last executing test programs: 20m9.985599674s ago: executing program 3 (id=7086): pipe2$9p(&(0x7f0000001900), 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) close(0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x54) 20m9.905585218s ago: executing program 3 (id=7089): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}, 0xfffffffa}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7294, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 20m9.742680378s ago: executing program 3 (id=7092): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000100)=0xd000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 20m9.280533437s ago: executing program 3 (id=7096): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) 20m8.952231569s ago: executing program 3 (id=7100): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0xa, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f0000003540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 20m8.861764057s ago: executing program 3 (id=7101): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000008500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 19m53.643894387s ago: executing program 32 (id=7101): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000008500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 6m52.37857107s ago: executing program 5 (id=11361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@tcp}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x48000) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000140)=0x7) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x81, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r6, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000300)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, 0x0, 0x22) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000026c0)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000005c0)="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", 0xbff}, {&(0x7f00000015c0)}, {&(0x7f0000000100)="91de3fd55eae28ce5313fb20cc1076816340e1943bb93100a3ac247654968f8c3c06", 0x22}], 0x3, &(0x7f0000002600)=[@rights={{0x2c, 0x1, 0x1, [r8, r6, r6, r6, r9, r1, r11]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, r2, r5, r8, r6, r3]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x90, 0x8000}}], 0x1, 0x40080) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'lo\x00'}) 6m46.700677472s ago: executing program 5 (id=11388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r10}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r9, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x5, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r11, &(0x7f0000007440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=ANY=[@ANYBLOB="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"], 0x408}, 0x50) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x80, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r12, &(0x7f0000000280)) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000a80)={{r4}, "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"}) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xea5bc50b6199d7fe) 6m44.845217809s ago: executing program 5 (id=11399): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) tkill(0x0, 0xb) futex(&(0x7f0000000840)=0x1, 0xd, 0x1, 0x0, &(0x7f00000008c0)=0x1, 0x2) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r2 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) listen(0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0xcf, 0x8, 0x0, 0x0}}, 0x10) 6m43.930552069s ago: executing program 5 (id=11403): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x0, 0x5, 0xafa3, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x13, 0x101, 0xfffffffe, 0xfffd, 0x3, 0x40000003, 0x1, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xfffffffe, 0x3, 0x8, 0x4088, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r3 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000010c0)=@bridge_getvlan={0x40, 0x72, 0x7e3bfe4fa73db39f, 0xfffffffd, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x40}}, 0x4) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') 6m43.482999926s ago: executing program 5 (id=11409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000090baa8dd000800000085264a007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0x5, 0xff, 0x10, 0x1, @time={0x6, 0x20000000}, {0x0, 0x4}, {0x8, 0x5}, @ext={0xda, &(0x7f0000000640)="0f242c080d54a38207b87ea86e70d163f1d1343d5b7e150fb3dfd9e259373cccfd4424d9bdc4d6b546bf6128dd8f190d372f08fbb0d582b9231e53e5f52e04355b17a52879a4ce4adfc37df5fa9e985db8d42dedd8772076228d14549b0bdd73b0a4dbd5e8f713f289af9443f1c962f4f04926c21ae77cddd414c26f8af118a4295e8151b6e8137ff4e867531c4ec0221238efc448ef9191445cbe6583cbcc1d6e56e8111dfb6bcc36a7c6b34b116f96eae3404c3bee8968873cbe420d1b3ef8e2788bd3becd2d4fe843bb480d8d8ee13c859d463ed689c4c7e3"}}, {0x64, 0x6, 0x9, 0x97, @time={0x3, 0xa}, {0x5, 0x4}, {0xfb, 0x5}, @queue={0x3e, {0x7, 0x80000001}}}], 0x38) ptrace(0x4207, r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f0000000200)='O', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}, [0xd, 0x580, 0x4, 0x8000000005, 0x8, 0xffffffffffffffff, 0x26b3, 0x1, 0x9, 0x800000010001, 0xfffffffffffffffd, 0x100000000, 0x0, 0xfffd, 0x4]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 6m39.130841058s ago: executing program 5 (id=11421): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) sendto$inet6(r5, 0x0, 0x0, 0x20000841, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) io_uring_setup(0x7fd0, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r8 = inotify_init1(0x0) r9 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x400) r10 = dup(r8) read$FUSE(r10, 0x0, 0x0) inotify_rm_watch(r10, r9) inotify_rm_watch(r7, r9) 6m38.676600269s ago: executing program 33 (id=11421): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) sendto$inet6(r5, 0x0, 0x0, 0x20000841, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) io_uring_setup(0x7fd0, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r8 = inotify_init1(0x0) r9 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x400) r10 = dup(r8) read$FUSE(r10, 0x0, 0x0) inotify_rm_watch(r10, r9) inotify_rm_watch(r7, r9) 3.925128991s ago: executing program 6 (id=17316): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8c12) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ptrace$setregs(0xd, 0x0, 0xb5, 0x0) io_setup(0xcba, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000037c0)=0xfffffff7, 0x4) close(r0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) io_setup(0x7, &(0x7f0000003840)=0x0) r2 = eventfd2(0x9, 0x80000) io_cancel(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x8, 0xb0, 0xffffffffffffffff, &(0x7f0000003880), 0x0, 0x1ff, 0x0, 0x4, r2}, &(0x7f0000003900)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000003940)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000003980), &(0x7f00000039c0)=0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003a40)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000007040)=[{&(0x7f0000005a80)="a817aae7c25e72767be4063283df06c041b22f45b8650b9fb6c35944d17f01c8f75da6561037062218d4fae7130b1c28e89520f6f6de8db46a0c24fef70ccb3fb451fd3e8afe40984c101325ac5a0fda36ed551eb8498f938e83", 0x5a}, {&(0x7f0000005b40)="d829084ba7293e05886fad3e873a7800ac4f4f36bc9e979171a310496761bdbc029016e8d9da03feaae96c7ee61e3ddd9e3a5920", 0x34}, {&(0x7f0000005bc0)="f42cc5c8bc89ab1904d0504022141e8ef058b496d8c6647b390422a534d49c24104e2c53e57fa6cd0656b64027c93916c7cee5b77e5c6c1246db361518280456ba649242caa03750b17c71d52a138f25c58ce9d65c4716758b932d9685f2727c382614c5252ac47e8c7069958de6f92d976e9bb631492ab8246f8862305bdfb622ac5a511babdffa40d8a96cf68e77da7002b474acdddffdf9e4645b701d8544795e9e7fcbbf99390293b53d59be0dbc578ee60e451b9d836c43daa66db8deda54ab411f970c33c7b919a26b", 0xcc}, {&(0x7f0000005cc0)="5f3993a4bfd47c93404a138eaffd1eec90df17f96469b064d27cd70b2d1a808e3330fc1bda6c2ed1641dab70062f455719a75a3b1d5e78e229c3713378b84aa2e48ed7e91ccc22b06f38357036866cd1f308a27ae90a22e29fe9d351a93663026f82182ac42bf0399004967fea5e536ceacd98bc157b43f68db7a68780193a597588f9af24f2edba31461304cb4c2a888b8dcfdb9632e359de3744fb39ee0b23cc80d4b69293826a87ce0d38b396834c52", 0xb1}, {0x0}, {&(0x7f0000005e40)}, {&(0x7f0000006e40)="b04b080718b1d6ddc64683684c7bac4912143d13a29a0280ad25a6844702bae074b77c520f4623cdb7009d1fd01c6e1f51d59d7fdeb842a26aeed47e1e1b73ad515fafd7226c6212e4ed6d", 0x4b}, {&(0x7f0000006f00)="6159a0d4f38242f264b96e227737", 0xe}, {&(0x7f0000006f40)="54ffe84ea458b721b542e5ad4ca62e9cd0adfa7a7acf624c350b47f0f6859a747d99a8cb3a701f086341fbd53aea1173e7441caa8b1bd5642ecaca926746b2d061d1ff0bcdfb05b8cc0da28501e8165e38e6ec", 0x53}, {0x0}], 0xa) io_getevents(r1, 0x6, 0x3, &(0x7f0000007100)=[{}, {}, {}], &(0x7f0000007180)={0x77359400}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000007340), 0x4002, 0x0) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000007380)='./file0\x00', 0xc0000000) inotify_rm_watch(r6, r7) io_getevents(r1, 0x2, 0xa, &(0x7f00000073c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0) fsetxattr$security_evm(r4, &(0x7f0000007500), &(0x7f0000007540)=@ng={0x4, 0xb, "11458a"}, 0x5, 0x1) 2.706391933s ago: executing program 6 (id=17346): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.490788204s ago: executing program 2 (id=17350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 2.2447238s ago: executing program 2 (id=17353): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x837, &(0x7f00000000c0)={0x0, 0x196ae, 0x400, 0x1, 0x3d0}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010101, 0x9}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.744981965s ago: executing program 1 (id=17360): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1, 0x0, 0x5}, 0x18) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.515439188s ago: executing program 1 (id=17365): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080000000fedbdf250f002d00180007800800020007"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 1.514538279s ago: executing program 6 (id=17366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x7c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xb, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080) 1.430540037s ago: executing program 2 (id=17367): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setpriority(0x3, 0x0, 0x506) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x1, 0x0, 0x27f}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 1.234693164s ago: executing program 1 (id=17370): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 1.223524423s ago: executing program 2 (id=17371): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 1.004768062s ago: executing program 1 (id=17375): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0xb, 0x40, [@private=0xa010100, @broadcast]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 942.192622ms ago: executing program 6 (id=17377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 941.419478ms ago: executing program 2 (id=17378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 794.114685ms ago: executing program 1 (id=17381): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x40, 0x1, 0x2, "69de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 708.132135ms ago: executing program 0 (id=17383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) 618.491132ms ago: executing program 0 (id=17384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 610.576119ms ago: executing program 2 (id=17386): mlockall(0x1) mlockall(0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1}) 568.525405ms ago: executing program 0 (id=17387): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 478.271288ms ago: executing program 4 (id=17388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 468.221144ms ago: executing program 0 (id=17389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x20000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0xa, 0x0, 0x0) 423.989537ms ago: executing program 4 (id=17390): r0 = io_uring_setup(0xaff, &(0x7f0000000380)={0x0, 0xeb9e, 0x400, 0x0, 0x10000003}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, 0x0, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000ec0)={0x1, 0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x0}, 0x20) r1 = io_uring_setup(0x5625, &(0x7f0000000600)={0x0, 0x7aef, 0x0, 0xfffffffd, 0x2cb}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 326.544423ms ago: executing program 4 (id=17391): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) r2 = io_uring_setup(0x491, &(0x7f0000000240)={0x0, 0x3a29, 0x800, 0x2, 0x4000157}) close_range(r2, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x7bfe, 0x3ffb, 0xd, 0x0, 0x56) 316.924959ms ago: executing program 0 (id=17392): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000200)={@host, 0x2814}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000001c0)={0x0, 0x1, 0x59, 0x83}) 240.405774ms ago: executing program 1 (id=17393): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8c12) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ptrace$setregs(0xd, 0x0, 0xb5, 0x0) io_setup(0xcba, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000037c0)=0xfffffff7, 0x4) close(r0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) io_setup(0x7, &(0x7f0000003840)=0x0) r2 = eventfd2(0x9, 0x80000) io_cancel(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x8, 0xb0, 0xffffffffffffffff, &(0x7f0000003880), 0x0, 0x1ff, 0x0, 0x4, r2}, &(0x7f0000003900)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000003940)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000003980), &(0x7f00000039c0)=0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003a40)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000007040)=[{&(0x7f0000005a80)="a817aae7c25e72767be4063283df06c041b22f45b8650b9fb6c35944d17f01c8f75da6561037062218d4fae7130b1c28e89520f6f6de8db46a0c24fef70ccb3fb451fd3e8afe40984c101325ac5a0fda36ed551eb8498f938e83", 0x5a}, {&(0x7f0000005b40)="d829084ba7293e05886fad3e873a7800ac4f4f36bc9e979171a310496761bdbc029016e8d9da03feaae96c7ee61e3ddd9e3a5920", 0x34}, {&(0x7f0000005bc0)="f42cc5c8bc89ab1904d0504022141e8ef058b496d8c6647b390422a534d49c24104e2c53e57fa6cd0656b64027c93916c7cee5b77e5c6c1246db361518280456ba649242caa03750b17c71d52a138f25c58ce9d65c4716758b932d9685f2727c382614c5252ac47e8c7069958de6f92d976e9bb631492ab8246f8862305bdfb622ac5a511babdffa40d8a96cf68e77da7002b474acdddffdf9e4645b701d8544795e9e7fcbbf99390293b53d59be0dbc578ee60e451b9d836c43daa66db8deda54ab411f970c33c7b919a26b", 0xcc}, {&(0x7f0000005cc0)="5f3993a4bfd47c93404a138eaffd1eec90df17f96469b064d27cd70b2d1a808e3330fc1bda6c2ed1641dab70062f455719a75a3b1d5e78e229c3713378b84aa2e48ed7e91ccc22b06f38357036866cd1f308a27ae90a22e29fe9d351a93663026f82182ac42bf0399004967fea5e536ceacd98bc157b43f68db7a68780193a597588f9af24f2edba31461304cb4c2a888b8dcfdb9632e359de3744fb39ee0b23cc80d4b69293826a87ce0d38b396834c52", 0xb1}, {0x0}, {&(0x7f0000005e40)}, {&(0x7f0000006e40)="b04b080718b1d6ddc64683684c7bac4912143d13a29a0280ad25a6844702bae074b77c520f4623cdb7009d1fd01c6e1f51d59d7fdeb842a26aeed47e1e1b73ad515fafd7226c6212e4ed6d59923c1986b53f86298e9cbc", 0x57}, {&(0x7f0000006f00)="6159a0d4f38242f264b96e227737", 0xe}, {&(0x7f0000006f40)="54ffe84ea458b721b542e5ad4ca62e9cd0adfa7a7acf624c350b47f0f6859a747d99a8cb3a701f086341fbd53aea1173e7441caa8b1bd5642ecaca926746b2d061d1ff0bcdfb05b8cc0da28501e8165e38e6ec", 0x53}, {0x0}], 0xa) io_getevents(r1, 0x6, 0x3, &(0x7f0000007100)=[{}, {}, {}], &(0x7f0000007180)={0x77359400}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000007340), 0x4002, 0x0) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000007380)='./file0\x00', 0xc0000000) inotify_rm_watch(r6, r7) io_getevents(r1, 0x2, 0xa, &(0x7f00000073c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0) fsetxattr$security_evm(r4, &(0x7f0000007500), &(0x7f0000007540)=@ng={0x4, 0xb, "11458a"}, 0x5, 0x1) 170.330266ms ago: executing program 4 (id=17394): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x248}}, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f0", 0xf9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 170.049675ms ago: executing program 6 (id=17395): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x83}) 120.598258ms ago: executing program 4 (id=17396): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f000000c600)=[{0x0}, {&(0x7f000000b380)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x40010003, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 84.645399ms ago: executing program 6 (id=17397): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c1}, 0x4) 22.395906ms ago: executing program 0 (id=17398): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 0s ago: executing program 4 (id=17399): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x1f, 0x1003, 0x62}, 0x2c) kernel console output (not intermixed with test programs): from the interface descriptor's value: 2 [ 1370.833201][T31952] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1370.833221][T31952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.913282][T31952] usb 3-1: config 0 descriptor?? [ 1370.994800][ T1325] chnl_net:caif_netlink_parms(): no params data found [ 1371.126758][T31952] usb 3-1: USB disconnect, device number 48 [ 1371.229240][ T1454] overlayfs: failed to clone lowerpath [ 1371.264804][ T1449] overlayfs: failed to clone lowerpath [ 1371.512869][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.513014][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.513261][ T1325] bridge_slave_0: entered allmulticast mode [ 1371.519522][ T1325] bridge_slave_0: entered promiscuous mode [ 1371.568416][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.568739][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.568994][ T1325] bridge_slave_1: entered allmulticast mode [ 1371.597027][ T1325] bridge_slave_1: entered promiscuous mode [ 1371.924827][ T5815] Bluetooth: hci4: command tx timeout [ 1372.326786][ T1493] hub 9-0:1.0: USB hub found [ 1372.330491][ T1493] hub 9-0:1.0: 1 port detected [ 1373.081890][ T1325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.152785][ T1325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.280619][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.422774][ T1507] overlayfs: failed to clone lowerpath [ 1373.443009][ T1507] overlayfs: failed to clone lowerpath [ 1373.780856][ T1522] hub 9-0:1.0: USB hub found [ 1373.785322][ T1522] hub 9-0:1.0: 1 port detected [ 1374.483813][ T5815] Bluetooth: hci4: command tx timeout [ 1374.564897][ T1325] team0: Port device team_slave_0 added [ 1374.608145][ T1325] team0: Port device team_slave_1 added [ 1374.864651][ T5972] bridge_slave_1: left allmulticast mode [ 1374.864679][ T5972] bridge_slave_1: left promiscuous mode [ 1374.864928][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.953885][ T5972] bridge_slave_0: left allmulticast mode [ 1374.953914][ T5972] bridge_slave_0: left promiscuous mode [ 1374.954178][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.318309][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.670386][ T1559] overlayfs: failed to clone lowerpath [ 1375.711590][ T1559] overlayfs: failed to clone lowerpath [ 1375.840952][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.031553][ T5972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.152601][ T5972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.248479][ T5972] bond0 (unregistering): Released all slaves [ 1376.320456][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.353966][ T1325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.353978][ T1325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.353992][ T1325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.560316][ T5815] Bluetooth: hci4: command tx timeout [ 1376.938012][ T1325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.938029][ T1325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.938048][ T1325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.122072][ T5990] kworker/u8:34 (5990) used greatest stack depth: 12856 bytes left [ 1377.441875][ T1325] hsr_slave_0: entered promiscuous mode [ 1377.443278][ T1325] hsr_slave_1: entered promiscuous mode [ 1377.444226][ T1325] debugfs: 'hsr0' already exists in 'hsr' [ 1377.444249][ T1325] Cannot create hsr debugfs directory [ 1377.610555][ T5972] hsr_slave_0: left promiscuous mode [ 1377.648665][ T5972] hsr_slave_1: left promiscuous mode [ 1377.649528][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.683246][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.960334][ T5938] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1378.110592][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 1378.113261][ T5938] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1378.113286][ T5938] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1378.113305][ T5938] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1378.113322][ T5938] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1378.113340][ T5938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1378.113363][ T5938] usb 3-1: config 0 has no interface number 0 [ 1378.113409][ T5938] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1378.113433][ T5938] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1378.113453][ T5938] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1378.113486][ T5938] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1378.113510][ T5938] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1378.113526][ T5938] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1378.116621][ T5938] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1378.116648][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.116666][ T5938] usb 3-1: Product: syz [ 1378.116679][ T5938] usb 3-1: Manufacturer: syz [ 1378.116691][ T5938] usb 3-1: SerialNumber: syz [ 1378.288804][ T5938] usb 3-1: config 0 descriptor?? [ 1378.296008][ T5938] usb 3-1: selecting invalid altsetting 2 [ 1378.817958][ C1] usb 3-1: async_complete: urb error -71 [ 1378.818072][ C1] usb 3-1: async_complete: urb error -71 [ 1378.818163][ C1] usb 3-1: async_complete: urb error -71 [ 1378.825518][ T5938] get_1284_register: usb error -71 [ 1378.825845][ T5938] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 1378.858326][ T5938] usb 3-1: USB disconnect, device number 49 [ 1379.830563][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.961599][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.366961][ T5972] team0 (unregistering): Port device team_slave_1 removed [ 1381.600912][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.984707][ T1734] overlayfs: overlapping lowerdir path [ 1382.170752][ T1735] overlayfs: overlapping lowerdir path [ 1382.281103][ T5972] team0 (unregistering): Port device team_slave_0 removed [ 1383.051379][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.216541][ T1770] hub 9-0:1.0: USB hub found [ 1383.221729][ T1770] hub 9-0:1.0: 1 port detected [ 1386.090692][T22826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.120282][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.200398][ T1830] hub 9-0:1.0: USB hub found [ 1387.336252][ T1830] hub 9-0:1.0: 1 port detected [ 1387.531422][T22826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.798180][ T37] kauditd_printk_skb: 168 callbacks suppressed [ 1387.798363][ T37] audit: type=1326 audit(1761419046.590:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.798408][ T37] audit: type=1326 audit(1761419046.590:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.798474][ T37] audit: type=1326 audit(1761419046.590:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.830230][ T37] audit: type=1326 audit(1761419046.600:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.830281][ T37] audit: type=1326 audit(1761419046.610:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.830319][ T37] audit: type=1326 audit(1761419046.610:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.830357][ T37] audit: type=1326 audit(1761419046.610:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.830393][ T37] audit: type=1326 audit(1761419046.610:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.830430][ T37] audit: type=1326 audit(1761419046.610:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1387.830474][ T37] audit: type=1326 audit(1761419046.610:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1843 comm="syz.1.12290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1388.371595][ T1852] lo: entered promiscuous mode [ 1388.402713][ T1852] tunl0: entered promiscuous mode [ 1388.406447][ T1852] gre0: entered promiscuous mode [ 1388.429718][ T1852] gretap0: entered promiscuous mode [ 1388.434321][ T1852] erspan0: entered promiscuous mode [ 1388.435195][ T1852] ip_vti0: entered promiscuous mode [ 1388.437519][ T1852] ip6_vti0: entered promiscuous mode [ 1388.438304][ T1852] sit0: entered promiscuous mode [ 1388.444834][ T1852] ip6tnl0: entered promiscuous mode [ 1388.446513][ T1852] ip6gre0: entered promiscuous mode [ 1388.448260][ T1852] syz_tun: entered promiscuous mode [ 1388.453878][ T1852] ip6gretap0: entered promiscuous mode [ 1388.458041][ T1852] bridge0: entered promiscuous mode [ 1388.493359][ T1852] team0: entered promiscuous mode [ 1388.493382][ T1852] team_slave_0: entered promiscuous mode [ 1388.493601][ T1852] team_slave_1: entered promiscuous mode [ 1388.517015][ T1852] nlmon0: entered promiscuous mode [ 1388.560968][ T1852] caif0: entered promiscuous mode [ 1388.560989][ T1852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1389.223128][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.115780][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.172270][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.255237][ T1948] hub 9-0:1.0: USB hub found [ 1392.259722][ T1948] hub 9-0:1.0: 1 port detected [ 1392.777562][ T1325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1393.028908][ T1325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1393.122826][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.138433][ T1325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1393.175229][ T1325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1393.483302][ T1325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.532141][ T1325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.557378][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.557584][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.653224][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.653396][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.008438][ T1325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.202352][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.210535][ T1325] veth0_vlan: entered promiscuous mode [ 1396.219473][ T1325] veth1_vlan: entered promiscuous mode [ 1396.475139][ T1325] veth0_macvtap: entered promiscuous mode [ 1396.540769][ T1325] veth1_macvtap: entered promiscuous mode [ 1396.574421][ T1325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.636735][ T1325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.655493][T22826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.655751][T22826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.655983][T22826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.656015][T22826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.600848][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.050269][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.050291][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.240899][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.241451][T22789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.261872][T22789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.261891][T22789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.157795][ T2147] hub 9-0:1.0: USB hub found [ 1399.158411][ T2147] hub 9-0:1.0: 1 port detected [ 1400.373494][ T2165] hub 9-0:1.0: USB hub found [ 1400.389381][ T2165] hub 9-0:1.0: 1 port detected [ 1404.512412][ T2168] infiniband syz2: set down [ 1404.512431][ T2168] infiniband syz2: added ipvlan0 [ 1404.625016][ C1] Dead loop on virtual device wlan0, fix it urgently! [ 1404.650099][ T2168] RDS/IB: syz2: added [ 1404.651183][ T2168] smc: adding ib device syz2 with port count 1 [ 1404.651688][ T2168] smc: ib device syz2 port 1 has no pnetid [ 1404.737519][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.623665][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.742949][ T2218] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1406.387533][ T2226] hub 9-0:1.0: USB hub found [ 1406.394173][ T2226] hub 9-0:1.0: 1 port detected [ 1408.640560][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.083275][ T2296] overlayfs: failed to clone lowerpath [ 1409.134925][ T2302] overlayfs: failed to clone lowerpath [ 1410.547958][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.173638][ T2345] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12498'. [ 1411.360597][ T2359] openvswitch: netlink: Flow actions attr not present in new flow. [ 1411.682576][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.164488][ T2426] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12534'. [ 1414.164589][ T2426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12534'. [ 1414.369101][ C1] sd 0:0:1:0: [sda] tag#7792 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1414.369169][ C1] sd 0:0:1:0: [sda] tag#7792 CDB: Read(6) 08 00 00 00 03 44 [ 1414.720553][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.780598][ T2467] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1415.849743][ T2487] netlink: 'syz.1.12555': attribute type 1 has an invalid length. [ 1416.247889][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.885780][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.961501][ T5938] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1417.239235][ T5938] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1417.239339][ T5938] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1417.239592][ T5938] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1417.240586][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.270794][ T2498] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1417.466564][ T2513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12564'. [ 1417.675672][ T2513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1417.704169][ T2516] vlan0: entered promiscuous mode [ 1417.704191][ T2516] bond1: entered promiscuous mode [ 1417.704355][ T2516] vlan0: entered allmulticast mode [ 1417.704367][ T2516] bond1: entered allmulticast mode [ 1417.731847][ T5938] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1417.735041][ T5938] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input37 [ 1418.075360][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.328867][ T5938] usb 7-1: USB disconnect, device number 2 [ 1418.328956][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1418.391898][ T2513] gretap1: entered promiscuous mode [ 1418.392054][ T2513] gretap1: entered allmulticast mode [ 1418.393201][ T2513] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1419.377603][ T2607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12598'. [ 1419.377748][ T2607] netlink: 'syz.2.12598': attribute type 3 has an invalid length. [ 1421.251006][ T2662] hub 9-0:1.0: USB hub found [ 1421.251352][ T2662] hub 9-0:1.0: 1 port detected [ 1421.280373][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.949056][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.704696][T22789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.007301][ T2726] netlink: 'syz.1.12643': attribute type 20 has an invalid length. [ 1423.204668][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.450475][ T2772] hub 9-0:1.0: USB hub found [ 1426.532064][ T2772] hub 9-0:1.0: 1 port detected [ 1426.835145][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.682548][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.163417][ T2838] bond1: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 1428.163461][ T2838] bond1: entered allmulticast mode [ 1428.322889][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.865129][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.846396][ T3026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12759'. [ 1432.890466][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.033541][ T3038] openvswitch: netlink: Missing valid actions attribute. [ 1433.033574][ T3038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.745001][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.746907][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.749745][ T3060] overlayfs: overlapping lowerdir path [ 1433.786538][ T3061] overlayfs: overlapping lowerdir path [ 1433.918338][ T3071] netlink: 'syz.1.12784': attribute type 2 has an invalid length. [ 1433.918360][ T3071] netlink: 'syz.1.12784': attribute type 1 has an invalid length. [ 1434.592681][ T3085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1435.918523][ T3128] ALSA: mixer_oss: invalid OSS volume 'u' [ 1436.133458][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.430454][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12821'. [ 1438.331871][ T3211] overlayfs: failed to clone lowerpath [ 1438.358093][ T3211] overlayfs: failed to clone lowerpath [ 1439.013267][ T3250] hub 9-0:1.0: USB hub found [ 1439.018962][ T3250] hub 9-0:1.0: 1 port detected [ 1439.436904][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.620494][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.783207][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.800570][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.856271][ T3323] overlayfs: failed to clone lowerpath [ 1442.909399][ T3331] overlayfs: failed to clone lowerpath [ 1443.388264][ T3339] hub 9-0:1.0: USB hub found [ 1443.469931][ T3339] hub 9-0:1.0: 1 port detected [ 1445.533426][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.562861][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.966715][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.040790][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.938766][ T3467] overlayfs: failed to clone lowerpath [ 1449.972490][ T3467] overlayfs: failed to clone lowerpath [ 1451.005952][ T5815] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1451.192099][T27969] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1451.367367][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.367832][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.554218][T27969] usb 7-1: too many configurations: 20, using maximum allowed: 8 [ 1451.580717][T27969] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1451.580744][T27969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.586263][T27969] usb 7-1: config 0 descriptor?? [ 1452.460447][T27969] gspca_main: 8086:0110 too many config [ 1452.480508][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.481132][T27969] usb 7-1: USB disconnect, device number 3 [ 1453.866111][ T37] audit: type=1800 audit(1761419112.610:1786): pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.2.13007" name="/" dev="sockfs" ino=125721 res=0 errno=0 [ 1454.570429][ T3623] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13020'. [ 1454.570454][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13020'. [ 1454.570466][ T3623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13020'. [ 1455.939662][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.484904][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.303833][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.032137][ T3693] overlayfs: failed to clone lowerpath [ 1459.007753][ T3706] overlayfs: failed to clone lowerpath [ 1459.008704][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.734767][ T37] audit: type=1326 audit(1761419118.530:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3722 comm="syz.2.13062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42f07efc9 code=0x7ffc0000 [ 1459.768398][ T37] audit: type=1326 audit(1761419118.560:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3722 comm="syz.2.13062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fc42f07efc9 code=0x7ffc0000 [ 1459.768451][ T37] audit: type=1326 audit(1761419118.560:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3722 comm="syz.2.13062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42f07efc9 code=0x7ffc0000 [ 1459.768490][ T37] audit: type=1326 audit(1761419118.560:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3722 comm="syz.2.13062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42f07efc9 code=0x7ffc0000 [ 1462.080392][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.294917][ T2332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.580363][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.829993][ T3803] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 1465.659704][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.396806][ T3849] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13114'. [ 1466.786376][ T3874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13127'. [ 1467.388566][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.054698][ T5815] Bluetooth: hci1: Invalid handle: 0xfd00 > 0x0eff [ 1468.720445][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.727380][ T2332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.728139][T31952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.752459][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.281757][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.492528][T32379] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 1471.190395][ T3993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13183'. [ 1471.190421][ T3993] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13183'. [ 1471.190437][ T3993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13183'. [ 1472.500242][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.795280][ T4046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1472.795296][ T4046] IPv6: NLM_F_CREATE should be set when creating new route [ 1472.795423][ T4046] IPv6: NLM_F_CREATE should be set when creating new route [ 1472.795453][ T4046] IPv6: NLM_F_CREATE should be set when creating new route [ 1473.122552][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.635081][ T2332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.530396][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.943604][ T4145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13251'. [ 1475.943633][ T4145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13251'. [ 1477.240554][ T4145] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1477.774489][ T4145] bond2 (unregistering): Released all slaves [ 1478.620357][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.887686][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.902852][ T4187] netlink: 'syz.1.13265': attribute type 3 has an invalid length. [ 1479.025503][ T4200] overlayfs: failed to clone lowerpath [ 1479.158468][ T4202] hub 9-0:1.0: USB hub found [ 1479.164674][ T4202] hub 9-0:1.0: 1 port detected [ 1480.263027][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.650377][ T4205] overlayfs: failed to clone lowerpath [ 1480.972478][ T5815] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1482.340291][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.104891][ T4298] netlink: 'syz.2.13314': attribute type 10 has an invalid length. [ 1484.104913][ T4298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13314'. [ 1484.104944][ T4298] veth0_vlan: entered allmulticast mode [ 1484.107615][ T4298] bridge0: port 3(veth0_vlan) entered blocking state [ 1484.107850][ T4298] bridge0: port 3(veth0_vlan) entered disabled state [ 1484.122665][ T4298] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1484.645239][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.653924][ T2332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.641666][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1485.921667][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.970332][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1485.978739][ T31] usb 7-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 1485.978766][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.978784][ T31] usb 7-1: Product: syz [ 1485.978797][ T31] usb 7-1: Manufacturer: syz [ 1485.978809][ T31] usb 7-1: SerialNumber: syz [ 1486.020003][ T31] usb 7-1: config 0 descriptor?? [ 1486.031062][ T31] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 1486.120236][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.477806][ T31] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1486.477823][ T31] sq905c 7-1:0.0: Reading version command failed [ 1486.477906][ T31] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 1486.514928][ T31] usb 7-1: USB disconnect, device number 4 [ 1489.360997][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.408123][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.495574][ T4491] hub 9-0:1.0: USB hub found [ 1491.547627][ T4491] hub 9-0:1.0: 1 port detected [ 1492.156843][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.160257][T24160] Bluetooth: hci4: command 0x0406 tx timeout [ 1492.400579][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.755823][ T4551] overlayfs: overlapping lowerdir path [ 1493.937586][ T4551] overlayfs: overlapping lowerdir path [ 1495.440837][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.479026][ T4608] overlayfs: failed to clone lowerpath [ 1495.501621][ T4608] overlayfs: failed to clone lowerpath [ 1496.749139][T22826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.790279][T27969] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1496.980545][T27969] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.980582][T27969] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1496.980594][T27969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.989059][T27969] usb 7-1: config 0 descriptor?? [ 1496.994110][T27969] pwc: Askey VC010 type 2 USB webcam detected. [ 1497.446549][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.622417][T27969] pwc: recv_control_msg error -71 req 02 val 2700 [ 1497.622756][T27969] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1497.623259][T27969] pwc: recv_control_msg error -71 req 04 val 1000 [ 1497.623632][T27969] pwc: recv_control_msg error -71 req 04 val 1300 [ 1497.623972][T27969] pwc: recv_control_msg error -71 req 04 val 1400 [ 1497.624295][T27969] pwc: recv_control_msg error -71 req 02 val 2000 [ 1497.624614][T27969] pwc: recv_control_msg error -71 req 02 val 2100 [ 1497.624956][T27969] pwc: recv_control_msg error -71 req 04 val 1500 [ 1497.625284][T27969] pwc: recv_control_msg error -71 req 02 val 2500 [ 1497.625597][T27969] pwc: recv_control_msg error -71 req 02 val 2400 [ 1497.625908][T27969] pwc: recv_control_msg error -71 req 02 val 2600 [ 1497.626222][T27969] pwc: recv_control_msg error -71 req 02 val 2900 [ 1497.626534][T27969] pwc: recv_control_msg error -71 req 02 val 2800 [ 1498.630256][T27969] pwc: recv_control_msg error -71 req 04 val 1100 [ 1498.630733][T27969] pwc: recv_control_msg error -71 req 04 val 1200 [ 1498.653446][T27969] pwc: Registered as video103. [ 1498.674125][T27969] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 1498.691414][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.698616][T27969] usb 7-1: USB disconnect, device number 5 [ 1499.097409][ T4689] XFS (nullb0): Invalid superblock magic number [ 1499.698787][T24160] Bluetooth: hci4: command 0x0406 tx timeout [ 1500.088379][ T4749] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1500.266894][T27969] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1500.410264][T27969] usb 3-1: Using ep0 maxpacket: 32 [ 1500.412913][T27969] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1500.412938][T27969] usb 3-1: config 0 has no interface number 0 [ 1500.416003][T27969] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1500.416030][T27969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.416048][T27969] usb 3-1: Product: syz [ 1500.416060][T27969] usb 3-1: Manufacturer: syz [ 1500.416073][T27969] usb 3-1: SerialNumber: syz [ 1500.471601][T27969] usb 3-1: config 0 descriptor?? [ 1500.476021][T27969] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1500.508931][ T4767] Invalid ELF header magic: != ELF [ 1500.881451][ T4791] netlink: 'syz.6.13536': attribute type 30 has an invalid length. [ 1500.900950][ T4792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13535'. [ 1500.900974][ T4792] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13535'. [ 1500.900989][ T4792] netlink: 'syz.1.13535': attribute type 5 has an invalid length. [ 1500.901001][ T4792] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13535'. [ 1501.054315][T27969] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1501.075650][T27969] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1501.241918][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1501.243755][ T5938] usb 3-1: USB disconnect, device number 50 [ 1501.251879][ T5938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1501.284532][ T4809] netlink: 80 bytes leftover after parsing attributes in process `syz.6.13543'. [ 1501.284566][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13543'. [ 1501.292746][ T5938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1501.293386][ T5938] quatech2 3-1:0.51: device disconnected [ 1501.854766][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.920144][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.650675][ T4853] netlink: 'syz.6.13564': attribute type 1 has an invalid length. [ 1502.971599][ T5938] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1503.123614][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1503.126351][ T5938] usb 7-1: not running at top speed; connect to a high speed hub [ 1503.127862][ T5938] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1503.127885][ T5938] usb 7-1: config 0 has no interface number 0 [ 1503.127931][ T5938] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1503.127955][ T5938] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1503.127975][ T5938] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1503.206318][ T5938] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1503.206440][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1503.206459][ T5938] usb 7-1: Product: syz [ 1503.206472][ T5938] usb 7-1: Manufacturer: syz [ 1503.206484][ T5938] usb 7-1: SerialNumber: syz [ 1503.247794][ T5938] usb 7-1: config 0 descriptor?? [ 1503.271087][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.966148][ T5938] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input39 [ 1504.010363][ T5938] usb 7-1: USB disconnect, device number 6 [ 1504.543269][ T4910] overlayfs: overlapping lowerdir path [ 1504.900277][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.911658][ T4922] overlayfs: overlapping lowerdir path [ 1507.326184][ T4992] hub 9-0:1.0: USB hub found [ 1507.332762][ T4992] hub 9-0:1.0: 1 port detected [ 1507.967610][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.150979][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.338387][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.200468][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.440578][ T5091] overlayfs: failed to clone lowerpath [ 1511.472075][ T5091] overlayfs: failed to clone lowerpath [ 1511.610276][T29722] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1511.770398][T29722] usb 7-1: Using ep0 maxpacket: 8 [ 1512.258212][T29722] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1512.259746][T29722] usb 7-1: config 4 has an invalid interface number: 30 but max is 0 [ 1512.259771][T29722] usb 7-1: config 4 has no interface number 0 [ 1512.259805][T29722] usb 7-1: config 4 interface 30 has no altsetting 0 [ 1512.309009][T29722] usb 7-1: string descriptor 0 read error: -22 [ 1512.309099][T29722] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1512.309111][T29722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.356946][T29722] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1512.357040][T29722] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1512.357695][T29722] dvb-usb: bulk message failed: -22 (2/0) [ 1512.400879][T29722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1512.401628][T29722] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1512.401666][T29722] usb 7-1: media controller created [ 1512.432943][T29722] dvb-usb: bulk message failed: -22 (6/0) [ 1512.432959][T29722] dw2102: i2c transfer failed. [ 1512.432978][T29722] dvb-usb: bulk message failed: -22 (6/0) [ 1512.432985][T29722] dw2102: i2c transfer failed. [ 1512.432994][T29722] dvb-usb: bulk message failed: -22 (6/0) [ 1512.433001][T29722] dw2102: i2c transfer failed. [ 1512.433009][T29722] dvb-usb: bulk message failed: -22 (6/0) [ 1512.433016][T29722] dw2102: i2c transfer failed. [ 1512.433025][T29722] dvb-usb: bulk message failed: -22 (6/0) [ 1512.433031][T29722] dw2102: i2c transfer failed. [ 1512.433040][T29722] dvb-usb: bulk message failed: -22 (6/0) [ 1512.433046][T29722] dw2102: i2c transfer failed. [ 1512.433052][T29722] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1512.517309][T29722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1512.560600][T29722] dvb-usb: bulk message failed: -22 (3/0) [ 1512.560625][T29722] dw2102: command 0x0e transfer failed. [ 1512.560634][T29722] dvb-usb: bulk message failed: -22 (3/0) [ 1512.560651][T29722] dw2102: command 0x0e transfer failed. [ 1512.880233][T29722] dvb-usb: bulk message failed: -22 (3/0) [ 1512.880257][T29722] dw2102: command 0x0e transfer failed. [ 1512.880267][T29722] dvb-usb: bulk message failed: -22 (3/0) [ 1512.880279][T29722] dw2102: command 0x0e transfer failed. [ 1512.880288][T29722] dvb-usb: bulk message failed: -22 (1/0) [ 1512.880300][T29722] dw2102: command 0x51 transfer failed. [ 1512.880309][T29722] dvb-usb: bulk message failed: -22 (5/0) [ 1512.880322][T29722] dw2102: i2c probe for address 0x68 failed. [ 1512.880333][T29722] dvb-usb: bulk message failed: -22 (5/0) [ 1512.880345][T29722] dw2102: i2c probe for address 0x69 failed. [ 1512.880354][T29722] dvb-usb: bulk message failed: -22 (5/0) [ 1512.880367][T29722] dw2102: i2c probe for address 0x6a failed. [ 1512.880376][T29722] dw2102: probing for demodulator failed. Is the external power switched on? [ 1512.880385][T29722] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1513.110222][T29722] rc_core: IR keymap rc-tt-1500 not found [ 1513.110239][T29722] Registered IR keymap rc-empty [ 1513.111408][T29722] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1513.113038][T29722] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input40 [ 1513.116323][T29722] dvb-usb: schedule remote query interval to 250 msecs. [ 1513.116343][T29722] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1513.116355][T29722] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1513.171601][T29722] usb 7-1: USB disconnect, device number 7 [ 1513.313978][T29722] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1513.443765][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.565740][ T5181] IPv6: Can't replace route, no match found [ 1514.211026][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.251953][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.516777][ T5214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13716'. [ 1515.198100][ T5256] ptrace attach of "./syz-executor exec"[5257] was attempted by "./syz-executor exec"[5256] [ 1517.090327][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1517.240521][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1517.275452][ T31] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1517.275585][ T31] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1517.275666][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1517.509733][ T31] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1517.509822][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.509900][ T31] usb 7-1: Product: syz [ 1517.509965][ T31] usb 7-1: Manufacturer: syz [ 1517.510046][ T31] usb 7-1: SerialNumber: syz [ 1517.654275][ T31] usb 7-1: config 0 descriptor?? [ 1517.739474][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.780266][ T5308] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1517.861365][ T5308] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1518.240343][ T31] rc_core: IR keymap rc-hauppauge not found [ 1518.240361][ T31] Registered IR keymap rc-empty [ 1518.246749][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.272019][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.292655][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1518.312965][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input41 [ 1518.334749][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.350620][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.370589][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.390885][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.410563][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.430600][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.450569][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.470573][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.490690][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.510597][ T31] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1518.533496][ T31] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1518.533518][ T31] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1518.566405][ T31] usb 7-1: USB disconnect, device number 8 [ 1519.256577][T22767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.305067][T22767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.634300][ T5429] hub 9-0:1.0: USB hub found [ 1520.637346][ T5429] hub 9-0:1.0: 1 port detected [ 1521.307826][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.624782][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13827'. [ 1523.096260][ T5485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13844'. [ 1523.122289][ T5485] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1524.320554][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.321156][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.016445][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.158224][ T5639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13908'. [ 1527.360437][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.407683][ T5755] hub 9-0:1.0: USB hub found [ 1528.411391][ T5755] hub 9-0:1.0: 1 port detected [ 1530.330262][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1530.401181][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.481605][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1530.483893][ T31] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1530.483916][ T31] usb 7-1: config 0 has no interface number 0 [ 1530.483964][ T31] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1530.483987][ T31] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1530.486040][ T31] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1530.486065][ T31] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1530.486083][ T31] usb 7-1: Product: syz [ 1530.486095][ T31] usb 7-1: SerialNumber: syz [ 1530.561593][ T31] usb 7-1: config 0 descriptor?? [ 1530.588228][ T31] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1530.614383][ T31] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input42 [ 1530.727049][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.782923][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.932272][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.933213][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.933478][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.933716][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.933950][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.934181][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.934410][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.934639][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1530.934866][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1531.957866][ T31] usb 7-1: USB disconnect, device number 9 [ 1531.957959][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1531.972891][ T31] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1532.734426][ T5887] 9pnet_fd: p9_fd_create_unix (5887): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1534.700340][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.970775][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14019'. [ 1535.651942][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1536.310234][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1536.312739][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.312769][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.312789][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1536.312827][ T31] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1536.312848][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.379335][ T31] usb 3-1: config 0 descriptor?? [ 1536.490695][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.527783][ T37] audit: type=1800 audit(1761419195.320:1791): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.14042" name="nullb0" dev="tmpfs" ino=4018 res=0 errno=0 [ 1537.389211][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389247][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389272][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389294][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389316][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389337][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389359][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389381][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389402][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.389423][ T31] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 1537.473539][ T31] hid-rmi 0003:06CB:81A7.002B: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 1537.495474][ T31] usb 3-1: USB disconnect, device number 51 [ 1537.770614][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.742171][ T6111] overlayfs: failed to clone lowerpath [ 1539.777170][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14104'. [ 1539.794600][ T6120] overlayfs: failed to clone lowerpath [ 1539.820266][ T5874] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1539.972119][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 1539.974819][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.974848][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.974882][ T5874] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1539.974903][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.032947][ T5874] usb 3-1: config 0 descriptor?? [ 1541.369084][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.371972][ T5874] ft260 0003:0403:6030.002C: item fetching failed at offset 0/2 [ 1541.372718][ T5874] ft260 0003:0403:6030.002C: failed to parse HID [ 1541.372812][ T5874] ft260 0003:0403:6030.002C: probe with driver ft260 failed with error -22 [ 1541.563551][T31952] usb 3-1: USB disconnect, device number 52 [ 1541.588687][ T6146] netlink: 'syz.6.14117': attribute type 1 has an invalid length. [ 1541.604116][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.589598][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.770958][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14149'. [ 1544.401028][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.771538][ T6266] overlayfs: overlapping lowerdir path [ 1545.065149][ T6267] overlayfs: overlapping lowerdir path [ 1545.597645][ T6285] hub 9-0:1.0: USB hub found [ 1545.601279][ T6285] hub 9-0:1.0: 1 port detected [ 1546.514534][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.721298][ T5010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.902918][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14190'. [ 1546.902942][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14190'. [ 1547.521413][ T6332] hub 9-0:1.0: USB hub found [ 1547.525318][ T6332] hub 9-0:1.0: 1 port detected [ 1548.350501][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.875821][ T6365] Malformed UNC in devname [ 1548.875821][ T6365] [ 1548.876046][ T6365] CIFS: VFS: Malformed UNC in devname [ 1549.391550][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.791300][ T1899] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1549.970045][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.970181][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.970200][ T1899] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1549.970236][ T1899] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1549.970256][ T1899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.036250][ T1899] usb 7-1: config 0 descriptor?? [ 1550.243030][ T6415] [U] ¬ [ 1550.505205][ T1899] nintendo 0003:057E:2019.002D: hidraw0: USB HID v80.00 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 1550.594693][ T1899] nintendo 0003:057E:2019.002D: Failed to get joycon info; ret=-38 [ 1550.594716][ T1899] nintendo 0003:057E:2019.002D: Failed to retrieve controller info; ret=-38 [ 1550.594741][ T1899] nintendo 0003:057E:2019.002D: Failed to initialize controller; ret=-38 [ 1550.708630][ T1899] nintendo 0003:057E:2019.002D: probe - fail = -38 [ 1550.708814][ T1899] nintendo 0003:057E:2019.002D: probe with driver nintendo failed with error -38 [ 1550.727098][ T1899] usb 7-1: USB disconnect, device number 10 [ 1551.360506][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.550340][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.698341][ T6498] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1553.799358][ T6503] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1554.304209][ T6533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1555.178077][ T5009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.201488][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.240921][ T5815] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1558.241992][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.792648][ T6640] hub 9-0:1.0: USB hub found [ 1558.795745][ T6640] hub 9-0:1.0: 1 port detected [ 1558.829357][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.530355][ T6683] sctp: [Deprecated]: syz.1.14359 (pid 6683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1560.530355][ T6683] Use struct sctp_sack_info instead [ 1560.801770][ T5009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.848844][ T6699] overlayfs: failed to clone lowerpath [ 1560.861428][ T6699] overlayfs: failed to clone lowerpath [ 1560.950360][ T5874] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1561.100185][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 1561.102749][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.102768][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.102790][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1561.102802][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.106037][ T5874] usb 3-1: config 0 descriptor?? [ 1561.109806][ T5874] hub 3-1:0.0: USB hub found [ 1561.293715][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.359235][ T5874] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 1561.569884][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 1561.570004][ T5874] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1561.612671][ T5874] usb 3-1: USB disconnect, device number 53 [ 1562.585612][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14396'. [ 1563.950296][ T31] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1564.360445][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.380675][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.475474][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1564.475526][ T31] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1564.475545][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.487671][ T31] usb 3-1: config 0 descriptor?? [ 1564.802748][ T5815] Bluetooth: hci1: unexpected event for opcode 0x204e [ 1564.923886][ T31] creative-sb0540 0003:041E:3100.002E: item fetching failed at offset 1/5 [ 1564.924666][ T31] creative-sb0540 0003:041E:3100.002E: parse failed [ 1564.924763][ T31] creative-sb0540 0003:041E:3100.002E: probe with driver creative-sb0540 failed with error -22 [ 1565.132822][ T5874] usb 3-1: USB disconnect, device number 54 [ 1566.313069][ T6870] tracefs: Bad value for 'uid' [ 1566.313088][ T6870] tracefs: Bad value for 'uid' [ 1566.560819][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.380184][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.411311][ T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1567.560359][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1567.562655][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1567.562684][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.562719][ T31] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1567.562740][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.583005][ T31] usb 3-1: config 0 descriptor?? [ 1568.905500][ T31] corsair 0003:1B1C:1B3E.002F: item fetching failed at offset 0/3 [ 1568.906318][ T31] corsair 0003:1B1C:1B3E.002F: parse failed [ 1568.906417][ T31] corsair 0003:1B1C:1B3E.002F: probe with driver corsair failed with error -22 [ 1569.151180][ T5874] usb 3-1: USB disconnect, device number 55 [ 1569.293504][ T6989] overlayfs: missing 'lowerdir' [ 1569.695244][ T6993] overlayfs: overlapping lowerdir path [ 1569.761042][T22767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.405218][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.322837][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.060320][ T5874] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1573.210273][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 1573.217787][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.217819][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.217839][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1573.217878][ T5874] usb 7-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 1573.217898][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.289296][ T5874] usb 7-1: config 0 descriptor?? [ 1573.442710][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.478525][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14573'. [ 1573.740925][ T5874] hid-generic 0003:045E:00DA.0030: ignoring exceeding usage max [ 1573.760678][ T5874] hid-generic 0003:045E:00DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:00da] on usb-dummy_hcd.6-1/input0 [ 1573.969046][ T5874] usb 7-1: USB disconnect, device number 11 [ 1574.090268][ T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1574.243521][ T31] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1574.243548][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1574.246648][ T31] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1574.246676][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.246695][ T31] usb 3-1: Product: syz [ 1574.246707][ T31] usb 3-1: Manufacturer: syz [ 1574.246720][ T31] usb 3-1: SerialNumber: syz [ 1574.255344][ T31] usb 3-1: config 0 descriptor?? [ 1574.267327][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1574.803170][ T31] usb 3-1: USB disconnect, device number 56 [ 1575.684116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.738674][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.482430][ T31] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1577.082841][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.082865][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1577.085783][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1577.085807][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.085825][ T31] usb 3-1: Product: syz [ 1577.085838][ T31] usb 3-1: Manufacturer: syz [ 1577.085851][ T31] usb 3-1: SerialNumber: syz [ 1577.192757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.210200][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.445907][ T5009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.576676][ T31] usb 3-1: cannot find UAC_HEADER [ 1577.638890][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1577.939993][ T7288] overlayfs: missing 'lowerdir' [ 1578.294436][ T31] usb 3-1: USB disconnect, device number 57 [ 1578.667576][ T5815] Bluetooth: hci1: Unknown advertising packet type: 0x5f [ 1578.667601][ T5815] Bluetooth: hci1: Unknown advertising packet type: 0x7d [ 1578.667616][ T5815] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1579.303107][ T7352] binder: 7351:7352 ioctl c018620c 2000000071c0 returned -22 [ 1579.305061][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14671'. [ 1579.532280][ T7361] overlayfs: failed to clone lowerpath [ 1579.698052][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14684'. [ 1580.140382][ T7401] netlink: 312 bytes leftover after parsing attributes in process `syz.6.14696'. [ 1580.240455][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.280825][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.437050][ T7444] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1582.476133][ T7492] overlayfs: overlapping lowerdir path [ 1583.201564][ T5009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.280804][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.511826][T31952] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1583.660344][T31952] usb 3-1: Using ep0 maxpacket: 16 [ 1583.663677][T31952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.663706][T31952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.663724][T31952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1583.663760][T31952] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1583.663779][T31952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.736923][T31952] usb 3-1: config 0 descriptor?? [ 1584.162349][T31952] hid_parser_main: 1 callbacks suppressed [ 1584.162374][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.162402][T31952] microsoft 0003:045E:07DA.0031: ignoring exceeding usage max [ 1584.167733][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.167766][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.167789][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.167813][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.167837][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.167860][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.167881][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.171493][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.171526][T31952] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1584.386312][T31952] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1584.386344][T31952] microsoft 0003:045E:07DA.0031: no inputs found [ 1584.386356][T31952] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 1584.418164][T31952] usb 3-1: USB disconnect, device number 58 [ 1584.673879][ T7602] overlayfs: failed to clone lowerpath [ 1585.715846][ T7666] [U]  [ 1585.715897][ T7666] [U] K{‘ [ 1585.716542][ T7666] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1585.719392][ T7666] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1585.720756][ T7666] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1585.729685][ T7666] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1585.735586][ T7666] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1585.736604][ T7666] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1585.737663][ T7666] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1585.745270][ T7666] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 1585.755316][ T7666] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 1585.756616][ T7666] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1585.756882][ T7666] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1585.759437][ T7666] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1585.762346][ T7666] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1585.763114][ T7666] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1585.763672][ T7666] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1585.765050][ T7666] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1585.765106][ T7666] [U] ¹ EC [ 1585.766273][ T7666] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 1585.773145][ T7664] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1586.320361][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.392565][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14835'. [ 1587.041707][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.440267][T29722] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1587.600343][T29722] usb 7-1: Using ep0 maxpacket: 8 [ 1587.604033][T29722] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1587.604059][T29722] usb 7-1: config 179 has no interface number 0 [ 1587.604172][T29722] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1587.604195][T29722] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1587.604216][T29722] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1587.604238][T29722] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1587.604259][T29722] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1587.604297][T29722] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1587.604316][T29722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.718777][ T7738] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1587.943558][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1587.944641][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.157284][ T1899] usb 7-1: USB disconnect, device number 12 [ 1588.157318][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1588.157459][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1588.411461][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.480331][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.488657][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.489419][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.500330][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.920618][ T5874] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1590.072625][ T5874] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1590.072657][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1590.072689][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1590.072710][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.118334][ T5874] usb 3-1: config 0 descriptor?? [ 1590.119198][ T7819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1590.564976][ T5874] logitech 0003:046D:C50C.0032: hidraw0: USB HID v1.01 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 1590.757479][ T31] usb 3-1: USB disconnect, device number 59 [ 1592.560329][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.995128][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.083867][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.700496][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14991'. [ 1594.823772][ T37] audit: type=1326 audit(1761419253.620:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.6.14997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1594.824085][ T37] audit: type=1326 audit(1761419253.620:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.6.14997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1594.825010][ T37] audit: type=1326 audit(1761419253.620:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.6.14997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1594.826842][ T37] audit: type=1326 audit(1761419253.620:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.6.14997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1594.827157][ T37] audit: type=1326 audit(1761419253.620:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.6.14997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1594.827465][ T37] audit: type=1326 audit(1761419253.620:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8042 comm="syz.6.14997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1595.960512][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.555722][T29722] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1597.710184][T29722] usb 3-1: Using ep0 maxpacket: 32 [ 1597.716135][T29722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.716177][T29722] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1597.716198][T29722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.765083][T29722] usb 3-1: config 0 descriptor?? [ 1598.196190][T29722] magicmouse 0003:05AC:0265.0033: item fetching failed at offset 3/5 [ 1598.197013][T29722] magicmouse 0003:05AC:0265.0033: magicmouse hid parse failed [ 1598.197112][T29722] magicmouse 0003:05AC:0265.0033: probe with driver magicmouse failed with error -22 [ 1598.243121][ T8139] overlayfs: failed to clone lowerpath [ 1598.281323][ T8139] overlayfs: failed to clone lowerpath [ 1598.390384][T29722] usb 3-1: USB disconnect, device number 60 [ 1598.570243][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.591660][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15050'. [ 1598.890674][ T8181] netlink: 240 bytes leftover after parsing attributes in process `syz.6.15060'. [ 1598.890697][ T8181] netlink: 80 bytes leftover after parsing attributes in process `syz.6.15060'. [ 1598.971738][ T8185] openvswitch: netlink: Unknown nsh attribute 0 [ 1598.971777][ T8185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1599.040475][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.256631][ T5010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.856111][ T37] audit: type=1326 audit(1761419260.650:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1601.856160][ T37] audit: type=1326 audit(1761419260.650:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1601.856204][ T37] audit: type=1326 audit(1761419260.650:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1601.929887][ T37] audit: type=1326 audit(1761419260.720:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1601.929939][ T37] audit: type=1326 audit(1761419260.720:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1601.929979][ T37] audit: type=1326 audit(1761419260.720:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1601.930019][ T37] audit: type=1326 audit(1761419260.720:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1602.027654][ T37] audit: type=1326 audit(1761419260.820:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1602.027706][ T37] audit: type=1326 audit(1761419260.820:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1602.078028][ T37] audit: type=1326 audit(1761419260.870:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.6.15102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1602.084727][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.323765][ T8297] overlayfs: overlapping lowerdir path [ 1603.537138][ T8298] overlayfs: overlapping lowerdir path [ 1604.097404][ T8322] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 1604.322441][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.961831][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.138838][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.439232][ T8434] ipvlan2: entered promiscuous mode [ 1606.645256][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15182'. [ 1606.645370][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15182'. [ 1607.428104][ T8490] overlayfs: missing 'lowerdir' [ 1607.539010][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.136594][ T8505] overlayfs: failed to clone lowerpath [ 1608.160372][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.280217][T29722] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1608.408387][ T8522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1608.433027][T29722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.433060][T29722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.433080][T29722] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1608.433122][T29722] usb 7-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1608.433143][T29722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.495484][T29722] usb 7-1: config 0 descriptor?? [ 1609.006474][T29722] uclogic 0003:5543:0005.0034: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.6-1/input0 [ 1609.161019][ T31] usb 7-1: USB disconnect, device number 13 [ 1609.322920][ T8558] overlayfs: missing 'lowerdir' [ 1609.362579][ T8558] overlayfs: failed to clone lowerpath [ 1609.455926][ T8572] program syz.2.15239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1609.773423][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 1609.773441][ T37] audit: type=1326 audit(1761419268.570:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.6.15250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1609.774727][ T37] audit: type=1326 audit(1761419268.570:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.6.15250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1609.777794][ T37] audit: type=1326 audit(1761419268.570:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.6.15250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1609.778214][ T37] audit: type=1326 audit(1761419268.570:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.6.15250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1609.778687][ T37] audit: type=1326 audit(1761419268.570:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.6.15250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1609.778965][ T37] audit: type=1326 audit(1761419268.570:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.6.15250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1609.779947][ T37] audit: type=1326 audit(1761419268.570:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.6.15250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1610.001316][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.096023][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.695220][ T8634] overlay: Unknown parameter '/' [ 1611.243999][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.110806][ T8689] tipc: Enabling of bearer rejected, failed to enable media [ 1612.290238][ T994] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1612.402867][ T8703] overlayfs: failed to clone lowerpath [ 1612.442775][ T8703] overlayfs: missing 'lowerdir' [ 1612.442916][ T994] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1612.442944][ T994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.448221][ T994] usb 7-1: config 0 descriptor?? [ 1612.492845][ T994] cp210x 7-1:0.0: cp210x converter detected [ 1613.069970][ T994] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1613.070027][ T994] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1613.111470][ T994] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1613.115181][ T994] usb 7-1: USB disconnect, device number 14 [ 1613.140433][ T994] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1613.141001][ T994] cp210x 7-1:0.0: device disconnected [ 1614.320532][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.434493][ T8797] netlink: 200 bytes leftover after parsing attributes in process `syz.6.15346'. [ 1614.434703][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15346'. [ 1614.817780][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15360'. [ 1615.040688][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.201530][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.897919][ T8890] binder: 8889:8890 ioctl 8913 0 returned -22 [ 1616.467989][ T37] audit: type=1326 audit(1761419275.260:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.469864][ T37] audit: type=1326 audit(1761419275.260:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.769044][ T37] audit: type=1326 audit(1761419275.290:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.769443][ T37] audit: type=1326 audit(1761419275.300:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.769919][ T37] audit: type=1326 audit(1761419275.300:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.770955][ T37] audit: type=1326 audit(1761419275.310:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.771265][ T37] audit: type=1326 audit(1761419275.310:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.771547][ T37] audit: type=1326 audit(1761419275.320:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1616.771944][ T37] audit: type=1326 audit(1761419275.330:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1616.772252][ T37] audit: type=1326 audit(1761419275.340:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.6.15398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1617.621200][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.242675][ T9024] overlayfs: failed to clone lowerpath [ 1619.287846][ T9024] overlayfs: failed to clone lowerpath [ 1619.681854][ T9055] netlink: 'syz.1.15471': attribute type 14 has an invalid length. [ 1619.740385][ T31] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1619.892648][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.892693][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1619.892714][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.910250][T27969] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1619.935590][ T31] usb 3-1: config 0 descriptor?? [ 1620.060198][T27969] usb 7-1: Using ep0 maxpacket: 32 [ 1620.062683][T27969] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1620.062709][T27969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.068049][T27969] usb 7-1: config 0 descriptor?? [ 1620.324834][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.493364][T27969] hid_parser_main: 1 callbacks suppressed [ 1620.493386][T27969] logitech 0003:046D:C29C.0036: unknown main item tag 0x0 [ 1620.500763][T27969] logitech 0003:046D:C29C.0036: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0 [ 1620.577669][T29722] usb 3-1: USB disconnect, device number 61 [ 1620.650459][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.894016][T27969] logitech 0003:046D:C29C.0036: no inputs found [ 1620.917181][T27969] usb 7-1: USB disconnect, device number 15 [ 1620.961696][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.012376][ T9183] overlayfs: failed to clone lowerpath [ 1622.030599][ T1899] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1622.051882][ T9183] overlayfs: failed to clone lowerpath [ 1622.180375][ T1899] usb 7-1: Using ep0 maxpacket: 8 [ 1622.184550][ T1899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1622.184595][ T1899] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1622.184614][ T1899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.202598][ T1899] usb 7-1: config 0 descriptor?? [ 1622.426625][ T1899] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1622.648287][T29722] usb 7-1: USB disconnect, device number 16 [ 1623.520571][T27969] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1623.680457][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.680677][T27969] usb 7-1: Using ep0 maxpacket: 32 [ 1623.683037][T27969] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1623.683059][T27969] usb 7-1: config 0 has no interface number 0 [ 1623.687489][T27969] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1623.687516][T27969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.687535][T27969] usb 7-1: Product: syz [ 1623.687547][T27969] usb 7-1: Manufacturer: syz [ 1623.687560][T27969] usb 7-1: SerialNumber: syz [ 1623.700903][T27969] usb 7-1: config 0 descriptor?? [ 1623.705682][T27969] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1624.315684][T27969] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1624.340223][T27969] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1624.493947][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1624.515882][ T31] usb 7-1: USB disconnect, device number 17 [ 1624.535526][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1624.554988][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1624.555694][ T31] quatech2 7-1:0.51: device disconnected [ 1626.081081][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.276462][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15616'. [ 1626.737352][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.743978][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.852843][ T9406] program syz.6.15636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1628.056659][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15664'. [ 1628.945931][ T9501] macvtap1: entered allmulticast mode [ 1628.945951][ T9501] veth0_macvtap: entered allmulticast mode [ 1629.170285][ T31] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1629.320229][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1629.324876][ T31] usb 3-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 1629.324904][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.324922][ T31] usb 3-1: Product: syz [ 1629.324935][ T31] usb 3-1: Manufacturer: syz [ 1629.324949][ T31] usb 3-1: SerialNumber: syz [ 1629.329958][ T31] usb 3-1: config 0 descriptor?? [ 1629.382397][ T31] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 1629.760401][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.198833][T27969] usb 3-1: USB disconnect, device number 62 [ 1631.121054][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.486174][ T9638] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15748'. [ 1631.773518][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.820715][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.347327][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15801'. [ 1634.347351][ T9752] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15801'. [ 1634.711787][ T9773] kvm_intel: kvm [9772]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 1634.870218][T27969] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1635.023067][T27969] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1635.023096][T27969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.028696][T27969] usb 7-1: config 0 descriptor?? [ 1635.268159][T27969] kaweth 7-1:0.0: Firmware present in device. [ 1635.673235][T27969] kaweth 7-1:0.0: Statistics collection: 0 [ 1635.673257][T27969] kaweth 7-1:0.0: Multicast filter limit: 0 [ 1635.673269][T27969] kaweth 7-1:0.0: MTU: 0 [ 1635.673282][T27969] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1636.609365][T27969] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 1636.631034][T27969] usb 7-1: USB disconnect, device number 18 [ 1636.648019][T22767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.692088][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.603190][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.797338][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15873'. [ 1639.263876][ T9974] overlay: Unknown parameter '/' [ 1639.760644][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.881893][ T9995] overlayfs: failed to clone lowerpath [ 1639.934364][T10000] overlayfs: failed to clone lowerpath [ 1640.459346][ T37] kauditd_printk_skb: 362 callbacks suppressed [ 1640.459364][ T37] audit: type=1326 audit(1761419299.250:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.459415][ T37] audit: type=1326 audit(1761419299.250:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468462][ T37] audit: type=1326 audit(1761419299.260:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468513][ T37] audit: type=1326 audit(1761419299.260:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468552][ T37] audit: type=1326 audit(1761419299.260:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468591][ T37] audit: type=1326 audit(1761419299.260:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468631][ T37] audit: type=1326 audit(1761419299.260:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468671][ T37] audit: type=1326 audit(1761419299.260:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468714][ T37] audit: type=1326 audit(1761419299.260:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.468804][ T37] audit: type=1326 audit(1761419299.260:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10033 comm="syz.1.15934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1640.979524][T10057] program syz.6.15944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1641.684982][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.967093][T10109] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1642.349911][T10130] netlink: 'syz.2.15978': attribute type 2 has an invalid length. [ 1642.657998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.800592][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.981327][T10167] overlayfs: failed to clone lowerpath [ 1643.006094][T10167] overlayfs: failed to clone lowerpath [ 1643.364788][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.451763][T10192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16012'. [ 1643.901495][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.840356][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.947491][T10325] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.16072'. [ 1647.166926][T10395] netlink: 'syz.2.16103': attribute type 2 has an invalid length. [ 1647.201638][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.441525][T10401] nbd1: detected capacity change from 0 to 127 [ 1647.443256][ T5815] block nbd1: Receive control failed (result -32) [ 1647.898619][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16122'. [ 1648.916276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1648.933859][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.006634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.122794][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.276516][T10541] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1652.000505][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.994720][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16237'. [ 1653.310192][ T1899] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1653.353091][T10702] 9pnet_fd: Insufficient options for proto=fd [ 1653.460284][ T31] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1653.464381][ T1899] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1653.464408][ T1899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.469479][ T1899] usb 7-1: config 0 descriptor?? [ 1653.505269][ T1899] usb 7-1: selecting invalid altsetting 1 [ 1653.515341][T10712] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1653.569226][ T1899] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1653.610213][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 1653.618912][ T31] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1653.618941][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.618960][ T31] usb 3-1: Product: syz [ 1653.618973][ T31] usb 3-1: Manufacturer: syz [ 1653.618986][ T31] usb 3-1: SerialNumber: syz [ 1653.665188][ T31] usb 3-1: config 0 descriptor?? [ 1653.719089][T27969] usb 7-1: USB disconnect, device number 19 [ 1654.071572][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16268'. [ 1654.086525][ T31] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1654.111059][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1654.112048][ T31] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1654.112105][ T31] usb 3-1: media controller created [ 1654.168892][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1654.255933][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.295266][ T31] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1654.295287][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1654.536789][T27969] usb 3-1: USB disconnect, device number 63 [ 1654.648790][T27969] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1655.040714][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.712303][T10836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.870586][T10857] tipc: Enabling of bearer rejected, failed to enable media [ 1658.488923][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.618664][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1658.618681][ T37] audit: type=1326 audit(1761419579.413:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10903 comm="syz.6.16342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x0 [ 1658.947866][ T37] audit: type=1326 audit(1761419579.743:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.948139][ T37] audit: type=1326 audit(1761419579.743:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.961947][ T37] audit: type=1326 audit(1761419579.763:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.962210][ T37] audit: type=1326 audit(1761419579.763:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.962448][ T37] audit: type=1326 audit(1761419579.763:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.962865][ T37] audit: type=1326 audit(1761419579.763:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.963592][ T37] audit: type=1326 audit(1761419579.763:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.963889][ T37] audit: type=1326 audit(1761419579.763:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1658.966709][ T37] audit: type=1326 audit(1761419579.763:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10925 comm="syz.1.16351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1659.359391][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.778061][ T994] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1659.940611][ T994] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1659.940639][ T994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.946656][ T994] usb 7-1: config 0 descriptor?? [ 1660.565708][T11012] Falling back ldisc for ttyS3. [ 1660.759007][ T994] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1660.759035][ T994] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1660.786659][ T994] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1660.798373][ T994] usb 7-1: USB disconnect, device number 20 [ 1661.517814][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.663296][T11082] 9pnet_fd: Insufficient options for proto=fd [ 1663.229143][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.807448][ T5962] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1663.884843][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.884866][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.025936][T11206] smc: net device bond0 applied user defined pnetid SYZ0 [ 1664.026835][T11206] smc: net device bond0 erased user defined pnetid SYZ0 [ 1664.311842][T11223] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16493'. [ 1664.382957][T11224] overlayfs: failed to clone lowerpath [ 1664.413121][T11224] overlayfs: failed to clone lowerpath [ 1664.545616][T11192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1664.545959][T11192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1664.558047][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.568270][ T1899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.577740][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.668819][T11192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1664.668955][T11192] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1665.118987][T29681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.837372][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 1665.886162][T11320] netlink: 'syz.6.16538': attribute type 10 has an invalid length. [ 1666.225178][T11320] team0: Port device  added [ 1666.321897][T11343] erspan0: entered promiscuous mode [ 1666.399431][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.557592][ T5815] Bluetooth: hci1: command 0x0405 tx timeout [ 1666.717532][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 1667.606297][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.616636][T11403] vlan3: entered promiscuous mode [ 1667.893567][T11423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1668.797724][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 1668.961909][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.690367][T11518] batadv_slave_0: entered promiscuous mode [ 1669.695085][T11518] batman_adv: batadv0: Adding interface: macsec1 [ 1669.695102][T11518] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.695129][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1669.695143][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.695159][T11518] batman_adv: batadv0: Interface activated: macsec1 [ 1670.157903][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.247174][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16645'. [ 1670.638001][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.877569][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.784976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.799162][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.980211][T11650] netlink: 7 bytes leftover after parsing attributes in process `syz.1.16692'. [ 1672.980236][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16692'. [ 1672.980255][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16692'. [ 1673.456134][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1673.456151][ T37] audit: type=1326 audit(1761419850.251:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11682 comm="syz.1.16710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x0 [ 1673.677820][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.973234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.362710][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.393376][T11785] 9pnet_fd: Insufficient options for proto=fd [ 1675.566017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1676.453912][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16764'. [ 1676.453954][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16764'. [ 1676.720515][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.115312][T11830] netlink: 165 bytes leftover after parsing attributes in process `syz.1.16780'. [ 1677.683685][T11861] netlink: 276 bytes leftover after parsing attributes in process `syz.2.16794'. [ 1677.874863][ T31] kernel write not supported for file bpf-map (pid: 31 comm: kworker/1:0) [ 1677.932778][ T37] audit: type=1326 audit(1761419854.731:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6706475e67 code=0x7ffc0000 [ 1677.933523][ T37] audit: type=1326 audit(1761419854.731:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1677.933569][ T37] audit: type=1326 audit(1761419854.731:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1677.933620][ T37] audit: type=1326 audit(1761419854.731:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1677.943677][ T37] audit: type=1326 audit(1761419854.741:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6706475e67 code=0x7ffc0000 [ 1677.943952][ T37] audit: type=1326 audit(1761419854.741:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1677.950565][ T37] audit: type=1326 audit(1761419854.751:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f670647efc9 code=0x7ffc0000 [ 1677.951822][ T37] audit: type=1326 audit(1761419854.751:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6706475e67 code=0x7ffc0000 [ 1677.951868][ T37] audit: type=1326 audit(1761419854.751:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11872 comm="syz.6.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f670641b099 code=0x7ffc0000 [ 1678.558364][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.867630][T29722] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1679.030183][T29722] usb 7-1: Using ep0 maxpacket: 32 [ 1679.032557][T29722] usb 7-1: config 32 has an invalid interface number: 85 but max is 0 [ 1679.032584][T29722] usb 7-1: config 32 has no interface number 0 [ 1679.032632][T29722] usb 7-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1679.032656][T29722] usb 7-1: config 32 interface 85 has no altsetting 0 [ 1679.035721][T29722] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1679.035749][T29722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.035766][T29722] usb 7-1: Product: syz [ 1679.035779][T29722] usb 7-1: Manufacturer: syz [ 1679.035792][T29722] usb 7-1: SerialNumber: syz [ 1679.700911][T29722] appletouch 7-1:32.85: Geyser mode initialized. [ 1679.704128][T29722] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:32.85/input/input43 [ 1679.724193][T11950] erspan0: left promiscuous mode [ 1679.744453][T11950] netlink: 136 bytes leftover after parsing attributes in process `syz.1.16837'. [ 1679.804141][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.944589][ T994] usb 7-1: USB disconnect, device number 21 [ 1679.944674][ C0] appletouch 7-1:32.85: atp_complete: usb_submit_urb failed with result -19 [ 1680.040370][T11974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16850'. [ 1680.040610][T11974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16850'. [ 1680.071122][ T994] appletouch 7-1:32.85: input: appletouch disconnected [ 1680.485013][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.919087][ T994] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1682.071860][ T994] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1682.071886][ T994] usb 7-1: config 0 has no interface number 0 [ 1682.097131][ T994] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1682.097160][ T994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.097185][ T994] usb 7-1: Product: syz [ 1682.097198][ T994] usb 7-1: Manufacturer: syz [ 1682.097210][ T994] usb 7-1: SerialNumber: syz [ 1682.100219][T12080] o2cb: This node has not been configured. [ 1682.100233][T12080] o2cb: Cluster check failed. Fix errors before retrying. [ 1682.100260][T12080] (syz.1.16901,12080,0):user_dlm_register:674 ERROR: status = -22 [ 1682.100283][T12080] (syz.1.16901,12080,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1682.104329][ T994] usb 7-1: config 0 descriptor?? [ 1682.349163][ T994] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1682.366218][ T994] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1682.366561][ T994] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1682.366609][ T994] usb 7-1: media controller created [ 1682.445371][ T994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1682.550636][ T994] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1682.684178][ T994] usb 7-1: USB disconnect, device number 22 [ 1682.784719][T12081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.878727][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.282246][T12081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.382912][T12129] batadv_slave_1: entered promiscuous mode [ 1683.384883][T12125] batadv_slave_1: left promiscuous mode [ 1683.477608][T12144] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16932'. [ 1683.843736][T12081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.882173][T12166] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16943'. [ 1684.300768][T12081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.320078][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.894472][T29047] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.945040][T29047] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.967506][ T994] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1685.038518][T29047] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.145737][ T994] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1685.145769][ T994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1685.145794][ T994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1685.145815][ T994] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1685.145854][ T994] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1685.145875][ T994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.154001][ T994] usb 7-1: config 0 descriptor?? [ 1685.173796][T29047] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.586218][ T994] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1685.617772][ T994] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1685.786996][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1685.787015][ T37] audit: type=1326 audit(1761419862.581:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.792916][ T994] usb 7-1: USB disconnect, device number 23 [ 1685.798846][ T37] audit: type=1326 audit(1761419862.581:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.807024][ T37] audit: type=1326 audit(1761419862.601:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.807074][ T37] audit: type=1326 audit(1761419862.601:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.807114][ T37] audit: type=1326 audit(1761419862.601:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.809216][ T37] audit: type=1326 audit(1761419862.611:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.813139][ T37] audit: type=1326 audit(1761419862.611:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.813187][ T37] audit: type=1326 audit(1761419862.611:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.813224][ T37] audit: type=1326 audit(1761419862.611:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.813674][ T37] audit: type=1326 audit(1761419862.611:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12260 comm="syz.1.16988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1685.930173][T27969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.238210][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.364745][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364782][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364808][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364831][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364855][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364879][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364902][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364926][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.364950][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: unknown main item tag 0x0 [ 1688.401846][ T994] hid-generic 0007:FFFFFFF8:0FFF.0038: hidraw0: HID v0.07 Device [syz1] on syz0 [ 1688.637517][ T5874] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1688.799322][ T5874] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1688.800416][ T5874] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1688.800455][ T5874] usb 7-1: can't read configurations, error -71 [ 1688.905139][T12390] netlink: 'syz.1.17048': attribute type 1 has an invalid length. [ 1688.957691][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.367065][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17059'. [ 1690.079031][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.358820][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.997871][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.125922][T12614] netlink: 'syz.1.17154': attribute type 8 has an invalid length. [ 1693.487797][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1693.487814][ T37] audit: type=1326 audit(1761419870.291:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12630 comm="syz.1.17162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1693.488104][ T37] audit: type=1326 audit(1761419870.291:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12630 comm="syz.1.17162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1693.516058][ T37] audit: type=1326 audit(1761419870.291:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12630 comm="syz.1.17162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1693.516115][ T37] audit: type=1326 audit(1761419870.311:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12630 comm="syz.1.17162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1693.516154][ T37] audit: type=1326 audit(1761419870.311:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12630 comm="syz.1.17162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0feaa8efc9 code=0x7ffc0000 [ 1694.371715][T12693] netlink: 'syz.1.17191': attribute type 3 has an invalid length. [ 1695.042715][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.067444][ T5874] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1695.248450][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.248481][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.252176][ T5874] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1695.252202][ T5874] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1695.252218][ T5874] usb 7-1: Manufacturer: syz [ 1695.308974][ T5874] usb 7-1: config 0 descriptor?? [ 1695.770536][ T5874] pyra 0003:1E7D:2CF6.0039: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1695.838590][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.954363][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17231'. [ 1695.954507][T12772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.300141][T12772] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1696.373213][ T5874] pyra 0003:1E7D:2CF6.0039: couldn't init struct pyra_device [ 1696.373267][ T5874] pyra 0003:1E7D:2CF6.0039: couldn't install mouse [ 1696.381006][ T5874] pyra 0003:1E7D:2CF6.0039: probe with driver pyra failed with error -71 [ 1696.478584][ T5874] usb 7-1: USB disconnect, device number 26 [ 1696.505363][T12772] batman_adv: batadv0: Removing interface: macvlan3 [ 1696.525241][ T5815] Bluetooth: unknown link type 128 [ 1696.632072][T12772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.144203][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.337424][ T31] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1697.490093][ T31] usb 7-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config [ 1697.490120][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1697.495704][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1697.495732][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.495750][ T31] usb 7-1: Product: syz [ 1697.495764][ T31] usb 7-1: Manufacturer: syz [ 1697.495777][ T31] usb 7-1: SerialNumber: syz [ 1697.778537][ T31] usb 7-1: 0:2 : does not exist [ 1697.795462][ T31] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1697.853602][ T31] usb 7-1: USB disconnect, device number 27 [ 1698.077829][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.557460][ T5815] Bluetooth: hci1: command 0x0405 tx timeout [ 1698.767569][ T994] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1698.930829][ T994] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1698.930858][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.936009][ T994] usb 3-1: config 0 descriptor?? [ 1698.951496][ T994] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1699.147181][ T994] gspca_spca508: reg_read err -32 [ 1699.152522][ T994] gspca_spca508: reg_read err -32 [ 1699.155040][ T994] gspca_spca508: reg_read err -32 [ 1699.358100][ T994] gspca_spca508: reg_read err -71 [ 1699.359044][ T994] gspca_spca508: reg write: error -71 [ 1699.359132][ T994] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 1699.379345][ T994] usb 3-1: USB disconnect, device number 64 [ 1699.749438][T12935] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1699.749470][T12935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1701.118648][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.598550][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.143767][T13038] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17360'. [ 1702.353007][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17365'. [ 1702.878677][T29047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.753371][T13119] ------------[ cut here ]------------ [ 1703.753385][T13119] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 1703.754011][T13119] WARNING: CPU: 1 PID: 13119 at drivers/net/wireless/virtual/mac80211_hwsim.c:2690 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 1703.754056][T13119] Modules linked in: [ 1703.754076][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.6.17397 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1703.754098][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1703.754112][T13119] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 1703.754136][T13119] Code: 81 20 00 00 48 c7 c7 80 b1 7a 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 40 b7 3f fb 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 6f 7b fb 90 0f 0b 90 e9 fe fe ff [ 1703.754153][T13119] RSP: 0018:ffffc900182aee40 EFLAGS: 00010282 [ 1703.754171][T13119] RAX: 18f968a808db6c00 RBX: 0000000000000014 RCX: 0000000000080000 [ 1703.754185][T13119] RDX: ffffc9001bee0000 RSI: 0000000000001316 RDI: 0000000000001317 [ 1703.754199][T13119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1703.754210][T13119] R10: dffffc0000000000 R11: ffffed101712487b R12: 0000000000000000 [ 1703.754224][T13119] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 1703.754238][T13119] FS: 00007f67046e66c0(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 1703.754255][T13119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1703.754269][T13119] CR2: 0000200000001080 CR3: 00000000618e6000 CR4: 00000000003526f0 [ 1703.754287][T13119] Call Trace: [ 1703.754296][T13119] [ 1703.754315][T13119] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 1703.754351][T13119] mac80211_hwsim_sta_add+0xa3/0x310 [ 1703.754379][T13119] drv_sta_state+0x8c1/0x1840 [ 1703.754408][T13119] sta_info_insert_rcu+0x1a30/0x2840 [ 1703.754435][T13119] ? sta_info_insert_rcu+0x349/0x2840 [ 1703.754480][T13119] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 1703.754509][T13119] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 1703.754539][T13119] ? ieee80211_add_station+0x4f1/0x6a0 [ 1703.754564][T13119] sta_info_insert+0x16/0xc0 [ 1703.754585][T13119] rdev_add_station+0x108/0x290 [ 1703.754612][T13119] nl80211_new_station+0x1755/0x1b70 [ 1703.754651][T13119] ? __pfx_nl80211_new_station+0x10/0x10 [ 1703.754670][T13119] ? netdev_run_todo+0xe1d/0xea0 [ 1703.754730][T13119] ? nl80211_pre_doit+0x4f1/0x930 [ 1703.754757][T13119] genl_family_rcv_msg_doit+0x215/0x300 [ 1703.754790][T13119] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1703.754829][T13119] ? bpf_lsm_capable+0x9/0x20 [ 1703.754848][T13119] ? security_capable+0x7e/0x2e0 [ 1703.754878][T13119] genl_rcv_msg+0x60e/0x790 [ 1703.754908][T13119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1703.754930][T13119] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1703.754946][T13119] ? __pfx_nl80211_new_station+0x10/0x10 [ 1703.754965][T13119] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1703.754991][T13119] ? __lock_acquire+0xab9/0xd20 [ 1703.755024][T13119] netlink_rcv_skb+0x208/0x470 [ 1703.755043][T13119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1703.755069][T13119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1703.755104][T13119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.755123][T13119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.755146][T13119] genl_rcv+0x28/0x40 [ 1703.755166][T13119] netlink_unicast+0x846/0xa10 [ 1703.755201][T13119] ? __pfx_netlink_unicast+0x10/0x10 [ 1703.755227][T13119] ? netlink_sendmsg+0x642/0xb30 [ 1703.755243][T13119] ? skb_put+0x11b/0x210 [ 1703.755266][T13119] netlink_sendmsg+0x805/0xb30 [ 1703.755294][T13119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.755322][T13119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1703.755346][T13119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.755366][T13119] __sock_sendmsg+0x21c/0x270 [ 1703.755395][T13119] ____sys_sendmsg+0x508/0x820 [ 1703.755423][T13119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.755454][T13119] ? import_iovec+0x74/0xa0 [ 1703.755479][T13119] ___sys_sendmsg+0x21f/0x2a0 [ 1703.755503][T13119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.755566][T13119] ? __fget_files+0x2a/0x420 [ 1703.755589][T13119] ? __fget_files+0x3a6/0x420 [ 1703.755625][T13119] __x64_sys_sendmsg+0x1a1/0x260 [ 1703.755649][T13119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.755697][T13119] ? do_syscall_64+0xbe/0xfa0 [ 1703.755725][T13119] do_syscall_64+0xfa/0xfa0 [ 1703.755746][T13119] ? lockdep_hardirqs_on+0x9c/0x150 [ 1703.755770][T13119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.755789][T13119] ? clear_bhb_loop+0x60/0xb0 [ 1703.755813][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.755832][T13119] RIP: 0033:0x7f670647efc9 [ 1703.755850][T13119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1703.755866][T13119] RSP: 002b:00007f67046e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.755886][T13119] RAX: ffffffffffffffda RBX: 00007f67066d5fa0 RCX: 00007f670647efc9 [ 1703.755901][T13119] RDX: 0000000000000004 RSI: 0000200000001080 RDI: 0000000000000005 [ 1703.755914][T13119] RBP: 00007f6706501f91 R08: 0000000000000000 R09: 0000000000000000 [ 1703.755927][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.755938][T13119] R13: 00007f67066d6038 R14: 00007f67066d5fa0 R15: 00007fff32980848 [ 1703.755975][T13119] [ 1703.755995][T13119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1703.756010][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.6.17397 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1703.756032][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1703.756044][T13119] Call Trace: [ 1703.756053][T13119] [ 1703.756061][T13119] dump_stack_lvl+0x99/0x250 [ 1703.756088][T13119] ? __asan_memcpy+0x40/0x70 [ 1703.756111][T13119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1703.756138][T13119] ? __pfx__printk+0x10/0x10 [ 1703.756175][T13119] vpanic+0x237/0x6d0 [ 1703.756193][T13119] ? __pfx_vpanic+0x10/0x10 [ 1703.756228][T13119] panic+0xb9/0xc0 [ 1703.756246][T13119] ? __pfx_panic+0x10/0x10 [ 1703.756280][T13119] __warn+0x31b/0x4b0 [ 1703.756297][T13119] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 1703.756323][T13119] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 1703.756344][T13119] report_bug+0x2be/0x4f0 [ 1703.756364][T13119] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 1703.756387][T13119] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 1703.756409][T13119] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 1703.756431][T13119] handle_bug+0x84/0x160 [ 1703.756457][T13119] exc_invalid_op+0x1a/0x50 [ 1703.756480][T13119] asm_exc_invalid_op+0x1a/0x20 [ 1703.756497][T13119] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 1703.756520][T13119] Code: 81 20 00 00 48 c7 c7 80 b1 7a 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 40 b7 3f fb 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 6f 7b fb 90 0f 0b 90 e9 fe fe ff [ 1703.756535][T13119] RSP: 0018:ffffc900182aee40 EFLAGS: 00010282 [ 1703.756551][T13119] RAX: 18f968a808db6c00 RBX: 0000000000000014 RCX: 0000000000080000 [ 1703.756565][T13119] RDX: ffffc9001bee0000 RSI: 0000000000001316 RDI: 0000000000001317 [ 1703.756578][T13119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1703.756590][T13119] R10: dffffc0000000000 R11: ffffed101712487b R12: 0000000000000000 [ 1703.756603][T13119] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 1703.756640][T13119] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 1703.756669][T13119] mac80211_hwsim_sta_add+0xa3/0x310 [ 1703.756703][T13119] drv_sta_state+0x8c1/0x1840 [ 1703.756732][T13119] sta_info_insert_rcu+0x1a30/0x2840 [ 1703.756760][T13119] ? sta_info_insert_rcu+0x349/0x2840 [ 1703.756804][T13119] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 1703.756829][T13119] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 1703.756859][T13119] ? ieee80211_add_station+0x4f1/0x6a0 [ 1703.756884][T13119] sta_info_insert+0x16/0xc0 [ 1703.756910][T13119] rdev_add_station+0x108/0x290 [ 1703.756939][T13119] nl80211_new_station+0x1755/0x1b70 [ 1703.756979][T13119] ? __pfx_nl80211_new_station+0x10/0x10 [ 1703.756998][T13119] ? netdev_run_todo+0xe1d/0xea0 [ 1703.757051][T13119] ? nl80211_pre_doit+0x4f1/0x930 [ 1703.757076][T13119] genl_family_rcv_msg_doit+0x215/0x300 [ 1703.757108][T13119] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1703.757147][T13119] ? bpf_lsm_capable+0x9/0x20 [ 1703.757165][T13119] ? security_capable+0x7e/0x2e0 [ 1703.757194][T13119] genl_rcv_msg+0x60e/0x790 [ 1703.757224][T13119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1703.757247][T13119] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1703.757261][T13119] ? __pfx_nl80211_new_station+0x10/0x10 [ 1703.757280][T13119] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1703.757302][T13119] ? __lock_acquire+0xab9/0xd20 [ 1703.757335][T13119] netlink_rcv_skb+0x208/0x470 [ 1703.757355][T13119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1703.757380][T13119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1703.757416][T13119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.757435][T13119] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.757457][T13119] genl_rcv+0x28/0x40 [ 1703.757476][T13119] netlink_unicast+0x846/0xa10 [ 1703.757509][T13119] ? __pfx_netlink_unicast+0x10/0x10 [ 1703.757536][T13119] ? netlink_sendmsg+0x642/0xb30 [ 1703.757553][T13119] ? skb_put+0x11b/0x210 [ 1703.757576][T13119] netlink_sendmsg+0x805/0xb30 [ 1703.757606][T13119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.757634][T13119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1703.757658][T13119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.757685][T13119] __sock_sendmsg+0x21c/0x270 [ 1703.757714][T13119] ____sys_sendmsg+0x508/0x820 [ 1703.757744][T13119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.757777][T13119] ? import_iovec+0x74/0xa0 [ 1703.757801][T13119] ___sys_sendmsg+0x21f/0x2a0 [ 1703.757825][T13119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.757883][T13119] ? __fget_files+0x2a/0x420 [ 1703.757906][T13119] ? __fget_files+0x3a6/0x420 [ 1703.757940][T13119] __x64_sys_sendmsg+0x1a1/0x260 [ 1703.757965][T13119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.758005][T13119] ? do_syscall_64+0xbe/0xfa0 [ 1703.758032][T13119] do_syscall_64+0xfa/0xfa0 [ 1703.758053][T13119] ? lockdep_hardirqs_on+0x9c/0x150 [ 1703.758074][T13119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.758092][T13119] ? clear_bhb_loop+0x60/0xb0 [ 1703.758116][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.758134][T13119] RIP: 0033:0x7f670647efc9 [ 1703.758156][T13119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1703.758172][T13119] RSP: 002b:00007f67046e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.758192][T13119] RAX: ffffffffffffffda RBX: 00007f67066d5fa0 RCX: 00007f670647efc9 [ 1703.758208][T13119] RDX: 0000000000000004 RSI: 0000200000001080 RDI: 0000000000000005 [ 1703.758220][T13119] RBP: 00007f6706501f91 R08: 0000000000000000 R09: 0000000000000000 [ 1703.758233][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.758245][T13119] R13: 00007f67066d6038 R14: 00007f67066d5fa0 R15: 00007fff32980848 [ 1703.758282][T13119] [ 1703.758542][T13119] Kernel Offset: disabled