last executing test programs: 10m5.85126477s ago: executing program 1 (id=1194): syz_open_dev$loop(0x0, 0x3, 0x0) unshare(0x22020600) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 10m5.631092775s ago: executing program 1 (id=1197): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000002c0)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) r6 = syz_open_dev$rtc(0x0, 0x8, 0xc0100) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f00000000c0)) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) timer_create(0x7, 0x0, 0x0) 10m3.435605317s ago: executing program 1 (id=1201): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10m1.531274443s ago: executing program 1 (id=1209): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r3, &(0x7f00000008c0)="7a1f", 0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m0.126257016s ago: executing program 1 (id=1212): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) write$char_usb(r1, &(0x7f0000000800), 0x0) 9m58.852087957s ago: executing program 1 (id=1218): r0 = socket$inet6(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) 9m58.187206133s ago: executing program 32 (id=1218): r0 = socket$inet6(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) 10.848763381s ago: executing program 2 (id=3020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 9.869024814s ago: executing program 2 (id=3023): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x1}, 0x8) 8.034424008s ago: executing program 2 (id=3027): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x348, 0x2b0, 0x138, 0xfeffffff, 0x0, 0x138, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x0, 0x4}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, @ipv4=@loopback, @port=0x4e24, @icmp_id=0x66}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff, 0xffffff00, 'veth0_virt_wifi\x00', 'xfrm0\x00', {0xff}, {}, 0x21, 0x2, 0xd}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, @icmp_id}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'lo\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @loopback, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000080)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.98083265s ago: executing program 4 (id=3029): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0xc032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x80}]) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) 7.892833132s ago: executing program 0 (id=3030): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x39, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 7.13265743s ago: executing program 0 (id=3032): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/10, 0x5b) read$hidraw(0xffffffffffffffff, &(0x7f0000000180)=""/124, 0x7c) 6.941250355s ago: executing program 4 (id=3033): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x140841, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) syz_open_dev$I2C(0x0, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100), 0x0, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f0000000140)=[{0xffffffffffffffa1, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r5, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) 6.817941347s ago: executing program 3 (id=3034): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x140841, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) syz_open_dev$I2C(0x0, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100), 0x0, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x10000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, r6, 0x1, 0x0, &(0x7f0000000140)=[{0xffffffffffffffa1, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r6, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) 6.780751599s ago: executing program 0 (id=3035): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) 5.691106574s ago: executing program 4 (id=3036): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) 5.484056529s ago: executing program 4 (id=3037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000a80)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x4080) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000180)={0x80, 0x3, 0x1, 'queue0\x00', 0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/110, 0xffffffffffffffd6}, {&(0x7f0000000000)=""/101, 0x65}, {&(0x7f0000000780)=""/12, 0x6}, {&(0x7f00000007c0)=""/41, 0x13}, {&(0x7f0000000840)=""/182, 0xb6}], 0x9}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r10, &(0x7f0000001300), 0x0, 0x145, 0xfffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x8001, '\x00', r9, r10, 0x4, 0x5, 0x1}, 0x50) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000800)='S', 0x1}], 0x1}, 0x0) 5.42726534s ago: executing program 4 (id=3038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r1, 0x0, 0x0, 0x80000) r2 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) syz_open_procfs$namespace(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@sg0, 0xffffffffffffffff, &(0x7f0000000100)={0xaf9b, 0x0, 0x9, 0x7, 0x6, 0xe4, 0x7, 0x8, 0x1}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x58000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 5.287185944s ago: executing program 3 (id=3039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x2}, 0x1c) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x102, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = socket$key(0xf, 0x3, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r3, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) creat(&(0x7f00000001c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x182) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.138162278s ago: executing program 0 (id=3040): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x39, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4.948289952s ago: executing program 3 (id=3041): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0xc032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x80}]) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) 4.801561295s ago: executing program 2 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.020041984s ago: executing program 3 (id=3043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/10, 0x5b) read$hidraw(0xffffffffffffffff, &(0x7f0000000180)=""/124, 0x7c) 3.959743086s ago: executing program 0 (id=3044): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x140841, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) syz_open_dev$I2C(0x0, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100), 0x0, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f0000000140)=[{0xffffffffffffffa1, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r5, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) 3.36302818s ago: executing program 3 (id=3045): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, 0x0, 0x0) getpid() nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000240)={0x80}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x0, 0x0, [0x5049, 0x4, 0x2, 0x7, 0x9919, 0xc01679d], 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 3.010002868s ago: executing program 2 (id=3046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000a80)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x4080) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000180)={0x80, 0x3, 0x1, 'queue0\x00', 0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/110, 0xffffffffffffffd6}, {&(0x7f0000000000)=""/101, 0x65}, {&(0x7f0000000780)=""/12, 0x6}, {&(0x7f00000007c0)=""/41, 0x13}, {&(0x7f0000000840)=""/182, 0xb6}], 0x9}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r10, &(0x7f0000001300), 0x0, 0x145, 0xfffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x8001, '\x00', r9, r10, 0x4, 0x5, 0x1}, 0x50) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000800)='S', 0x1}], 0x1}, 0x0) 2.633085567s ago: executing program 0 (id=3047): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x140841, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) syz_open_dev$I2C(0x0, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4008004}], 0x1, 0x20) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100), 0x0, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x10000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, r6, 0x1, 0x0, &(0x7f0000000140)=[{0xffffffffffffffa1, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r6, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) 2.613238767s ago: executing program 4 (id=3048): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$netlink(0x10, 0x3, 0x0) 1.746016678s ago: executing program 3 (id=3049): bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) msgctl$MSG_INFO(0x0, 0xc, 0x0) 0s ago: executing program 2 (id=3050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgid(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x74, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x4, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r5, r6, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1, 0x0, 0x0, 0x0, r6, 0x58, 0x7}, 0x9, 0x388, 0x4, 0x6, r3, r7, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r8, &(0x7f0000000440)='Y', 0x1) clock_gettime(0x3, 0x0) accept4(r4, 0x0, 0x0, 0x80800) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) kernel console output (not intermixed with test programs): 9708][ T8424] fuse: Unknown parameter 'user_id00000000000000000000' [ 323.886771][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 323.905911][ T5833] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 323.932425][ T5833] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 323.953045][ T5833] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.974499][ T5833] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.012000][ T5833] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.066042][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.212663][ T8429] CIFS: Attempting to mount //127.0.0.1/share [ 324.221947][ T8429] CIFS: VFS: Error connecting to socket. Aborting operation. [ 324.234582][ T8429] CIFS: VFS: cifs_mount failed w/return code = -111 [ 324.341032][ T5833] usb 1-1: GET_CAPABILITIES returned 0 [ 324.359654][ T5833] usbtmc 1-1:16.0: can't read capabilities [ 324.556255][ T5833] usb 1-1: USB disconnect, device number 8 [ 325.042761][ T8442] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 325.603097][ T5773] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 325.649048][ T8447] fuse: Bad value for 'fd' [ 325.958061][ T5773] usb 4-1: config 0 has no interfaces? [ 325.963966][ T5773] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 325.979822][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.014137][ T5773] usb 4-1: config 0 descriptor?? [ 326.440625][ T5773] usb 4-1: USB disconnect, device number 11 [ 328.244924][ T174] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 328.448775][ T8476] fuse: Bad value for 'fd' [ 328.456111][ T174] usb 3-1: Using ep0 maxpacket: 8 [ 328.463208][ T174] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 328.485155][ T174] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 328.505580][ T174] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.526133][ T174] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.552654][ T174] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.571771][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.818328][ T174] usb 3-1: GET_CAPABILITIES returned 0 [ 328.842552][ T174] usbtmc 3-1:16.0: can't read capabilities [ 329.058401][ T5773] usb 3-1: USB disconnect, device number 9 [ 330.058534][ T8503] fuse: Bad value for 'fd' [ 333.072913][ T5773] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 333.456256][ T5773] usb 1-1: Using ep0 maxpacket: 8 [ 333.462855][ T5773] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 333.479996][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 333.490553][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.505604][ T5773] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.519067][ T5773] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.533671][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.758478][ T5773] usb 1-1: GET_CAPABILITIES returned 0 [ 333.764281][ T5773] usbtmc 1-1:16.0: can't read capabilities [ 334.009527][ T5814] usb 1-1: USB disconnect, device number 9 [ 334.889592][ T8562] kvm: pic: non byte write [ 335.153943][ T5785] Bluetooth: hci0: unexpected event for opcode 0x042c [ 335.738918][ T8589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.235798][ T8680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.435600][ T8688] CIFS: Attempting to mount //127.0.0.1/share [ 342.453366][ T8688] CIFS: VFS: Error connecting to socket. Aborting operation. [ 342.465752][ T8688] CIFS: VFS: cifs_mount failed w/return code = -111 [ 344.536263][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 344.736165][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 344.747398][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 344.777245][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 344.801163][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.829344][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.898210][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 344.909229][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.141691][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 345.156153][ T23] usbtmc 3-1:16.0: can't read capabilities [ 345.349010][ T23] usb 3-1: USB disconnect, device number 10 [ 352.681218][ T8832] syzkaller0: entered promiscuous mode [ 352.687150][ T8832] syzkaller0: entered allmulticast mode [ 352.864526][ T8837] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 359.986192][ T8932] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 365.954534][ T9002] syzkaller0: entered promiscuous mode [ 365.966147][ T9002] syzkaller0: entered allmulticast mode [ 366.932274][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. [ 367.075311][ T9025] overlayfs: missing 'lowerdir' [ 369.399624][ T9045] overlayfs: failed to resolve './file0': -2 [ 370.849032][ T9068] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 373.934794][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'. [ 374.241919][ T9083] overlayfs: missing 'lowerdir' [ 375.350486][ T9090] syzkaller0: entered promiscuous mode [ 375.363807][ T9090] syzkaller0: entered allmulticast mode [ 376.586609][ T9112] overlayfs: failed to resolve './file0': -2 [ 378.753222][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.762699][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.804017][ T9132] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 379.654732][ T9134] syzkaller0: entered promiscuous mode [ 379.661763][ T9134] syzkaller0: entered allmulticast mode [ 381.238763][ T9150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.683683][ T9164] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 383.538856][ T9168] syzkaller0: entered promiscuous mode [ 383.556348][ T9168] syzkaller0: entered allmulticast mode [ 383.721820][ T9172] syzkaller0: entered promiscuous mode [ 383.738440][ T9172] syzkaller0: entered allmulticast mode [ 385.057581][ T9201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.666169][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 387.175024][ T9229] syzkaller0: entered promiscuous mode [ 387.183119][ T9229] syzkaller0: entered allmulticast mode [ 390.190351][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1111'. [ 390.358959][ T9276] overlayfs: missing 'lowerdir' [ 392.811315][ T9297] syzkaller0: entered promiscuous mode [ 392.817361][ T9297] syzkaller0: entered allmulticast mode [ 392.936355][ T9302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.110177][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1121'. [ 393.250396][ T9310] overlayfs: missing 'lowerdir' [ 395.176135][ T5775] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 395.468428][ T5775] usb 2-1: Using ep0 maxpacket: 8 [ 395.544508][ T5775] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 395.659481][ T5775] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.778564][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.043425][ T9340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 396.060622][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1134'. [ 396.176741][ T9347] overlayfs: missing 'lowerdir' [ 397.889726][ T23] usb 2-1: USB disconnect, device number 11 [ 400.292113][ T9379] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 401.996182][ T174] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 402.206092][ T174] usb 2-1: Using ep0 maxpacket: 8 [ 402.215517][ T174] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 402.237902][ T174] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.255183][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.862905][ T23] usb 2-1: USB disconnect, device number 12 [ 404.406306][ T174] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 404.608430][ T174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.624820][ T174] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 404.636340][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.655509][ T174] usb 3-1: config 0 descriptor?? [ 404.679707][ T174] pwc: Askey VC010 type 2 USB webcam detected. [ 405.163292][ T174] pwc: recv_control_msg error -32 req 02 val 2b00 [ 405.171708][ T174] pwc: recv_control_msg error -32 req 02 val 2700 [ 405.180211][ T174] pwc: recv_control_msg error -32 req 02 val 2c00 [ 405.190583][ T174] pwc: recv_control_msg error -32 req 04 val 1000 [ 405.197829][ T174] pwc: recv_control_msg error -32 req 04 val 1300 [ 405.591490][ T174] pwc: recv_control_msg error -71 req 02 val 2000 [ 406.108970][ T174] pwc: recv_control_msg error -71 req 02 val 2100 [ 406.118145][ T174] pwc: recv_control_msg error -71 req 04 val 1500 [ 406.125151][ T174] pwc: recv_control_msg error -71 req 02 val 2500 [ 406.132132][ T174] pwc: recv_control_msg error -71 req 02 val 2400 [ 406.141760][ T174] pwc: recv_control_msg error -71 req 02 val 2600 [ 406.149124][ T174] pwc: recv_control_msg error -71 req 02 val 2900 [ 406.156915][ T174] pwc: recv_control_msg error -71 req 02 val 2800 [ 406.164064][ T174] pwc: recv_control_msg error -71 req 04 val 1100 [ 406.170974][ T174] pwc: recv_control_msg error -71 req 04 val 1200 [ 406.184722][ T174] pwc: Registered as video103. [ 406.198966][ T174] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 406.217903][ T174] usb 3-1: USB disconnect, device number 11 [ 406.637524][ T23] libceph: connect (1)[c::]:6789 error -101 [ 406.646582][ T9462] ceph: No mds server is up or the cluster is laggy [ 406.665909][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 406.711737][ T23] libceph: connect (1)[c::]:6789 error -101 [ 406.728219][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 406.782644][ T9468] ceph: No mds server is up or the cluster is laggy [ 407.375711][ T9476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 407.542357][ T9479] kvm: pic: non byte write [ 413.345636][ T9537] fuse: Bad value for 'fd' [ 414.842023][ T5833] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 414.967793][ T9552] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 415.108674][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 415.133477][ T5833] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 415.178266][ T5833] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.205078][ T5833] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.218731][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.241845][ T5833] usbtmc 3-1:16.0: bulk endpoints not found [ 415.583281][ T9564] fuse: Bad value for 'fd' [ 417.022132][ T5833] usb 3-1: USB disconnect, device number 12 [ 417.769370][ T5772] syz_tun (unregistering): left allmulticast mode [ 419.526306][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 419.627213][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 419.682305][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 419.826726][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 419.842667][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 419.857836][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.880334][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.889982][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.958193][ T23] usbtmc 3-1:16.0: bulk endpoints not found [ 420.044362][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.055936][ T23] libceph: connect (1)[c::]:6789 error -101 [ 420.062543][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.073192][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.081332][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 420.082742][ T9604] ceph: No mds server is up or the cluster is laggy [ 420.097194][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.105636][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 420.114494][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.172376][ T9609] chnl_net:caif_netlink_parms(): no params data found [ 421.467778][ T9609] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.483036][ T9609] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.490746][ T9609] bridge_slave_0: entered allmulticast mode [ 421.498675][ T9609] bridge_slave_0: entered promiscuous mode [ 421.509218][ T9609] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.517164][ T9609] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.524741][ T9609] bridge_slave_1: entered allmulticast mode [ 421.532601][ T9609] bridge_slave_1: entered promiscuous mode [ 421.600773][ T9609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.695113][ T9609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.789148][ T9609] team0: Port device team_slave_0 added [ 421.864549][ T9609] team0: Port device team_slave_1 added [ 421.874171][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1231'. [ 421.912238][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.940204][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.985443][ T9632] overlayfs: missing 'lowerdir' [ 421.992675][ T9609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.137517][ T174] usb 3-1: USB disconnect, device number 13 [ 422.145103][ T9609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.172980][ T9609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.202230][ T5785] Bluetooth: hci3: command tx timeout [ 422.253816][ T9609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.396943][ T9609] hsr_slave_0: entered promiscuous mode [ 422.410455][ T9609] hsr_slave_1: entered promiscuous mode [ 422.422835][ T9609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.443173][ T9609] Cannot create hsr debugfs directory [ 422.831400][ T9656] nullb0: [POWERTEC] p1 [ 422.840265][ T9656] nullb0: p1 start 1986356271 is beyond EOD, truncated [ 422.904518][ T9609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.931819][ T9609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.942452][ T9609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.970924][ T9609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 423.185882][ T9609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.193992][ T174] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 423.234834][ T9609] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.269609][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.276843][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.348863][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.356850][ T6651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.400090][ T174] usb 3-1: Using ep0 maxpacket: 8 [ 423.421332][ T174] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 423.431895][ T174] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.469294][ T174] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.486262][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.571223][ T174] usbtmc 3-1:16.0: bulk endpoints not found [ 423.609263][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1242'. [ 423.716761][ T9665] overlayfs: missing 'lowerdir' [ 424.285982][ T5785] Bluetooth: hci3: command tx timeout [ 424.624927][ T9609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.024578][ T9684] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 425.168756][ T9609] veth0_vlan: entered promiscuous mode [ 425.189918][ T9609] veth1_vlan: entered promiscuous mode [ 425.218431][ T9609] veth0_macvtap: entered promiscuous mode [ 425.248756][ T9609] veth1_macvtap: entered promiscuous mode [ 425.311772][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.335437][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.349393][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.364491][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.380606][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.395129][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.406517][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.427314][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.445178][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.470807][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.486521][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.505340][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.515978][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.525921][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.536914][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.547191][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.557771][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.605078][ T9609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.630217][ T9609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.639457][ T9609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.650112][ T9609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.659301][ T9609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.782636][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.819770][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.844190][ T5775] usb 3-1: USB disconnect, device number 14 [ 425.990734][ T6672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.145345][ T6672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.317246][ T9698] overlayfs: missing 'lowerdir' [ 426.371205][ T5785] Bluetooth: hci3: command tx timeout [ 426.868390][ T9708] capability: warning: `syz.2.1251' uses deprecated v2 capabilities in a way that may be insecure [ 428.506111][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 428.506571][ T5785] Bluetooth: hci3: command tx timeout [ 428.554876][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1261'. [ 428.662770][ T9736] overlayfs: missing 'lowerdir' [ 429.496113][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 429.517763][ T27] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 429.556140][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 429.577757][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 429.593121][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 429.654337][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.674432][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.793636][ T27] usbtmc 4-1:16.0: bulk endpoints not found [ 430.697184][ T9757] Config c/1 of g1 needs at least one function. [ 430.704137][ T9757] udc dummy_udc.0: failed to start g1: -22 [ 430.710424][ T9757] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 430.721205][ T9757] UDC core: g1: couldn't find an available UDC or it's busy [ 432.223636][ T8] usb 4-1: USB disconnect, device number 12 [ 436.900081][ T5775] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 437.126110][ T5775] usb 3-1: Using ep0 maxpacket: 8 [ 437.149859][ T5775] usb 3-1: device descriptor read/all, error -71 [ 440.209986][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.216429][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.749471][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 446.755757][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 446.764143][ T9914] ceph: No mds server is up or the cluster is laggy [ 448.524485][ T9936] syzkaller0: entered promiscuous mode [ 448.530234][ T9936] syzkaller0: entered allmulticast mode [ 449.942657][ T9946] kvm: pic: non byte write [ 450.409528][ T8] libceph: connect (1)[c::]:6789 error -101 [ 450.415783][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 450.429911][ T9953] ceph: No mds server is up or the cluster is laggy [ 453.316118][ T5775] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 454.317954][ T5775] usb 4-1: config 0 has no interfaces? [ 454.323693][ T5775] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 454.346799][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.367110][ T5775] usb 4-1: config 0 descriptor?? [ 454.799420][ T5775] usb 4-1: USB disconnect, device number 13 [ 457.705063][T10016] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 459.025999][T10035] syzkaller0: entered promiscuous mode [ 459.049988][T10035] syzkaller0: entered allmulticast mode [ 459.307528][ T5814] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 459.528006][ T5814] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 459.537484][ T5814] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 459.559267][ T5814] usb 5-1: config 179 has no interface number 0 [ 459.592915][ T5814] usb 5-1: config 179 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 459.664151][ T5814] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 459.762103][ T5814] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 459.807488][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.043344][ T5814] usb 5-1: USB disconnect, device number 2 [ 464.203025][T10069] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 464.450619][T10073] input: syz0 as /devices/virtual/input/input6 [ 466.089627][T10097] kvm: pic: non byte write [ 466.126715][T10100] kvm: pic: non byte write [ 466.131581][T10100] kvm: pic: single mode not supported [ 466.687479][T10110] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 467.689495][ T970] libceph: connect (1)[c::]:6789 error -101 [ 467.706220][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 467.712223][T10127] ceph: No mds server is up or the cluster is laggy [ 469.306130][ T5814] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 469.332456][T10151] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 469.471951][ T9] libceph: connect (1)[c::]:6789 error -101 [ 469.486160][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 469.498178][T10162] ceph: No mds server is up or the cluster is laggy [ 469.568485][ T5814] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 469.581474][ T5814] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 469.594899][ T5814] usb 5-1: config 179 has no interface number 0 [ 469.606022][ T5814] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 469.623756][ T5814] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 469.635350][ T5814] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 469.720616][ T5814] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 469.760429][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.802042][T10149] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.466310][ T23] usb 5-1: USB disconnect, device number 3 [ 472.032516][T10195] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 472.840212][T10198] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 473.089992][T10203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1396'. [ 473.138640][T10203] overlayfs: missing 'lowerdir' [ 473.857385][T10205] xt_NFQUEUE: number of total queues is 0 [ 475.006040][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 475.545768][T10229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.925533][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 475.934668][ T9] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 476.005313][ T9] usb 5-1: config 179 has no interface number 0 [ 476.207015][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 476.252223][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 476.264543][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 476.296575][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 476.342720][T10232] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 476.470098][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.664851][T10211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.338522][ T5773] usb 5-1: USB disconnect, device number 4 [ 477.416198][T10241] xt_NFQUEUE: number of total queues is 0 [ 478.679079][T10259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 481.012668][T10276] xt_NFQUEUE: number of total queues is 0 [ 481.124379][T10279] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 481.994857][ T5814] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 482.278621][ T5814] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 482.303214][ T5814] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 482.317902][ T5814] usb 5-1: config 179 has no interface number 0 [ 482.320941][T10291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.342379][ T5814] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 482.356255][ T5814] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 482.369759][ T5814] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 482.385451][ T5814] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 482.397314][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.449684][T10277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.770160][ T5814] usb 5-1: USB disconnect, device number 5 [ 491.563682][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 491.786241][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 492.178194][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 492.201135][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 492.211554][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.386081][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.582855][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.683940][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.729827][ T23] usb 4-1: usb_control_msg returned -32 [ 493.735685][ T23] usbtmc 4-1:16.0: can't read capabilities [ 494.838475][ T970] usb 4-1: USB disconnect, device number 14 [ 499.046315][ T5773] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 499.484118][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 499.524838][ T5773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 499.736316][T10434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.139043][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 500.176178][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 500.196731][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.243126][ T5773] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.252422][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.517000][ T5773] usb 3-1: usb_control_msg returned -32 [ 500.522641][ T5773] usbtmc 3-1:16.0: can't read capabilities [ 500.662611][T10484] syzkaller0: entered promiscuous mode [ 500.673954][T10484] syzkaller0: entered allmulticast mode [ 501.630243][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.636750][T10231] usb 3-1: USB disconnect, device number 17 [ 501.645374][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.807182][T10231] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 504.000126][T10231] usb 3-1: Using ep0 maxpacket: 8 [ 504.010508][T10231] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 504.028238][T10231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 504.039722][T10231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 504.051024][T10231] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.064168][T10231] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.073321][T10231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.299329][T10231] usb 3-1: usb_control_msg returned -32 [ 504.305807][T10231] usbtmc 3-1:16.0: can't read capabilities [ 505.898886][T10515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.108811][ T23] usb 3-1: USB disconnect, device number 18 [ 509.429423][T10580] syzkaller0: entered promiscuous mode [ 509.441468][T10580] syzkaller0: entered allmulticast mode [ 511.176045][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 511.975980][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 511.987643][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 512.015986][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 512.030007][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.096398][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.116120][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 512.125596][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.403917][ T9] usb 3-1: usb_control_msg returned -32 [ 512.416168][ T9] usbtmc 3-1:16.0: can't read capabilities [ 513.805154][ T5814] usb 3-1: USB disconnect, device number 19 [ 518.188318][T10630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.926708][T10666] syzkaller0: entered promiscuous mode [ 518.945039][T10666] syzkaller0: entered allmulticast mode [ 521.380738][T10700] Config c/1 of g1 needs at least one function. [ 521.396114][T10700] udc dummy_udc.0: failed to start g1: -22 [ 521.402526][T10700] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 521.411905][T10700] UDC core: g1: couldn't find an available UDC or it's busy [ 521.770629][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 521.956093][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 521.990853][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 522.002147][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 522.013189][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 522.023480][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.036996][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 522.046095][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.269451][ T9] usb 4-1: usb_control_msg returned -32 [ 522.282662][ T9] usbtmc 4-1:16.0: can't read capabilities [ 524.909749][ T970] usb 4-1: USB disconnect, device number 15 [ 526.866870][T10747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.936248][ T970] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 528.188572][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 528.219066][ T970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 528.270700][ T970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 528.293725][ T970] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.318422][ T970] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.367927][ T970] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.396691][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.643555][ T970] usb 3-1: GET_CAPABILITIES returned 0 [ 528.661953][ T970] usbtmc 3-1:16.0: can't read capabilities [ 528.853659][ T970] usb 3-1: USB disconnect, device number 20 [ 530.371722][T10777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.868748][T10798] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 535.024764][T10807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 538.876555][T10844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.866197][ T970] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 540.974462][ T9] libceph: connect (1)[c::]:6789 error -101 [ 540.986678][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 541.071519][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 541.079699][ T970] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 541.091863][ T970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 541.104416][ T970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 541.121755][ T970] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.135032][ T970] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.154463][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.257638][ T9] libceph: connect (1)[c::]:6789 error -101 [ 541.263701][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 541.382979][ T970] usb 5-1: GET_CAPABILITIES returned 0 [ 541.390218][ T970] usbtmc 5-1:16.0: can't read capabilities [ 541.597430][ T970] usb 5-1: USB disconnect, device number 6 [ 541.782459][T10866] ceph: No mds server is up or the cluster is laggy [ 541.796373][ T5775] libceph: connect (1)[c::]:6789 error -101 [ 541.810691][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 542.636510][T10880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.226346][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 545.456484][T10906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.320110][ T970] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 546.517170][ T970] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 546.539445][ T970] usb 5-1: config index 0 descriptor too short (expected 16155, got 27) [ 546.575984][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.584915][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.619585][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.637741][ T970] usb 5-1: config index 1 descriptor too short (expected 16155, got 27) [ 546.666012][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.674953][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.726049][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.761816][ T970] usb 5-1: config index 2 descriptor too short (expected 16155, got 27) [ 546.786114][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 546.816056][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 546.864976][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.888287][ T970] usb 5-1: config index 3 descriptor too short (expected 16155, got 27) [ 546.927858][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.018520][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.106226][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.172012][ T970] usb 5-1: config index 4 descriptor too short (expected 16155, got 27) [ 547.336303][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.485991][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.523595][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.571874][ T970] usb 5-1: config index 5 descriptor too short (expected 16155, got 27) [ 547.613763][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.659442][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.700475][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.735410][ T970] usb 5-1: config index 6 descriptor too short (expected 16155, got 27) [ 547.753462][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.776687][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.788122][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.796675][ T970] usb 5-1: config index 7 descriptor too short (expected 16155, got 27) [ 547.809608][ T970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 547.826035][ T970] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 547.844499][ T970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.854487][ T970] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 547.864028][ T970] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 547.902871][ T970] usb 5-1: Product: syz [ 547.907545][ T970] usb 5-1: Manufacturer: syz [ 547.912255][ T970] usb 5-1: SerialNumber: syz [ 547.920016][ T970] usb 5-1: config 0 descriptor?? [ 547.931161][ T970] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 548.213165][ T5775] usb 5-1: USB disconnect, device number 7 [ 548.263173][ T5775] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 548.292125][ T970] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 549.076587][ T970] usb 4-1: Using ep0 maxpacket: 8 [ 549.083570][ T970] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 549.098204][ T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 549.109781][ T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 549.122936][ T970] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.136070][ T970] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 549.145419][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.773490][ T970] usb 4-1: GET_CAPABILITIES returned 0 [ 549.845447][ T970] usbtmc 4-1:16.0: can't read capabilities [ 550.005257][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 551.159673][ T970] usb 4-1: USB disconnect, device number 16 [ 553.875972][T10231] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 554.070062][T10994] xt_NFQUEUE: number of total queues is 0 [ 554.108048][T10231] usb 3-1: Using ep0 maxpacket: 8 [ 554.127961][T10231] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 554.148424][T10231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 554.165283][T10231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 554.195841][T10231] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.214278][T10997] syzkaller0: entered promiscuous mode [ 554.220027][T10997] syzkaller0: entered allmulticast mode [ 554.244417][T10231] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.264688][T10231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.522310][T10231] usb 3-1: GET_CAPABILITIES returned 0 [ 554.532194][T10231] usbtmc 3-1:16.0: can't read capabilities [ 555.074606][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 555.089437][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 556.357683][ T970] usb 3-1: USB disconnect, device number 21 [ 556.474623][T11023] xt_NFQUEUE: number of total queues is 0 [ 557.618371][T11038] syzkaller0: entered promiscuous mode [ 557.624977][T11038] syzkaller0: entered allmulticast mode [ 558.589423][T11045] UDC core: g1: couldn't find an available UDC or it's busy [ 558.738475][T11052] xt_NFQUEUE: number of total queues is 0 [ 559.907077][T11075] UDC core: g1: couldn't find an available UDC or it's busy [ 559.997847][T11077] syzkaller0: entered promiscuous mode [ 560.003336][T11077] syzkaller0: entered allmulticast mode [ 560.184263][T11079] xt_NFQUEUE: number of total queues is 0 [ 560.330708][T11083] syzkaller0: entered promiscuous mode [ 560.336588][T11083] syzkaller0: entered allmulticast mode [ 561.698563][T11100] syzkaller0: entered promiscuous mode [ 561.704074][T11100] syzkaller0: entered allmulticast mode [ 561.766781][T11102] xt_NFQUEUE: number of total queues is 0 [ 562.162644][T11110] syzkaller0: entered promiscuous mode [ 562.168288][T11110] syzkaller0: entered allmulticast mode [ 563.074651][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.081785][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.188762][T11133] xt_NFQUEUE: number of total queues is 0 [ 563.257652][ T5773] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 563.476483][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 563.495069][ T5773] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 563.518271][ T5773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 563.602071][ T5773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.623722][ T5773] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.658078][ T5773] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.673317][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.687192][T11149] syzkaller0: entered promiscuous mode [ 563.692711][T11149] syzkaller0: entered allmulticast mode [ 563.934579][ T5773] usb 5-1: GET_CAPABILITIES returned 0 [ 563.943431][ T5773] usbtmc 5-1:16.0: can't read capabilities [ 564.151710][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 564.161086][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 565.315675][T11173] xt_NFQUEUE: number of total queues is 0 [ 566.023307][ T9] usb 5-1: USB disconnect, device number 8 [ 566.666994][T11183] syzkaller0: entered promiscuous mode [ 566.704403][T11183] syzkaller0: entered allmulticast mode [ 568.247983][T11202] UDC core: g1: couldn't find an available UDC or it's busy [ 568.376081][T11206] xt_NFQUEUE: number of total queues is 0 [ 569.159678][T11216] syzkaller0: entered promiscuous mode [ 569.283535][T11216] syzkaller0: entered allmulticast mode [ 569.973403][T11230] xt_NFQUEUE: number of total queues is 0 [ 571.857412][T11254] syzkaller0: entered promiscuous mode [ 571.863408][T11254] syzkaller0: entered allmulticast mode [ 572.021679][T11256] xt_NFQUEUE: number of total queues is 0 [ 572.909070][T11258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.454332][T11295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.409421][T11300] xt_NFQUEUE: number of total queues is 0 [ 585.533595][T11393] xt_NFQUEUE: number of total queues is 0 [ 587.892215][T11434] xt_NFQUEUE: number of total queues is 0 [ 589.805211][T11480] xt_NFQUEUE: number of total queues is 0 [ 592.129771][T11526] xt_NFQUEUE: number of total queues is 0 [ 594.576201][T11573] xt_NFQUEUE: number of total queues is 0 [ 597.121713][T11609] xt_NFQUEUE: number of total queues is 0 [ 600.164780][T11661] xt_NFQUEUE: number of total queues is 0 [ 602.136336][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 602.396120][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.620246][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.638340][ T23] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 602.648829][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.696099][ T23] usb 3-1: config 0 descriptor?? [ 602.767493][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 602.773665][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 603.079211][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 603.085209][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 603.152167][T11691] xt_NFQUEUE: number of total queues is 0 [ 603.586927][T11682] ceph: No mds server is up or the cluster is laggy [ 603.623946][ T9] libceph: connect (1)[c::]:6789 error -101 [ 603.647846][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 604.862535][T11720] xt_NFQUEUE: number of total queues is 0 [ 605.832009][ T23] usb 3-1: USB disconnect, device number 22 [ 605.903238][ T27] libceph: connect (1)[c::]:6789 error -101 [ 605.920122][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 606.207135][ T23] libceph: connect (1)[c::]:6789 error -101 [ 606.445689][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 606.570683][T11752] xt_NFQUEUE: number of total queues is 0 [ 606.711218][T11732] ceph: No mds server is up or the cluster is laggy [ 607.625044][T11774] xt_NFQUEUE: number of total queues is 0 [ 607.697537][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 607.703540][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 607.726536][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 607.732586][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 608.006523][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 608.108120][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 608.532921][T11776] ceph: No mds server is up or the cluster is laggy [ 608.742693][T11793] ip_tables: iptables: counters copy to user failed while replacing table [ 608.962076][T11805] xt_NFQUEUE: number of total queues is 0 [ 609.299348][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 609.306688][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 609.596530][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 609.602851][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 610.256205][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 610.546087][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 610.547196][T11821] ceph: No mds server is up or the cluster is laggy [ 610.697825][T11836] ip_tables: iptables: counters copy to user failed while replacing table [ 610.842997][T11843] xt_NFQUEUE: number of total queues is 0 [ 612.445386][T10231] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 612.468546][T10231] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 612.677500][T10231] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 613.021381][T11861] fido_id[11861]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 613.438780][T11888] xt_NFQUEUE: number of total queues is 0 [ 615.440035][T11925] xt_NFQUEUE: number of total queues is 0 [ 616.834598][T11938] syzkaller0: entered promiscuous mode [ 616.854895][T11938] syzkaller0: entered allmulticast mode [ 617.275508][T11959] xt_NFQUEUE: number of total queues is 0 [ 619.376329][T11982] ip_tables: iptables: counters copy to user failed while replacing table [ 620.241715][T11995] xt_NFQUEUE: number of total queues is 0 [ 620.325727][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1922'. [ 620.432913][T11998] overlayfs: missing 'lowerdir' [ 621.323710][T12003] syzkaller0: entered promiscuous mode [ 621.376815][T12003] syzkaller0: entered allmulticast mode [ 624.252627][T12030] xt_NFQUEUE: number of total queues is 0 [ 624.521023][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.534781][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.043195][T12073] xt_NFQUEUE: number of total queues is 0 [ 628.959799][T12079] syzkaller0: entered promiscuous mode [ 628.965410][T12079] syzkaller0: entered allmulticast mode [ 634.083227][T12124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.028796][T12147] xt_NFQUEUE: number of total queues is 0 [ 639.067048][T12157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.475917][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 679.684699][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.701402][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 679.719780][ T27] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 679.732619][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.753669][ T27] usb 3-1: config 0 descriptor?? [ 681.525403][T12565] bridge1: entered promiscuous mode [ 681.816016][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 681.998851][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 682.007605][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 682.022459][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 682.031776][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.039835][ T23] usb 5-1: Product: syz [ 682.044028][ T23] usb 5-1: Manufacturer: syz [ 682.048771][ T23] usb 5-1: SerialNumber: syz [ 682.293736][ T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 683.097969][ T23] usb 5-1: failed to enable PITCH for EP 0x82 [ 683.916213][ T23] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 683.924943][ T23] usb 5-1: clock source 0 is not valid, cannot use [ 683.966122][ T23] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 683.988063][ T23] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 683.997617][ T5773] usb 3-1: USB disconnect, device number 23 [ 684.162059][ T23] usb 5-1: USB disconnect, device number 9 [ 684.284200][T12586] udevd[12586]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.110509][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.126401][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.926246][ T970] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 690.284734][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.297390][ T970] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.308657][ T970] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 690.319514][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.337388][ T970] usb 5-1: config 0 descriptor?? [ 693.456496][ T970] usb 5-1: USB disconnect, device number 10 [ 698.035921][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 698.257925][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.285907][ T5834] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.303873][ T5834] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 698.333503][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.379128][ T5834] usb 5-1: config 0 descriptor?? [ 702.638854][ T23] usb 5-1: USB disconnect, device number 11 [ 702.717930][T12744] bridge1: entered promiscuous mode [ 703.016115][ T5811] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 703.224297][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 703.232601][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 703.297031][ T5811] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 703.389166][ T5811] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 703.483389][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.502416][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 703.585155][ T23] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 703.617392][ T5811] usb 3-1: Product: syz [ 703.676329][ T5811] usb 3-1: Manufacturer: syz [ 703.726906][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 703.742215][ T5811] usb 3-1: SerialNumber: syz [ 703.850003][ T23] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 703.873481][ T23] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 703.892139][ T23] usb 5-1: Manufacturer: syz [ 703.928884][ T23] usb 5-1: config 0 descriptor?? [ 704.133369][ T5811] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 704.815979][ T23] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 704.889986][ T5811] usb 3-1: failed to enable PITCH for EP 0x82 [ 704.897265][ T5811] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 704.912371][ T5811] usb 3-1: clock source 0 is not valid, cannot use [ 704.919615][ T5811] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 704.927799][ T5811] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 704.970509][ T5811] usb 3-1: USB disconnect, device number 24 [ 705.003645][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.035245][ T23] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 705.054824][T12582] udevd[12582]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.077835][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.088310][ T23] usb 4-1: Product: syz [ 705.092612][ T23] usb 4-1: Manufacturer: syz [ 705.098578][ T23] usb 4-1: SerialNumber: syz [ 705.106876][ T23] usb 4-1: config 0 descriptor?? [ 705.122553][ T23] vmk80xx 4-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 705.318344][ T5775] usb 4-1: USB disconnect, device number 17 [ 706.368696][ T5775] usb 5-1: USB disconnect, device number 12 [ 707.593232][T12792] syzkaller1: entered promiscuous mode [ 707.599095][T12792] syzkaller1: entered allmulticast mode [ 707.999970][T12803] binder: 12802:12803 ioctl c00c6211 0 returned -14 [ 708.017577][T12803] gadgetfs: bound to dummy_udc driver [ 709.095255][ T28] audit: type=1326 audit(1786726761.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.0.2178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3062d9e0d9 code=0x0 [ 709.149691][T12824] kvm: emulating exchange as write [ 709.245997][ T970] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 710.586615][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.605847][ T970] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 710.614859][ T970] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 710.624285][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.636901][ T970] usb 3-1: config 0 descriptor?? [ 713.977453][ T970] usb 3-1: USB disconnect, device number 25 [ 721.701706][T12910] overlayfs: missing 'lowerdir' [ 722.827013][T12919] fuse: Bad value for 'fd' [ 724.193767][T12944] overlayfs: missing 'lowerdir' [ 725.190119][T12956] fuse: Bad value for 'fd' [ 725.948873][T12975] bridge1: entered promiscuous mode [ 726.185943][ T27] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 726.408533][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 726.442715][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 726.462393][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 726.484674][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.494995][ T27] usb 4-1: Product: syz [ 726.521745][ T27] usb 4-1: Manufacturer: syz [ 726.534451][ T27] usb 4-1: SerialNumber: syz [ 726.880257][ T27] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 726.926890][T12982] overlayfs: missing 'lowerdir' [ 727.853244][T12985] fuse: Bad value for 'fd' [ 727.884831][ T27] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 728.056113][ T27] usb 4-1: USB disconnect, device number 18 [ 728.159413][T12855] udevd[12855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.477639][T13016] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 729.486676][T13016] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 730.470918][T13025] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 730.563552][ T5775] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 730.852521][ T5775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.944868][ T5775] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 731.036660][ T5775] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 731.132506][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.209228][ T5775] usb 5-1: config 0 descriptor?? [ 733.203168][ T5834] usb 5-1: USB disconnect, device number 13 [ 733.798335][T13059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 733.807379][T13059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 733.916155][ T5834] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 734.316357][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 734.357815][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 734.396001][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 734.445597][ T5834] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 734.481791][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.504334][ T5834] usb 5-1: config 0 descriptor?? [ 735.999071][ T5834] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0002/input/input7 [ 736.100131][ T5834] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 736.332719][ T5775] usb 5-1: USB disconnect, device number 14 [ 737.810832][T13100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 737.820057][T13100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 741.395418][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 744.595168][ T970] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 745.677718][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.696976][ T970] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 745.722730][ T970] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 745.782027][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.815091][ T970] usb 3-1: config 0 descriptor?? [ 745.979584][ T970] usb 3-1: USB disconnect, device number 26 [ 747.556835][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.595512][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.895912][ T5773] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 750.496256][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 750.503631][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 750.525887][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 750.556208][ T5773] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 750.565290][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.607457][ T5773] usb 3-1: config 0 descriptor?? [ 751.251416][ T5773] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0003/input/input8 [ 751.355028][ T5773] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 751.493673][ T5773] usb 3-1: USB disconnect, device number 27 [ 751.693665][T13217] fido_id[13217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 761.032477][ T9950] syz_tun (unregistering): left allmulticast mode [ 761.379446][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.644568][T10884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 761.666280][T10884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 761.675075][T10884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 761.677108][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.707402][T10884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 761.715152][T10884] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 761.796307][T10884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 761.911225][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.709141][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.958016][T13330] fuse: Bad value for 'fd' [ 763.871995][T13312] chnl_net:caif_netlink_parms(): no params data found [ 763.876046][ T5785] Bluetooth: hci1: command tx timeout [ 765.425726][T13312] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.444764][T13312] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.475370][T13312] bridge_slave_0: entered allmulticast mode [ 765.492426][T13312] bridge_slave_0: entered promiscuous mode [ 765.654911][T13312] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.662403][T13312] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.678819][T13312] bridge_slave_1: entered allmulticast mode [ 765.689303][T13312] bridge_slave_1: entered promiscuous mode [ 765.815962][T13312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.397682][ T5785] Bluetooth: hci1: command tx timeout [ 766.987657][T13312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.008338][T13384] xt_NFQUEUE: number of total queues is 0 [ 767.091128][T13312] team0: Port device team_slave_0 added [ 767.139642][T13312] team0: Port device team_slave_1 added [ 767.302072][ T12] hsr_slave_0: left promiscuous mode [ 767.436034][ T12] hsr_slave_1: left promiscuous mode [ 767.464207][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.471866][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.497444][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.514566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.545107][ T12] bridge_slave_1: left allmulticast mode [ 767.564894][ T12] bridge_slave_1: left promiscuous mode [ 767.581921][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.604448][ T12] bridge_slave_0: left allmulticast mode [ 767.613771][ T12] bridge_slave_0: left promiscuous mode [ 767.624801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.742066][ T12] veth1_macvtap: left promiscuous mode [ 767.760643][ T12] veth0_macvtap: left promiscuous mode [ 767.776616][ T12] veth1_vlan: left promiscuous mode [ 767.794709][ T12] veth0_vlan: left promiscuous mode [ 768.441097][ T5785] Bluetooth: hci1: command tx timeout [ 769.252352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 769.351267][ T12] team0 (unregistering): Port device team_slave_0 removed [ 769.415076][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.484512][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.953575][ T12] bond0 (unregistering): Released all slaves [ 770.057304][T13312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.065534][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.092925][T13312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.204196][T13312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.212667][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.238933][T13312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.380669][T13312] hsr_slave_0: entered promiscuous mode [ 770.389560][T13312] hsr_slave_1: entered promiscuous mode [ 770.395687][T13312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.404341][T13312] Cannot create hsr debugfs directory [ 770.516992][ T5785] Bluetooth: hci1: command tx timeout [ 772.847228][T13442] xt_NFQUEUE: number of total queues is 0 [ 773.725220][T13312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 773.780612][T13312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 773.810347][T13312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 774.160767][T13312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 774.681924][T13312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.948185][T13312] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.981845][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.989056][ T6641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.051925][T12388] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.059116][T12388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.710459][T13312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.843886][T13312] veth0_vlan: entered promiscuous mode [ 776.896258][T13312] veth1_vlan: entered promiscuous mode [ 776.983660][T13312] veth0_macvtap: entered promiscuous mode [ 777.044720][T13312] veth1_macvtap: entered promiscuous mode [ 777.113930][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.140296][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.163729][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.181408][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.193674][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.214523][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.242794][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.284482][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.325158][T13312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.610634][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.648207][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.681819][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.705895][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.715745][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.755874][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.765733][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.795880][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.822729][T13312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.901837][T13312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.925917][T13312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.934659][T13312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.049388][T13312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.053467][ T6663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.074714][ T6663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.137104][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.144964][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.559438][T13536] xt_NFQUEUE: number of total queues is 0 [ 784.307449][T10413] syz_tun (unregistering): left allmulticast mode [ 785.257513][T10884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 785.271345][T10884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 785.292446][T10884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 785.301525][T10884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 785.312912][T10884] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 785.329733][T10884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.710246][ T28] audit: type=1326 audit(1786726839.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13583 comm="syz.0.2377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3062d9e0d9 code=0x0 [ 786.887194][T13569] chnl_net:caif_netlink_parms(): no params data found [ 787.203772][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.259402][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.269176][T13569] bridge_slave_0: entered allmulticast mode [ 787.286699][T13569] bridge_slave_0: entered promiscuous mode [ 787.305565][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.314493][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.328231][T13569] bridge_slave_1: entered allmulticast mode [ 787.335527][T13569] bridge_slave_1: entered promiscuous mode [ 787.401684][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.787042][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.324928][T13569] team0: Port device team_slave_0 added [ 788.408917][T13569] team0: Port device team_slave_1 added [ 788.587135][T10884] Bluetooth: hci2: command tx timeout [ 788.919613][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.067963][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.296830][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.364651][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.587247][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.637232][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.673738][T10884] Bluetooth: hci2: command tx timeout [ 790.795956][T13569] hsr_slave_0: entered promiscuous mode [ 790.805645][T13569] hsr_slave_1: entered promiscuous mode [ 790.812063][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.819910][T13569] Cannot create hsr debugfs directory [ 790.864748][T13630] syzkaller1: entered promiscuous mode [ 790.871867][T13630] syzkaller1: entered allmulticast mode [ 791.299216][T13569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.471018][T13569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.428905][T13569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.288355][T10884] Bluetooth: hci2: command tx timeout [ 793.447990][T13569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.869378][T13569] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 793.917018][T13569] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 793.981238][T13569] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 794.016871][T13569] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 794.283724][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.392436][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.418602][T13663] syzkaller1: entered promiscuous mode [ 794.424144][T13663] syzkaller1: entered allmulticast mode [ 794.497540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.504743][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.561871][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.569101][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.003732][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.386099][ T5785] Bluetooth: hci2: command tx timeout [ 795.908168][T13569] veth0_vlan: entered promiscuous mode [ 795.970405][T13569] veth1_vlan: entered promiscuous mode [ 796.105592][T13569] veth0_macvtap: entered promiscuous mode [ 796.125153][T13569] veth1_macvtap: entered promiscuous mode [ 796.145570][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.266103][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.276893][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.287659][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.298374][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.309568][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.995914][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.025846][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.035704][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.224855][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.257033][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.278993][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.306259][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.574978][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.638941][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.752850][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.795868][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.808645][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.839512][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.879809][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.914808][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.986581][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.158639][T13569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.205989][T13569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.236127][T13569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.264620][T13569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.419790][T13703] syzkaller1: entered promiscuous mode [ 798.455307][T13703] syzkaller1: entered allmulticast mode [ 798.665571][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.690752][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.746312][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.764071][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.385202][ T28] audit: type=1326 audit(1786726851.790:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.2.2407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ad59e0d9 code=0x0 [ 802.096922][T13744] syzkaller1: entered promiscuous mode [ 802.102439][T13744] syzkaller1: entered allmulticast mode [ 803.856502][T13765] fuse: Unknown parameter 'grou00000000000000000000' [ 808.986262][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.993452][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.556086][ T5773] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 809.756004][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 809.777834][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 809.825916][ T5773] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.879069][ T5773] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 809.905996][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.940248][ T5773] usb 5-1: config 0 descriptor?? [ 811.007355][ T5773] usbhid 5-1:0.0: can't add hid device: -71 [ 811.045888][ T5773] usbhid: probe of 5-1:0.0 failed with error -71 [ 811.070076][ T5773] usb 5-1: USB disconnect, device number 15 [ 812.186171][T13823] xt_NFQUEUE: number of total queues is 0 [ 813.900560][T13841] syzkaller1: entered promiscuous mode [ 813.906208][T13841] syzkaller1: entered allmulticast mode [ 815.726444][T13857] fuse: Unknown parameter 'grou00000000000000000000' [ 816.220684][T13868] xt_NFQUEUE: number of total queues is 0 [ 816.255960][ T23] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 816.635850][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 817.250951][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 817.262505][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 817.275885][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 817.284945][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.306960][ T23] usb 3-1: config 0 descriptor?? [ 818.597710][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 818.619286][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 818.654963][ T23] usb 3-1: USB disconnect, device number 28 [ 820.577560][T13907] xt_NFQUEUE: number of total queues is 0 [ 824.247655][T13923] bridge1: entered promiscuous mode [ 824.277957][ T5833] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 824.477136][T13934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2466'. [ 824.485955][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 824.514934][T13934] overlayfs: missing 'lowerdir' [ 825.196364][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 825.225004][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.238445][ T5833] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 825.247658][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.264885][ T5833] usb 5-1: config 0 descriptor?? [ 825.889157][ T5833] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0004/input/input9 [ 826.143225][ T5833] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 826.306571][ T5833] usb 5-1: USB disconnect, device number 16 [ 826.417040][T13945] fido_id[13945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 828.026170][ T970] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 828.100030][T13970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2475'. [ 828.143307][T13970] overlayfs: missing 'lowerdir' [ 828.891065][T13973] bridge1: entered promiscuous mode [ 829.057286][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.085921][ T970] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 829.094936][ T970] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 829.140139][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.167614][ T970] usb 4-1: config 0 descriptor?? [ 829.195871][ T23] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 829.291750][T10884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.302714][T10884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.326112][T13982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.335566][T13982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.343645][T13982] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 829.351427][T13982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 829.426057][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 829.462145][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 829.515494][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 829.556056][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.564095][ T23] usb 3-1: Product: syz [ 829.597529][ T23] usb 3-1: Manufacturer: syz [ 829.602169][ T23] usb 3-1: SerialNumber: syz [ 829.791740][T13980] chnl_net:caif_netlink_parms(): no params data found [ 830.069317][ T23] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 830.202509][T10118] syz_tun (unregistering): left allmulticast mode [ 830.299295][T13980] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.311754][T13980] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.325262][T13980] bridge_slave_0: entered allmulticast mode [ 830.340419][T13980] bridge_slave_0: entered promiscuous mode [ 830.350291][T13980] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.358088][T13980] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.365366][T13980] bridge_slave_1: entered allmulticast mode [ 830.394236][T13980] bridge_slave_1: entered promiscuous mode [ 830.462133][T13980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.489903][T13980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.574973][T13980] team0: Port device team_slave_0 added [ 830.597668][T13980] team0: Port device team_slave_1 added [ 830.642503][T13980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.652236][ T23] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 830.667657][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.694150][T13980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.728927][ T23] usb 3-1: USB disconnect, device number 29 [ 830.730718][T13980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.759114][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.784826][T12855] udevd[12855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.791552][T13980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.897173][T13980] hsr_slave_0: entered promiscuous mode [ 830.904028][T13980] hsr_slave_1: entered promiscuous mode [ 830.912624][T13980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.921132][T13980] Cannot create hsr debugfs directory [ 831.087133][T13980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.388456][ T5785] Bluetooth: hci4: command tx timeout [ 831.865399][T13980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.994950][ T5833] usb 4-1: USB disconnect, device number 19 [ 832.085634][T13980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.230267][T14019] overlayfs: missing 'lowerdir' [ 833.277603][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2486'. [ 833.349190][T13980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.466307][ T5785] Bluetooth: hci4: command tx timeout [ 835.089055][T13980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 835.129831][T13980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 835.163976][T13980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 835.274520][T13980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 835.477122][T13980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.496405][T13980] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.537537][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.544669][ T6663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.552809][ T5785] Bluetooth: hci4: command tx timeout [ 835.641919][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.649214][ T6663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.767280][T14038] syzkaller1: entered promiscuous mode [ 835.772827][T14038] syzkaller1: entered allmulticast mode [ 836.172964][T13980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.279445][T13980] veth0_vlan: entered promiscuous mode [ 836.330202][T13980] veth1_vlan: entered promiscuous mode [ 836.409041][T13980] veth0_macvtap: entered promiscuous mode [ 836.428571][T13980] veth1_macvtap: entered promiscuous mode [ 836.465540][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.493829][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.508992][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.519598][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.540353][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.570145][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.586327][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.603920][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.617315][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.634703][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.646289][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.666805][T10231] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 836.667095][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.694573][T13980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.709383][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.729235][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.746838][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.764866][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.777072][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.794069][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.805726][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.823107][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.833435][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.846470][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.856333][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.866865][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.878797][T10231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.907293][T13980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.931923][T10231] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.944628][T10231] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 836.960682][T10231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.004457][T13980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.037203][T13980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.080892][T13980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.136973][T13980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.153324][T14060] overlayfs: missing 'lowerdir' [ 837.344980][T14059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2495'. [ 837.558135][T10231] usb 5-1: config 0 descriptor?? [ 837.626869][ T5785] Bluetooth: hci4: command tx timeout [ 837.946534][ T6663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.709553][ T6663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.558550][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.569962][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.579103][ T5833] usb 5-1: USB disconnect, device number 17 [ 839.809912][T14075] syzkaller1: entered promiscuous mode [ 839.822894][T14075] syzkaller1: entered allmulticast mode [ 842.273501][T14109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2506'. [ 842.305939][T14109] overlayfs: missing 'lowerdir' [ 842.426051][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 843.227755][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.237990][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.247279][ T23] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 843.256462][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.290368][ T23] usb 5-1: config 0 descriptor?? [ 845.275014][ T23] usb 5-1: USB disconnect, device number 18 [ 845.597322][T14122] syzkaller1: entered promiscuous mode [ 845.602841][T14122] syzkaller1: entered allmulticast mode [ 846.935191][T14137] xt_NFQUEUE: number of total queues is 0 [ 847.625954][ T5834] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 848.458394][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.465285][T14151] syzkaller1: entered promiscuous mode [ 848.479901][T14151] syzkaller1: entered allmulticast mode [ 848.835056][T14154] overlayfs: missing 'lowerdir' [ 849.312857][ T5834] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.322080][ T5834] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 849.331255][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.342976][ T5834] usb 4-1: config 0 descriptor?? [ 849.634961][T14167] xt_NFQUEUE: number of total queues is 0 [ 852.435296][ T5834] usb 4-1: USB disconnect, device number 20 [ 852.621490][T14193] syzkaller1: entered promiscuous mode [ 852.654246][T14193] syzkaller1: entered allmulticast mode [ 854.648303][ T5833] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 855.856025][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.394170][ T5833] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 856.434975][ T5833] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 856.444991][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.466367][ T5833] usb 4-1: config 0 descriptor?? [ 857.381696][ T23] usb 4-1: USB disconnect, device number 21 [ 858.599460][T14247] syzkaller1: entered promiscuous mode [ 858.625945][T14247] syzkaller1: entered allmulticast mode [ 861.606757][T13705] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 862.420676][T13705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.424795][T14302] syzkaller1: entered promiscuous mode [ 862.436933][T14302] syzkaller1: entered allmulticast mode [ 862.449844][T13705] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 862.473300][T13705] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 862.482596][T13705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.495675][T13705] usb 3-1: config 0 descriptor?? [ 864.775050][ T5834] usb 3-1: USB disconnect, device number 30 [ 868.176596][T14372] fuse: Unknown parameter 'grou00000000000000000000' [ 869.882699][T14391] xt_NFQUEUE: number of total queues is 0 [ 869.936130][ T5773] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 870.126010][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 870.834470][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.840972][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.055849][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 871.067484][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.080368][ T5773] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 871.089496][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.100056][ T5773] usb 4-1: config 0 descriptor?? [ 871.127973][T14403] fuse: Unknown parameter 'grou00000000000000000000' [ 871.520442][ T5773] usbhid 4-1:0.0: can't add hid device: -71 [ 871.564682][ T5773] usbhid: probe of 4-1:0.0 failed with error -71 [ 871.606109][ T5773] usb 4-1: USB disconnect, device number 22 [ 873.446022][T10721] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 873.768499][T14437] syzkaller1: entered promiscuous mode [ 873.805158][T14437] syzkaller1: entered allmulticast mode [ 874.372735][T14439] fuse: Unknown parameter 'group_i00000000000000000000' [ 874.449189][T10721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.473646][T10721] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.491676][T10721] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 874.501719][T10721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.514973][T10721] usb 4-1: config 0 descriptor?? [ 876.536363][T14470] fuse: Unknown parameter 'group_i00000000000000000000' [ 877.994543][T10721] usb 4-1: USB disconnect, device number 23 [ 879.798678][T14511] fuse: Unknown parameter 'group_i00000000000000000000' [ 883.220600][T14552] fuse: Unknown parameter 'group_id00000000000000000000' [ 884.064373][T14575] fuse: Bad value for 'rootmode' [ 885.156038][ T5833] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 885.295919][ T970] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 885.400526][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 885.417779][ T5833] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 885.438127][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 885.466646][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.474692][ T5833] usb 3-1: Product: syz [ 885.482802][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.486153][ T5833] usb 3-1: Manufacturer: syz [ 885.506221][ T5833] usb 3-1: SerialNumber: syz [ 885.516951][ T970] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 885.537766][ T970] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 885.553106][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.584530][ T970] usb 5-1: config 0 descriptor?? [ 885.743827][ T5833] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 886.156842][ T5833] usb 3-1: 2:1 : bogus bTerminalLink 2 [ 886.478116][ T970] usb 3-1: USB disconnect, device number 31 [ 886.956967][T14612] fuse: Bad value for 'rootmode' [ 887.715865][T13982] Bluetooth: hci1: command 0x0406 tx timeout [ 887.864644][T14632] xt_TCPMSS: Only works on TCP SYN packets [ 887.880058][T14632] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 887.901663][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2657'. [ 889.087823][T14642] fuse: Unknown parameter 'use00000000000000000000' [ 889.104678][ T23] usb 5-1: USB disconnect, device number 19 [ 889.596114][ T23] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 890.301445][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 890.316939][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 890.341454][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 890.351854][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.373158][ T23] usb 5-1: Product: syz [ 890.382054][ T23] usb 5-1: Manufacturer: syz [ 890.389103][ T23] usb 5-1: SerialNumber: syz [ 890.648877][ T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 890.715822][ T5833] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 890.894274][ T23] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 891.304199][ T23] usb 5-1: failed to enable PITCH for EP 0x82 [ 891.685479][ T23] usb 5-1: USB disconnect, device number 20 [ 891.686442][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.708893][ T5833] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 891.719704][ T5833] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 891.728859][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.808419][T13229] udevd[13229]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.830203][T14672] fuse: Unknown parameter 'use00000000000000000000' [ 891.841260][ T5833] usb 4-1: config 0 descriptor?? [ 893.052753][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2677'. [ 893.276171][T14694] overlayfs: missing 'lowerdir' [ 894.036050][ T970] usb 4-1: USB disconnect, device number 24 [ 895.049098][T14704] fuse: Unknown parameter 'use00000000000000000000' [ 896.603433][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2687'. [ 896.710376][T14726] overlayfs: missing 'lowerdir' [ 897.603960][T14734] fuse: Unknown parameter 'user_i00000000000000000000' [ 898.154709][ T28] audit: type=1326 audit(1786726950.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35e5b9e0d9 code=0x0 [ 899.210916][T14765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2698'. [ 899.346430][T14767] overlayfs: missing 'lowerdir' [ 900.206766][T14769] fuse: Bad value for 'user_id' [ 901.813386][ T28] audit: type=1326 audit(1786726954.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14794 comm="syz.3.2706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5bb99e0d9 code=0x0 [ 902.103736][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2708'. [ 902.236856][T14808] overlayfs: missing 'lowerdir' [ 904.346847][T14821] fuse: Bad value for 'fd' [ 905.431628][ T23] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 905.654114][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2718'. [ 905.754019][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.765966][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 905.775124][ T23] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 905.784408][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.796427][ T23] usb 5-1: config 0 descriptor?? [ 905.894788][T14839] overlayfs: missing 'lowerdir' [ 906.445913][ T28] audit: type=1326 audit(1786726958.850:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.2719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ad59e0d9 code=0x0 [ 907.608277][T14860] xt_TCPMSS: Only works on TCP SYN packets [ 907.629075][T14860] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 909.174403][T14890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2729'. [ 909.286561][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 909.362069][T14890] overlayfs: missing 'lowerdir' [ 909.797198][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 909.888640][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 909.913488][ T5773] usb 5-1: USB disconnect, device number 21 [ 909.955341][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 909.960588][T14896] fuse: Unknown parameter 'user_id00000000000000000000' [ 909.991995][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.018210][ T9] usb 3-1: Product: syz [ 910.027557][ T9] usb 3-1: Manufacturer: syz [ 910.038015][ T9] usb 3-1: SerialNumber: syz [ 910.251027][T14904] fuse: Bad value for 'fd' [ 910.312474][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 910.512284][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 911.215963][T10721] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 911.406074][T10721] usb 5-1: Using ep0 maxpacket: 8 [ 911.439297][ T9] usb 3-1: USB disconnect, device number 32 [ 911.449139][T10721] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 911.463158][T10721] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 911.530974][T10721] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 912.227880][T10721] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 912.266529][T10721] usb 5-1: Manufacturer: syz [ 912.298070][T10721] usb 5-1: config 0 descriptor?? [ 912.605851][T13705] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 912.644379][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2741'. [ 912.740666][T14925] overlayfs: missing 'lowerdir' [ 913.316416][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 913.428712][T14931] fuse: Unknown parameter 'user_id00000000000000000000' [ 913.508659][T13705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.535928][T13705] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 913.555844][T13705] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 913.575152][T13705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.594721][T13705] usb 4-1: config 0 descriptor?? [ 913.671838][T14937] fuse: Bad value for 'fd' [ 914.171759][T13705] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 915.018080][T13705] usb 3-1: config index 0 descriptor too short (expected 33, got 18) [ 915.038748][T13705] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=ff.3f [ 915.057231][T13705] usb 3-1: New USB device strings: Mfr=15, Product=0, SerialNumber=0 [ 915.072527][T13705] usb 3-1: Manufacturer: syz [ 915.087200][T13705] usb 3-1: config 0 descriptor?? [ 915.105228][T13705] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 915.257547][T10721] usb 5-1: USB disconnect, device number 22 [ 916.014532][T13705] gspca_stk1135: reg_w 0x2 err -110 [ 916.037210][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.055381][T13705] gspca_stk1135: Sensor write failed [ 916.066634][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.073105][T13705] gspca_stk1135: Sensor write failed [ 916.086112][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.092480][T13705] gspca_stk1135: Sensor read failed [ 916.098115][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.108127][T13705] gspca_stk1135: Sensor read failed [ 916.113365][T13705] gspca_stk1135: Detected sensor type unknown (0x0) [ 916.120626][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.127020][ T970] usb 4-1: USB disconnect, device number 25 [ 916.147425][T13705] gspca_stk1135: Sensor read failed [ 916.153577][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.162673][T13705] gspca_stk1135: Sensor read failed [ 916.168598][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.174954][T13705] gspca_stk1135: Sensor write failed [ 916.192526][T13705] gspca_stk1135: serial bus timeout: status=0x00 [ 916.199571][T13705] gspca_stk1135: Sensor write failed [ 916.219443][T13705] stk1135: probe of 3-1:0.0 failed with error -110 [ 916.299238][T14960] fuse: Bad value for 'fd' [ 916.405255][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2750'. [ 916.491355][T14963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.520425][T14963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.666974][T14961] overlayfs: missing 'lowerdir' [ 917.788218][T14971] fuse: Bad value for 'fd' [ 919.027746][T13705] usb 3-1: USB disconnect, device number 33 [ 919.172375][T14994] fuse: Bad value for 'fd' [ 919.286310][T10721] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 919.317649][T14998] fuse: Bad value for 'fd' [ 919.508301][T10721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.268775][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2764'. [ 920.446506][T15005] overlayfs: missing 'lowerdir' [ 920.681086][T10721] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 920.690221][T10721] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 920.699333][T10721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.712435][T10721] usb 4-1: config 0 descriptor?? [ 921.871185][T15028] fuse: Bad value for 'fd' [ 922.822943][T15038] fuse: Invalid rootmode [ 923.819561][T15049] xt_TCPMSS: Only works on TCP SYN packets [ 923.828425][T15049] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 924.028029][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2774'. [ 924.777220][T15057] overlayfs: missing 'lowerdir' [ 925.218421][ T970] usb 4-1: USB disconnect, device number 26 [ 925.466192][T15066] fuse: Unknown parameter '0x0000000000000004' [ 926.944675][T15084] fuse: Invalid rootmode [ 927.064200][T15086] xt_NFQUEUE: number of total queues is 0 [ 927.477812][T15093] overlayfs: missing 'lowerdir' [ 928.014847][T15101] xt_TCPMSS: Only works on TCP SYN packets [ 928.197491][T15109] fuse: Unknown parameter '0x0000000000000004' [ 930.986972][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2797'. [ 931.106353][T15131] overlayfs: missing 'lowerdir' [ 931.148320][T15135] xt_NFQUEUE: number of total queues is 0 [ 931.445871][T14789] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 931.524055][T15148] fuse: Unknown parameter '0x0000000000000004' [ 931.687454][T14789] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 931.715184][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.733315][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.750244][T14789] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 931.791186][T14789] usb 5-1: Product: syz [ 931.816335][T14789] usb 5-1: SerialNumber: syz [ 931.842405][T14789] usb 5-1: config 0 descriptor?? [ 932.147445][T14789] hso 5-1:0.0: Failed to find BULK IN ep [ 932.445637][T14789] usb 5-1: USB disconnect, device number 23 [ 932.965364][T15166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2808'. [ 933.077449][T15167] overlayfs: missing 'lowerdir' [ 936.444306][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 937.494492][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2820'. [ 937.689400][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 937.774210][T15208] tipc: Started in network mode [ 937.824804][T15208] tipc: Node identity , cluster identity 4711 [ 937.884516][T15208] tipc: Failed to set node id, please configure manually [ 937.954707][T15208] tipc: Enabling of bearer rejected, failed to enable media [ 938.171054][ T28] audit: type=1326 audit(1786726990.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15214 comm="syz.4.2824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35e5b9e0d9 code=0x0 [ 942.980806][T15258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2832'. [ 943.145989][T15258] overlayfs: missing 'lowerdir' [ 944.341892][T15275] xt_NFQUEUE: number of total queues is 0 [ 948.299242][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2844'. [ 948.529819][T15301] overlayfs: missing 'lowerdir' [ 948.813741][T15305] syzkaller1: entered promiscuous mode [ 948.819635][T15305] syzkaller1: entered allmulticast mode [ 951.416949][T15334] xt_TCPMSS: Only works on TCP SYN packets [ 951.596620][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 952.568645][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2857'. [ 954.285587][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 954.733809][T15375] xt_TCPMSS: Only works on TCP SYN packets [ 954.784527][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2864'. [ 956.135015][T15393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'. [ 956.269324][T15394] overlayfs: missing 'lowerdir' [ 957.104482][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 961.156716][T15436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2882'. [ 961.251470][T15438] overlayfs: missing 'lowerdir' [ 962.632586][T15449] xt_TCPMSS: Only works on TCP SYN packets [ 962.857845][T15449] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 962.968643][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 962.990249][T15460] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 965.396392][T15473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2895'. [ 965.493077][T15475] overlayfs: missing 'lowerdir' [ 966.145887][ T5814] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 966.506436][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 966.513483][ T5814] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 966.525869][ T5814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 966.546023][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 967.070348][ T5814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 967.109817][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 967.124266][ T5814] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.256739][ T5814] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 967.284213][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.570097][ T5814] usb 4-1: usb_control_msg returned -32 [ 967.662246][ T5814] usbtmc 4-1:16.0: can't read capabilities [ 968.123295][T15477] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 968.329542][T15510] xt_TCPMSS: Only works on TCP SYN packets [ 968.337769][T15510] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 968.346601][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 968.604887][T15518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2906'. [ 968.724524][T15520] overlayfs: missing 'lowerdir' [ 969.374103][ T970] usb 4-1: USB disconnect, device number 27 [ 971.936066][T15550] overlayfs: missing 'lowerdir' [ 975.111299][T15575] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 976.765364][T15586] overlayfs: missing 'lowerdir' [ 985.666007][T14789] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 985.848809][T14789] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 985.864895][T14789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.888585][T14789] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 985.911711][ T27] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 987.515955][T14789] gspca_sn9c20x: Write register 1000 failed -110 [ 987.522385][T14789] gspca_sn9c20x: Device initialization failed [ 987.558149][T14789] gspca_sn9c20x: probe of 3-1:252.0 failed with error -110 [ 987.609777][ T27] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 987.626958][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.635162][ T27] usb 5-1: Product: syz [ 987.650655][ T27] usb 5-1: Manufacturer: syz [ 987.659923][ T27] usb 5-1: SerialNumber: syz [ 987.680732][ T27] usb 5-1: config 0 descriptor?? [ 987.896644][ T27] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 989.536641][T14789] usb 3-1: USB disconnect, device number 34 [ 989.604123][ T27] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 989.619772][ T27] usb 5-1: USB disconnect, device number 24 [ 991.336008][ T5833] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 991.549145][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 991.564211][ T5833] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 991.599884][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 991.617812][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.633063][ T5833] usb 3-1: Product: syz [ 991.639993][ T5833] usb 3-1: Manufacturer: syz [ 991.644755][ T5833] usb 3-1: SerialNumber: syz [ 992.397442][ T5833] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 992.417519][ T5833] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 992.565579][ T5833] usb 3-1: USB disconnect, device number 35 [ 993.150531][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.228422][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.365032][T12855] udevd[12855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.656573][T15725] macsec1: entered promiscuous mode [ 994.661841][T15725] virt_wifi0: entered promiscuous mode [ 994.695290][T15731] xt_NFQUEUE: number of total queues is 0 [ 996.184247][T15752] random: crng reseeded on system resumption [ 997.386682][ T5773] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 997.464111][T15763] xt_NFQUEUE: number of total queues is 0 [ 997.740846][ T5773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 997.770789][ T5773] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 997.918318][ T5773] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 998.051184][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.143512][ T5773] usb 5-1: Product: syz [ 998.183735][ T5773] usb 5-1: Manufacturer: syz [ 998.243652][ T5773] usb 5-1: SerialNumber: syz [ 998.602399][ T5773] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 998.628344][ T5773] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 998.731502][ T5773] usb 5-1: USB disconnect, device number 25 [ 999.973619][T15792] xt_NFQUEUE: number of total queues is 0 [ 1002.486157][T15817] xt_NFQUEUE: number of total queues is 0 [ 1003.116815][ T5833] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1003.423234][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1004.071506][ T5833] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1004.143358][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1004.159159][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.175830][ T5833] usb 3-1: Product: syz [ 1004.186049][ T5833] usb 3-1: Manufacturer: syz [ 1004.195220][ T5833] usb 3-1: SerialNumber: syz [ 1005.169129][ T5833] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1005.233626][ T5833] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1005.352576][T15850] xt_NFQUEUE: number of total queues is 0 [ 1005.368384][ T5833] usb 3-1: USB disconnect, device number 36 [ 1005.500113][T12855] udevd[12855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.999802][T15882] xt_NFQUEUE: number of total queues is 0 [ 1009.897376][T13705] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1010.237702][T13705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1010.258187][T13705] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1010.303258][T13705] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1010.324857][T13705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.352467][T13705] usb 3-1: Product: syz [ 1010.364424][T13705] usb 3-1: Manufacturer: syz [ 1011.192420][T15912] random: crng reseeded on system resumption [ 1011.203130][T13705] usb 3-1: SerialNumber: syz [ 1011.560745][T15919] xt_NFQUEUE: number of total queues is 0 [ 1011.688093][T13705] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1011.696166][T13705] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1011.742514][T13705] usb 3-1: USB disconnect, device number 37 [ 1014.473277][T15950] xt_NFQUEUE: number of total queues is 0 [ 1017.400605][T15964] random: crng reseeded on system resumption [ 1017.888704][ C1] ------------[ cut here ]------------ [ 1017.894524][ C1] WARNING: CPU: 1 PID: 15964 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 1017.904862][ C1] Modules linked in: [ 1017.908807][ C1] CPU: 1 PID: 15964 Comm: syz.2.3050 Not tainted syzkaller #0 [ 1017.916372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1017.926479][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1017.932898][ C1] Code: f7 4c 89 ef e8 50 38 b8 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 4c 7a f7 0f 0b e9 61 f8 ff ff e8 0f 4c 7a f7 <0f> 0b e9 85 fb ff ff e8 03 4c 7a f7 48 c7 c7 60 b8 65 8e 4c 89 e6 [ 1017.952616][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1017.958806][ C1] RAX: ffffffff8a0d2611 RBX: dffffc0000000000 RCX: ffff88807e568000 [ 1017.966826][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.974816][ C1] RBP: 0000000000000000 R08: ffff88807e568000 R09: 0000000000000003 [ 1017.982847][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807799e440 [ 1017.990878][ C1] R13: ffff88805d908824 R14: ffff88807799e930 R15: ffff88805d908800 [ 1017.998900][ C1] FS: 00007fb0ab7f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1018.007874][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1018.014478][ C1] CR2: 00007fa5bb9eb7c0 CR3: 000000005c5cf000 CR4: 00000000003506e0 [ 1018.022496][ C1] Call Trace: [ 1018.025811][ C1] [ 1018.028742][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1018.034417][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 1018.039946][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1018.046784][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1018.052443][ C1] __iterate_interfaces+0x225/0x4c0 [ 1018.057782][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1018.064060][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1018.071314][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1018.077608][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1018.084665][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1018.089911][ C1] ? hw_scan_work+0xf10/0xf10 [ 1018.094617][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1018.099949][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1018.105084][ C1] ? read_tsc+0x9/0x20 [ 1018.109345][ C1] hrtimer_run_softirq+0x177/0x290 [ 1018.114488][ C1] handle_softirqs+0x27d/0x820 [ 1018.119331][ C1] ? read_tsc+0x9/0x20 [ 1018.123426][ C1] ? ktime_get+0x24b/0x280 [ 1018.127894][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1018.132697][ C1] ? do_softirq+0x1a0/0x1a0 [ 1018.137252][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1018.142478][ C1] __irq_exit_rcu+0xd3/0x190 [ 1018.147120][ C1] ? irq_exit_rcu+0x20/0x20 [ 1018.151654][ C1] irq_exit_rcu+0x9/0x20 [ 1018.155939][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1018.161694][ C1] [ 1018.164636][ C1] [ 1018.167694][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1018.173771][ C1] RIP: 0010:pfn_valid+0xf3/0x390 [ 1018.178756][ C1] Code: 23 d1 fd ff 48 83 c4 08 e8 7a 5c 24 09 89 c5 31 ff 89 c6 e8 cf c1 1c 00 85 ed 74 1a e8 66 85 06 00 84 c0 74 6d e8 0d be 1c 00 <4d> 85 ff 75 11 e8 03 be 1c 00 eb 2d e8 fc bd 1c 00 4d 85 ff 74 ef [ 1018.198428][ C1] RSP: 0018:ffffc90004cb7740 EFLAGS: 00000246 [ 1018.204531][ C1] RAX: ffffffff816ab413 RBX: ffffffff816ab3d1 RCX: 0000000000080000 [ 1018.212944][ C1] RDX: ffffc9000dda1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1018.220983][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223daa0 [ 1018.229213][ C1] R10: dffffc0000000000 R11: fffffbfff223daa1 R12: 00000000000e615a [ 1018.237242][ C1] R13: ffffc90004cb7778 R14: 00000000000e615a R15: ffff88813fff9380 [ 1018.245244][ C1] ? pfn_valid+0xb1/0x390 [ 1018.249637][ C1] ? pfn_valid+0xf3/0x390 [ 1018.254008][ C1] create_basic_memory_bitmaps+0x287/0x380 [ 1018.259875][ C1] snapshot_open+0x1b0/0x280 [ 1018.264494][ C1] ? snapshot_compat_ioctl+0x90/0x90 [ 1018.269865][ C1] misc_open+0x326/0x3a0 [ 1018.274195][ C1] chrdev_open+0x58c/0x600 [ 1018.278695][ C1] ? cd_forget+0x160/0x160 [ 1018.283151][ C1] do_dentry_open+0x880/0x14b0 [ 1018.287980][ C1] ? cd_forget+0x160/0x160 [ 1018.292428][ C1] path_openat+0x284f/0x3270 [ 1018.297104][ C1] ? do_filp_open+0x430/0x430 [ 1018.301809][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1018.307497][ C1] ? asan.module_dtor+0x20/0x20 [ 1018.312485][ C1] do_filp_open+0x1f2/0x430 [ 1018.317053][ C1] ? vfs_tmpfile+0x620/0x620 [ 1018.321705][ C1] ? _raw_spin_unlock+0x3a/0x40 [ 1018.326612][ C1] ? alloc_fd+0x590/0x640 [ 1018.331004][ C1] do_sys_openat2+0x134/0x1d0 [ 1018.335760][ C1] ? do_sys_open+0xe0/0xe0 [ 1018.340219][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1018.346268][ C1] ? lock_chain_count+0x20/0x20 [ 1018.351198][ C1] __x64_sys_openat+0x139/0x160 [ 1018.356120][ C1] do_syscall_64+0x55/0xb0 [ 1018.360566][ C1] ? clear_bhb_loop+0x40/0x90 [ 1018.365293][ C1] ? clear_bhb_loop+0x40/0x90 [ 1018.370027][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.376010][ C1] RIP: 0033:0x7fb0ad59e0d9 [ 1018.380467][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.400216][ C1] RSP: 002b:00007fb0ab7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1018.408802][ C1] RAX: ffffffffffffffda RBX: 00007fb0ad826180 RCX: 00007fb0ad59e0d9 [ 1018.416941][ C1] RDX: 0000000000042101 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1018.424938][ C1] RBP: 00007fb0ad635024 R08: 0000000000000000 R09: 0000000000000000 [ 1018.432971][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.441058][ C1] R13: 00007fb0ad826218 R14: 00007fb0ad826180 R15: 00007fffe7b018a8 [ 1018.449116][ C1] [ 1018.452167][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1018.459482][ C1] CPU: 1 PID: 15964 Comm: syz.2.3050 Not tainted syzkaller #0 [ 1018.466935][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.477080][ C1] Call Trace: [ 1018.480390][ C1] [ 1018.483229][ C1] dump_stack_lvl+0x18c/0x250 [ 1018.487913][ C1] ? show_regs_print_info+0x20/0x20 [ 1018.493144][ C1] ? load_image+0x420/0x420 [ 1018.497781][ C1] panic+0x2ca/0x720 [ 1018.501681][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1018.506194][ C1] __warn+0x2e0/0x470 [ 1018.510173][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1018.515978][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1018.521693][ C1] report_bug+0x2be/0x4f0 [ 1018.526046][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1018.531765][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1018.537548][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 1018.543292][ C1] handle_bug+0xcf/0x120 [ 1018.547546][ C1] exc_invalid_op+0x1a/0x50 [ 1018.552149][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1018.557009][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1018.563339][ C1] Code: f7 4c 89 ef e8 50 38 b8 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 4c 7a f7 0f 0b e9 61 f8 ff ff e8 0f 4c 7a f7 <0f> 0b e9 85 fb ff ff e8 03 4c 7a f7 48 c7 c7 60 b8 65 8e 4c 89 e6 [ 1018.583222][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1018.589288][ C1] RAX: ffffffff8a0d2611 RBX: dffffc0000000000 RCX: ffff88807e568000 [ 1018.597250][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1018.605211][ C1] RBP: 0000000000000000 R08: ffff88807e568000 R09: 0000000000000003 [ 1018.613180][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807799e440 [ 1018.621149][ C1] R13: ffff88805d908824 R14: ffff88807799e930 R15: ffff88805d908800 [ 1018.629150][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1018.634880][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1018.640600][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1018.646252][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 1018.651732][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1018.658519][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1018.664094][ C1] __iterate_interfaces+0x225/0x4c0 [ 1018.669289][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1018.675618][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1018.683080][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1018.689318][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1018.696427][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1018.701620][ C1] ? hw_scan_work+0xf10/0xf10 [ 1018.706396][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1018.711622][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1018.716729][ C1] ? read_tsc+0x9/0x20 [ 1018.720801][ C1] hrtimer_run_softirq+0x177/0x290 [ 1018.725908][ C1] handle_softirqs+0x27d/0x820 [ 1018.730677][ C1] ? read_tsc+0x9/0x20 [ 1018.734741][ C1] ? ktime_get+0x24b/0x280 [ 1018.739189][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1018.743974][ C1] ? do_softirq+0x1a0/0x1a0 [ 1018.748504][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1018.753735][ C1] __irq_exit_rcu+0xd3/0x190 [ 1018.758361][ C1] ? irq_exit_rcu+0x20/0x20 [ 1018.762898][ C1] irq_exit_rcu+0x9/0x20 [ 1018.767132][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1018.772765][ C1] [ 1018.775690][ C1] [ 1018.778743][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1018.784742][ C1] RIP: 0010:pfn_valid+0xf3/0x390 [ 1018.789685][ C1] Code: 23 d1 fd ff 48 83 c4 08 e8 7a 5c 24 09 89 c5 31 ff 89 c6 e8 cf c1 1c 00 85 ed 74 1a e8 66 85 06 00 84 c0 74 6d e8 0d be 1c 00 <4d> 85 ff 75 11 e8 03 be 1c 00 eb 2d e8 fc bd 1c 00 4d 85 ff 74 ef [ 1018.809292][ C1] RSP: 0018:ffffc90004cb7740 EFLAGS: 00000246 [ 1018.815367][ C1] RAX: ffffffff816ab413 RBX: ffffffff816ab3d1 RCX: 0000000000080000 [ 1018.823333][ C1] RDX: ffffc9000dda1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1018.831497][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223daa0 [ 1018.839502][ C1] R10: dffffc0000000000 R11: fffffbfff223daa1 R12: 00000000000e615a [ 1018.847486][ C1] R13: ffffc90004cb7778 R14: 00000000000e615a R15: ffff88813fff9380 [ 1018.855464][ C1] ? pfn_valid+0xb1/0x390 [ 1018.859792][ C1] ? pfn_valid+0xf3/0x390 [ 1018.864120][ C1] create_basic_memory_bitmaps+0x287/0x380 [ 1018.869926][ C1] snapshot_open+0x1b0/0x280 [ 1018.874513][ C1] ? snapshot_compat_ioctl+0x90/0x90 [ 1018.879792][ C1] misc_open+0x326/0x3a0 [ 1018.884038][ C1] chrdev_open+0x58c/0x600 [ 1018.888453][ C1] ? cd_forget+0x160/0x160 [ 1018.892957][ C1] do_dentry_open+0x880/0x14b0 [ 1018.897719][ C1] ? cd_forget+0x160/0x160 [ 1018.902131][ C1] path_openat+0x284f/0x3270 [ 1018.906734][ C1] ? do_filp_open+0x430/0x430 [ 1018.911406][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1018.917043][ C1] ? asan.module_dtor+0x20/0x20 [ 1018.921896][ C1] do_filp_open+0x1f2/0x430 [ 1018.926395][ C1] ? vfs_tmpfile+0x620/0x620 [ 1018.930990][ C1] ? _raw_spin_unlock+0x3a/0x40 [ 1018.935838][ C1] ? alloc_fd+0x590/0x640 [ 1018.940166][ C1] do_sys_openat2+0x134/0x1d0 [ 1018.944838][ C1] ? do_sys_open+0xe0/0xe0 [ 1018.949247][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1018.955221][ C1] ? lock_chain_count+0x20/0x20 [ 1018.960074][ C1] __x64_sys_openat+0x139/0x160 [ 1018.964928][ C1] do_syscall_64+0x55/0xb0 [ 1018.969339][ C1] ? clear_bhb_loop+0x40/0x90 [ 1018.974005][ C1] ? clear_bhb_loop+0x40/0x90 [ 1018.978679][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.984570][ C1] RIP: 0033:0x7fb0ad59e0d9 [ 1018.989070][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.008673][ C1] RSP: 002b:00007fb0ab7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1019.017088][ C1] RAX: ffffffffffffffda RBX: 00007fb0ad826180 RCX: 00007fb0ad59e0d9 [ 1019.025077][ C1] RDX: 0000000000042101 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1019.033063][ C1] RBP: 00007fb0ad635024 R08: 0000000000000000 R09: 0000000000000000 [ 1019.041045][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.049010][ C1] R13: 00007fb0ad826218 R14: 00007fb0ad826180 R15: 00007fffe7b018a8 [ 1019.056986][ C1] [ 1019.060245][ C1] Kernel Offset: disabled [ 1019.064597][ C1] Rebooting in 86400 seconds..