657751][ T5604] usb 9-1: Manufacturer: syz [ 588.657761][ T5604] usb 9-1: SerialNumber: syz [ 588.755054][ T5604] usb 9-1: config 0 descriptor?? [ 588.807306][ T5604] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22 [ 589.014525][ T5604] usb 9-1: USB disconnect, device number 8 [ 589.115301][T12931] lo speed is unknown, defaulting to 1000 [ 589.335993][ T197] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 589.390630][ T9321] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.485729][ T197] usb 4-1: Using ep0 maxpacket: 16 [ 589.550676][ T197] usb 4-1: unable to get BOS descriptor or descriptor too short [ 589.550717][ T197] usb 4-1: New USB device found, idVendor=04e8, idProduct=5f03, bcdDevice=29.72 [ 589.551666][ T197] usb 4-1: config 254 has an invalid interface number: 254 but max is 0 [ 589.551683][ T197] usb 4-1: config 254 has no interface number 0 [ 589.551703][ T197] usb 4-1: config 254 interface 254 has no altsetting 0 [ 589.552168][ T197] usb 4-1: language id specifier not provided by device, defaulting to English [ 589.626633][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.057688][ T197] uvcvideo 4-1:254.254: Found UVC 0.00 device (04e8:5f03) [ 590.057715][ T197] uvcvideo 4-1:254.254: No valid video chain found. [ 590.084251][ T197] usb 4-1: USB disconnect, device number 19 [ 590.330641][ T9321] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.277840][ T5597] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 592.698004][ T5597] Bluetooth: hci1: Injecting HCI hardware error event [ 592.760157][T12937] Bluetooth: hci1: hardware error 0x00 [ 595.049120][T13124] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 595.524998][T12910] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.525078][T12910] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.525219][T12910] bridge_slave_0: entered allmulticast mode [ 595.558907][T12910] bridge_slave_0: entered promiscuous mode [ 595.583483][ T197] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 595.760124][ T197] usb 9-1: Using ep0 maxpacket: 8 [ 595.760827][ T197] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 595.765697][ T197] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 595.765713][ T197] usb 9-1: Product: syz [ 595.765722][ T197] usb 9-1: Manufacturer: syz [ 595.765732][ T197] usb 9-1: SerialNumber: syz [ 595.872349][T12910] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.872423][T12910] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.872614][T12910] bridge_slave_1: entered allmulticast mode [ 595.903466][T12910] bridge_slave_1: entered promiscuous mode [ 595.943546][ T197] usb 9-1: config 0 descriptor?? [ 595.961709][ T197] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 596.186429][ T197] gspca_zc3xx: reg_w_i err -71 [ 596.186495][ T197] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 596.235596][ T197] usb 9-1: USB disconnect, device number 9 [ 596.401829][T12910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.429954][T12937] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 596.453554][ T9321] bridge_slave_1: left allmulticast mode [ 596.453578][ T9321] bridge_slave_1: left promiscuous mode [ 596.453740][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.521891][ T9321] bridge_slave_0: left allmulticast mode [ 596.521916][ T9321] bridge_slave_0: left promiscuous mode [ 596.522102][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.210759][T13181] netlink: 'syz.3.2594': attribute type 7 has an invalid length. [ 597.491665][T13189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2598'. [ 597.791299][ T9321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.808464][ T9321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.830814][ T9321] bond0 (unregistering): Released all slaves [ 598.100479][T12910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.860374][T12910] team0: Port device team_slave_0 added [ 598.926485][T12910] team0: Port device team_slave_1 added [ 599.740624][T12910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.740638][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.740659][T12910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.886540][T12910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.886554][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.886575][T12910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.302760][ T9321] hsr_slave_0: left promiscuous mode [ 603.326158][ T9321] hsr_slave_1: left promiscuous mode [ 603.335516][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.335535][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.363867][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.363887][ T9321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.530781][ T9321] veth1_macvtap: left promiscuous mode [ 603.530859][ T9321] veth0_macvtap: left promiscuous mode [ 603.531031][ T9321] veth1_vlan: left promiscuous mode [ 603.531178][ T9321] veth0_vlan: left promiscuous mode [ 608.192303][ T9321] team0 (unregistering): Port device team_slave_1 removed [ 608.233944][ T9321] team0 (unregistering): Port device team_slave_0 removed [ 608.752078][ T5243] 8021q: adding VLAN 0 to HW filter on device eth13 [ 608.752356][T13275] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 608.752373][T13275] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 609.442774][T12910] hsr_slave_0: entered promiscuous mode [ 609.488983][T12910] hsr_slave_1: entered promiscuous mode [ 609.496400][T12910] debugfs: 'hsr0' already exists in 'hsr' [ 609.496420][T12910] Cannot create hsr debugfs directory [ 609.648503][T12931] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.648591][T12931] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.648754][T12931] bridge_slave_0: entered allmulticast mode [ 609.683580][T12931] bridge_slave_0: entered promiscuous mode [ 609.865409][T12931] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.865485][T12931] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.865646][T12931] bridge_slave_1: entered allmulticast mode [ 609.869530][T12931] bridge_slave_1: entered promiscuous mode [ 614.973077][T12931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.228579][T12931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.773838][T12931] team0: Port device team_slave_0 added [ 619.004465][T12931] team0: Port device team_slave_1 added [ 622.606261][T13356] tmpfs: Unknown parameter 'grpquota_block_hardlimi' [ 623.712828][T12931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.712841][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.712862][T12931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.841275][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.841322][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.843967][T12931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.843977][T12931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.843996][T12931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.790081][T13375] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2658'. [ 625.365819][T12931] hsr_slave_0: entered promiscuous mode [ 625.373346][T12931] hsr_slave_1: entered promiscuous mode [ 625.402663][T12931] debugfs: 'hsr0' already exists in 'hsr' [ 625.402683][T12931] Cannot create hsr debugfs directory [ 625.639233][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.688418][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.705793][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.741673][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 625.742182][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 627.088109][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 627.423396][ T9324] bridge_slave_1: left allmulticast mode [ 627.423421][ T9324] bridge_slave_1: left promiscuous mode [ 627.423594][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.517149][ T9324] bridge_slave_0: left allmulticast mode [ 627.517173][ T9324] bridge_slave_0: left promiscuous mode [ 627.517353][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.911482][T12937] Bluetooth: hci2: command tx timeout [ 628.057891][ T9324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.103611][ T9324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.142440][ T9324] bond0 (unregistering): Released all slaves [ 628.718316][ T9324] hsr_slave_0: left promiscuous mode [ 628.737069][ T9324] hsr_slave_1: left promiscuous mode [ 628.737752][ T9324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.784345][ T9324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.450204][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 629.709923][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 629.711702][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 629.716211][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.716228][ T10] usb 4-1: Product: syz [ 629.716237][ T10] usb 4-1: Manufacturer: syz [ 629.716247][ T10] usb 4-1: SerialNumber: syz [ 629.989779][T12937] Bluetooth: hci2: command tx timeout [ 630.486453][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.517023][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.908646][ T9324] team0 (unregistering): Port device team_slave_1 removed [ 630.984412][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.062235][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 631.071418][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 631.092779][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 631.143473][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.731670][ T9324] team0 (unregistering): Port device team_slave_0 removed [ 632.068064][T12937] Bluetooth: hci2: command tx timeout [ 632.804978][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 632.823681][ T10] usb 4-1: USB disconnect, device number 20 [ 633.514646][T13519] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2707'. [ 633.625270][T12937] Bluetooth: hci3: command tx timeout [ 633.960775][T12931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.147108][T12937] Bluetooth: hci2: command tx timeout [ 634.404059][T13382] lo speed is unknown, defaulting to 1000 [ 635.512477][T12931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.669698][T12937] Bluetooth: hci3: command tx timeout [ 636.481058][T12931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.789244][T13592] netlink: 'syz.3.2735': attribute type 3 has an invalid length. [ 636.830759][T13592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.113854][ T36] audit: type=1326 audit(1787231057.853:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.113892][ T36] audit: type=1326 audit(1787231057.853:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.189054][ T36] audit: type=1326 audit(1787231057.933:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.189095][ T36] audit: type=1326 audit(1787231057.933:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.233046][ T36] audit: type=1326 audit(1787231057.973:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.233082][ T36] audit: type=1326 audit(1787231057.973:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.233112][ T36] audit: type=1326 audit(1787231057.973:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.408838][ T36] audit: type=1326 audit(1787231058.143:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.408879][ T36] audit: type=1326 audit(1787231058.143:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.3.2738" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 637.682941][T13610] __vm_enough_memory: pid: 13610, comm: syz.3.2742, bytes: 11727299928064 not enough memory for the allocation [ 637.753372][T12937] Bluetooth: hci3: command tx timeout [ 637.801558][T12931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.907128][T13485] lo speed is unknown, defaulting to 1000 [ 637.909026][ T5243] 8021q: adding VLAN 0 to HW filter on device eth14 [ 639.823383][T12937] Bluetooth: hci3: command tx timeout [ 640.295349][T13382] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.295436][T13382] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.297250][T13382] bridge_slave_0: entered allmulticast mode [ 640.300814][T13382] bridge_slave_0: entered promiscuous mode [ 640.401709][T13382] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.409985][T13382] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.410195][T13382] bridge_slave_1: entered allmulticast mode [ 640.438623][T13382] bridge_slave_1: entered promiscuous mode [ 640.689703][ T9428] bridge_slave_1: left allmulticast mode [ 640.689737][ T9428] bridge_slave_1: left promiscuous mode [ 640.689923][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.697588][ T9428] bridge_slave_0: left allmulticast mode [ 640.697610][ T9428] bridge_slave_0: left promiscuous mode [ 640.697808][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.508512][ T9428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.529031][ T9428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.554107][ T9428] bond0 (unregistering): Released all slaves [ 641.859413][T13681] geneve2: entered promiscuous mode [ 642.132972][T13382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.200422][T13382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.336055][ T9428] hsr_slave_0: left promiscuous mode [ 642.384595][ T9428] hsr_slave_1: left promiscuous mode [ 642.385395][ T9428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.588931][ T9428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.061986][ T9428] team0 (unregistering): Port device team_slave_1 removed [ 647.156827][ T9428] team0 (unregistering): Port device team_slave_0 removed [ 649.699640][T13382] team0: Port device team_slave_0 added [ 649.834094][T13382] team0: Port device team_slave_1 added [ 650.271037][T13382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.271049][T13382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.271067][T13382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.356436][T13382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.356448][T13382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.356467][T13382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.921328][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.921410][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.921535][T13485] bridge_slave_0: entered allmulticast mode [ 650.923274][T13485] bridge_slave_0: entered promiscuous mode [ 650.969897][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.969987][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.970105][T13485] bridge_slave_1: entered allmulticast mode [ 651.005196][T13485] bridge_slave_1: entered promiscuous mode [ 651.447810][T13382] hsr_slave_0: entered promiscuous mode [ 651.448849][T13382] hsr_slave_1: entered promiscuous mode [ 651.474515][T13382] debugfs: 'hsr0' already exists in 'hsr' [ 651.474535][T13382] Cannot create hsr debugfs directory [ 651.506754][T13485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.650640][T13485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.113400][T13485] team0: Port device team_slave_0 added [ 652.189261][T13485] team0: Port device team_slave_1 added [ 654.297370][T13485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.297384][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.297403][T13485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.321954][T13485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.321965][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.321990][T13485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.303215][T13485] hsr_slave_0: entered promiscuous mode [ 657.310781][T13485] hsr_slave_1: entered promiscuous mode [ 657.336287][T13485] debugfs: 'hsr0' already exists in 'hsr' [ 657.336308][T13485] Cannot create hsr debugfs directory [ 657.798437][T13855] geneve2: entered promiscuous mode [ 658.124562][T13866] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 658.908536][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 659.379158][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 659.608339][T13904] Bluetooth: hci0: unsupported parameter 5135 [ 659.608356][T13904] Bluetooth: hci0: unsupported parameter 8192 [ 659.608365][T13904] Bluetooth: hci0: unsupported parameter 5135 [ 659.608373][T13904] Bluetooth: hci0: unsupported parameter 8192 [ 660.457559][T13382] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 660.577875][T13382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.590782][T13382] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 660.644637][T13382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.664469][T13382] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 660.748537][T13382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.771479][T13382] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 660.937824][T13382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.797588][T13978] netlink: 'syz.3.2868': attribute type 1 has an invalid length. [ 663.179555][ T5243] 8021q: adding VLAN 0 to HW filter on device eth15 [ 663.691763][T13485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 663.770468][T13485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 663.804054][T13485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.850407][T13485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.886564][T13485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.229816][T13485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.270661][T13382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.271416][T13485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.305520][T13485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.412465][T13382] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.498821][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.498929][ T6852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.579342][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.579465][ T9426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.364035][T13485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.537398][T13485] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.653263][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.653346][ T9426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.783464][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.783553][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.409630][T14060] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2895'. [ 666.563119][T14060] gretap0: entered promiscuous mode [ 666.577108][ T5604] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 666.632624][T14060] macvlan2: entered promiscuous mode [ 666.693679][T14060] gretap0: left promiscuous mode [ 666.764250][ T5604] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 666.786012][ T5604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.786032][ T5604] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 666.786071][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.835913][ T5604] usb 4-1: config 0 descriptor?? [ 667.575783][ T5604] Bluetooth: Can't get version to change to load ram patch err [ 667.575860][ T5604] Bluetooth: Loading sysconfig file failed [ 667.575889][ T5604] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 667.666755][ T5604] usb 4-1: USB disconnect, device number 21 [ 668.032682][ T5243] 8021q: adding VLAN 0 to HW filter on device eth16 [ 668.228282][T14079] team0: Port device veth3 added [ 669.352459][T13382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.562621][T13485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.034964][T13485] veth0_vlan: entered promiscuous mode [ 670.220944][T13485] veth1_vlan: entered promiscuous mode [ 670.579845][T13485] veth0_macvtap: entered promiscuous mode [ 670.722110][T13485] veth1_macvtap: entered promiscuous mode [ 670.866581][T13485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.979355][T13485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.326981][T13382] veth0_vlan: entered promiscuous mode [ 671.644642][T13382] veth1_vlan: entered promiscuous mode [ 671.798486][ T6845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.035072][ T6845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.307977][T13382] veth0_macvtap: entered promiscuous mode [ 672.369849][T13382] veth1_macvtap: entered promiscuous mode [ 672.911069][ T6845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.911085][ T6845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.968755][T13382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.077696][T13382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.418138][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.418155][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.075914][ T9424] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.076114][ T9424] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.142607][T14182] netlink: 'syz.8.2934': attribute type 2 has an invalid length. [ 674.187240][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.638347][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.638362][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.181088][ T9432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.181121][ T9432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.308361][ T6853] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.309314][ T6853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.333481][ T9325] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.925297][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 681.077139][T14226] netlink: 'syz.8.2949': attribute type 2 has an invalid length. [ 681.391273][ T5604] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 681.608753][ T5604] usb 1-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice= 1.00 [ 681.611418][ T5604] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.611462][ T5604] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 681.630260][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 681.630277][ T5604] usb 1-1: Product: syz [ 681.630286][ T5604] usb 1-1: Manufacturer: syz [ 682.510808][ T5604] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -22 [ 682.812671][ T5604] usb 1-1: USB disconnect, device number 4 [ 683.629583][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 684.810780][T14303] loop5: detected capacity change from 0 to 4095 [ 684.834296][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 684.922070][ T5604] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 685.071760][ T5604] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 685.075868][ T5604] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 685.075884][ T5604] usb 9-1: Product: syz [ 685.075893][ T5604] usb 9-1: SerialNumber: syz [ 685.124844][ T5604] usb 9-1: config 0 descriptor?? [ 685.265020][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.265430][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.419149][ T5604] hso 9-1:0.0: Failed to find BULK eps [ 685.676194][ T5604] usb 9-1: USB disconnect, device number 10 [ 693.468211][ T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 693.619685][ T10] usb 10-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 693.622705][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 693.622749][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.622766][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.622811][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.719446][ T10] usb 10-1: config 0 descriptor?? [ 694.245358][ T10] hid-generic 0003:093A:8002.0005: unbalanced collection at end of report description [ 694.253305][ T10] hid-generic 0003:093A:8002.0005: probe with driver hid-generic failed with error -22 [ 694.420748][T12376] usb 10-1: USB disconnect, device number 2 [ 695.076642][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 695.146666][ T5604] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 695.227155][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 695.228240][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.228261][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.228285][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.302970][ T10] usb 4-1: config 0 descriptor?? [ 695.326684][ T5604] usb 9-1: Using ep0 maxpacket: 16 [ 695.332422][ T5604] usb 9-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 695.360288][ T5604] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.360310][ T5604] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 695.360330][ T5604] usb 9-1: config 0 interface 0 has no altsetting 0 [ 695.360362][ T5604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.421231][ T5604] usb 9-1: config 0 descriptor?? [ 695.714516][T14436] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3025'. [ 695.959341][ T10] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 5/7 [ 695.984982][ T10] cp2112 0003:10C4:EA90.0006: parse failed [ 695.985081][ T10] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22 [ 696.235320][ T5604] uclogic 0003:2179:0077.0007: interface is invalid, ignoring [ 696.330080][ T10] usb 4-1: USB disconnect, device number 23 [ 696.402117][ T5604] usb 9-1: USB disconnect, device number 11 [ 697.074025][T14467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3035'. [ 698.306067][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3047'. [ 701.188292][ T36] audit: type=1326 audit(1787231121.952:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.188333][ T36] audit: type=1326 audit(1787231121.962:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.260582][T14568] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 701.275443][ T36] audit: type=1326 audit(1787231122.032:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.281106][ T36] audit: type=1326 audit(1787231122.052:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.301600][ T36] audit: type=1326 audit(1787231122.072:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.301639][ T36] audit: type=1326 audit(1787231122.072:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.301671][ T36] audit: type=1326 audit(1787231122.072:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.442598][ T36] audit: type=1326 audit(1787231122.212:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.476440][ T36] audit: type=1326 audit(1787231122.212:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.495895][ T36] audit: type=1326 audit(1787231122.272:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14569 comm="syz.3.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f75bebde0d9 code=0x7ffc0000 [ 701.816200][T14577] program syz.9.3078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.077934][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3136'. [ 709.050205][T14736] loop5: detected capacity change from 0 to 7 [ 709.159374][T14736] Dev loop5: unable to read RDB block 7 [ 709.159408][T14736] loop5: AHDI p1 [ 709.159422][T14736] loop5: partition table partially beyond EOD, truncated [ 709.525401][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 709.525416][ T36] audit: type=1326 audit(1787231386.340:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.525452][ T36] audit: type=1326 audit(1787231386.350:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.542152][ T36] audit: type=1326 audit(1787231386.360:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.584445][ T36] audit: type=1326 audit(1787231386.370:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.585635][ T36] audit: type=1326 audit(1787231386.410:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.585681][ T36] audit: type=1326 audit(1787231386.410:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.585713][ T36] audit: type=1326 audit(1787231386.410:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.620372][ T36] audit: type=1326 audit(1787231386.440:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.620410][ T36] audit: type=1326 audit(1787231386.440:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 709.661631][ T36] audit: type=1326 audit(1787231386.480:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14744 comm="syz.0.3152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f011c02e0d9 code=0x7ffc0000 [ 711.178250][T14777] block nbd8: not configured, cannot reconfigure [ 711.400785][T14781] sd 0:0:1:0: PR command failed: 1026 [ 711.400848][T14781] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 711.400907][T14781] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 711.786317][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 711.846092][ T5604] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 711.997883][ T5604] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 712.000259][ T5604] usb 9-1: config 0 has no interfaces? [ 712.000351][ T5604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.061340][ T5604] usb 9-1: config 0 descriptor?? [ 712.108913][T14783] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 712.108933][T14783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 712.450598][T14783] vhci_hcd vhci_hcd.0: Device attached [ 712.489137][ T10] usb 9-1: USB disconnect, device number 12 [ 712.562555][T14793] vhci_hcd: connection closed [ 712.636132][ T5604] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 712.714202][ T6845] vhci_hcd vhci_hcd.8: stop threads [ 712.734142][ T6845] vhci_hcd vhci_hcd.8: release socket [ 712.812162][ T6845] vhci_hcd vhci_hcd.8: disconnect device [ 713.696204][T12376] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 713.845182][T12376] usb 9-1: Using ep0 maxpacket: 32 [ 713.845746][T12376] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 713.847400][T12376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.899202][T12376] usb 9-1: config 0 descriptor?? [ 713.933788][T12376] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 714.762184][T12376] gspca_vc032x: reg_w err -71 [ 714.762208][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762215][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762222][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762228][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762235][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762241][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762247][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762255][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762262][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762268][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762274][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762280][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762286][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762310][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762316][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762323][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762329][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762335][T12376] gspca_vc032x: I2c Bus Busy Wait 00 [ 714.762345][T12376] gspca_vc032x: Unknown sensor... [ 714.762404][T12376] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 714.906342][T12376] usb 9-1: USB disconnect, device number 13 [ 714.994247][T14835] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 715.048447][T14835] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 719.976411][ T5604] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 720.326338][T12376] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 720.495429][T12376] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 720.497917][T12376] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.497965][T12376] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 720.497982][T12376] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 720.497999][T12376] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.498029][T12376] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.311552][T12376] gud 10-1:1.0: Failed to add properties (error=-5) [ 721.311586][T12376] gud 10-1:1.0: probe with driver gud failed with error -5 [ 721.443279][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 721.443292][ T36] audit: type=1326 audit(1787231398.260:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14886 comm="syz.0.3215" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f011c02e0d9 code=0x0 [ 721.536131][T12376] usb 10-1: USB disconnect, device number 3 [ 723.964471][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3240'. [ 724.174715][T12376] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 724.304960][T14951] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 724.304977][T14951] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3243'. [ 724.339282][T12376] usb 10-1: Using ep0 maxpacket: 32 [ 724.343100][T12376] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 724.368512][T12376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 724.368538][T12376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 724.368556][T12376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 724.372172][T12376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.372190][T12376] usb 10-1: Product: syz [ 724.372201][T12376] usb 10-1: Manufacturer: syz [ 724.372211][T12376] usb 10-1: SerialNumber: syz [ 724.480077][T12376] usb 10-1: config 0 descriptor?? [ 724.640232][T12376] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input24 [ 725.000590][ T4933] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 725.168354][T14959] sctp: [Deprecated]: syz.0.3245 (pid 14959) Use of int in maxseg socket option. [ 725.168354][T14959] Use struct sctp_assoc_value instead [ 725.324067][ T4933] xpad 10-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 725.705337][ T10] usb 10-1: USB disconnect, device number 4 [ 725.705442][ C0] xpad 10-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 725.934172][T14976] vxcan0: tx address claim with dlc 0 [ 726.246712][T12376] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 726.397603][T12376] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 726.427461][T12376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.427480][T12376] usb 1-1: Product: syz [ 726.427491][T12376] usb 1-1: Manufacturer: syz [ 726.427502][T12376] usb 1-1: SerialNumber: syz [ 726.476885][T12376] usb 1-1: config 0 descriptor?? [ 726.500693][T12376] ch341 1-1:0.0: ch341-uart converter detected [ 726.832644][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3261'. [ 727.380994][T12376] usb 1-1: failed to send control message: -71 [ 727.381036][T12376] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 727.414643][T12376] usb 1-1: USB disconnect, device number 5 [ 727.438729][T12376] ch341 1-1:0.0: device disconnected [ 727.615223][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 727.747694][ T9] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 727.766179][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 727.768230][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.768266][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 727.768285][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 727.768300][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 727.768317][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 727.768345][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.870500][T15005] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 727.891420][ T10] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 727.908581][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 727.908644][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 727.938448][ T10] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 727.957130][ T9] usb 9-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 727.987999][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 727.988057][ T10] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 728.026196][ T10] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 728.097312][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.097333][ T9] usb 9-1: config 0 has no interfaces? [ 728.104388][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.104406][ T9] usb 9-1: Product: syz [ 728.104416][ T9] usb 9-1: Manufacturer: syz [ 728.104426][ T9] usb 9-1: SerialNumber: syz [ 728.192315][ T9] usb 9-1: config 0 descriptor?? [ 728.785960][T12376] usb 4-1: USB disconnect, device number 24 [ 728.836795][T12376] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 728.943192][T12376] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 728.959974][T12376] keyspan 4-1:1.0: device disconnected [ 729.110365][T14214] usb 9-1: USB disconnect, device number 14 [ 729.393607][T15035] ima: policy update failed [ 729.394032][ T36] audit: type=1802 audit(1787231406.210:251): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.8.3283" res=0 errno=0 [ 729.511730][T15042] nbd: socks must be embedded in a SOCK_ITEM attr [ 729.604441][T15042] block nbd0: shutting down sockets [ 731.596451][T15103] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3315'. [ 731.596473][T15103] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3315'. [ 731.667053][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 731.927028][T15114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3319'. [ 731.927047][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3319'. [ 731.987642][T15118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3319'. [ 731.987658][T15118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3319'. [ 732.161673][T12376] hsr0: entered promiscuous mode [ 734.334640][T12376] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 734.486421][T12376] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 734.489809][T12376] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.489828][T12376] usb 4-1: config 0 has no interface number 0 [ 734.489860][T12376] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.489879][T12376] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.489907][T12376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.652294][T12376] usb 4-1: config 0 descriptor?? [ 735.119826][T12376] prodikeys 0003:041E:2801.0008: collection stack underflow [ 735.119851][T12376] prodikeys 0003:041E:2801.0008: item 0 1 0 12 parsing failed [ 735.141577][T12376] prodikeys 0003:041E:2801.0008: hid parse failed [ 735.141650][T12376] prodikeys 0003:041E:2801.0008: probe with driver prodikeys failed with error -22 [ 735.357467][T14214] usb 4-1: USB disconnect, device number 25 [ 736.026457][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 736.026612][T15218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.269092][T15218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.431240][T15230] vivid-001: disconnect [ 736.816755][T15225] vivid-001: reconnect PZ___- H@[ 738.566456][T15283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3393'. [ 738.570778][T15283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3393'. [ 738.987828][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 739.137829][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 739.139830][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 739.215148][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.215168][ T10] usb 4-1: Product: syz [ 739.215177][ T10] usb 4-1: Manufacturer: syz [ 739.215187][ T10] usb 4-1: SerialNumber: syz [ 739.283339][T15303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3405'. [ 739.915999][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 739.947543][ T10] usb 4-1: USB disconnect, device number 26 [ 740.928826][T15335] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 741.385397][ T10] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 741.385765][ T10] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 741.434475][ T10] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 741.452094][ T10] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 741.452111][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 743.132355][T15384] netlink: 'syz.8.3444': attribute type 4 has an invalid length. [ 743.337825][T15393] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 744.148409][ T36] audit: type=1326 audit(1787231421.948:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.148450][ T36] audit: type=1326 audit(1787231421.968:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.272760][ T36] audit: type=1326 audit(1787231422.088:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.272805][ T36] audit: type=1326 audit(1787231422.088:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.321599][ T36] audit: type=1326 audit(1787231422.138:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.321661][ T36] audit: type=1326 audit(1787231422.138:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.321694][ T36] audit: type=1326 audit(1787231422.138:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.428781][ T36] audit: type=1326 audit(1787231422.248:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.428839][ T36] audit: type=1326 audit(1787231422.248:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.449382][ T36] audit: type=1326 audit(1787231422.268:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15411 comm="syz.9.3453" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20d568e0d9 code=0x7ffc0000 [ 744.738183][T15416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.039841][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 745.107491][T15423] gtp2: entered allmulticast mode [ 746.015529][T15447] Invalid argument reading file caps for ./file0 [ 746.228620][T12376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.689607][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.689660][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.995622][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.204304][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.955311][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.358731][T12376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.494647][T12376] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 748.645423][T12376] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 748.646766][T12376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.692414][T12376] usb 1-1: config 0 descriptor?? [ 748.737651][T12376] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 748.759074][T12937] Bluetooth: hci2: command 0x0406 tx timeout [ 749.539638][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.873208][T12376] gspca_sunplus: reg_w_riv err -71 [ 749.873301][T12376] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 749.937473][T12376] usb 1-1: USB disconnect, device number 6 [ 750.035243][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.655037][T14216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.699674][T15549] team0: No ports can be present during mode change [ 752.890114][T12376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.896505][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 754.134112][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.182944][T14216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.206199][T12376] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 755.392719][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.471618][T12376] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 755.474054][T12376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.617750][T12376] usb 9-1: config 0 descriptor?? [ 755.661120][T12376] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 755.924365][T12376] gspca_sunplus: reg_w_riv err -71 [ 755.924434][T12376] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 755.965838][T12376] usb 9-1: USB disconnect, device number 15 [ 756.354982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.461584][T12376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.719298][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3545'. [ 757.222153][T15624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3549'. [ 757.235930][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.582569][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.584401][T12376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.844734][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 758.001576][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 758.001631][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 758.014336][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 758.049228][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.049248][ T9] usb 1-1: Product: syz [ 758.049259][ T9] usb 1-1: Manufacturer: syz [ 758.049270][ T9] usb 1-1: SerialNumber: syz [ 758.397383][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 758.678531][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.740016][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 758.740037][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 758.917009][T15658] xt_hashlimit: size too large, truncated to 1048576 [ 758.920245][T15658] xt_hashlimit: max too large, truncated to 1048576 [ 759.085820][ T9] usb 1-1: invalid uac2 rates [ 759.086012][ T9] usb 1-1: invalid uac2 rates [ 759.086521][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 759.086554][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 759.262254][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 759.715357][T12376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.924748][ T9] usb 1-1: USB disconnect, device number 7 [ 760.237515][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.352845][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.755546][T12376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.923289][T15571] udevd[15571]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.749305][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 761.749327][T15714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3587'. [ 761.795781][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.839079][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.418416][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.875456][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.134183][T15778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.245128][T12376] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 764.394695][T12376] usb 4-1: Using ep0 maxpacket: 16 [ 764.398289][T12376] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 764.424100][T12376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.424123][T12376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.424147][T12376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.484950][T12376] usb 4-1: config 0 descriptor?? [ 764.922363][T14216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.386026][T15804] bridge1: entered promiscuous mode [ 765.955213][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.168874][T12376] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 766.439220][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.017859][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 768.144428][T14216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.169938][T14216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.185758][ T9] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 768.207794][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 768.207818][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 768.250919][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.250939][ T9] usb 9-1: Product: syz [ 768.250949][ T9] usb 9-1: Manufacturer: syz [ 768.250960][ T9] usb 9-1: SerialNumber: syz [ 768.555954][T15825] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 768.556109][T15825] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 768.616151][ T9] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 768.616169][ T9] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 768.616201][ T9] usbserial_generic 9-1:1.0: generic converter detected [ 768.910476][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 768.952344][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.006321][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.006363][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.008121][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.056173][T12376] corsair 0003:1B1C:1B02.0009: Failed to get K90 initial state (error -71). [ 769.315603][ T9] usb 9-1: generic converter now attached to ttyUSB0 [ 769.665646][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.859898][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.883640][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.901986][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.902340][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.902410][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 769.902541][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 770.358736][T12376] usb 4-1: USB disconnect, device number 27 [ 770.978753][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.426780][ T5604] usb 9-1: USB disconnect, device number 16 [ 771.802160][ T5604] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 771.802711][T12376] ------------[ cut here ]------------ [ 771.802720][T12376] ODEBUG: free active (active state 0) object: ffff88802fce6ab8 object type: work_struct hint: k90_record_led_work+0x0/0x1e0 [ 771.802774][T12376] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: kworker/0:3/12376 [ 771.802808][T12376] Modules linked in: [ 771.802827][T12376] CPU: 0 UID: 0 PID: 12376 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 771.802848][T12376] Tainted: [L]=SOFTLOCKUP [ 771.802854][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.802866][T12376] Workqueue: usb_hub_wq hub_event [ 771.802885][T12376] RIP: 0010:debug_print_object+0x18a/0x230 [ 771.802910][T12376] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 8d 39 60 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 83 f7 e0 0a 48 83 c4 10 5b 41 5c [ 771.802923][T12376] RSP: 0018:ffffc9000e06eff0 EFLAGS: 00010246 [ 771.802936][T12376] RAX: 1ffffffff16d7044 RBX: dffffc0000000000 RCX: 0000000000000000 [ 771.802948][T12376] RDX: ffffffff8bca9b40 RSI: ffffffff8bca95c0 RDI: ffffffff8fbb10f0 [ 771.802960][T12376] RBP: ffffffff8bca9b40 R08: ffff88802fce6ab8 R09: ffffffff8b6b93e0 [ 771.802972][T12376] R10: dffffc0000000000 R11: ffffffff818ef890 R12: 0000000000000000 [ 771.802983][T12376] R13: ffffffff8fbb10f0 R14: ffff88802fce6ab8 R15: ffffffff8b6b8220 [ 771.802996][T12376] FS: 0000000000000000(0000) GS:ffff888125c22000(0000) knlGS:0000000000000000 [ 771.803009][T12376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.803037][T12376] CR2: 00007f13a2a1b7c0 CR3: 00000000382c2000 CR4: 00000000003526f0 [ 771.803055][T12376] Call Trace: [ 771.803061][T12376] [ 771.803068][T12376] ? __pfx_k90_record_led_work+0x10/0x10 [ 771.803093][T12376] ? __pfx_k90_record_led_work+0x10/0x10 [ 771.803121][T12376] debug_check_no_obj_freed+0x2e3/0x450 [ 771.803157][T12376] kfree+0x13e/0x6d0 [ 771.803173][T12376] ? corsair_remove+0xfd/0x260 [ 771.803200][T12376] corsair_remove+0xfd/0x260 [ 771.803237][T12376] ? __pfx_corsair_remove+0x10/0x10 [ 771.803277][T12376] hid_device_remove+0xc8/0x1d0 [ 771.803296][T12376] ? __pfx_hid_device_remove+0x10/0x10 [ 771.803313][T12376] device_release_driver_internal+0x48b/0x880 [ 771.803340][T12376] bus_remove_device+0x449/0x560 [ 771.803361][T12376] ? __pfx_bus_remove_device+0x10/0x10 [ 771.803377][T12376] ? up_read+0x34/0x180 [ 771.803400][T12376] ? kernfs_remove_by_name_ns+0x101/0x140 [ 771.803420][T12376] device_del+0x528/0x8f0 [ 771.803457][T12376] ? __pfx_device_del+0x10/0x10 [ 771.803476][T12376] ? rt_spin_unlock+0x159/0x200 [ 771.803500][T12376] hid_destroy_device+0x6b/0x1b0 [ 771.803519][T12376] usbhid_disconnect+0x9f/0xc0 [ 771.803536][T12376] usb_unbind_interface+0x295/0x9f0 [ 771.803559][T12376] ? kernfs_remove_by_name_ns+0x101/0x140 [ 771.803576][T12376] ? __pfx_usb_unbind_interface+0x10/0x10 [ 771.803593][T12376] device_release_driver_internal+0x4f5/0x880 [ 771.803617][T12376] bus_remove_device+0x449/0x560 [ 771.803636][T12376] ? __pfx_bus_remove_device+0x10/0x10 [ 771.803651][T12376] ? up_read+0x34/0x180 [ 771.803672][T12376] ? kernfs_remove_by_name_ns+0x101/0x140 [ 771.803689][T12376] device_del+0x528/0x8f0 [ 771.803713][T12376] ? __pfx_device_del+0x10/0x10 [ 771.803735][T12376] ? kobject_put+0x516/0x550 [ 771.803760][T12376] usb_disable_device+0x3d4/0x8d0 [ 771.803782][T12376] usb_disconnect+0x32d/0x990 [ 771.803812][T12376] hub_event+0x1bb7/0x4cf0 [ 771.803834][T12376] ? __lock_acquire+0x683/0x2ce0 [ 771.803868][T12376] ? register_lock_class+0x31/0x2e0 [ 771.803903][T12376] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 771.803929][T12376] ? __pfx_hub_event+0x10/0x10 [ 771.803944][T12376] ? process_scheduled_works+0xa1a/0x14c0 [ 771.803966][T12376] ? rcu_is_watching+0x16/0xb0 [ 771.803988][T12376] ? process_scheduled_works+0xa1a/0x14c0 [ 771.804005][T12376] process_scheduled_works+0xa88/0x14c0 [ 771.804042][T12376] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.804064][T12376] ? assign_work+0x3cf/0x5d0 [ 771.804085][T12376] worker_thread+0xa47/0xfb0 [ 771.804113][T12376] ? __kthread_parkme+0x71/0x1f0 [ 771.804140][T12376] kthread+0x38b/0x470 [ 771.804161][T12376] ? __pfx_worker_thread+0x10/0x10 [ 771.804178][T12376] ? __pfx_kthread+0x10/0x10 [ 771.804200][T12376] ret_from_fork+0x514/0xb70 [ 771.804224][T12376] ? __pfx_ret_from_fork+0x10/0x10 [ 771.804246][T12376] ? __switch_to+0xc89/0x1420 [ 771.804267][T12376] ? __pfx_kthread+0x10/0x10 [ 771.804290][T12376] ret_from_fork_asm+0x1a/0x30 [ 771.804325][T12376] [ 771.804335][T12376] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 771.804348][T12376] CPU: 0 UID: 0 PID: 12376 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 771.804368][T12376] Tainted: [L]=SOFTLOCKUP [ 771.804374][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.804383][T12376] Workqueue: usb_hub_wq hub_event [ 771.804398][T12376] Call Trace: [ 771.804403][T12376] [ 771.804409][T12376] vpanic+0x56d/0xa60 [ 771.804432][T12376] ? __pfx__printk+0x10/0x10 [ 771.804448][T12376] ? __pfx_vpanic+0x10/0x10 [ 771.804469][T12376] ? is_bpf_text_address+0x292/0x2b0 [ 771.804487][T12376] ? is_bpf_text_address+0x26/0x2b0 [ 771.804515][T12376] panic+0xc5/0xd0 [ 771.804537][T12376] ? __pfx_panic+0x10/0x10 [ 771.804566][T12376] ? ret_from_fork_asm+0x1a/0x30 [ 771.804593][T12376] __warn+0x315/0x4c0 [ 771.804604][T12376] ? debug_print_object+0xec/0x230 [ 771.804628][T12376] ? debug_print_object+0xec/0x230 [ 771.804650][T12376] __report_bug+0x276/0x570 [ 771.804667][T12376] ? debug_print_object+0xec/0x230 [ 771.804691][T12376] ? __pfx___report_bug+0x10/0x10 [ 771.804713][T12376] ? kasan_save_track+0x4f/0x80 [ 771.804734][T12376] ? kasan_save_free_info+0x40/0x50 [ 771.804756][T12376] ? __kasan_slab_free+0x5c/0x80 [ 771.804771][T12376] ? kfree+0x1c5/0x6d0 [ 771.804788][T12376] report_bug_entry+0x19b/0x290 [ 771.804803][T12376] ? debug_print_object+0x18a/0x230 [ 771.804824][T12376] ? debug_print_object+0x18f/0x230 [ 771.804845][T12376] handle_bug+0xce/0x200 [ 771.804863][T12376] exc_invalid_op+0x1a/0x50 [ 771.804880][T12376] asm_exc_invalid_op+0x1a/0x20 [ 771.804894][T12376] RIP: 0010:debug_print_object+0x18a/0x230 [ 771.804915][T12376] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 8d 39 60 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 83 f7 e0 0a 48 83 c4 10 5b 41 5c [ 771.804928][T12376] RSP: 0018:ffffc9000e06eff0 EFLAGS: 00010246 [ 771.804940][T12376] RAX: 1ffffffff16d7044 RBX: dffffc0000000000 RCX: 0000000000000000 [ 771.804950][T12376] RDX: ffffffff8bca9b40 RSI: ffffffff8bca95c0 RDI: ffffffff8fbb10f0 [ 771.804962][T12376] RBP: ffffffff8bca9b40 R08: ffff88802fce6ab8 R09: ffffffff8b6b93e0 [ 771.804973][T12376] R10: dffffc0000000000 R11: ffffffff818ef890 R12: 0000000000000000 [ 771.804984][T12376] R13: ffffffff8fbb10f0 R14: ffff88802fce6ab8 R15: ffffffff8b6b8220 [ 771.804998][T12376] ? __pfx_work_debug_hint+0x10/0x10 [ 771.805021][T12376] ? __pfx_k90_record_led_work+0x10/0x10 [ 771.805043][T12376] ? __pfx_k90_record_led_work+0x10/0x10 [ 771.805069][T12376] debug_check_no_obj_freed+0x2e3/0x450 [ 771.805103][T12376] kfree+0x13e/0x6d0 [ 771.805116][T12376] ? corsair_remove+0xfd/0x260 [ 771.805142][T12376] corsair_remove+0xfd/0x260 [ 771.805166][T12376] ? __pfx_corsair_remove+0x10/0x10 [ 771.805187][T12376] hid_device_remove+0xc8/0x1d0 [ 771.805205][T12376] ? __pfx_hid_device_remove+0x10/0x10 [ 771.805221][T12376] device_release_driver_internal+0x48b/0x880 [ 771.805246][T12376] bus_remove_device+0x449/0x560 [ 771.805265][T12376] ? __pfx_bus_remove_device+0x10/0x10 [ 771.805280][T12376] ? up_read+0x34/0x180 [ 771.805301][T12376] ? kernfs_remove_by_name_ns+0x101/0x140 [ 771.805319][T12376] device_del+0x528/0x8f0 [ 771.805343][T12376] ? __pfx_device_del+0x10/0x10 [ 771.805363][T12376] ? rt_spin_unlock+0x159/0x200 [ 771.805386][T12376] hid_destroy_device+0x6b/0x1b0 [ 771.805405][T12376] usbhid_disconnect+0x9f/0xc0 [ 771.805422][T12376] usb_unbind_interface+0x295/0x9f0 [ 771.805445][T12376] ? kernfs_remove_by_name_ns+0x101/0x140 [ 771.805461][T12376] ? __pfx_usb_unbind_interface+0x10/0x10 [ 771.805478][T12376] device_release_driver_internal+0x4f5/0x880 [ 771.805503][T12376] bus_remove_device+0x449/0x560 [ 771.805521][T12376] ? __pfx_bus_remove_device+0x10/0x10 [ 771.805537][T12376] ? up_read+0x34/0x180 [ 771.805558][T12376] ? kernfs_remove_by_name_ns+0x101/0x140 [ 771.805575][T12376] device_del+0x528/0x8f0 [ 771.805599][T12376] ? __pfx_device_del+0x10/0x10 [ 771.805616][T12376] ? kobject_put+0x516/0x550 [ 771.805640][T12376] usb_disable_device+0x3d4/0x8d0 [ 771.805662][T12376] usb_disconnect+0x32d/0x990 [ 771.805692][T12376] hub_event+0x1bb7/0x4cf0 [ 771.805713][T12376] ? __lock_acquire+0x683/0x2ce0 [ 771.805737][T12376] ? register_lock_class+0x31/0x2e0 [ 771.805772][T12376] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 771.805797][T12376] ? __pfx_hub_event+0x10/0x10 [ 771.805812][T12376] ? process_scheduled_works+0xa1a/0x14c0 [ 771.805834][T12376] ? rcu_is_watching+0x16/0xb0 [ 771.805855][T12376] ? process_scheduled_works+0xa1a/0x14c0 [ 771.805872][T12376] process_scheduled_works+0xa88/0x14c0 [ 771.805910][T12376] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.805933][T12376] ? assign_work+0x3cf/0x5d0 [ 771.805953][T12376] worker_thread+0xa47/0xfb0 [ 771.805981][T12376] ? __kthread_parkme+0x71/0x1f0 [ 771.806008][T12376] kthread+0x38b/0x470 [ 771.806029][T12376] ? __pfx_worker_thread+0x10/0x10 [ 771.806046][T12376] ? __pfx_kthread+0x10/0x10 [ 771.806069][T12376] ret_from_fork+0x514/0xb70 [ 771.806093][T12376] ? __pfx_ret_from_fork+0x10/0x10 [ 771.806115][T12376] ? __switch_to+0xc89/0x1420 [ 771.806136][T12376] ? __pfx_kthread+0x10/0x10 [ 771.806158][T12376] ret_from_fork_asm+0x1a/0x30 [ 771.806193][T12376] [ 771.806252][T12376] Kernel Offset: disabled