last executing test programs: 4m40.119091942s ago: executing program 32 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000006c0)="0f20d835080000000f22d8c74424000f000000c744240200000000c7442406000000000f011424b919080000b804000000ba000000000f300f01b90a000000f266667600b805000000b955f8ce3d0f01d9460f18c80fc7b702ec000066b80d010f00d8b9800000c00f3235010000000f30", 0x71}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m21.876358706s ago: executing program 33 (id=280): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000540)={'veth1_macvtap\x00', 0xc26d}) 4m21.767033369s ago: executing program 34 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0xffffffffffff9a3b) 4m21.687528558s ago: executing program 35 (id=267): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x14, 0x6, "e60ea2981f43"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m21.609710495s ago: executing program 36 (id=282): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) timerfd_create(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="e4"], 0x20) 4m2.148000644s ago: executing program 37 (id=336): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x9, 0xf}, {0x4, 0xfff3}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff8}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m49.803644053s ago: executing program 6 (id=438): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040800000403"], 0x0, 0x0}, 0x0) 3m48.56123124s ago: executing program 38 (id=449): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m47.60363378s ago: executing program 6 (id=461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) 3m46.983512203s ago: executing program 6 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x0, 0x9, 0x4, 0x0, 0xffffffff, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') 3m46.792050996s ago: executing program 6 (id=463): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) 3m46.622169337s ago: executing program 6 (id=464): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 3m46.386165021s ago: executing program 6 (id=465): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7, 0xeeee8000, 0x2, r2, 0x1}) r3 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xd000, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x0, 0x8, r3}) 3m31.411907266s ago: executing program 39 (id=465): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7, 0xeeee8000, 0x2, r2, 0x1}) r3 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xd000, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x0, 0x8, r3}) 3m2.359536085s ago: executing program 1 (id=761): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)=@in={0x10, 0x2}, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002000)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m59.7377621s ago: executing program 1 (id=779): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x152000, 0x0, 0x12, r3, 0x0) migrate_pages(0x0, 0x1ff, 0x0, &(0x7f0000000000)=0x1) 2m59.529323095s ago: executing program 1 (id=780): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10300}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2002}}) io_uring_enter(r2, 0x2def, 0x700, 0x0, 0x0, 0x0) 2m59.390162753s ago: executing program 1 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 2m59.215195966s ago: executing program 1 (id=782): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) fchdir(r1) 2m58.46812841s ago: executing program 1 (id=785): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400012000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000400)={0x40, 0xf, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m58.141119372s ago: executing program 40 (id=785): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400012000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000400)={0x40, 0xf, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.2895266s ago: executing program 3 (id=1079): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) 2m15.667335188s ago: executing program 3 (id=1084): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) execve(&(0x7f0000000680)='./file1\x00', 0x0, &(0x7f00000007c0)={[&(0x7f0000000140)='\\K;\x9fMN\x13\x1a\x99\x00\xf1\t\"M\xee\x9c\x0f\x1a\x8f=\xb0\x18\xd9\xa2w\xcd\xcc(\x93U\x93\xfc\x8d`\x19\xf9B8n\xc5']}) 2m15.378904798s ago: executing program 3 (id=1088): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/47, 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000040)=""/56, 0x38) 2m15.210154647s ago: executing program 3 (id=1090): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m15.028043923s ago: executing program 3 (id=1093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 2m14.607607041s ago: executing program 3 (id=1099): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, "0b77380a49fed5c1"}) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa) 2m14.339770098s ago: executing program 41 (id=1099): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, "0b77380a49fed5c1"}) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa) 49.408704863s ago: executing program 9 (id=1851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r1, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 49.211048396s ago: executing program 9 (id=1854): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x55b8}, {0xb, 0x2, 0x6, 0x6, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.984927147s ago: executing program 9 (id=1857): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0xa, 0x800800, {0x5, 0x1, 0x3, 0x69, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x4000000, 0x0, "fe1d00aa000000090000000000002804b42718001000"}}) 48.781143463s ago: executing program 9 (id=1860): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 48.515748856s ago: executing program 9 (id=1861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x6) 48.156469265s ago: executing program 9 (id=1867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 47.670758996s ago: executing program 42 (id=1867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 28.531478191s ago: executing program 5 (id=1973): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000500)={0x0, "b7c913bb682eaddb954b9baa9e3beb3f62952860388464c531987523195928cd2bb67fb432881f0131abc85d7e683ac8222e8038d1cec8de23ca68d11b0e6b1e"}, 0x48, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00f13000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x16) 27.584384029s ago: executing program 5 (id=1982): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5423) 27.416170043s ago: executing program 5 (id=1984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x3}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.439454514s ago: executing program 5 (id=1994): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xbc1880, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 26.2957596s ago: executing program 5 (id=1996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x20, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000580), 0x0}, 0x20) 25.904506146s ago: executing program 5 (id=1999): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1) 25.592658234s ago: executing program 43 (id=1999): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1) 5.702210286s ago: executing program 2 (id=2153): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffe, 0xf12703, 0x0, 0x0, 0x0, 0x2}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x4000) 5.591388503s ago: executing program 2 (id=2154): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000300)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="efd443fac82e777f957787d168882e71b5cd0bc6e9273ad5f9708fd6aedd63b00ae1c184488768a227f2", 0x2a}, {&(0x7f00000010c0)="863d0ca930ed05c1ceeecae8c09701ba496ac8b6ead13aff54400004e7f14e834f4c5a23a1b89a8eb0b0bbdc40393c319cdd32dd0ac3ae6103f4146f0fb2bb442abf181264ccd76277285b9f8fdbdcf3aadd6ca2fc0bfb16aad2c2579b21fa0c1718ed3694d5feb6be4f94be60774092fc12cb4c8ab5cf317aee8f005d9a245a6b029e00b10f41a5d61897a2a658c56e9b7e58b6677e3103b5fd49e8c718a6612358bffcb2a928deb13d16d652b22e89dc55706539339fbcda0a94024ad36236aa1916b40766cf0fa3f025cf4a3d6a83e9de0b667ad69edb1389ff57199a24966e496bc95d45dfce11d0fba563a2b881a117fda4cc2a067bf60a914c2d049599ffe48775a2eb48e05ab54cc0314b450b9bf635a7f4c58e98aac2d7d6b07028ddd6af53674aa908ef8b04556743ef5d5ef0ad96469b7edffcdc45e83327c86f868965ab7759c9e90dddfeaef779ad64ff68456f02c9932e9a4321908cd26c597457abb1508c243b75780a3c3b35b41a00f2ca945a84d842a7233e6532bb715700eb0f5caf5119c15a3cec84108ef00263183ab69920f1f3719f9f1c34a7c2cb379d880a800f0b0483c53748b3ee1542d52e076dffd4be0194367ca1e8e41908dea3ba04946dd2c74b8f90cb683c4429319e77e5f40f047dda831c40802f12bc9c4869d2b78090e69d41d7fdbe83d61e4cab25f950af42392a30304f33b7c8fdae1aaddcb6fd7a7957e94cedd612be67bbca7433608f6b8fbbd675bdf4b58e79358d4aac6209235eee2d1df4f95e0cfe88ae009f27ab457136660a99cdee1557e68c6262635162680637b23e59c3fd774ce939708c38de1171757f25a07f5de0eb3c74ef9fefce55fd880d0a5024d326a2df1f629b22c7238fb6790f242c8337694d4ced35131f67f357de1aa66bf8a2f3de1dec6673007bc54f515c93c349342c23314c1a65f7546a99fa3eac1083b676150a2a078c0a22ae55888fe3d5e82259ee1c3d01d4d375bfe4ca3a025f25ac04f16f078f4a3d04423a1e912902619e94343c77960451aa53f21abee6d9f480581aa11f3935b2949b9b8bc0c4d72a3841a56a21abf9d820ea674606a2e6e651d9038a1216e99c3653617d4f37a975f412d4e0293bc65f7b33abfb4508322011621398b02638a8fe72782c750d9482a36cd11acafc6d8a13830662affd6fa697f8fe8a072e8d58dd5f10c9fe6b5d5896763170af127881bf6c26c23f56ecc4687be1711ce4657d67ffbf60e3bac14db0fc523286ad442ab6ae940ce053138ae12816e39389b4f21c43384011426fdb7f2c59899546305d0d58c3fe48d64128489d72923316ae9491978c2987101869f80d22c65ab72bc7809ab891c3c498f0e814238277c1da167a98fe4afdf673b62597144e1f58a90c98402fbf2f1f1905c4b7cfead69888f7c349f20f4f66a8a52c1de025222f453a355ad3e33faed9190067491269f66afb6d5667092febbbeec5f594081f80e8b1e8c6e42de68c7bd2a79389bad5393f4339fe4feb7c741aeebc5acce65031b71f46404975eaf8e3b2cf4e92cb6a7a3ea6b443b3569666c56d55b1a6da4004a907b0c7acfd9f112ac51461ea64d13f7d073c96e1e4b7f5e465f9f5c68dd32607c36c941db45a42c7bfd55efdf15a31f2b6601db82dd9ce686b706e8b7847e5ec1cf953f57799d43fe6276866c916cd2542ce83d7e99e", 0x4bb}], 0x2}}], 0x1, 0x40080) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.468123439s ago: executing program 2 (id=2155): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000980)={0x40, 0x7, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000540)={0x40, 0xf, 0x2, "9d01"}, 0x0, 0x0}) 3.104757887s ago: executing program 8 (id=2166): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 3.005735779s ago: executing program 2 (id=2168): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x20000000) 2.960227042s ago: executing program 8 (id=2169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback, 0x43a}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bbf8c07", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r0) 2.769790783s ago: executing program 8 (id=2172): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @dev}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) 2.728271612s ago: executing program 7 (id=2174): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r0, &(0x7f0000000200)=""/183, 0x28) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) close(r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000b4bffc), 0x4) 2.625292351s ago: executing program 8 (id=2176): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 2.525803542s ago: executing program 7 (id=2178): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.47096165s ago: executing program 8 (id=2179): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = fanotify_init(0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000001, r1, 0x0) r2 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r3 = dup(r2) read$FUSE(r3, 0x0, 0x0) 2.384349641s ago: executing program 8 (id=2181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x80, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.014404945s ago: executing program 2 (id=2187): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4000) 1.575723071s ago: executing program 7 (id=2191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)='5', 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f00000004c0)='_v', 0x2, 0x20012100}) io_uring_enter(r2, 0xe85, 0x0, 0x0, 0x0, 0x0) 1.474208079s ago: executing program 7 (id=2192): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r0, 0x88e74000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x8000) 1.431140452s ago: executing program 0 (id=2193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58b04"]) 1.255381005s ago: executing program 4 (id=2195): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x400, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.138612216s ago: executing program 0 (id=2196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x109000}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x2000, 0x10000}) 1.080246434s ago: executing program 4 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) 1.04799018s ago: executing program 7 (id=2198): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) sendmmsg(r2, &(0x7f00000001c0), 0x78, 0x400c004) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000018c0), 0x0, &(0x7f0000001b40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 860.660255ms ago: executing program 4 (id=2199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000002140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d8002000000000000001e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)={0x10, 0xfffffffffffffffe, r1}, 0x10) 717.35567ms ago: executing program 0 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup2(r2, r2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x58, [{}, {0x0, 0x100000000000000}]}, 0x68) 658.360183ms ago: executing program 4 (id=2201): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty, 0x11}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 447.820418ms ago: executing program 0 (id=2202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random='4\x00'}) 345.663538ms ago: executing program 4 (id=2203): syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x1}, &(0x7f0000000240), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="92"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000240)) 235.701614ms ago: executing program 0 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2eda) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/188, 0xbc}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r1, 0x0) 119.711409ms ago: executing program 0 (id=2205): io_setup(0xe, &(0x7f0000000040)=0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) io_submit(r0, 0x1, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) 109.775199ms ago: executing program 4 (id=2206): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x201, 0x184) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 32.717132ms ago: executing program 7 (id=2207): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 0s ago: executing program 2 (id=2208): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x4e62, &(0x7f0000000380)={0x0, 0xf3b1, 0x10100, 0x0, 0x276}, 0x0, 0x0) kernel console output (not intermixed with test programs): e="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ca37e719 code=0x7ffc0000 [ 232.581327][ T9808] netlink: 'syz.7.1076': attribute type 1 has an invalid length. [ 232.590208][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.618568][ T29] audit: type=1326 audit(1730989318.162:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ca37e719 code=0x7ffc0000 [ 232.639956][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.651679][ T9808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.698814][ T29] audit: type=1326 audit(1730989318.162:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f55ca37e719 code=0x7ffc0000 [ 232.701615][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.723870][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.731178][ T5873] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.748288][ T5873] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.758195][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.776305][ T5873] usb 10-1: SerialNumber: syz [ 232.801238][ T29] audit: type=1326 audit(1730989318.162:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ca37e719 code=0x7ffc0000 [ 232.822633][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.834808][ T9808] bond1: (slave batadv1): making interface the new active one [ 232.866336][ T29] audit: type=1326 audit(1730989318.162:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ca37e719 code=0x7ffc0000 [ 232.887774][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.895212][ T29] audit: type=1326 audit(1730989318.192:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ca37e719 code=0x7ffc0000 [ 232.916991][ T29] audit: type=1326 audit(1730989318.192:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.3.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ca37e719 code=0x7ffc0000 [ 232.930584][ T9808] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 232.938385][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.027985][ T5873] usb 10-1: 0:2 : does not exist [ 233.041661][ T5873] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 233.157645][ T5873] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 233.215116][ T5873] usb 10-1: USB disconnect, device number 6 [ 233.244994][ T9827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.544776][ T9832] binder: 9831:9832 ioctl c0306201 20000580 returned -14 [ 233.750546][ T9843] input: syz0 as /devices/virtual/input/input20 [ 233.820703][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.877948][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.080019][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.233607][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.461104][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.712866][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.745819][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.754709][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.781098][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.792963][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.806849][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.983394][ T9927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.174048][ T52] bridge_slave_1: left allmulticast mode [ 236.188456][ T52] bridge_slave_1: left promiscuous mode [ 236.208678][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.270207][ T52] bridge_slave_0: left allmulticast mode [ 236.284231][ T52] bridge_slave_0: left promiscuous mode [ 236.298833][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.477617][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.502250][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.538487][ T52] bond0 (unregistering): Released all slaves [ 237.928895][ T5848] Bluetooth: hci2: command tx timeout [ 238.262966][ T9918] chnl_net:caif_netlink_parms(): no params data found [ 238.366217][ T52] hsr_slave_0: left promiscuous mode [ 238.372398][ T52] hsr_slave_1: left promiscuous mode [ 238.378855][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.386368][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.394427][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.407817][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.436054][ T52] veth1_macvtap: left promiscuous mode [ 238.442015][ T52] veth0_macvtap: left promiscuous mode [ 238.447703][ T52] veth1_vlan: left promiscuous mode [ 238.453427][ T52] veth0_vlan: left promiscuous mode [ 238.844444][T10015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.864142][T10015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 238.945314][T10015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 238.964336][T10015] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 238.975278][T10015] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 239.010081][T10015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.018170][T10015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 239.085531][T10015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 239.107490][T10015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.114479][T10015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.129952][T10015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.149890][T10015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.156025][T10015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.169759][T10015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.351919][T10049] kernel read not supported for file /#! [ 239.351919][T10049] 2gv-dt"zRF(vt1RWHz a=ڼ (pid: 10049 comm: syz.9.1133) [ 239.388710][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 239.388728][ T29] audit: type=1800 audit(1730989325.162:63): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1133" name=2321200ACD3208678A76F42D64DEFE74F822CC7A52B8C9F09946289B029183E47674EE900E01D80F94F8953194529F57487A90EDE3CED0CD208BB361E3E0EF3DDABC dev="mqueue" ino=32958 res=0 errno=0 [ 239.438644][ T6881] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 239.543276][ T52] team0 (unregistering): Port device team_slave_1 removed [ 239.570865][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.603434][ T52] team0 (unregistering): Port device team_slave_0 removed [ 239.618486][ T6881] usb 6-1: Using ep0 maxpacket: 16 [ 239.627395][ T6881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.648775][ T6881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.659631][ T6881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.673033][ T6881] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 239.692483][ T6881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.723130][ T6881] usb 6-1: config 0 descriptor?? [ 239.753011][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 239.776526][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 239.789870][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.821549][ T5887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.831315][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.849347][ T5887] usb 1-1: config 0 descriptor?? [ 239.855813][T10047] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 240.146984][ T6881] koneplus 0003:1E7D:2E22.000E: item fetching failed at offset 0/2 [ 240.165059][ T6881] koneplus 0003:1E7D:2E22.000E: parse failed [ 240.172421][ T6881] koneplus 0003:1E7D:2E22.000E: probe with driver koneplus failed with error -22 [ 240.243057][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 240.294773][ T5887] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 240.302365][ T5887] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 240.310244][ T5887] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 240.317676][ T5887] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 240.326850][ T5887] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 240.334555][ T5887] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 240.343080][ T5887] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 240.371381][ T5887] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 240.392925][ T6881] usb 6-1: USB disconnect, device number 8 [ 240.533501][ T9918] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.549984][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.557614][ T9918] bridge_slave_0: entered allmulticast mode [ 240.581291][ T9918] bridge_slave_0: entered promiscuous mode [ 240.594038][ T5887] usb 1-1: USB disconnect, device number 10 [ 240.662934][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.683623][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.703459][ T9918] bridge_slave_1: entered allmulticast mode [ 240.732984][ T9918] bridge_slave_1: entered promiscuous mode [ 240.814615][ T9918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.858989][ T9918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.019441][ T9918] team0: Port device team_slave_0 added [ 241.038932][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.045065][ T5836] Bluetooth: hci7: command 0x0406 tx timeout [ 241.085788][ T9918] team0: Port device team_slave_1 added [ 241.118866][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.199983][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 241.309838][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.328309][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.399563][ T9918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.421281][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.428271][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.543770][ T9918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.809603][ T9918] hsr_slave_0: entered promiscuous mode [ 241.842924][ T9918] hsr_slave_1: entered promiscuous mode [ 241.865094][ T9918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.911124][ T9918] Cannot create hsr debugfs directory [ 242.319369][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 243.119012][ T5836] Bluetooth: hci7: command 0x0406 tx timeout [ 243.125388][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.198981][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.279294][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 244.408979][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 245.208614][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.279027][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.368717][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 246.142659][T10191] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 246.707832][T10205] fuse: Bad value for 'fd' [ 247.448919][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 247.520599][T10134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.542398][T10134] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 247.560167][T10134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.719366][T10134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.725446][T10134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.550101][ T9918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.600085][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.606156][ T5848] Bluetooth: hci7: command 0x0406 tx timeout [ 249.613098][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 249.772056][ T5844] Bluetooth: hci2: command 0x040f tx timeout [ 249.778175][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.695345][ T9918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.785952][ T9918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.788319][T10277] fuse: root generation should be zero [ 250.871903][ T9918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.100026][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x7 [ 251.128551][ T25] hid-generic 0000:0000:0000.0010: ignoring exceeding usage max [ 251.153745][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 251.181156][ T9918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.193341][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x6 [ 251.227524][ T9918] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.255427][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0xd [ 251.296196][ T25] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 251.301540][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.312922][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.354622][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.361802][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.533103][ T9918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.809472][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 251.839667][ T5844] Bluetooth: hci2: command 0x040f tx timeout [ 251.968674][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 251.977433][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 251.996950][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.020560][ T25] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.041041][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.042761][ T9918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.051476][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.065776][ T25] usb 1-1: Product: syz [ 252.070462][ T25] usb 1-1: Manufacturer: syz [ 252.075205][ T25] usb 1-1: SerialNumber: syz [ 252.280847][ T5887] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 252.470757][ T5887] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 252.492086][ T5887] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.510389][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 252.519693][ T25] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 252.538575][ T5887] usb 10-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 252.547805][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.571587][ T5887] usb 10-1: config 0 descriptor?? [ 253.031337][ T5887] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 253.038947][ T5887] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 253.046453][ T5887] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 253.054693][ T5887] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 253.070475][ T5887] samsung 0003:0419:0600.0011: unknown main item tag 0x0 [ 253.088932][ T5887] samsung 0003:0419:0600.0011: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.9-1/input0 [ 253.264527][ T5873] usb 10-1: USB disconnect, device number 7 [ 253.580788][ T25] usb 1-1: USB disconnect, device number 11 [ 253.846550][ T8677] udevd[8677]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.521388][ T5922] IPVS: starting estimator thread 0... [ 254.618758][T10372] IPVS: using max 24 ests per chain, 57600 per kthread [ 254.854378][T10360] slcan: can't register candev [ 254.936927][T10380] dccp_invalid_packet: P.Data Offset(0) too small [ 255.231353][T10369] tipc: Started in network mode [ 255.245941][T10369] tipc: Node identity ac1414aa, cluster identity 4711 [ 255.277528][T10369] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.341350][T10369] tipc: Enabled bearer , priority 10 [ 255.357834][T10377] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 255.410437][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.436901][T10377] bond1: entered promiscuous mode [ 255.483051][T10377] bond1: entered allmulticast mode [ 255.530474][T10377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.548583][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.654735][T10378] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 255.688505][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.710048][T10378] bond1: (slave batadv1): making interface the new active one [ 255.728717][T10378] batadv1: entered promiscuous mode [ 255.734093][T10378] batadv1: entered allmulticast mode [ 255.741579][T10378] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 255.828489][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.928999][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.968660][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.108665][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.112511][ T9918] veth0_vlan: entered promiscuous mode [ 256.229339][ T9918] veth1_vlan: entered promiscuous mode [ 256.248508][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.300131][ T9918] veth0_macvtap: entered promiscuous mode [ 256.326376][ T9918] veth1_macvtap: entered promiscuous mode [ 256.393508][ T5922] tipc: Node number set to 2886997162 [ 256.404138][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.428649][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.439090][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.453427][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.463595][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.476086][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.488705][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.499776][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.510533][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.523029][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.533059][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.544367][ T9918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.560231][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.570983][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.581222][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.591936][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.604820][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.617958][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.634487][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.645783][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.661623][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.674481][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.691334][ T9918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.703130][ T9918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.712097][ T9918] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.721281][ T9918] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.734342][ T9918] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.892810][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.928650][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.998026][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.018640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.060093][T10450] netlink: 'syz.5.1239': attribute type 5 has an invalid length. [ 257.228050][ T29] audit: type=1800 audit(1730989343.002:64): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1102" name="file1" dev="overlay" ino=25 res=0 errno=0 [ 257.419972][T10460] input: syz1 as /devices/virtual/input/input22 [ 257.759210][ T5873] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 257.795945][T10473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.803830][T10473] IPv6: NLM_F_CREATE should be set when creating new route [ 257.960038][ T5873] usb 10-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 257.969871][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.994977][ T5873] usb 10-1: config 0 descriptor?? [ 258.017619][ T5873] gspca_main: spca508-2.14.0 probing 8086:0110 [ 258.223651][ T5873] gspca_spca508: reg_read err -32 [ 258.233031][ T5873] gspca_spca508: reg_read err -32 [ 258.247199][ T5873] gspca_spca508: reg_read err -32 [ 258.271534][ T5873] gspca_spca508: reg_read err -32 [ 258.291114][ T5873] gspca_spca508: reg_read err -32 [ 258.519048][ T5873] gspca_spca508: reg write: error -71 [ 258.567912][ T5873] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 258.614762][ T5873] usb 10-1: USB disconnect, device number 8 [ 258.758616][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 258.888933][ T6881] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 258.921093][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.945674][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 1024 [ 258.998711][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 259.134892][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.151536][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.159694][ T25] usb 5-1: Product: syz [ 259.163937][ T25] usb 5-1: Manufacturer: syz [ 259.168638][ T25] usb 5-1: SerialNumber: syz [ 259.174640][ T6881] usb 8-1: Using ep0 maxpacket: 32 [ 259.190431][ T6881] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 259.199187][ T6881] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 259.207859][ T6881] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 259.217800][ T6881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.227866][ T6881] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.237817][ T6881] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.251462][ T6881] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 259.260915][ T6881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.291730][ T6881] usb 8-1: config 0 descriptor?? [ 259.546020][ T6881] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 259.576188][ T6881] usb 8-1: USB disconnect, device number 10 [ 259.602332][ T6881] usblp0: removed [ 260.118662][ T6881] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 260.278965][ T6881] usb 8-1: Using ep0 maxpacket: 32 [ 260.302674][ T6881] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 260.315534][T10543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.333602][ T6881] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 260.369004][ T6881] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 260.378064][ T6881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.414303][ T6881] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 260.427288][ T25] cdc_ncm 5-1:1.0: failed to get mac address [ 260.436552][ T25] cdc_ncm 5-1:1.0: bind() failure [ 260.468761][ T25] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 260.478502][ C0] net_ratelimit: 4 callbacks suppressed [ 260.478519][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.479928][ T6881] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 260.518772][ T25] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 260.536399][ T25] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 260.554696][ T6881] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 260.584939][ T25] usb 5-1: USB disconnect, device number 5 [ 260.593644][ T6881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.605360][ T6881] usb 8-1: config 0 descriptor?? [ 260.819711][ T6881] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 261.061724][ C1] usblp0: nonzero read bulk status received: -71 [ 261.070659][ T6855] usb 8-1: USB disconnect, device number 11 [ 261.201256][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 261.271228][T10498] usblp0: removed [ 261.519006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 262.558513][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.054429][T10644] netlink: 'syz.7.1296': attribute type 9 has an invalid length. [ 263.088678][T10644] netlink: 134660 bytes leftover after parsing attributes in process `syz.7.1296'. [ 263.598754][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.768744][ T6855] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 263.958928][ T6855] usb 5-1: Using ep0 maxpacket: 32 [ 263.974858][ T6855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.010247][ T6855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.058656][ T6855] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 264.118843][ T6855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.152436][ T6855] usb 5-1: config 0 descriptor?? [ 264.595919][ T6855] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 264.638461][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.676906][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'. [ 264.794229][ T6855] ft260 0003:0403:6030.0012: chip code: 5e81 abf2 [ 265.002069][ T6855] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 265.091060][T10730] random: crng reseeded on system resumption [ 265.203110][ T6855] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 265.243541][T10737] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1323'. [ 265.263229][T10737] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1323'. [ 265.459671][ T6855] usb 5-1: USB disconnect, device number 6 [ 265.559797][T10748] syz.0.1325: attempt to access beyond end of device [ 265.559797][T10748] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 265.618556][T10748] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 265.678564][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.958133][T10762] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.1329'. [ 266.432703][T10782] kvm: emulating exchange as write [ 266.718466][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 267.714401][ T29] audit: type=1326 audit(1730989609.496:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 267.758500][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 267.821422][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.826885][ T29] audit: type=1326 audit(1730989609.496:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 267.926928][ T29] audit: type=1326 audit(1730989609.496:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 267.993630][T10854] gretap0: entered promiscuous mode [ 268.011549][ T29] audit: type=1326 audit(1730989609.496:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 268.037013][T10854] vlan2: entered promiscuous mode [ 268.108171][ T29] audit: type=1326 audit(1730989609.496:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 268.164837][ T29] audit: type=1326 audit(1730989609.496:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 268.257138][ T29] audit: type=1326 audit(1730989609.496:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 268.362202][ T29] audit: type=1326 audit(1730989609.496:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 268.456170][ T29] audit: type=1326 audit(1730989609.496:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 268.578928][ T29] audit: type=1326 audit(1730989609.496:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.9.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baa77e719 code=0x7fc00000 [ 268.798632][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 269.188670][ T5922] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 269.340304][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.374429][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.408837][ T5922] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 269.419400][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.428866][ T5922] usb 1-1: SerialNumber: syz [ 269.692070][ T5922] usb 1-1: 0:2 : does not exist [ 269.724717][ T5922] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 269.784264][ T5922] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 269.823211][ T5922] usb 1-1: USB disconnect, device number 12 [ 269.838487][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 270.051525][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.561249][ T5922] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 270.750256][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.788566][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 270.828520][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.858485][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.878566][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 270.888803][ T5922] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.918308][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.966682][ T5922] usb 6-1: config 0 descriptor?? [ 270.996109][T10941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 271.444318][ T5922] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 271.473393][ T5922] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 271.522089][ T5922] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 271.559193][ T5922] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 271.575715][ T5922] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 271.620943][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.629040][ T5922] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 271.639070][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.659431][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.674331][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.688770][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.696985][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.698915][ T5922] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 271.848783][ T5922] usb 6-1: USB disconnect, device number 9 [ 271.919039][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 272.221877][T10970] chnl_net:caif_netlink_parms(): no params data found [ 272.635397][T10970] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.674754][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.699355][T10970] bridge_slave_0: entered allmulticast mode [ 272.719775][T10970] bridge_slave_0: entered promiscuous mode [ 272.742957][T10970] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.768522][T10970] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.789795][T10970] bridge_slave_1: entered allmulticast mode [ 272.809569][T10970] bridge_slave_1: entered promiscuous mode [ 272.842541][T11018] binder: 11014:11018 ioctl c0306201 20000080 returned -14 [ 272.958483][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 273.113705][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 273.113723][ T29] audit: type=1326 audit(1730989614.896:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.4.1400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe81af7e719 code=0x0 [ 273.765195][ T5848] Bluetooth: hci1: command tx timeout [ 273.998466][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 274.362618][T10970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.394583][T10970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.513780][T10970] team0: Port device team_slave_0 added [ 274.563613][T10970] team0: Port device team_slave_1 added [ 274.703784][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.719109][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.808470][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.862275][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.879097][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.938679][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.038463][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.102247][T10970] hsr_slave_0: entered promiscuous mode [ 275.106731][T10970] hsr_slave_1: entered promiscuous mode [ 275.111848][T10970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.111924][T10970] Cannot create hsr debugfs directory [ 275.637558][T10970] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.694093][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1417'. [ 275.840711][ T5848] Bluetooth: hci1: command tx timeout [ 275.925921][T10970] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.078494][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 276.100739][T10970] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.204783][T10970] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.271596][T11125] vlan3: entered promiscuous mode [ 276.285696][T11125] erspan0: entered promiscuous mode [ 276.296115][T11125] vlan3: entered allmulticast mode [ 276.307552][T11125] erspan0: entered allmulticast mode [ 276.323256][T11125] erspan0: left allmulticast mode [ 276.340154][T11125] erspan0: left promiscuous mode [ 276.580368][T10970] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 276.669409][T10970] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 276.755073][T10970] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 276.784644][T10970] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 276.855889][T11150] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1431'. [ 276.912490][T11151] netlink: 'syz.4.1432': attribute type 4 has an invalid length. [ 277.118510][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 277.156622][T10970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.250841][T10970] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.263789][T11167] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.308858][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.316060][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.369335][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.376467][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.919226][ T5848] Bluetooth: hci1: command tx timeout [ 278.065420][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.158481][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 278.391144][T11207] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 278.811326][T10970] veth0_vlan: entered promiscuous mode [ 278.857670][T10970] veth1_vlan: entered promiscuous mode [ 278.908712][T10970] veth0_macvtap: entered promiscuous mode [ 278.916788][T10970] veth1_macvtap: entered promiscuous mode [ 279.014386][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.078160][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.102767][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.125298][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.160392][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.196333][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.206357][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 279.233685][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.298503][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.350300][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.353753][ T5888] hid-generic 0000:0000:0000.0014: unknown main item tag 0x7 [ 279.404566][ T5888] hid-generic 0000:0000:0000.0014: ignoring exceeding usage max [ 279.411727][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.446793][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.449040][ T5888] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 279.501652][ T5888] hid-generic 0000:0000:0000.0014: unknown main item tag 0x6 [ 279.502007][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.536824][ T5888] hid-generic 0000:0000:0000.0014: unknown main item tag 0xd [ 279.591586][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.628859][ T5888] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 279.639023][ T29] audit: type=1326 audit(1730989621.416:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11204 comm="syz.0.1445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9b0d7e719 code=0x0 [ 279.676147][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.743450][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.817275][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.837594][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.847598][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.858276][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.869087][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.880637][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.890585][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.901095][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.910961][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.921527][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.932694][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.943118][T10970] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.951940][T10970] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.960928][T10970] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.971935][T10970] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.008424][ T5848] Bluetooth: hci1: command tx timeout [ 280.095712][ T29] audit: type=1326 audit(1730989621.876:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11250 comm="syz.7.1452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x0 [ 280.156375][T11253] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1454'. [ 280.189697][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 280.238489][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 280.411985][T11259] Invalid ELF header magic: != ELF [ 280.429869][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.437923][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.552112][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.589802][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.204578][T11291] vivid-007: disconnect [ 281.214803][T11290] vivid-007: reconnect [ 281.278516][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 281.396102][ C1] Unknown status report in ack skb [ 281.645879][T11315] x_tables: duplicate underflow at hook 1 [ 282.250376][T11349] Dead loop on virtual device ip6_vti0, fix it urgently! [ 282.318506][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 282.358777][ T5886] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 282.520273][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.545212][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.562757][ T5886] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 282.572196][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.595410][ T5886] usb 6-1: config 0 descriptor?? [ 283.089926][ T5886] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 283.358692][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 283.621745][ T5886] usb 6-1: USB disconnect, device number 10 [ 283.853851][ T5886] kernel write not supported for file /306/attr/current (pid: 5886 comm: kworker/0:5) [ 284.398465][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 284.496079][T11445] input: syz0 as /devices/virtual/input/input24 [ 285.057161][ T29] audit: type=1326 audit(1730989626.826:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.7.1499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x0 [ 285.407633][T11475] Dead loop on virtual device ip6_vti0, fix it urgently! [ 285.438534][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 285.742211][T11483] input: syz0 as /devices/virtual/input/input25 [ 286.483752][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 287.518476][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 288.558877][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 288.610160][ T5886] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 288.808547][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 288.829812][ T5886] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 288.894938][ T5886] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.965998][ T5886] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.014437][ T5886] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.045087][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.081309][ T5886] usb 5-1: Product: syz [ 289.097936][ T5886] usb 5-1: Manufacturer: syz [ 289.115943][ T5886] usb 5-1: SerialNumber: syz [ 289.553680][ T5886] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 289.598454][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 289.685366][T11571] random: crng reseeded on system resumption [ 290.608255][ T5886] usb 5-1: USB disconnect, device number 7 [ 290.638471][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 290.769033][ T5885] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 290.795643][T11614] netlink: 'syz.9.1558': attribute type 1 has an invalid length. [ 290.856273][T11618] netlink: 'syz.7.1559': attribute type 1 has an invalid length. [ 290.884572][ T8677] udevd[8677]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.890876][T11618] bond2: entered promiscuous mode [ 290.910767][T11618] bond2: entered allmulticast mode [ 290.916253][T11618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.936499][T11621] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 290.943802][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.944751][T11621] bond2: (slave batadv2): making interface the new active one [ 290.962662][T11621] batadv2: entered promiscuous mode [ 290.967996][T11621] batadv2: entered allmulticast mode [ 290.974453][T11621] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 290.997413][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.046992][ T5885] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 291.089960][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.116341][ T5885] usb 6-1: config 0 descriptor?? [ 291.488665][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 291.566753][ T5885] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 291.678455][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 291.682137][ T46] usb 5-1: config 0 has no interfaces? [ 291.741262][ T46] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 291.758508][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.787002][ T46] usb 5-1: Product: syz [ 291.798047][ T46] usb 5-1: Manufacturer: syz [ 291.849624][ T46] usb 5-1: SerialNumber: syz [ 291.895263][ T46] usb 5-1: config 0 descriptor?? [ 292.478660][ T46] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 292.578526][ T5886] usb 5-1: USB disconnect, device number 8 [ 292.610280][ T5885] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 292.617970][ T5885] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 292.630978][ T5885] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 292.654344][ T46] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.677671][ T5885] usb 6-1: USB disconnect, device number 11 [ 292.686572][ T46] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.718454][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 292.719400][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.765446][ T46] usb 8-1: Product: syz [ 292.773636][ T46] usb 8-1: Manufacturer: syz [ 292.780300][ T46] usb 8-1: SerialNumber: syz [ 293.758470][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 293.920588][ T46] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 293.933826][ T46] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 293.953459][ T46] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 294.128246][ T46] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 294.210304][ T46] cdc_ncm 8-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 294.396731][ T5888] usb 8-1: USB disconnect, device number 12 [ 294.418922][ T5888] cdc_ncm 8-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 294.798475][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 295.169371][ T5888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 295.349814][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 295.371380][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.392112][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.449071][ T5888] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 295.494880][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.532118][ T5888] usb 6-1: config 0 descriptor?? [ 295.600939][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 295.838530][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 295.997317][ T5888] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 296.021878][ T5888] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 296.054357][ T5888] microsoft 0003:045E:07DA.0017: no inputs found [ 296.091674][ T5888] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 296.298625][ T5887] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 296.330462][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.377807][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.471489][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.483622][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 296.506044][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.541687][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.575900][ T5887] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.586348][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.648838][ T5887] usb 5-1: config 0 descriptor?? [ 296.654527][T11829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 296.676513][ T46] usb 6-1: USB disconnect, device number 12 [ 296.880211][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 297.142007][ T5887] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 297.174636][ T5887] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 297.218869][ T5887] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 297.226324][ T5887] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 297.259391][ T5887] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 297.298232][ T5887] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 297.324027][ T5887] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 297.918535][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 298.024425][T11906] xt_CT: No such helper "snmp_trap" [ 298.314987][T11922] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 298.463618][T11829] usb 5-1: string descriptor 0 read error: -71 [ 298.798948][ T5888] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 298.958456][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 299.012456][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.048846][ T5888] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.086325][ T5888] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 299.107097][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.143183][ T5888] usb 8-1: config 0 descriptor?? [ 299.262257][ T5887] usb 5-1: USB disconnect, device number 9 [ 299.492478][T11973] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1653'. [ 299.593006][ T5888] isku 0003:1E7D:319C.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.7-1/input0 [ 299.998494][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 300.030808][ T972] usb 8-1: USB disconnect, device number 13 [ 300.171606][T12000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.698220][T12024] netlink: 4272 bytes leftover after parsing attributes in process `syz.7.1664'. [ 300.730550][T12024] netlink: 'syz.7.1664': attribute type 3 has an invalid length. [ 300.761028][T12024] netlink: 105 bytes leftover after parsing attributes in process `syz.7.1664'. [ 301.038452][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.538995][ T5888] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 301.605126][T12071] sctp: [Deprecated]: syz.4.1675 (pid 12071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.605126][T12071] Use struct sctp_sack_info instead [ 301.711014][ T5888] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 301.733085][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.819567][ T5888] usb 6-1: config 0 descriptor?? [ 302.078493][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 302.998809][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1683'. [ 303.064107][T12108] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.1682'. [ 303.091998][ T5888] usb 6-1: Cannot set autoneg [ 303.097571][ T5888] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 303.118448][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 303.135715][ T5888] usb 6-1: USB disconnect, device number 13 [ 304.012920][T12148] smc: net device lo applied user defined pnetid SYZ2 [ 304.019996][ T5886] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 304.044031][T12148] smc: net device lo erased user defined pnetid SYZ2 [ 304.158486][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 304.188483][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 304.201633][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.219190][ T5886] usb 6-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 304.239118][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.271533][ T5886] usb 6-1: config 0 descriptor?? [ 304.608636][ T5925] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 304.719270][ T5886] wacom 0003:056A:005D.001A: hidraw0: USB HID v10.00 Device [HID 056a:005d] on usb-dummy_hcd.5-1/input0 [ 304.771331][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 304.780991][ T5925] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 304.807278][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.822915][ T5925] usb 5-1: Product: syz [ 304.827291][ T5925] usb 5-1: Manufacturer: syz [ 304.843094][ T5925] usb 5-1: SerialNumber: syz [ 304.864536][ T5925] usb 5-1: config 0 descriptor?? [ 304.907815][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 304.919167][ T5886] usb 6-1: USB disconnect, device number 14 [ 305.198792][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 305.873947][T12229] loop9: detected capacity change from 0 to 6 [ 305.910915][T12229] loop9: [POWERTEC] p1 [ 305.934796][T12229] loop9: p1 size 46 extends beyond EOD, truncated [ 306.010132][T12235] loop9: [POWERTEC] p1 [ 306.030545][T12235] loop9: p1 size 46 extends beyond EOD, truncated [ 306.201795][T12243] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1712'. [ 306.238449][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 306.247758][ T5925] gspca_sonixj: reg_w1 err -71 [ 306.328623][ T5925] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 306.429298][ T5925] usb 5-1: USB disconnect, device number 10 [ 307.278466][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 308.318446][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 308.426524][ T29] audit: type=1326 audit(1730989650.206:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.475976][ T29] audit: type=1326 audit(1730989650.206:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.542823][ T29] audit: type=1326 audit(1730989650.206:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.638098][ T29] audit: type=1326 audit(1730989650.206:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.698516][ T29] audit: type=1326 audit(1730989650.216:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.750755][ T29] audit: type=1326 audit(1730989650.216:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.858072][ T29] audit: type=1326 audit(1730989650.216:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.887243][ T29] audit: type=1326 audit(1730989650.216:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.893649][T12363] Failed to get privilege flags for destination (handle=0x0:0x0) [ 308.909151][ T29] audit: type=1326 audit(1730989650.216:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 308.938580][ T29] audit: type=1326 audit(1730989650.216:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.7.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x7ffc0000 [ 309.358446][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 309.673300][T12401] debugfs: Directory 'netdev:nicvf0' with parent 'phy19' already present! [ 310.398447][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 310.448180][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 310.888523][ T5886] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 311.068547][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 311.078266][ T5886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 311.110627][ T5886] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 311.164876][ T5886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.224450][ T5886] usb 10-1: Product: syz [ 311.234055][ T5886] usb 10-1: Manufacturer: syz [ 311.248447][ T5886] usb 10-1: SerialNumber: syz [ 311.289773][ T5886] usb 10-1: config 0 descriptor?? [ 311.310862][ T5886] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 311.322668][ T5886] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 311.438459][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 311.668856][ T5922] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 311.840931][ T5922] usb 6-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 311.868552][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.878975][ T5925] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 311.903415][ T5922] usb 6-1: Product: syz [ 311.907655][ T5922] usb 6-1: Manufacturer: syz [ 311.924643][ T5886] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 311.933793][ T5922] usb 6-1: SerialNumber: syz [ 311.950896][ T5922] usb 6-1: config 0 descriptor?? [ 311.970623][ T5922] gspca_main: touptek-2.14.0 probing 0547:6801 [ 312.058803][ T5925] usb 8-1: Using ep0 maxpacket: 8 [ 312.083972][ T5925] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 312.113748][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.138011][ T5925] usb 8-1: Product: syz [ 312.147245][ T5925] usb 8-1: Manufacturer: syz [ 312.178558][ T972] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 312.186303][ T5925] usb 8-1: SerialNumber: syz [ 312.212943][ T5925] usb 8-1: config 0 descriptor?? [ 312.307920][T11642] usb 6-1: USB disconnect, device number 15 [ 312.372354][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.385560][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.395510][ T972] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.411158][ T972] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.425642][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.425950][ T5925] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 312.448844][ T972] usb 5-1: config 0 descriptor?? [ 312.478462][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 312.576513][ T5886] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 312.587515][ T5886] em28xx 10-1:0.0: board has no eeprom [ 312.668592][ T5886] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 312.688053][ T5886] em28xx 10-1:0.0: dvb set to bulk mode. [ 312.700724][ T5873] em28xx 10-1:0.0: Binding DVB extension [ 312.732109][ T5886] usb 10-1: USB disconnect, device number 9 [ 312.749623][ T5886] em28xx 10-1:0.0: Disconnecting em28xx [ 312.814515][ T5873] em28xx 10-1:0.0: Registering input extension [ 312.849068][ T5886] em28xx 10-1:0.0: Closing input extension [ 312.902815][ T972] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 312.937260][ T972] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 312.980629][ T5886] em28xx 10-1:0.0: Freeing device [ 312.996393][ T972] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 313.232686][ T5925] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 313.263316][ T5925] usb 8-1: USB disconnect, device number 14 [ 313.518785][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 314.376069][ T972] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 314.542096][ T972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.553530][ T972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.563453][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 314.572389][ T972] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 314.583330][ T972] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.594588][ T972] usb 8-1: config 0 descriptor?? [ 314.815528][T12576] block nbd4: shutting down sockets [ 315.013682][T11642] usb 5-1: USB disconnect, device number 11 [ 315.015376][ T972] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0 [ 315.083503][ T972] hid-thrustmaster 0003:044F:B65D.001C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 315.114225][ T972] hid-thrustmaster 0003:044F:B65D.001C: Wrong number of endpoints? [ 315.336503][ C0] hid-thrustmaster 0003:044F:B65D.001C: URB to get model id failed with error -71 [ 315.336914][ T25] usb 8-1: USB disconnect, device number 15 [ 315.598446][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 315.725613][T12600] kvm: MONITOR instruction emulated as NOP! [ 315.797829][T12607] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1807'. [ 316.638560][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 317.061382][T12649] syz.0.1812[12649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.061479][T12649] syz.0.1812[12649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.094708][T12649] syz.0.1812[12649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.239591][ T972] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 317.371771][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.508300][ T5844] block nbd7: Receive control failed (result -32) [ 317.519638][ T5848] block nbd7: Receive control failed (result -32) [ 317.522339][T12638] block nbd7: shutting down sockets [ 317.528061][ T972] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.544165][ T972] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 317.570918][ T972] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 317.588197][ T972] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.678451][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 317.686021][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.762164][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 317.762180][ T29] audit: type=1326 audit(1730989659.546:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.7.1820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13cc97e719 code=0x0 [ 317.808839][T12645] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 317.821490][ T972] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 318.061020][ T972] usb 6-1: USB disconnect, device number 16 [ 318.608802][T12721] syz.4.1830 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 318.718450][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 318.924460][ T29] audit: type=1326 audit(1730989660.706:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.9.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6cb7e719 code=0x7ffc0000 [ 318.996301][T12742] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 319.008582][ T29] audit: type=1326 audit(1730989660.706:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.9.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6cb7e719 code=0x7ffc0000 [ 319.089460][ T29] audit: type=1326 audit(1730989660.706:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.9.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fed6cb7e719 code=0x7ffc0000 [ 319.168906][ T29] audit: type=1326 audit(1730989660.766:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.9.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6cb7e719 code=0x7ffc0000 [ 319.258506][ T29] audit: type=1326 audit(1730989660.766:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.9.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6cb7e719 code=0x7ffc0000 [ 319.371726][T12763] hsr0: entered promiscuous mode [ 319.758471][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 320.798554][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 320.814630][T12824] input: syz0 as /devices/virtual/input/input32 [ 321.216316][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.267842][T12843] netlink: 'syz.5.1863': attribute type 1 has an invalid length. [ 321.306470][T12843] bond1: entered promiscuous mode [ 321.323356][T12843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.337664][T12846] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.354481][T12846] bond1: (slave batadv1): making interface the new active one [ 321.372425][T12846] batadv1: entered promiscuous mode [ 321.407879][T12846] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 321.476014][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.766204][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.838823][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 322.053428][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.093164][T12878] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 322.110072][T12878] overlayfs: failed to set xattr on upper [ 322.123803][T12878] overlayfs: ...falling back to redirect_dir=nofollow. [ 322.149668][T12878] overlayfs: ...falling back to index=off. [ 322.172515][T12873] batadv_slave_1: entered promiscuous mode [ 322.179551][T12878] overlayfs: ...falling back to uuid=null. [ 322.217952][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.243172][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.253237][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.264568][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.274295][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.282300][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.321516][T12872] batadv_slave_1: left promiscuous mode [ 322.878451][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 323.111846][T12920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.529369][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 323.686059][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 323.718645][ T25] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 323.726914][ T25] usb 8-1: config 179 has no interface number 0 [ 323.748805][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 323.760420][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 323.771756][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.783023][ T25] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 323.794742][ T25] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 323.808561][ T25] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 323.817978][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.830463][T12922] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 323.918462][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 324.330675][ T5844] Bluetooth: hci1: command tx timeout [ 324.962405][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 326.003355][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 326.117086][ T46] usb 8-1: USB disconnect, device number 16 [ 326.123117][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 326.123165][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 326.399276][ T5844] Bluetooth: hci1: command tx timeout [ 326.754802][ T12] bridge_slave_1: left allmulticast mode [ 326.776517][ T12] bridge_slave_1: left promiscuous mode [ 326.795475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.821075][ T12] bridge_slave_0: left allmulticast mode [ 326.832967][ T12] bridge_slave_0: left promiscuous mode [ 326.854992][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.038621][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 327.758470][ T5886] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 327.931522][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.956930][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.986611][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.038577][ T5886] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.069588][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.078494][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 328.087128][ T5886] usb 6-1: config 0 descriptor?? [ 328.247693][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.266274][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.277720][ T12] bond0 (unregistering): Released all slaves [ 328.482931][ T5844] Bluetooth: hci1: command tx timeout [ 328.523332][ T5886] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 328.530987][ T5886] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 328.539178][ T5886] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 328.552893][ T5886] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 328.789829][T12886] chnl_net:caif_netlink_parms(): no params data found [ 328.850916][ T5886] usb 6-1: USB disconnect, device number 17 [ 329.117071][ T12] hsr_slave_0: left promiscuous mode [ 329.122516][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 329.144388][ T12] hsr_slave_1: left promiscuous mode [ 329.193807][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.210511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.232147][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.248773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.302463][ T12] veth1_macvtap: left promiscuous mode [ 329.308025][ T12] veth0_macvtap: left promiscuous mode [ 329.318624][ T12] veth1_vlan: left promiscuous mode [ 329.323974][ T12] veth0_vlan: left promiscuous mode [ 329.758558][ T5886] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 329.931097][ T5886] usb 6-1: config 0 has no interfaces? [ 329.939753][ T5886] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 329.951424][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.959790][ T5886] usb 6-1: Product: syz [ 329.964186][ T5886] usb 6-1: Manufacturer: syz [ 329.969520][ T5886] usb 6-1: SerialNumber: syz [ 329.985672][ T5886] usb 6-1: config 0 descriptor?? [ 330.158449][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 330.469572][ T12] team0 (unregistering): Port device team_slave_1 removed [ 330.559349][ T5844] Bluetooth: hci1: command tx timeout [ 330.634752][ T12] team0 (unregistering): Port device team_slave_0 removed [ 330.906517][ T969] usb 6-1: USB disconnect, device number 18 [ 331.198461][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 331.528937][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.558675][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.579839][T12886] bridge_slave_0: entered allmulticast mode [ 331.653468][T12886] bridge_slave_0: entered promiscuous mode [ 331.679135][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.702227][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.719609][T12886] bridge_slave_1: entered allmulticast mode [ 331.749671][T12886] bridge_slave_1: entered promiscuous mode [ 331.864952][T12886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.040930][T12886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.238443][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 332.826377][ T29] audit: type=1400 audit(1730989674.606:130): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=13096 comm="syz.7.1937" opid=13096 ocomm="syz.7.1937" [ 333.209373][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 333.285713][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 333.390413][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.400314][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.420173][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.441366][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.467834][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.488103][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.506638][ T25] usb 5-1: Product: syz [ 333.520260][ T25] usb 5-1: Manufacturer: syz [ 333.543439][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 333.551156][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 333.567359][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 333.588415][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 333.812656][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 333.818386][ C1] cdc_wdm 5-1:1.0: Cannot schedule work [ 333.825147][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 333.831009][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 333.837366][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 333.843560][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 333.849259][ C1] cdc_wdm 5-1:1.0: Cannot schedule work [ 333.850339][ T972] usb 5-1: USB disconnect, device number 12 [ 333.854810][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 333.926141][ T969] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 334.169505][ T969] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 334.178735][ T969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.202414][ T969] usb 8-1: config 0 descriptor?? [ 334.318454][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 334.888732][ T5886] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 334.964226][ T972] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 335.052614][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 335.080632][ T5886] usb 5-1: config 0 has no interfaces? [ 335.086197][ T5886] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.095562][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.110001][ T5886] usb 5-1: config 0 descriptor?? [ 335.118687][ T972] usb 6-1: Using ep0 maxpacket: 16 [ 335.140554][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.151909][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.162263][ T972] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 335.173034][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.189355][ T972] usb 6-1: config 0 descriptor?? [ 335.358515][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 335.677023][ T969] usb 8-1: Cannot set autoneg [ 335.682547][ T969] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 335.703981][ T969] usb 8-1: USB disconnect, device number 17 [ 336.034208][ T972] letsketch 0003:6161:4D15.001E: Device info: ࠚ [ 336.255538][ T972] letsketch 0003:6161:4D15.001E: Device info: Д [ 336.398936][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 336.465833][ T972] letsketch 0003:6161:4D15.001E: Device info: 헶 [ 336.706839][ T972] usb 6-1: Max retries (5) exceeded reading string descriptor 1 [ 336.724377][ T972] letsketch 0003:6161:4D15.001E: probe with driver letsketch failed with error -71 [ 336.795017][ T972] usb 6-1: USB disconnect, device number 19 [ 336.813483][T12886] team0: Port device team_slave_0 added [ 336.815727][ T969] usb 5-1: USB disconnect, device number 13 [ 336.830595][T12886] team0: Port device team_slave_1 added [ 336.882025][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.892753][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.930413][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.954685][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.972103][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.034212][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.127464][T12886] hsr_slave_0: entered promiscuous mode [ 337.143194][T12886] hsr_slave_1: entered promiscuous mode [ 337.154577][T12886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.162488][T12886] Cannot create hsr debugfs directory [ 337.438437][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 337.483962][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1954'. [ 338.298528][ T5886] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 338.462246][ T5886] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 338.471918][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.480210][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 338.506349][ T5886] usb 6-1: Product: syz [ 338.524158][ T5886] usb 6-1: Manufacturer: syz [ 338.549894][ T5886] usb 6-1: SerialNumber: syz [ 338.556871][ T5886] usb 6-1: config 0 descriptor?? [ 338.628705][ T46] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 338.709841][T12886] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 338.721373][T12886] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 338.733523][T12886] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 338.745021][T12886] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 338.788572][ T46] usb 8-1: Using ep0 maxpacket: 8 [ 338.798127][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.811600][ T46] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.843561][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.869976][ T46] usb 8-1: config 0 descriptor?? [ 338.888611][ T6881] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 338.907996][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.939920][T12886] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.954714][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.961932][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.988437][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.995602][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.011472][ T5886] usb 6-1: Firmware: major: 108, minor: 101, hardware type: UNKNOWN (114) [ 339.048810][ T6881] usb 5-1: Using ep0 maxpacket: 32 [ 339.064384][ T6881] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=ae.89 [ 339.074851][ T6881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.088784][T12886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.106024][ T6881] usb 5-1: config 0 descriptor?? [ 339.112246][ T46] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 339.144195][ T6881] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.219891][ T5886] usb 6-1: Read permanent extended address 00:00:00:00:00:00:00:c3 from device [ 339.239547][ T5886] usb 6-1: atusb_probe: initialization failed, error = -524 [ 339.256707][ T5886] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 339.299851][ T6881] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 339.344883][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.403825][ T6881] usb 5-1: USB disconnect, device number 14 [ 339.428988][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.439909][ T5886] usb 8-1: USB disconnect, device number 18 [ 339.457723][T11642] usb 6-1: USB disconnect, device number 20 [ 339.469907][ T5886] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 339.518492][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 339.786043][T12886] veth0_vlan: entered promiscuous mode [ 339.814408][T12886] veth1_vlan: entered promiscuous mode [ 339.857395][T12886] veth0_macvtap: entered promiscuous mode [ 339.879288][T12886] veth1_macvtap: entered promiscuous mode [ 339.906387][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.934326][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.959799][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.013165][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.032797][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.054326][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.066797][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.090641][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.113156][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.156080][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.187345][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.209074][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.246729][T12886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.256686][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.267296][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.277767][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.289260][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.299935][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.310417][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.320686][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.331254][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.341139][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.351646][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.361534][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.372055][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.383285][T12886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.439158][T12886] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.448114][T12886] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.457145][T12886] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.465954][T12886] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.558512][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.605478][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.636708][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.687679][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.698086][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 340.721089][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.888902][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 340.920003][ T46] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 340.933665][ T46] usb 5-1: config 0 has no interface number 0 [ 340.960321][ T46] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 340.975806][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.984448][ T46] usb 5-1: Product: syz [ 340.989638][ T46] usb 5-1: Manufacturer: syz [ 340.994266][ T46] usb 5-1: SerialNumber: syz [ 341.009501][ T46] usb 5-1: config 0 descriptor?? [ 341.228960][ T46] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 341.248935][ T46] usb 5-1: USB disconnect, device number 15 [ 341.447563][T13237] overlayfs: failed to decode file handle (len=2, type=1, flags=0, err=-22) [ 341.598443][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 341.697461][T13248] ALSA: seq fatal error: cannot create timer (-22) [ 342.638573][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 342.964638][ T5885] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 343.129380][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 343.149866][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.192204][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.226857][ T5885] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 343.286426][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.302866][ T5885] usb 8-1: config 0 descriptor?? [ 343.425381][ T6815] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.568261][ T6815] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.653371][T13326] openvswitch: netlink: Missing key (keys=40, expected=100) [ 343.750956][ T6815] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.861779][ T5885] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 343.882863][ T6815] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.883096][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.908723][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.917352][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.925911][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.933713][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.941515][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.047602][ T5885] ft260 0003:0403:6030.001F: chip code: 5e81 abf2 [ 344.141254][ T6815] bridge_slave_1: left allmulticast mode [ 344.146949][ T6815] bridge_slave_1: left promiscuous mode [ 344.165294][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.190345][ T6815] bridge_slave_0: left allmulticast mode [ 344.196050][ T6815] bridge_slave_0: left promiscuous mode [ 344.204138][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.248714][ T5885] ft260 0003:0403:6030.001F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 344.270781][ T6815] bond_slave_1: left promiscuous mode [ 344.453253][ T5885] ft260 0003:0403:6030.001F: failed to retrieve status: -32, no wakeup [ 344.463944][ T5885] ft260 0003:0403:6030.001F: i2c bus error: 0x8a [ 344.561053][ T5844] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 344.665992][ T5885] ft260 0003:0403:6030.001F: failed to reset I2C controller: -71 [ 344.740639][ T5885] usb 8-1: USB disconnect, device number 19 [ 344.995853][T13360] [U] #! ./file1 [ 345.396311][ T46] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 345.612600][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.623195][ T46] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 345.647967][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.704508][ T46] usb 5-1: config 0 descriptor?? [ 345.894137][ T6815] team0: Port device macvlan2 removed [ 345.915557][ T6815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.936299][ T6815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.955479][ T6815] bond0 (unregistering): Released all slaves [ 346.085537][ T5844] Bluetooth: hci3: command tx timeout [ 346.132220][ T6815] bond1 (unregistering): (slave batadv1): Releasing active interface [ 346.140531][ T6815] batadv1: left promiscuous mode [ 346.151200][ T6815] bond1 (unregistering): Released all slaves [ 346.157774][ T46] lenovo 0003:17EF:6047.0020: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 346.185844][T13389] syz_tun: entered allmulticast mode [ 346.195134][T13386] syz_tun: left allmulticast mode [ 346.309360][ T6815] tipc: Disabling bearer [ 346.359205][ T6815] tipc: Left network mode [ 346.378296][T13331] chnl_net:caif_netlink_parms(): no params data found [ 346.872061][T13331] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.897458][T13331] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.915374][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2019'. [ 346.931284][T13331] bridge_slave_0: entered allmulticast mode [ 346.949343][T13331] bridge_slave_0: entered promiscuous mode [ 347.225143][T13331] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.260192][T13331] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.278926][T13331] bridge_slave_1: entered allmulticast mode [ 347.296319][T13331] bridge_slave_1: entered promiscuous mode [ 347.323435][ T969] usb 5-1: USB disconnect, device number 16 [ 347.404403][ T46] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 347.431839][T13331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.456382][ T6815] hsr_slave_0: left promiscuous mode [ 347.472052][ T6815] hsr_slave_1: left promiscuous mode [ 347.490826][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.509207][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.525041][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.533365][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.569335][ T46] usb 8-1: too many configurations: 65, using maximum allowed: 8 [ 347.596620][ T6815] veth1_macvtap: left promiscuous mode [ 347.620195][ T5887] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 347.641749][ T6815] veth0_macvtap: left promiscuous mode [ 347.650663][ T46] usb 8-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 347.668558][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.676865][ T6815] veth1_vlan: left promiscuous mode [ 347.687422][ T6815] veth0_vlan: left promiscuous mode [ 347.813978][ T5887] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 347.859304][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.879105][ T5887] usb 9-1: Product: syz [ 347.883356][ T5887] usb 9-1: Manufacturer: syz [ 347.888012][ T5887] usb 9-1: SerialNumber: syz [ 347.935403][ T5887] usb 9-1: config 0 descriptor?? [ 348.136895][ T46] usb 8-1: Found UVC 0.00 device (046d:08c1) [ 348.150491][ T46] usb 8-1: No valid video chain found. [ 348.159773][ T5844] Bluetooth: hci3: command tx timeout [ 348.163113][ T46] usb 9-1: USB disconnect, device number 2 [ 348.346883][ T5922] usb 8-1: USB disconnect, device number 20 [ 348.745258][ T6815] team0 (unregistering): Port device team_slave_1 removed [ 348.850159][ T6815] team0 (unregistering): Port device team_slave_0 removed [ 350.037418][T13331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.239682][ T5844] Bluetooth: hci3: command tx timeout [ 350.427377][T13331] team0: Port device team_slave_0 added [ 350.441001][T13331] team0: Port device team_slave_1 added [ 350.747269][T13331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.780576][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.844133][T13331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.877359][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2045'. [ 350.911018][T13331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.947129][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.067042][T13331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.412215][ T6815] IPVS: stop unused estimator thread 0... [ 351.425115][T13331] hsr_slave_0: entered promiscuous mode [ 351.447651][T13331] hsr_slave_1: entered promiscuous mode [ 351.459258][T13331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.484349][T13331] Cannot create hsr debugfs directory [ 351.960318][ T972] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 352.119162][ T972] usb 9-1: Using ep0 maxpacket: 8 [ 352.157234][ T972] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 352.182409][ T972] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 352.197056][ T972] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.217326][ T972] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.238504][ T972] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.256452][ T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.322528][ T5844] Bluetooth: hci3: command tx timeout [ 352.530568][ T972] usb 9-1: GET_CAPABILITIES returned 0 [ 352.536152][ T972] usbtmc 9-1:16.0: can't read capabilities [ 352.760412][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 352.770307][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 352.824228][ T972] usb 9-1: USB disconnect, device number 3 [ 352.920184][T13617] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.927207][T13617] overlayfs: failed to set xattr on upper [ 352.937935][T13617] overlayfs: ...falling back to redirect_dir=nofollow. [ 352.951390][T13617] overlayfs: ...falling back to metacopy=off. [ 352.978541][T13617] overlayfs: ...falling back to uuid=null. [ 353.527992][T13331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.568735][T13331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.607223][T13331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.677850][T13331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.761884][ T29] audit: type=1800 audit(1730989695.526:131): pid=13652 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2079" name="bus" dev="overlay" ino=185 res=0 errno=0 [ 353.790847][T13331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.808106][T13331] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.819925][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.827044][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.881514][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.888686][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.030012][T13331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.431325][T13331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.534582][T13331] veth0_vlan: entered promiscuous mode [ 354.569448][T13331] veth1_vlan: entered promiscuous mode [ 354.650131][T13331] veth0_macvtap: entered promiscuous mode [ 354.669965][T13331] veth1_macvtap: entered promiscuous mode [ 354.730992][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.778469][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.832703][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.844241][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.855741][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.867511][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.877846][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.891630][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.924647][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.965255][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.975447][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.985942][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.997868][T13331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.010747][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.021269][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.031552][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.042857][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.053027][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.063801][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.073888][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.084562][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.094713][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.105422][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.115536][T13331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.128570][T13331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.152827][T13331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.225328][T13331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.235311][T13331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.244318][T13331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.255102][T13331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.511462][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.541529][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.587195][T13712] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 355.622870][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.661757][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.231645][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2101'. [ 356.245148][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2101'. [ 356.326346][T13741] netlink: 'syz.4.2099': attribute type 39 has an invalid length. [ 356.708643][ T5886] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 356.750496][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 356.800549][T13769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.807857][T13769] IPv6: NLM_F_CREATE should be set when creating new route [ 356.869852][ T5886] usb 9-1: Using ep0 maxpacket: 8 [ 356.901244][ T5886] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 356.910347][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.921963][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 356.937623][ T5873] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 356.948460][ T5873] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.969576][ T5886] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.985436][ T5873] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 357.006626][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.018289][ T5873] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 357.033934][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.048007][ T5873] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.148971][ T5886] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 357.163216][ T5873] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 357.181202][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 357.202623][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.218062][ T5886] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.251142][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.294061][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.323371][ T5886] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 357.332191][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 357.365635][ T5886] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.428694][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.448683][ T5873] usb 3-1: usb_control_msg returned -32 [ 357.458206][ T5886] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.470018][ T5873] usbtmc 3-1:16.0: can't read capabilities [ 357.495918][ T5886] usb 9-1: string descriptor 0 read error: -22 [ 357.502795][ T5886] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 357.516587][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.548978][ T5886] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 357.747635][T13752] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 357.811478][ T5886] usb 9-1: USB disconnect, device number 4 [ 358.079105][ T5873] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 358.156397][T13822] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 358.259155][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 358.269817][ T5873] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 358.300129][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.322525][ T5873] usb 5-1: Product: syz [ 358.338209][ T5873] usb 5-1: Manufacturer: syz [ 358.354420][ T5873] usb 5-1: SerialNumber: syz [ 358.381313][ T5873] usb 5-1: config 0 descriptor?? [ 358.406553][ T972] usb 3-1: USB disconnect, device number 5 [ 358.417690][ T5873] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 358.790935][T13841] block nbd0: shutting down sockets [ 358.809955][ T5925] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 358.985653][ T5925] usb 8-1: Using ep0 maxpacket: 16 [ 358.995860][ T5925] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 359.018722][ T5925] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 359.061618][ T5925] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 359.088941][ T5925] usb 8-1: config 0 interface 0 has no altsetting 0 [ 359.108689][ T5925] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 359.128295][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.137309][ T5925] usb 8-1: Product: syz [ 359.154368][ T5925] usb 8-1: Manufacturer: syz [ 359.172368][ T5925] usb 8-1: SerialNumber: syz [ 359.190978][ T5925] usb 8-1: config 0 descriptor?? [ 359.430747][ T5925] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input34 [ 359.480652][ T5189] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 359.508696][ T5189] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 359.532059][ T5189] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 359.557071][ T5189] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 359.645181][ T6422] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 359.743374][T13837] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 359.785123][ T5189] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 359.821969][ T5886] usb 8-1: USB disconnect, device number 21 [ 359.870394][ T5189] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 359.902382][ T5873] gspca_ov534_9: reg_r err -71 [ 359.919218][ T5189] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 360.088836][ T5925] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 360.168880][ T5873] gspca_ov534_9: Unknown sensor 0000 [ 360.168967][ T5873] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 360.209578][ T5873] usb 5-1: USB disconnect, device number 17 [ 360.258653][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 360.270612][ T5925] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.296535][ T5925] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.327057][ T5925] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.361083][ T5925] usb 9-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 360.380192][ T5885] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 360.398592][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.447396][ T5925] usb 9-1: config 0 descriptor?? [ 360.560272][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 360.577215][ T5885] usb 3-1: config 0 has no interfaces? [ 360.591329][ T5885] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.625202][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.657896][ T5885] usb 3-1: config 0 descriptor?? [ 360.848542][ T5887] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 360.917023][ T5925] wacom 0003:056A:0022.0021: ignoring exceeding usage max [ 360.926536][ T5925] wacom 0003:056A:0022.0021: unknown main item tag 0x0 [ 360.938461][ T5925] wacom 0003:056A:0022.0021: unknown main item tag 0x0 [ 360.955748][ T5925] wacom 0003:056A:0022.0021: unknown main item tag 0x0 [ 360.982276][ T5925] wacom 0003:056A:0022.0021: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 361.011696][ T5925] wacom 0003:056A:0022.0021: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.8-1/input0 [ 361.028695][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 361.048043][ T5925] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0022.0021/input/input35 [ 361.061168][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.078684][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 361.146567][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 361.249216][ T5925] usb 9-1: USB disconnect, device number 5 [ 361.271543][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 361.361558][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 361.740184][ T5887] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 361.760915][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 361.780747][ T5887] usb 5-1: Product: syz [ 361.784968][ T5887] usb 5-1: Manufacturer: syz [ 361.797247][ T5887] usb 5-1: SerialNumber: syz [ 361.809437][ T5887] usb 5-1: config 0 descriptor?? [ 362.067340][ T5873] usb 3-1: USB disconnect, device number 6 [ 362.101057][ T5887] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 362.107954][ T5887] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 362.307249][ T5887] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 362.315439][ T5887] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 362.328160][ T5887] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 362.517973][ T5887] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 362.770310][ T5873] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 362.949993][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.961420][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.972818][ T5873] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.989416][ T5873] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.016353][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.081177][ T5873] usb 9-1: config 0 descriptor?? [ 363.351589][ T5887] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 363.360424][ T5887] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 363.383760][ T5887] usb 5-1: USB disconnect, device number 18 [ 363.524495][ T5873] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 363.535661][ T5873] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 363.546361][ T5873] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 363.990257][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 364.154849][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 364.184772][ T5887] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 364.193189][ T5887] usb 3-1: config 0 has no interface number 0 [ 364.219408][ T5887] usb 3-1: config 0 interface 12 has no altsetting 0 [ 364.257875][ T5887] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 364.267120][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.298032][ T5887] usb 3-1: Product: syz [ 364.303009][ T5887] usb 3-1: Manufacturer: syz [ 364.307825][ T5887] usb 3-1: SerialNumber: syz [ 364.326783][ T5887] usb 3-1: config 0 descriptor?? [ 364.825682][ T5873] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 364.980938][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 364.993867][ T5873] usb 5-1: config 0 has no interfaces? [ 365.000667][ T5873] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 365.010010][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.022173][ T5873] usb 5-1: config 0 descriptor?? [ 365.243535][ T5873] usb 5-1: USB disconnect, device number 19 [ 365.595470][ T5887] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 365.603316][ T5887] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 365.647857][ T46] usb 9-1: USB disconnect, device number 6 [ 365.654607][ T5887] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 365.684636][ T5887] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 365.713914][ T5887] usb 3-1: USB disconnect, device number 7 [ 366.066936][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 366.232365][T13926] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 366.264232][T13926] bond2: (slave vcan1): Error -95 calling set_mac_address [ 367.088534][ T5873] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 367.208137][T14027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.248911][ T5873] usb 9-1: Using ep0 maxpacket: 32 [ 367.264902][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.301477][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.325529][ T5873] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 367.344754][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.371629][ T5873] usb 9-1: config 0 descriptor?? [ 367.390525][ T5873] hub 9-1:0.0: USB hub found [ 367.499516][ T5886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 367.604861][ T5873] hub 9-1:0.0: 1 port detected [ 367.679531][ T5886] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.708136][ T5886] usb 3-1: config 0 has no interface number 0 [ 367.730904][ T5886] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.764999][ T5886] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.786204][ T5886] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 367.820641][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.849408][ T5886] usb 3-1: config 0 descriptor?? [ 367.873339][T14055] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 368.223821][ T5873] hub 9-1:0.0: activate --> -90 [ 368.319414][ T5886] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0023/input/input38 [ 368.456697][ T5886] holtek_kbd 0003:04D9:A055.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 368.503274][ T5886] usb 3-1: USB disconnect, device number 8 [ 368.613570][T14085] x_tables: duplicate underflow at hook 4 [ 368.637095][ T5925] usb 9-1: USB disconnect, device number 7 [ 368.643566][ T5873] usb 9-1: Failed to suspend device, error -19 [ 369.176394][T14110] [ 369.178777][T14110] ====================================================== [ 369.185807][T14110] WARNING: possible circular locking dependency detected [ 369.192843][T14110] 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 Not tainted [ 369.199974][T14110] ------------------------------------------------------ [ 369.207005][T14110] syz.4.2206/14110 is trying to acquire lock: [ 369.213083][T14110] ffff888058720168 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 369.222881][T14110] [ 369.222881][T14110] but task is already holding lock: [ 369.230256][T14110] ffff8880244a6888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 369.239606][T14110] [ 369.239606][T14110] which lock already depends on the new lock. [ 369.239606][T14110] [ 369.250021][T14110] [ 369.250021][T14110] the existing dependency chain (in reverse order) is: [ 369.259049][T14110] [ 369.259049][T14110] -> #3 (&of->mutex){+.+.}-{3:3}: [ 369.266276][T14110] lock_acquire+0x1ed/0x550 [ 369.271320][T14110] __mutex_lock+0x136/0xd70 [ 369.276334][T14110] kernfs_fop_write_iter+0x1ea/0x500 [ 369.282142][T14110] iter_file_splice_write+0xbfa/0x1510 [ 369.288139][T14110] do_splice+0xd68/0x18e0 [ 369.292993][T14110] __se_sys_splice+0x331/0x4a0 [ 369.298270][T14110] do_syscall_64+0xf3/0x230 [ 369.303288][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.309689][T14110] [ 369.309689][T14110] -> #2 (&pipe->mutex){+.+.}-{3:3}: [ 369.317075][T14110] lock_acquire+0x1ed/0x550 [ 369.322100][T14110] __mutex_lock+0x136/0xd70 [ 369.327133][T14110] iter_file_splice_write+0x330/0x1510 [ 369.333125][T14110] do_splice+0xd68/0x18e0 [ 369.338001][T14110] __se_sys_splice+0x331/0x4a0 [ 369.343306][T14110] do_syscall_64+0xf3/0x230 [ 369.348354][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.354784][T14110] [ 369.354784][T14110] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 369.362196][T14110] lock_acquire+0x1ed/0x550 [ 369.367213][T14110] sb_start_write+0x4d/0x1c0 [ 369.372337][T14110] mnt_want_write+0x3f/0x90 [ 369.377345][T14110] ovl_create_object+0x13a/0x3a0 [ 369.382806][T14110] path_openat+0x1c03/0x3590 [ 369.387941][T14110] do_filp_open+0x235/0x490 [ 369.392986][T14110] do_sys_openat2+0x13e/0x1d0 [ 369.398180][T14110] __x64_sys_creat+0x123/0x170 [ 369.403515][T14110] do_syscall_64+0xf3/0x230 [ 369.408538][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.414964][T14110] [ 369.414964][T14110] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}: [ 369.423650][T14110] validate_chain+0x18ef/0x5920 [ 369.429028][T14110] __lock_acquire+0x1384/0x2050 [ 369.434413][T14110] lock_acquire+0x1ed/0x550 [ 369.439439][T14110] down_read+0xb1/0xa40 [ 369.444134][T14110] lookup_slow+0x45/0x70 [ 369.449002][T14110] walk_component+0x2e1/0x410 [ 369.454214][T14110] path_lookupat+0x16f/0x450 [ 369.459341][T14110] filename_lookup+0x256/0x610 [ 369.464638][T14110] kern_path+0x35/0x50 [ 369.469244][T14110] lookup_bdev+0xc5/0x290 [ 369.474121][T14110] resume_store+0x1a0/0x710 [ 369.479161][T14110] kernfs_fop_write_iter+0x3a0/0x500 [ 369.484982][T14110] vfs_write+0xaeb/0xd30 [ 369.489770][T14110] ksys_write+0x183/0x2b0 [ 369.494646][T14110] do_syscall_64+0xf3/0x230 [ 369.499690][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.506122][T14110] [ 369.506122][T14110] other info that might help us debug this: [ 369.506122][T14110] [ 369.516340][T14110] Chain exists of: [ 369.516340][T14110] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 369.516340][T14110] [ 369.529724][T14110] Possible unsafe locking scenario: [ 369.529724][T14110] [ 369.537197][T14110] CPU0 CPU1 [ 369.542561][T14110] ---- ---- [ 369.547928][T14110] lock(&of->mutex); [ 369.551899][T14110] lock(&pipe->mutex); [ 369.558561][T14110] lock(&of->mutex); [ 369.565075][T14110] rlock(&ovl_i_mutex_dir_key[depth]); [ 369.570624][T14110] [ 369.570624][T14110] *** DEADLOCK *** [ 369.570624][T14110] [ 369.578776][T14110] 4 locks held by syz.4.2206/14110: [ 369.583975][T14110] #0: ffff888053b58ef8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 369.593030][T14110] #1: ffff88802f036420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 369.601903][T14110] #2: ffff8880244a6888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 369.611639][T14110] #3: ffff888140edd4b8 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 369.621640][T14110] [ 369.621640][T14110] stack backtrace: [ 369.627533][T14110] CPU: 0 UID: 0 PID: 14110 Comm: syz.4.2206 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 369.638283][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.648341][T14110] Call Trace: [ 369.651622][T14110] [ 369.654553][T14110] dump_stack_lvl+0x241/0x360 [ 369.659249][T14110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.664457][T14110] ? __pfx__printk+0x10/0x10 [ 369.669057][T14110] print_circular_bug+0x13a/0x1b0 [ 369.674079][T14110] check_noncircular+0x36a/0x4a0 [ 369.679024][T14110] ? __pfx_check_noncircular+0x10/0x10 [ 369.684496][T14110] validate_chain+0x18ef/0x5920 [ 369.689350][T14110] ? __pfx_lock_acquire+0x10/0x10 [ 369.694405][T14110] ? __pfx_validate_chain+0x10/0x10 [ 369.699629][T14110] ? __pfx_validate_chain+0x10/0x10 [ 369.704858][T14110] ? __pfx_validate_chain+0x10/0x10 [ 369.710079][T14110] ? __pfx_validate_chain+0x10/0x10 [ 369.715303][T14110] ? unwind_get_return_address+0x4d/0x90 [ 369.720965][T14110] ? __pfx_validate_chain+0x10/0x10 [ 369.726185][T14110] ? register_lock_class+0x102/0x980 [ 369.731502][T14110] ? __pfx_register_lock_class+0x10/0x10 [ 369.737162][T14110] ? mark_lock+0x9a/0x360 [ 369.741512][T14110] __lock_acquire+0x1384/0x2050 [ 369.746390][T14110] lock_acquire+0x1ed/0x550 [ 369.750919][T14110] ? lookup_slow+0x45/0x70 [ 369.755357][T14110] ? __pfx_lock_acquire+0x10/0x10 [ 369.760493][T14110] ? __pfx___might_resched+0x10/0x10 [ 369.765810][T14110] ? __pfx_lock_acquire+0x10/0x10 [ 369.770870][T14110] ? __d_lookup+0x64/0x7b0 [ 369.775306][T14110] down_read+0xb1/0xa40 [ 369.779483][T14110] ? lookup_slow+0x45/0x70 [ 369.783927][T14110] ? __pfx_down_read+0x10/0x10 [ 369.788717][T14110] ? __d_lookup+0x64/0x7b0 [ 369.793164][T14110] ? __d_lookup+0x706/0x7b0 [ 369.797687][T14110] ? bpf_lsm_inode_permission+0x9/0x10 [ 369.803174][T14110] ? security_inode_permission+0xbc/0x320 [ 369.808916][T14110] ? make_vfsuid+0x52/0xa0 [ 369.813346][T14110] ? link_path_walk+0xc60/0xea0 [ 369.818261][T14110] lookup_slow+0x45/0x70 [ 369.822524][T14110] walk_component+0x2e1/0x410 [ 369.827224][T14110] path_lookupat+0x16f/0x450 [ 369.831836][T14110] filename_lookup+0x256/0x610 [ 369.836628][T14110] ? __pfx_filename_lookup+0x10/0x10 [ 369.841943][T14110] ? getname_kernel+0x59/0x2f0 [ 369.846723][T14110] ? rcu_is_watching+0x15/0xb0 [ 369.851503][T14110] ? getname_kernel+0x59/0x2f0 [ 369.856286][T14110] ? getname_kernel+0x140/0x2f0 [ 369.861159][T14110] kern_path+0x35/0x50 [ 369.865254][T14110] lookup_bdev+0xc5/0x290 [ 369.869608][T14110] ? rcu_is_watching+0x15/0xb0 [ 369.874390][T14110] ? __pfx_lookup_bdev+0x10/0x10 [ 369.879347][T14110] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 369.885961][T14110] ? __asan_memcpy+0x40/0x70 [ 369.890572][T14110] resume_store+0x1a0/0x710 [ 369.895098][T14110] ? __pfx_resume_store+0x10/0x10 [ 369.900152][T14110] ? sysfs_kf_write+0x182/0x2a0 [ 369.905027][T14110] ? __pfx_sysfs_kf_write+0x10/0x10 [ 369.910249][T14110] kernfs_fop_write_iter+0x3a0/0x500 [ 369.915566][T14110] vfs_write+0xaeb/0xd30 [ 369.919841][T14110] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 369.925681][T14110] ? __pfx_vfs_write+0x10/0x10 [ 369.930477][T14110] ? fdget_pos+0x24e/0x320 [ 369.934924][T14110] ksys_write+0x183/0x2b0 [ 369.939283][T14110] ? __pfx_ksys_write+0x10/0x10 [ 369.944161][T14110] ? do_syscall_64+0x100/0x230 [ 369.948947][T14110] ? do_syscall_64+0xb6/0x230 [ 369.953738][T14110] do_syscall_64+0xf3/0x230 [ 369.958266][T14110] ? clear_bhb_loop+0x35/0x90 [ 369.962967][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.968895][T14110] RIP: 0033:0x7fe81af7e719 [ 369.973335][T14110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.992960][T14110] RSP: 002b:00007fe81bcd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.001402][T14110] RAX: ffffffffffffffda RBX: 00007fe81b135f80 RCX: 00007fe81af7e719 [ 370.009399][T14110] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003 [ 370.017392][T14110] RBP: 00007fe81aff139e R08: 0000000000000000 R09: 0000000000000000 [ 370.025390][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.033657][T14110] R13: 0000000000000000 R14: 00007fe81b135f80 R15: 00007ffc5a5e1af8 [ 370.041747][T14110] [ 370.063547][T14110] block device autoloading is deprecated and will be removed. [ 370.071330][T14110] syz.4.2206: attempt to access beyond end of device [ 370.071330][T14110] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 370.086406][T14110] PM: Image not found (code -5) [ 378.802449][ T1300] ieee802154 phy1 wpan1: encryption failed: -22